diff --git a/po/bn_IN.po b/po/bn_IN.po index 56e6caf2b..cff4b2026 100644 --- a/po/bn_IN.po +++ b/po/bn_IN.po @@ -18,38 +18,418 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "" -#, python-format -msgid "%(count)d variables" -msgstr "%(count)d ভেরিয়াবেল" +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "" -#, python-format -msgid "%(info)s" -msgstr "%(info)s" +#, c-format +msgid "out of memory\n" +msgstr "" -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" +#, c-format +msgid "read error\n" +msgstr "" -msgid "Only one value is allowed" -msgstr "কেবলমাত্র একটি মান অনুমদিত" +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" -msgid "Passwords do not match" +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "" + +#, c-format +msgid "principal not found\n" +msgstr "" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "realm not found\n" +msgstr "" + +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" +msgstr "" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "Kerberos Service Principal Name" +msgstr "" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +msgid "Realm name" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "" + +#, c-format +msgid "Out of memory \n" +msgstr "" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "" + +msgid "Simple bind failed\n" +msgstr "" + +msgid "SASL Bind failed\n" +msgstr "" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "" + +#, c-format +msgid "Failed to get result: %s\n" +msgstr "" + +#, c-format +msgid "Timeout exceeded." +msgstr "" + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "" + +#, c-format +msgid "Missing reply control!\n" +msgstr "" + +#, c-format +msgid "Out of Memory!\n" +msgstr "" + +#, c-format +msgid "Failed to create control!\n" +msgstr "" + +#, c-format +msgid "Failed to bind to server!\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab!\n" +msgstr "" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "" + +msgid "Failed to decode control reply!\n" +msgstr "" + +#, fuzzy, c-format +msgid "Passwords do not match!\n" msgstr "পাসওয়ার্ড দুটি মিলছে না" -msgid "This is already a posix group" -msgstr "একটি পসিক্স (posix) গ্রুপ আগে থেকে উপস্থিত" +#, c-format +msgid "Failed to open config file %s\n" +msgstr "" -msgid "incorrect type" -msgstr "ভুল প্রকার" +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "" -msgid "must be a decimal number" -msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" +msgid "Failed to resolve symlink to keytab.\n" +msgstr "" + +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" + +msgid "Print as little as possible" +msgstr "" + +msgid "Output only on errors" +msgstr "" + +msgid "Output debug info" +msgstr "" + +msgid "Contact this specific KDC Server" +msgstr "" + +msgid "Server Name" +msgstr "" + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" + +msgid "Encryption types to request" +msgstr "" + +msgid "Comma separated encryption types list" +msgstr "" + +msgid "Show the list of permitted encryption types and exit" +msgstr "" + +msgid "Permitted Encryption Types" +msgstr "" + +msgid "Asks for a non-random password to use for the principal" +msgstr "" + +msgid "LDAP DN" +msgstr "" + +msgid "DN to bind as if not using kerberos" +msgstr "" + +msgid "LDAP password" +msgstr "" + +msgid "password to use if not using kerberos" +msgstr "" + +msgid "Prompt for LDAP password" +msgstr "" + +msgid "Path to the IPA CA certificate" +msgstr "" + +msgid "IPA CA certificate" +msgstr "" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" + +msgid "url" +msgstr "" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" + +msgid "GSSAPI|EXTERNAL" +msgstr "" + +msgid "Retrieve current keys without changing them" +msgstr "" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +msgid "Enter LDAP password" +msgstr "" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "" + +#, c-format +msgid "DNS discovery for domain %s\n" +msgstr "" + +#, c-format +msgid "Discovered server %s\n" +msgstr "" + +#, c-format +msgid "Using discovered server %s\n" +msgstr "" + +#, c-format +msgid "DNS Discovery failed\n" +msgstr "" + +#, c-format +msgid "Using server from config %s\n" +msgstr "" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "" + +#, c-format +msgid "Using provided server %s\n" +msgstr "" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "" + +msgid "New Principal Password" +msgstr "" + +msgid "Verify Principal Password" +msgstr "" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" + +#, c-format +msgid "Failed to create key material\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "" #, c-format msgid "Out of memory!\n" @@ -75,9 +455,6 @@ msgstr "" msgid "Unable to enable SSL in LDAP\n" msgstr "" -msgid "SASL Bind failed\n" -msgstr "" - #, c-format msgid "Search for %1$s on rootdse failed with error %2$d\n" msgstr "" @@ -303,389 +680,6 @@ msgstr "" msgid "The hostname must not be: %s\n" msgstr "" -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "" - -#, c-format -msgid "Out of memory \n" -msgstr "" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "" - -msgid "Simple bind failed\n" -msgstr "" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -#, c-format -msgid "Out of Memory!\n" -msgstr "" - -#, c-format -msgid "Failed to create control!\n" -msgstr "" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "" - -msgid "Failed to decode control reply!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Passwords do not match!\n" -msgstr "পাসওয়ার্ড দুটি মিলছে না" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "" - -msgid "Failed to resolve symlink to keytab.\n" -msgstr "" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Output only on errors" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -msgid "Server Name" -msgstr "" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Encryption types to request" -msgstr "" - -msgid "Comma separated encryption types list" -msgstr "" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -msgid "Permitted Encryption Types" -msgstr "" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -msgid "LDAP DN" -msgstr "" - -msgid "DN to bind as if not using kerberos" -msgstr "" - -msgid "LDAP password" -msgstr "" - -msgid "password to use if not using kerberos" -msgstr "" - -msgid "Prompt for LDAP password" -msgstr "" - -msgid "Path to the IPA CA certificate" -msgstr "" - -msgid "IPA CA certificate" -msgstr "" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -msgid "Enter LDAP password" -msgstr "" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -msgid "New Principal Password" -msgstr "" - -msgid "Verify Principal Password" -msgstr "" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, c-format -msgid "Failed to create key material\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -msgid "Realm name" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "" - -#, c-format -msgid "out of memory\n" -msgstr "" - -#, c-format -msgid "read error\n" -msgstr "" - msgid "Failed members" msgstr "" @@ -800,132 +794,34 @@ msgstr "" msgid "Skipped %(key)s" msgstr "" +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +msgid "Unrevoked" +msgstr "" + +msgid "Error" +msgstr "" + +msgid "Input filename" +msgstr "" + +msgid "File to load the certificate from." +msgstr "" + +msgid "cannot specify both raw certificate and file" +msgstr "" + msgid "Input file" msgstr "" msgid "File to load the certificate from" msgstr "" -msgid "cannot specify both raw certificate and file" -msgstr "" - #, python-format msgid "Profile configuration stored in file '%(file)s'" msgstr "" -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -msgid "Servers details:" -msgstr "" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "Add a new YubiKey OTP token." -msgstr "" - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -msgid "Maximum number of agreements per replica" -msgstr "" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -msgid "Delete a user" -msgstr "" - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - msgid "Split DNS record to parts" msgstr "" @@ -990,6 +886,131 @@ msgstr "" msgid "file to store DNS records in nsupdate format" msgstr "" +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "" + +msgid "Servers details:" +msgstr "" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "" + +msgid "User ID" +msgstr "" + +msgid "Password" +msgstr "" + +msgid "First Code" +msgstr "" + +msgid "Second Code" +msgstr "" + +msgid "Token ID" +msgstr "" + +msgid "python-yubico is not installed." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" + +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "Add a new YubiKey OTP token." +msgstr "" + +msgid "YubiKey slot" +msgstr "" + +msgid "No free YubiKey slot!" +msgstr "" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "" + +msgid "Topology is disconnected" +msgstr "" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "" + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "" + +msgid "Maximum number of agreements per replica" +msgstr "" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "" + +msgid "Delete a user" +msgstr "" + +msgid "preserve and no-preserve cannot be both set" +msgstr "" + #, python-format msgid "Cannot read file '%(filename)s': %(exc)s" msgstr "" @@ -1109,47 +1130,20 @@ msgstr "" msgid "Missing vault private key" msgstr "" -msgid "Write certificate (chain if --chain used) to file" +#, python-format +msgid "Enabled Sudo Rule \"%s\"" msgstr "" -msgid "Unrevoked" +#, python-format +msgid "Disabled Sudo Rule \"%s\"" msgstr "" -msgid "Error" +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" msgstr "" -msgid "Input filename" -msgstr "" - -msgid "File to load the certificate from." -msgstr "" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -msgid "User ID" -msgstr "" - -msgid "Password" -msgstr "" - -msgid "First Code" -msgstr "" - -msgid "Second Code" -msgstr "" - -msgid "Token ID" +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" msgstr "" msgid "" @@ -1421,6 +1415,243 @@ msgstr "" msgid "Location of the ACI" msgstr "" +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Description" +msgstr "" + +msgid "A description of this auto member rule" +msgstr "" + +msgid "Default (fallback) Group" +msgstr "" + +msgid "Default group for entries to land" +msgstr "" + +msgid "Add an automember rule." +msgstr "" + +msgid "Automember Rule" +msgstr "" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +msgid "Grouping Type" +msgstr "" + +msgid "Grouping to which the rule applies" +msgstr "" + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +msgid "Exclusive Regex" +msgstr "" + +msgid "Attribute Key" +msgstr "" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +msgid "Number of conditions added" +msgstr "" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +msgid "Display information about the default (fallback) automember groups." +msgstr "" + +msgid "Delete an automember rule." +msgstr "" + +msgid "List of deletions that failed" +msgstr "" + +msgid "Search for automember rules." +msgstr "" + +msgid "Modify an automember rule." +msgstr "" + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +msgid "Rights" +msgstr "" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Users" +msgstr "" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Hosts" +msgstr "" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +msgid "Conditions that could not be removed" +msgstr "" + +msgid "Number of conditions removed" +msgstr "" + +msgid "Display information about an automember rule." +msgstr "" + msgid "" "\n" "Automount\n" @@ -1552,31 +1783,15 @@ msgstr "" msgid "Automount map name." msgstr "" -msgid "Description" -msgstr "" - msgid "Create a new automount key." msgstr "" -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - msgid "Delete an automount key." msgstr "" msgid "Continuous mode: Don't stop on errors." msgstr "" -msgid "List of deletions that failed" -msgstr "" - msgid "Search for an automount key." msgstr "" @@ -1595,19 +1810,6 @@ msgstr "" msgid "Modify an automount key." msgstr "" -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "Rights" -msgstr "" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - msgid "New mount information" msgstr "" @@ -1702,6 +1904,186 @@ msgstr "" msgid "Nested Methods to execute" msgstr "" +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +msgid "Search for existing certificates." +msgstr "" + +msgid "Match cn attribute in subject" +msgstr "" + +msgid "Reason" +msgstr "" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "" + +#, fuzzy +msgid "minimum serial number" +msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" + +#, fuzzy +msgid "maximum serial number" +msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Maximum number of certs returned" +msgstr "" + +msgid "Take a revoked certificate off hold." +msgstr "" + +msgid "Serial number" +msgstr "" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +msgid "Submit a certificate signing request." +msgstr "" + +msgid "CSR" +msgstr "" + +msgid "Principal" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +msgid "Dictionary mapping variable name to value" +msgstr "" + +msgid "Revoke a certificate." +msgstr "" + +msgid "Retrieve an existing certificate." +msgstr "" + +msgid "Output filename" +msgstr "" + +msgid "File to store the certificate in." +msgstr "" + +msgid "Check the status of a certificate signing request." +msgstr "" + +msgid "Request id" +msgstr "" + msgid "" "\n" "Server configuration\n" @@ -2961,6 +3343,306 @@ msgstr "" msgid "Display information about a DNS zone (SOA record)." msgstr "" +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "Group name" +msgstr "" + +msgid "Group description" +msgstr "" + +msgid "GID" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "" + +msgid "Member users" +msgstr "" + +msgid "Member groups" +msgstr "" + +msgid "Member of groups" +msgstr "" + +msgid "Roles" +msgstr "" + +msgid "Member of netgroups" +msgstr "" + +msgid "Member of Sudo rule" +msgstr "" + +msgid "Member of HBAC rule" +msgstr "" + +msgid "Indirect Member users" +msgstr "" + +msgid "Indirect Member groups" +msgstr "" + +msgid "Indirect Member of group" +msgstr "" + +msgid "Indirect Member of netgroup" +msgstr "" + +msgid "Indirect Member of role" +msgstr "" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +msgid "Create a new group." +msgstr "" + +msgid "Create as a non-POSIX group" +msgstr "" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +msgid "Add members to a group." +msgstr "" + +msgid "External member" +msgstr "" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +msgid "member user" +msgstr "" + +msgid "users to add" +msgstr "" + +msgid "member group" +msgstr "" + +msgid "groups to add" +msgstr "" + +msgid "Members that could not be added" +msgstr "" + +msgid "Number of members added" +msgstr "" + +msgid "Delete group." +msgstr "" + +msgid "Detach a managed group from a user." +msgstr "" + +msgid "Search for groups." +msgstr "" + +msgid "search for private groups" +msgstr "" + +msgid "search for POSIX groups" +msgstr "" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +msgid "search for non-POSIX groups" +msgstr "" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "user" +msgstr "" + +msgid "Search for groups with these member users." +msgstr "" + +msgid "Search for groups without these member users." +msgstr "" + +msgid "group" +msgstr "" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +msgid "netgroup" +msgstr "" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +msgid "HBAC rule" +msgstr "" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +msgid "Modify a group." +msgstr "" + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +msgid "Remove members from a group." +msgstr "" + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "" + +msgid "Number of members removed" +msgstr "" + +msgid "Display information about a named group." +msgstr "" + msgid "" "\n" "Host-based access control\n" @@ -3041,15 +3723,9 @@ msgstr "" msgid "Enabled" msgstr "" -msgid "Users" -msgstr "" - msgid "User Groups" msgstr "" -msgid "Hosts" -msgstr "" - msgid "Host Groups" msgstr "" @@ -3065,9 +3741,6 @@ msgstr "" msgid "Create a new HBAC rule." msgstr "" -msgid "Suppress processing of membership attributes." -msgstr "" - msgid "Add target hosts and hostgroups to an HBAC rule." msgstr "" @@ -3083,12 +3756,6 @@ msgstr "" msgid "host groups to add" msgstr "" -msgid "Members that could not be added" -msgstr "" - -msgid "Number of members added" -msgstr "" - msgid "Add services to an HBAC rule." msgstr "" @@ -3107,18 +3774,6 @@ msgstr "" msgid "Add users and groups to an HBAC rule." msgstr "" -msgid "member user" -msgstr "" - -msgid "users to add" -msgstr "" - -msgid "member group" -msgstr "" - -msgid "groups to add" -msgstr "" - msgid "Delete an HBAC rule." msgstr "" @@ -3143,12 +3798,6 @@ msgstr "" msgid "host groups to remove" msgstr "" -msgid "Members that could not be removed" -msgstr "" - -msgid "Number of members removed" -msgstr "" - msgid "Remove service and service groups from an HBAC rule." msgstr "" @@ -3161,12 +3810,6 @@ msgstr "" msgid "Remove users and groups from an HBAC rule." msgstr "" -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - msgid "Display the properties of an HBAC rule." msgstr "" @@ -3275,6 +3918,242 @@ msgstr "" msgid "Display information about an HBAC service group." msgstr "" +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +msgid "User name" +msgstr "" + +msgid "Target host" +msgstr "" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +msgid "Warning" +msgstr "" + +msgid "Matched rules" +msgstr "" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + msgid "" "\n" "Hosts/Machines\n" @@ -3422,33 +4301,9 @@ msgstr "" msgid "Member of host-groups" msgstr "" -msgid "Roles" -msgstr "" - -msgid "Member of netgroups" -msgstr "" - -msgid "Member of Sudo rule" -msgstr "" - -msgid "Member of HBAC rule" -msgstr "" - -msgid "Indirect Member of netgroup" -msgstr "" - msgid "Indirect Member of host-group" msgstr "" -msgid "Indirect Member of role" -msgstr "" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - msgid "Keytab" msgstr "" @@ -3538,45 +4393,30 @@ msgstr "" msgid "Search for hosts without these member of host groups." msgstr "" -msgid "netgroup" -msgstr "" - msgid "Search for hosts with these member of netgroups." msgstr "" msgid "Search for hosts without these member of netgroups." msgstr "" -msgid "role" -msgstr "" - msgid "Search for hosts with these member of roles." msgstr "" msgid "Search for hosts without these member of roles." msgstr "" -msgid "HBAC rule" -msgstr "" - msgid "Search for hosts with these member of HBAC rules." msgstr "" msgid "Search for hosts without these member of HBAC rules." msgstr "" -msgid "sudo rule" -msgstr "" - msgid "Search for hosts with these member of sudo rules." msgstr "" msgid "Search for hosts without these member of sudo rules." msgstr "" -msgid "user" -msgstr "" - msgid "Search for hosts with these enrolled by users." msgstr "" @@ -3728,6 +4568,231 @@ msgstr "" msgid "Display information about a hostgroup." msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "Range name" +msgstr "" + +msgid "First Posix ID of the range" +msgstr "" + +msgid "Number of IDs in the range" +msgstr "" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +msgid "Range type" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "Delete an ID range." +msgstr "" + +msgid "Search for ranges." +msgstr "" + +msgid "Modify ID range." +msgstr "" + +msgid "Display information about a range." +msgstr "" + msgid "" "\n" "ID Views\n" @@ -3744,12 +4809,6 @@ msgstr "" msgid "Anchor to override" msgstr "" -msgid "Group name" -msgstr "" - -msgid "GID" -msgstr "" - msgid "Group ID Number" msgstr "" @@ -3974,9 +5033,6 @@ msgid "" " ipa krbtpolicy-mod admin --maxlife=3600\n" msgstr "" -msgid "User name" -msgstr "" - msgid "Manage ticket policy for specific user" msgstr "" @@ -4232,9 +5288,6 @@ msgid "" "retrieve and print all attributes from the server. Affects command output." msgstr "" -msgid "Dictionary mapping variable name to value" -msgstr "" - msgid "Total number of variables env (>= count)" msgstr "" @@ -4339,9 +5392,6 @@ msgstr "" msgid "Search for netgroups without these member users." msgstr "" -msgid "group" -msgstr "" - msgid "Search for netgroups with these member groups." msgstr "" @@ -4435,6 +5485,148 @@ msgstr "" msgid "Show the current OTP configuration." msgstr "" +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Manager" +msgstr "" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +msgid "Disabled" +msgstr "" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +msgid "Validity start" +msgstr "" + +msgid "First date/time the token can be used" +msgstr "" + +msgid "Validity end" +msgstr "" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "" + +msgid "Token model (informational only)" +msgstr "" + +msgid "Serial" +msgstr "" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +msgid "Add a new OTP token." +msgstr "" + +msgid "(deprecated)" +msgstr "" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +msgid "Delete an OTP token." +msgstr "" + +msgid "Search for OTP token." +msgstr "" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +msgid "Modify a OTP token." +msgstr "" + +msgid "Rename the OTP token object" +msgstr "" + +msgid "Display information about an OTP token." +msgstr "" + msgid "" "\n" "YubiKey Tokens\n" @@ -5116,12 +6308,6 @@ msgstr "" msgid "A description of this role-group" msgstr "" -msgid "Member users" -msgstr "" - -msgid "Member groups" -msgstr "" - msgid "Privileges" msgstr "" @@ -5388,9 +6574,6 @@ msgid "" "httpd.keytab\n" msgstr "" -msgid "Principal" -msgstr "" - msgid "Service principal" msgstr "" @@ -6125,9 +7308,6 @@ msgstr "" msgid "Sudo Command Group" msgstr "" -msgid "Group description" -msgstr "" - msgid "Commands" msgstr "" @@ -6168,1685 +7348,6 @@ msgstr "" msgid "Display Sudo Command Group." msgstr "" -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -msgid "First name" -msgstr "" - -msgid "Last name" -msgstr "" - -msgid "Full name" -msgstr "" - -msgid "Display name" -msgstr "" - -msgid "Initials" -msgstr "" - -msgid "Kerberos principal" -msgstr "" - -msgid "Kerberos principal expiration" -msgstr "" - -msgid "Email address" -msgstr "" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -msgid "Street address" -msgstr "" - -msgid "City" -msgstr "" - -msgid "State/Province" -msgstr "" - -msgid "ZIP" -msgstr "" - -msgid "Telephone Number" -msgstr "" - -msgid "Mobile Telephone Number" -msgstr "" - -msgid "Pager Number" -msgstr "" - -msgid "Fax Number" -msgstr "" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "" - -msgid "Manager" -msgstr "" - -msgid "Car License" -msgstr "" - -#, fuzzy -msgid "Account disabled" -msgstr "%(count)d ভেরিয়াবেল" - -msgid "User authentication types" -msgstr "" - -msgid "Types of supported user authentication" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "RADIUS proxy configuration" -msgstr "" - -msgid "RADIUS proxy username" -msgstr "" - -msgid "Department Number" -msgstr "" - -msgid "Employee Number" -msgstr "" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -msgid "Member of groups" -msgstr "" - -msgid "Indirect Member of group" -msgstr "" - -msgid "Kerberos keys available" -msgstr "" - -msgid "Add a new user." -msgstr "" - -msgid "Don't create user private group" -msgstr "" - -msgid "Delete a user." -msgstr "" - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -msgid "Search for users." -msgstr "" - -msgid "Self" -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -msgid "Modify a user." -msgstr "" - -msgid "Rename the user object" -msgstr "" - -msgid "Display information about a user." -msgstr "" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "A description of this auto member rule" -msgstr "" - -msgid "Default (fallback) Group" -msgstr "" - -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -msgid "Automember Rule" -msgstr "" - -msgid "Grouping Type" -msgstr "" - -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -msgid "Attribute Key" -msgstr "" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -msgid "Delete an automember rule." -msgstr "" - -msgid "Search for automember rules." -msgstr "" - -msgid "Modify an automember rule." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -msgid "Number of conditions removed" -msgstr "" - -msgid "Display information about an automember rule." -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -msgid "Search for existing certificates." -msgstr "" - -msgid "Match cn attribute in subject" -msgstr "" - -msgid "Reason" -msgstr "" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -#, fuzzy -msgid "minimum serial number" -msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" - -#, fuzzy -msgid "maximum serial number" -msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -msgid "Serial number" -msgstr "" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -msgid "Submit a certificate signing request." -msgstr "" - -msgid "CSR" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -msgid "Revoke a certificate." -msgstr "" - -msgid "Retrieve an existing certificate." -msgstr "" - -msgid "Output filename" -msgstr "" - -msgid "File to store the certificate in." -msgstr "" - -msgid "Check the status of a certificate signing request." -msgstr "" - -msgid "Request id" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "GID (use this option to set it manually)" -msgstr "" - -msgid "Indirect Member users" -msgstr "" - -msgid "Indirect Member groups" -msgstr "" - -msgid "Create a new group." -msgstr "" - -msgid "Create as a non-POSIX group" -msgstr "" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Add members to a group." -msgstr "" - -msgid "External member" -msgstr "" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -msgid "Delete group." -msgstr "" - -msgid "Detach a managed group from a user." -msgstr "" - -msgid "Search for groups." -msgstr "" - -msgid "search for private groups" -msgstr "" - -msgid "search for POSIX groups" -msgstr "" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -msgid "search for non-POSIX groups" -msgstr "" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "Modify a group." -msgstr "" - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -msgid "Remove members from a group." -msgstr "" - -msgid "Display information about a named group." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -msgid "Target host" -msgstr "" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Warning" -msgstr "" - -msgid "Matched rules" -msgstr "" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -msgid "NetBIOS name" -msgstr "" - -msgid "Domain GUID" -msgstr "" - -msgid "Fallback primary group" -msgstr "" - -msgid "Domain name" -msgstr "" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -msgid "Active Directory domain administrator" -msgstr "" - -msgid "Active Directory domain administrator's password" -msgstr "" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "Range type" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -msgid "Delete a trust." -msgstr "" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -msgid "Search for trusts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -msgid "Display information about a trust." -msgstr "" - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "Range name" -msgstr "" - -msgid "First Posix ID of the range" -msgstr "" - -msgid "Number of IDs in the range" -msgstr "" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "Delete an ID range." -msgstr "" - -msgid "Search for ranges." -msgstr "" - -msgid "Modify ID range." -msgstr "" - -msgid "Display information about a range." -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -msgid "Disabled" -msgstr "" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -msgid "Validity start" -msgstr "" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Validity end" -msgstr "" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -msgid "Serial" -msgstr "" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -msgid "Add a new OTP token." -msgstr "" - -msgid "(deprecated)" -msgstr "" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -msgid "Delete an OTP token." -msgstr "" - -msgid "Search for OTP token." -msgstr "" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -msgid "Modify a OTP token." -msgstr "" - -msgid "Rename the OTP token object" -msgstr "" - -msgid "Display information about an OTP token." -msgstr "" - msgid "" "\n" "Sudo Rules\n" @@ -8057,6 +7558,499 @@ msgstr "" msgid "Display Sudo Rule." msgstr "" +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +msgid "NetBIOS name" +msgstr "" + +msgid "Domain GUID" +msgstr "" + +msgid "Fallback primary group" +msgstr "" + +msgid "Domain name" +msgstr "" + +msgid "Trusted domain partner" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +msgid "Active Directory domain administrator" +msgstr "" + +msgid "Active Directory domain administrator's password" +msgstr "" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +msgid "Delete a trust." +msgstr "" + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +msgid "Search for trusts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +msgid "Display information about a trust." +msgstr "" + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "" + +msgid "Last name" +msgstr "" + +msgid "Full name" +msgstr "" + +msgid "Display name" +msgstr "" + +msgid "Initials" +msgstr "" + +msgid "Kerberos principal" +msgstr "" + +msgid "Kerberos principal expiration" +msgstr "" + +msgid "Email address" +msgstr "" + +msgid "Prompt to set the user password" +msgstr "" + +msgid "Generate a random user password" +msgstr "" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" + +msgid "Street address" +msgstr "" + +msgid "City" +msgstr "" + +msgid "State/Province" +msgstr "" + +msgid "ZIP" +msgstr "" + +msgid "Telephone Number" +msgstr "" + +msgid "Mobile Telephone Number" +msgstr "" + +msgid "Pager Number" +msgstr "" + +msgid "Fax Number" +msgstr "" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "" + +msgid "Car License" +msgstr "" + +#, fuzzy +msgid "Account disabled" +msgstr "%(count)d ভেরিয়াবেল" + +msgid "User authentication types" +msgstr "" + +msgid "Types of supported user authentication" +msgstr "" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "RADIUS proxy configuration" +msgstr "" + +msgid "RADIUS proxy username" +msgstr "" + +msgid "Department Number" +msgstr "" + +msgid "Employee Number" +msgstr "" + +msgid "Employee Type" +msgstr "" + +msgid "Preferred Language" +msgstr "" + +msgid "Kerberos keys available" +msgstr "" + +msgid "Add a new user." +msgstr "" + +msgid "Don't create user private group" +msgstr "" + +msgid "Delete a user." +msgstr "" + +msgid "Disable a user account." +msgstr "" + +msgid "Enable a user account." +msgstr "" + +msgid "Search for users." +msgstr "" + +msgid "Self" +msgstr "" + +msgid "Display user record for current Kerberos principal" +msgstr "" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +msgid "Search for users with these member of HBAC rules." +msgstr "" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +msgid "Modify a user." +msgstr "" + +msgid "Rename the user object" +msgstr "" + +msgid "Display information about a user." +msgstr "" + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + msgid "Time limit of search in seconds (0 is unlimited)" msgstr "" @@ -8173,6 +8167,110 @@ msgstr "" msgid "Display the properties of a CA ACL." msgstr "" +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "Profile ID" +msgstr "" + +msgid "Certificate Profile to use" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +msgid "Profile description" +msgstr "" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +msgid "Search for Certificate Profiles." +msgstr "" + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" msgstr "" @@ -8202,6 +8300,218 @@ msgstr "" msgid "Remove certificates from host entry" msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + msgid "Fallback to AD DC LDAP" msgstr "" @@ -8229,6 +8539,9 @@ msgid "" "to onelevel" msgstr "" +msgid "Remove users that can manage this token." +msgstr "" + msgid "Target DN subtree" msgstr "" @@ -8659,6 +8972,13 @@ msgid "" " " msgstr "" +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + msgid "Preserved user" msgstr "" @@ -8949,332 +9269,6 @@ msgstr "" msgid "Display information about a vault container." msgstr "" -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "Profile ID" -msgstr "" - -msgid "Certificate Profile to use" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -msgid "Profile description" -msgstr "" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -msgid "Search for Certificate Profiles." -msgstr "" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - msgid "Resolve a host name in DNS. (Deprecated)" msgstr "" @@ -10953,6 +10947,192 @@ msgid "" " ipa hostgroup-del baltimore\n" msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + msgid "" "Comma-separated list of objectclasses used to search for user entries in DS" msgstr "" @@ -11259,198 +11439,6 @@ msgstr "" msgid "comma-separated list of sudo commands to remove" msgstr "" -msgid "Active directory domain administrator's password" -msgstr "" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - msgid "" "\n" "Sudo Rules\n" @@ -11492,13 +11480,10 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" -msgid "A dictionary representing an LDAP entry" +msgid "Active directory domain administrator's password" msgstr "" -msgid "A list of LDAP entries" -msgstr "" - -msgid "All commands should at least have a result" +msgid "GECOS field" msgstr "" #, python-format @@ -11544,110 +11529,370 @@ msgid "No file to read" msgstr "" #, python-format -msgid "%(filename)s: file not found" -msgstr "" - -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -msgid "Filename is empty" +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" #, python-format -msgid "Permission denied: %(file)s" +msgid "unknown error %(code)d from %(server)s: %(error)s" msgstr "" -msgid "empty DNS label" +msgid "an internal error has occurred" msgstr "" -msgid "DNS label cannot be longer that 63 characters" +#, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "" + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" msgstr "" #, python-format msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "" - -msgid "cannot be longer that {} characters" -msgstr "" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "" - -msgid "invalid SSH public key" -msgstr "" - -msgid "options are not allowed" -msgstr "" - -msgid "invalid hostmask" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." msgstr "" #, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "" + +msgid "did not receive Kerberos credentials" msgstr "" #, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "" + +msgid "No credentials cache found" +msgstr "" + +msgid "Ticket expired" +msgstr "" + +msgid "Credentials cache permissions incorrect" +msgstr "" + +msgid "Bad format in credentials cache" +msgstr "" + +msgid "Cannot resolve KDC for requested realm" +msgstr "" + +msgid "Session error" +msgstr "" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "" + +#, python-format +msgid "'%(name)s' is required" +msgstr "" + +#, python-format +msgid "invalid '%(name)s': %(error)s" +msgstr "" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "" + +msgid "Passwords do not match" +msgstr "পাসওয়ার্ড দুটি মিলছে না" + +msgid "Command not implemented" +msgstr "" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "" + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "" + +#, python-format +msgid "%(reason)s" +msgstr "" + +msgid "This entry already exists" +msgstr "" + +msgid "You must enroll a host in order to create a host service" msgstr "" #, python-format msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" - -msgid "invalid escape code in domain name" -msgstr "" - -msgid "domain name cannot be longer than 255 characters" -msgstr "" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "" - -msgid "invalid domain name" -msgstr "" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -msgid "invalid IP address format" -msgstr "" - -#, python-format -msgid "%(port)s is not a valid port" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" msgstr "" msgid "" -"at least one value equal to the canonical principal name must be present" +"The realm for the principal does not match the realm for this IPA server" msgstr "" -msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgid "This command requires root access" +msgstr "" + +msgid "This is already a posix group" +msgstr "একটি পসিক্স (posix) গ্রুপ আগে থেকে উপস্থিত" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "" + +msgid "This entry is already enabled" +msgstr "" + +msgid "This entry is already disabled" +msgstr "" + +msgid "This entry cannot be enabled or disabled" +msgstr "" + +msgid "This entry is not a member" +msgstr "" + +msgid "A group may not be a member of itself" +msgstr "" + +#, fuzzy +msgid "This entry is already a member" +msgstr "একটি পসিক্স (posix) গ্রুপ আগে থেকে উপস্থিত" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "" + +msgid "A group may not be added as a member of itself" +msgstr "" + +msgid "The default users group cannot be removed" +msgstr "" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" + +msgid "A managed group cannot have a password policy." +msgstr "" + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "" + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "" + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" + +msgid "This group already allows external members" +msgstr "" + +msgid "This group cannot be posix because it is external" +msgstr "" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "" + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" + +#, python-format +msgid "'%(attr)s' already contains one or more values" +msgstr "" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "" + +msgid "change collided with another change" +msgstr "" + +msgid "no modifications to be performed" +msgstr "" + +#, fuzzy, python-format +msgid "%(desc)s: %(info)s" +msgstr "%(info)s" + +msgid "limits exceeded for this query" +msgstr "" + +#, python-format +msgid "%(info)s" +msgstr "%(info)s" + +msgid "modifying primary key is not allowed" +msgstr "" + +#, fuzzy, python-format +msgid "%(attr)s: Only one value allowed." +msgstr "কেবলমাত্র একটি মান অনুমদিত" + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "" + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "" + +msgid "Not allowed on non-leaf entry" +msgstr "" + +msgid "LDAP timeout" +msgstr "" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "" + +msgid "Configured time limit exceeded" +msgstr "" + +msgid "Configured size limit exceeded" +msgstr "" + +msgid "Configured administrative server limit exceeded" +msgstr "" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "" + +msgid "Already registered" +msgstr "" + +msgid "Not registered yet" +msgstr "" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "" + +#, python-format +msgid "%(exception)s" +msgstr "" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" + +msgid "Results are truncated, try a more specific search" +msgstr "" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "" + +msgid "Client version. Used to determine if server will accept request." msgstr "" msgid "Additional instructions:" @@ -11807,359 +12052,31 @@ msgstr "" msgid "The certificate for %(ca)s is not available on this server." msgstr "" -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." -msgstr "" +#, python-format +msgid "%(count)d variables" +msgstr "%(count)d ভেরিয়াবেল" #, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "" - -msgid "an internal error has occurred" -msgstr "" - -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "" - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "" - -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "" - -msgid "did not receive Kerberos credentials" -msgstr "" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "" - -msgid "No credentials cache found" -msgstr "" - -msgid "Ticket expired" -msgstr "" - -msgid "Credentials cache permissions incorrect" -msgstr "" +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgid "Bad format in credentials cache" +msgid "A dictionary representing an LDAP entry" msgstr "" -msgid "Cannot resolve KDC for requested realm" +msgid "A list of LDAP entries" msgstr "" -msgid "Session error" +msgid "All commands should at least have a result" msgstr "" -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "" - -#, python-format -msgid "'%(name)s' is required" -msgstr "" - -#, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "" - -msgid "Command not implemented" -msgstr "" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "" - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" - -#, python-format -msgid "%(reason)s" -msgstr "" - -msgid "This entry already exists" -msgstr "" - -msgid "You must enroll a host in order to create a host service" -msgstr "" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "" - -msgid "This command requires root access" -msgstr "" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "" - -msgid "This entry is already enabled" -msgstr "" - -msgid "This entry is already disabled" -msgstr "" - -msgid "This entry cannot be enabled or disabled" -msgstr "" - -msgid "This entry is not a member" -msgstr "" - -msgid "A group may not be a member of itself" -msgstr "" - -#, fuzzy -msgid "This entry is already a member" -msgstr "একটি পসিক্স (posix) গ্রুপ আগে থেকে উপস্থিত" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "" - -msgid "A group may not be added as a member of itself" -msgstr "" - -msgid "The default users group cannot be removed" -msgstr "" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" - -msgid "A managed group cannot have a password policy." -msgstr "" - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" - -msgid "This group already allows external members" -msgstr "" - -msgid "This group cannot be posix because it is external" -msgstr "" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" - -#, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "" - -msgid "change collided with another change" -msgstr "" - -msgid "no modifications to be performed" -msgstr "" - -#, fuzzy, python-format -msgid "%(desc)s: %(info)s" -msgstr "%(info)s" - -msgid "limits exceeded for this query" -msgstr "" - -msgid "modifying primary key is not allowed" -msgstr "" +msgid "incorrect type" +msgstr "ভুল প্রকার" -#, fuzzy, python-format -msgid "%(attr)s: Only one value allowed." +msgid "Only one value is allowed" msgstr "কেবলমাত্র একটি মান অনুমদিত" -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "" - -msgid "Not allowed on non-leaf entry" -msgstr "" - -msgid "LDAP timeout" -msgstr "" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" - -msgid "Configured time limit exceeded" -msgstr "" - -msgid "Configured size limit exceeded" -msgstr "" - -msgid "Configured administrative server limit exceeded" -msgstr "" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "" - -msgid "Already registered" -msgstr "" - -msgid "Not registered yet" -msgstr "" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" - -#, python-format -msgid "%(exception)s" -msgstr "" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" - msgid "this option is deprecated" msgstr "" @@ -12178,6 +12095,9 @@ msgstr "একটি দশমিক সংখ্যা হওয়া জরু msgid "can be at most %(maxvalue)d" msgstr "" +msgid "must be a decimal number" +msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" + #, fuzzy, python-format msgid "must be at least %(minvalue)s" msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" @@ -12287,18 +12207,117 @@ msgstr "" msgid "Service principal is required" msgstr "" -msgid "Results are truncated, try a more specific search" +#, python-format +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +msgid "any of the configured servers" +msgstr "" + +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" msgstr "" #, python-format -msgid "Unknown option: %(option)s" +msgid "Permission denied: %(file)s" msgstr "" -msgid "Client version. Used to determine if server will accept request." +msgid "empty DNS label" +msgstr "" + +msgid "DNS label cannot be longer that 63 characters" msgstr "" #, python-format -msgid "objectclass %s not found" +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" + +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "" + +msgid "cannot be longer that {} characters" +msgstr "" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "" + +msgid "invalid SSH public key" +msgstr "" + +msgid "options are not allowed" +msgstr "" + +msgid "invalid hostmask" +msgstr "" + +#, python-format +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +msgid "invalid escape code in domain name" +msgstr "" + +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +msgid "invalid domain name" +msgstr "" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +msgid "invalid IP address format" +msgstr "" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" #, python-format @@ -12317,940 +12336,1242 @@ msgstr "" msgid "Retrieving CA status failed with status %d" msgstr "" +#, python-format +msgid "objectclass %s not found" +msgstr "" + +msgid "Trusting forest" +msgstr "" + +msgid "Trusted forest" +msgstr "" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +msgid "Unknown" +msgstr "" + +msgid "Non-Active Directory domain" +msgstr "" + +msgid "Active Directory domain" +msgstr "" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "" +msgid "Failed to authenticate to CA REST API" +msgstr "" + #, python-format msgid "Replication agreement for %(hostname)s not found" msgstr "" -msgid "Failed to authenticate to CA REST API" +msgid "A list of ACI values" msgstr "" -msgid "One time password commands" +msgid "type, filter, subtree and targetgroup are mutually exclusive" msgstr "" -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" +msgid "ACI prefix is required" msgstr "" msgid "" -"\n" -"IPA server roles\n" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" msgstr "" -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgid "filter and memberof are mutually exclusive" msgstr "" -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" +msgid "group, permission and self are mutually exclusive" msgstr "" -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" - -msgid "server roles" -msgstr "" - -msgid "IPA Server Roles" -msgstr "" - -msgid "IPA Server Role" -msgstr "" - -msgid "IPA server role name" -msgstr "" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" +msgid "One of group, permission or self is required" msgstr "" #, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include IPA master entries" +msgid "Group '%s' does not exist" msgstr "" -msgid "roles" -msgstr "" - -msgid "IPA role name" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" +msgid "empty filter" msgstr "" #, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgid "Syntax Error: %(error)s" msgstr "" -msgid "Add Class of Service entry" +#, python-format +msgid "invalid DN (%s)" msgstr "" -msgid "Delete Class of Service entry" +#, python-format +msgid "ACI with name \"%s\" not found" msgstr "" -msgid "Modify Class of Service entry" +msgid "ACI object." msgstr "" -msgid "Display Class of Service entry" +msgid "ACIs" msgstr "" -msgid "Search for Class of Service entry" +msgid "ACI" msgstr "" -msgid "password policy" -msgstr "" +#, fuzzy, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" -msgid "password policies" -msgstr "" +#, fuzzy, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" -msgid "Password Policies" -msgstr "" +#, fuzzy, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" -msgid "Password Policy" -msgstr "" +#, fuzzy, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" +#, fuzzy, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" +"\n" +"Auto Membership Rule.\n" msgstr "" msgid "" "\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" msgstr "" msgid "" "\n" -" Modify realm domains\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" "\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" "\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Auto Membership is not configured" +msgstr "" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" " " msgstr "" #, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "" + msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "%(count)d ভেরিয়াবেল" +msgstr[1] "%(count)d ভেরিয়াবেল" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " msgstr "" #, python-format -msgid "The following domains do not belong to this realm: %(domains)s" +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "automount location" +msgstr "" + +msgid "automount locations" +msgstr "" + +msgid "Automount Locations" +msgstr "" + +msgid "Automount Location" +msgstr "" + +#, fuzzy, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "automount map" +msgstr "" + +msgid "automount maps" +msgstr "" + +msgid "Automount Maps" +msgstr "" + +msgid "Automount Map" +msgstr "" + +#, fuzzy, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Automount key object." +msgstr "" + +msgid "automount key" +msgstr "" + +msgid "automount keys" +msgstr "" + +msgid "Automount Keys" +msgstr "" + +msgid "Automount Key" msgstr "" #, python-format msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" msgstr "" #, python-format -msgid "Results should contain primary key attribute only (\"%s\")" +msgid "key named %(key)s already exists" msgstr "" -msgid "Help topic" +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" msgstr "" -msgid "Version" +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." msgstr "" -msgid "Parameters" +#, fuzzy, python-format +msgid "Added automount key \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Added automount indirect map \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "mount point is relative to parent map, cannot begin with /" msgstr "" -msgid "Method of" +#, fuzzy, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Member service groups" msgstr "" -msgid "Method name" +msgid "Member HBAC service groups" +msgstr "" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" +msgstr "" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "" + +#, python-format +msgid "%(parent)s: %(oname)s not found" msgstr "" #, python-format msgid "%(pkey)s: %(oname)s not found" msgstr "" -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -msgid "Search for classes." -msgstr "" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -msgid "CLI name" -msgstr "" - -msgid "Confirm (password)" -msgstr "" - -msgid "Default" -msgstr "" - -msgid "Default from" -msgstr "" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" msgstr "" #, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." +msgid "attribute \"%(attribute)s\" not allowed" msgstr "" #, python-format -msgid "%(command_name)s: %(oname)s not found" +msgid "these attributes are not allowed: %(attrs)s" msgstr "" -msgid "Display information about a command output." +msgid "attribute is not configurable" msgstr "" -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" +msgid "No such attribute on this entry" msgstr "" #, python-format -msgid "Malformed principal: %(error)s" +msgid "Rename the %(ldap_obj_name)s object" msgstr "" -msgid "Add target to a named service delegation." +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" msgstr "" #, python-format msgid "member %s" msgstr "" -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, fuzzy, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "privileged service delegation rule" +#, python-format +msgid "%s to add" msgstr "" #, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, fuzzy, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" +msgid "%s to remove" msgstr "" #, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" +#, python-format msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" msgstr "" msgid "" "\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" msgstr "" msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -msgid "Malformed principal" -msgstr "" - -msgid "{} is required by the IPA master" -msgstr "" - -msgid "service" -msgstr "" - -msgid "services" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." msgstr "" msgid "Principal alias" msgstr "" -msgid "Service principal alias" +msgid "User password expiration" msgstr "" -msgid "Base-64 encoded service certificate" +msgid "SSH public key fingerprint" msgstr "" -msgid "Subject" +msgid "Base-64 encoded user certificate" msgstr "" -msgid "Serial Number" +msgid "Certificate mapping data" msgstr "" -msgid "Serial Number (hex)" +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +#, python-format +msgid "can be at most %(len)d characters" msgstr "" msgid "Issuer" msgstr "" -msgid "Not Before" +msgid "Issuer of the certificate" msgstr "" -msgid "Not After" +msgid "Subject" msgstr "" -msgid "Fingerprint (SHA1)" +msgid "Subject of the certificate" msgstr "" -msgid "Fingerprint (SHA256)" +msgid "cannot have an empty subject" msgstr "" -msgid "Revocation reason" +msgid "cannot specify both subject/issuer and certificate" msgstr "" -msgid "Authentication Indicators" +msgid "cannot specify both subject/issuer and ipacertmapdata" msgstr "" -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "" - -msgid "Add a new IPA service." +msgid "Add one or more certificate mappings to the user entry." msgstr "" #, fuzzy, python-format -msgid "Added service \"%(value)s\"" +msgid "Added certificate mappings to user \"%(value)s\"" msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" -msgid "force principal name even if host not in DNS" -msgstr "" - -msgid "Skip host check" -msgstr "" - -msgid "" -"force service to be created even when host object does not exist to manage it" +msgid "Remove one or more certificate mappings from the user entry." msgstr "" #, python-format -msgid "The host '%s' does not exist to add a service to." +msgid "Removed certificate mappings from user \"%(value)s\"" msgstr "" -msgid "Add a new SMB service." +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" msgstr "" -msgid "SMB service NetBIOS name" +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +msgid "Certificate Authority" +msgstr "" + +msgid "Certificate Authorities" +msgstr "" + +msgid "Name" +msgstr "" + +msgid "Name for referencing the CA" +msgstr "" + +msgid "Description of the purpose of the CA" +msgstr "" + +msgid "Authority ID" +msgstr "" + +msgid "Dogtag Authority ID" +msgstr "" + +msgid "Subject DN" +msgstr "" + +msgid "Subject Distinguished Name" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Issuer Distinguished Name" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +msgid "Certificate chain" +msgstr "" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Search for CAs." msgstr "" #, fuzzy, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified service \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "%(count)d ভেরিয়াবেল" -msgstr[1] "%(count)d ভেরিয়াবেল" - -#, fuzzy, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to a service" -msgstr "" - -#, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a service" -msgstr "" - -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, fuzzy, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" -msgstr "" - -msgid "command" -msgstr "" - -msgid "commands" -msgstr "" - -msgid "runAs user" -msgstr "" - -msgid "runAs users" -msgstr "" - -msgid "group runAs" -msgstr "" - -msgid "runAs groups" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgid "commands cannot be added when command category='all'" +msgid "Include certificate chain in output" +msgstr "" + +msgid "Display the properties of a CA." +msgstr "" + +msgid "Create a CA." +msgstr "" + +#, fuzzy, python-format +msgid "Created CA \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "" + +#, python-format +msgid "Unrecognized attributes: %(attrs)s" +msgstr "" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "" + +msgid "Delete a CA (must be disabled first)." +msgstr "" + +#, fuzzy, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Insufficient privilege to delete a CA." +msgstr "" + +msgid "CA" +msgstr "" + +msgid "IPA CA cannot be deleted" +msgstr "" + +msgid "Must be disabled first" +msgstr "" + +msgid "Modify CA configuration." +msgstr "" + +#, fuzzy, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Insufficient privilege to modify a CA." +msgstr "" + +msgid "Disable a CA." +msgstr "" + +#, fuzzy, python-format +msgid "Disabled CA \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "IPA CA cannot be disabled" +msgstr "" + +msgid "Enable a CA." +msgstr "" + +#, fuzzy, python-format +msgid "Enabled CA \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "" + +msgid "CA ACLs" +msgstr "" + +msgid "CA category" +msgstr "" + +msgid "CA category the ACL applies to" +msgstr "" + +msgid "CAs" +msgstr "" + +#, fuzzy, python-format +msgid "Added CA ACL \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "default CA ACL can be only disabled" +msgstr "" + +#, fuzzy, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" + +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "%i user or group added." +msgstr "" + +#, python-format +msgid "%i users or groups added." msgstr "" msgid "users cannot be added when user category='all'" msgstr "" +#, python-format +msgid "%i user or group removed." +msgstr "" + +#, python-format +msgid "%i users or groups removed." +msgstr "" + +#, python-format +msgid "%i host or hostgroup added." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "" + msgid "hosts cannot be added when host category='all'" msgstr "" -msgid "users cannot be added when runAs user or runAs group category='all'" +#, python-format +msgid "%i host or hostgroup removed." msgstr "" #, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" +msgid "%i hosts or hostgroups removed." msgstr "" #, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" +msgid "%i service added." msgstr "" #, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgid "%i services added." +msgstr "" + +msgid "services cannot be added when service category='all'" +msgstr "" + +#, python-format +msgid "%i service removed." +msgstr "" + +#, python-format +msgid "%i services removed." +msgstr "" + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, python-format +msgid "%i profiles removed." +msgstr "" + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." msgstr "" msgid "pyhbac is not installed." @@ -13466,15 +13787,6 @@ msgstr "" msgid "Name of issuing CA" msgstr "" -msgid "Base-64 encoded certificate." -msgstr "" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - msgid "Subject email address" msgstr "" @@ -13508,7 +13820,16 @@ msgstr "" msgid "Subject Other Name" msgstr "" -msgid "Issuer DN" +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" msgstr "" msgid "Serial number (hex)" @@ -13517,9 +13838,6 @@ msgstr "" msgid "Request status" msgstr "" -msgid "Include certificate chain in output" -msgstr "" - msgid "" "automatically add the principal if it doesn't exist (service principals only)" msgstr "" @@ -13613,6 +13931,9 @@ msgstr "" msgid "Revoked" msgstr "" +msgid "Revocation reason" +msgstr "" + msgid "" "Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " "revocation reason details. " @@ -13630,6 +13951,10 @@ msgstr "" msgid "7 is not a valid revocation reason" msgstr "" +#, fuzzy +msgid "Status of the certificate" +msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" + msgid "Results should contain primary key attribute only (\"certificate\")" msgstr "" @@ -13860,7 +14185,110 @@ msgid_plural "%(count)s users matched" msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgid "Base-64 encoded user certificate" +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +msgid "Certificate Profile" +msgstr "" + +msgid "Certificate Profiles" +msgstr "" + +msgid "Profile configuration" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +#, fuzzy, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." msgstr "" msgid "" @@ -13934,6 +14362,9 @@ msgstr "" msgid "Maximum hostname length" msgstr "" +msgid "Enable adding subids to new users" +msgstr "" + msgid "IPA masters" msgstr "" @@ -14006,6 +14437,21 @@ msgstr "" msgid "DNSec key master" msgstr "" +msgid "Setup SID configuration" +msgstr "" + +msgid "New users and groups automatically get a SID assigned" +msgstr "" + +msgid "Add SIDs" +msgstr "" + +msgid "Add SIDs for existing users and groups" +msgstr "" + +msgid "NetBIOS name of the IPA domain" +msgstr "" + msgid "Empty domain is not allowed" msgstr "" @@ -14021,6 +14467,20 @@ msgstr "" msgid "Disabled domain '%(domain)s' is not allowed" msgstr "" +msgid "not allowed to enable SID generation" +msgstr "" + +msgid "" +"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " +"allowed. Empty string is not allowed." +msgstr "" + +msgid "Failed to call DBus" +msgstr "" + +msgid "Configuration of SID failed. See details in the error log" +msgstr "" + msgid "The group doesn't exist" msgstr "" @@ -14045,55 +14505,1611 @@ msgstr "" msgid "SELinux user map default user not in order list" msgstr "" -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" +#, python-format +msgid "You cannot specify %s without the --enable-sid option" msgstr "" -msgid "sudo command group" +msgid "delegation" msgstr "" -msgid "sudo command groups" +msgid "delegations" +msgstr "" + +msgid "Delegations" +msgstr "" + +msgid "Delegation" msgstr "" #, fuzzy, python-format -msgid "Added Sudo Command Group \"%(value)s\"" +msgid "Added delegation \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Deleted delegation \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Modified delegation \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +msgstr "" + +msgid "" +"\n" +"Manage DNS zone and resource records.\n" +msgstr "" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" + +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "invalid IP network format" +msgstr "" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "" + +msgid "invalid address format" +msgstr "" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" + +msgid "algorithm value: allowed interval 0-255" +msgstr "" + +msgid "flags value: allowed interval 0-255" +msgstr "" + +msgid "iterations value: allowed interval 0-65535" +msgstr "" + +#, python-format +msgid "salt value: %(err)s" +msgstr "" + +msgid "invalid domain-name: not fully qualified" +msgstr "" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" + +#, python-format +msgid "" +"No answers could be found in the specified lifetime for DNS reverse zone " +"%(revdns)s" +msgstr "" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" + +#, python-format +msgid "%s record" +msgstr "" + +#, python-format +msgid "Raw %s records" +msgstr "" + +#, python-format +msgid "%s Record" +msgstr "" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "" + +msgid "Invalid number of parts!" +msgstr "" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "" + +msgid "Create reverse" +msgstr "" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "" + +msgid "Exchanger" +msgstr "" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" + +msgid "Priority (order)" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Relative weight for entries with the same priority." +msgstr "" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Target Uniform Resource Identifier" +msgstr "" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "" + +msgid "Managedby permission" +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "cannot be used when a zone is specified" +msgstr "" + +#, fuzzy +msgid "Only one zone type is allowed per zone name" +msgstr "কেবলমাত্র একটি মান অনুমদিত" + +#, fuzzy, python-format +msgid "Added system permission \"%(value)s\"" msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" #, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" +msgid "permission \"%(value)s\" already exists" +msgstr "" + +#, fuzzy, python-format +msgid "Removed system permission \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "DNS zone" +msgstr "" + +msgid "DNS zones" +msgstr "" + +msgid "DNS Zones" +msgstr "" + +msgid "DNS Zone" +msgstr "" + +msgid "Default time to live" +msgstr "" + +msgid "Time to live for records without explicit TTL definition" +msgstr "" + +msgid "setting Authoritative nameserver" +msgstr "" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "" + +msgid "" +msgstr "" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "is required" +msgstr "" + +#, fuzzy, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "DNS resource record" +msgstr "" + +msgid "DNS resource records" +msgstr "" + +msgid "DNS Resource Records" +msgstr "" + +msgid "DNS Resource Record" +msgstr "" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" msgstr "" #, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" msgstr "" #, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" + +msgid "only master zones can contain records" +msgstr "" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" + +msgid "DNS zone root record cannot be renamed" +msgstr "" + +msgid "DNS records can be only updated one at a time" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Found '%(value)s'" +msgstr "" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "" + +msgid "DNS configuration options" +msgstr "" + +msgid "DNS Global Configuration" +msgstr "" + +msgid "IPA DNS version" +msgstr "" + +msgid "List of IPA masters configured as DNS servers" +msgstr "" + +msgid "IPA server configured as DNSSec key master" +msgstr "" + +msgid "Global DNS configuration is empty" +msgstr "" + +msgid "DNS forward zone" +msgstr "" + +msgid "DNS forward zones" +msgstr "" + +msgid "DNS Forward Zones" +msgstr "" + +msgid "DNS Forward Zone" +msgstr "" + +msgid "Please specify forwarders." +msgstr "" + +#, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "" + +msgid "IPA DNS records" +msgstr "" + +msgid "IPA location records" +msgstr "" + +msgid "Update location and IPA server DNS records" +msgstr "" + +msgid "Result of the command" +msgstr "" + +msgid "Dry run" +msgstr "" + +msgid "Do not update records only return expected records" +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +msgid "DNS Servers" +msgstr "" + +msgid "DNS Server" +msgstr "" + +msgid "DNS Server name" +msgstr "" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, fuzzy, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Search for DNS servers." +msgstr "" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" msgstr[0] "" msgstr[1] "" +msgid "IPA DNS Server is not installed" +msgstr "" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, fuzzy, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Delete a DNS server" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "groups" +msgstr "" + +msgid "User Group" +msgstr "" + +#, fuzzy, python-format +msgid "Added group \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "gid cannot be set for external group" +msgstr "" + +msgid "attribute \"gidNumber\" not allowed with --nonposix" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "privileged group" +msgstr "" + +#, fuzzy, python-format +msgid "Modified group \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" +msgstr "" + +msgid "HBAC Services" +msgstr "" + +msgid "HBAC Service Groups" +msgstr "" + +#, fuzzy, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +#, fuzzy, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Access time" +msgstr "" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "" + +msgid "HBAC Service" +msgstr "" + +#, fuzzy, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC service group" +msgstr "" + +msgid "HBAC service groups" +msgstr "" + +msgid "HBAC Service Group" +msgstr "" + +#, fuzzy, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Access granted: %s" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host" +msgstr "" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Serial Number" +msgstr "" + +msgid "Serial Number (hex)" +msgstr "" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, fuzzy, python-format +msgid "Added host \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, fuzzy, python-format +msgid "Modified host \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +#, fuzzy, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, fuzzy, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, fuzzy, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + msgid "" "\n" "Groups of hosts.\n" @@ -14173,294 +16189,501 @@ msgstr "" msgid "Remove users that can manage members of this hostgroup." msgstr "" -#, python-format msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" msgstr "" msgid "" "\n" -"Set a user's password\n" +"ID ranges\n" "\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" "\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" +"There are two type of ID ranges which are both handled by this utility:\n" "\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" "\n" -"EXAMPLES:\n" +"Both types have the following attributes in common:\n" "\n" -" To reset your own password:\n" -" ipa passwd\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" "\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"and an ID range of a trusted domain may set\n" +" - auto-private-groups: [true|false|hybrid] automatic creation of private " +"groups\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" "\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" msgstr "" -msgid "The OTP if the user has a token configured" +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "Auto private groups" +msgstr "" + +msgid "Auto creation of private groups, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --auto-private-groups\n" +"\n" +" may be given for a new ID range for a trusted AD domain and\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" msgstr "" #, fuzzy, python-format -msgid "Changed password for \"%(value)s\"" +msgid "Added ID range \"%(value)s\"" msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" -msgid "" -"\n" -"Permissions\n" +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" msgstr "" msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" msgstr "" msgid "" -"\n" -"A permission may not contain other permissions.\n" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" msgstr "" msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." msgstr "" msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" +"private-groups is specified" +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" msgstr "" msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -msgid "" -"\n" -"Managed permissions\n" -msgstr "" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "must be enclosed in parentheses" -msgstr "" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -#, python-format -msgid "Deprecated; use %s" -msgstr "" - -msgid "ACI" -msgstr "" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, python-format -msgid "Entry %s not found" -msgstr "" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, python-format -msgid "%s: group not found" -msgstr "" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" -msgstr "" - -msgid "Bad search filter" -msgstr "" - -#, python-format -msgid "Entry %s does not exist" -msgstr "" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." msgstr "" #, fuzzy, python-format -msgid "Added permission \"%(value)s\"" +msgid "Deleted ID range \"%(value)s\"" msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" -msgid "attrs and included attributes are mutually exclusive" -msgstr "" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - #, fuzzy, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "cannot delete managed permissions" -msgstr "" - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "" - -#, fuzzy, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -#, python-brace-format -msgid "{role}: role not found" +msgid "" +"Modify ID range.\n" +"\n" msgstr "" -#, python-brace-format -msgid "{attr}: no such attribute" +#, fuzzy, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" msgstr "" msgid "" -"\n" -"Session Support for IPA\n" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." msgstr "" +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +msgid "ID View" +msgstr "" + +msgid "system ID View" +msgstr "" + +msgid "ID Views" +msgstr "" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +msgid "Hosts the view applies to" +msgstr "" + +#, fuzzy, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, fuzzy, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Delete an ID override." +msgstr "" + +#, fuzzy, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Modify an ID override." +msgstr "" + +#, fuzzy, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "%(count)d ভেরিয়াবেল" +msgstr[1] "%(count)d ভেরিয়াবেল" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, fuzzy, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + msgid "Internationalization messages" msgstr "" @@ -14476,9 +16699,6 @@ msgstr "" msgid "Are you sure you want to rebuild auto membership?" msgstr "" -msgid "Automember rebuild membership task completed" -msgstr "" - msgid "Are you sure you want to proceed with the action?" msgstr "" @@ -15369,9 +17589,6 @@ msgstr "" msgid "Affiliation Changed" msgstr "" -msgid "CA" -msgstr "" - msgid "CA Compromise" msgstr "" @@ -15583,9 +17800,6 @@ msgstr "" msgid "Add certificate mapping data" msgstr "" -msgid "Certificate mapping data" -msgstr "" - msgid "Configuration string" msgstr "" @@ -15602,6 +17816,9 @@ msgstr "" msgid "Remove certificate identity mapping rules" msgstr "" +msgid "Version" +msgstr "" + msgid "Group Options" msgstr "" @@ -16311,9 +18528,6 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "" -msgid "Host" -msgstr "" - msgid "Netgroup Settings" msgstr "" @@ -16432,6 +18646,9 @@ msgstr "" msgid "Add password policy" msgstr "" +msgid "Password Policy" +msgstr "" + msgid "Remove password policies" msgstr "" @@ -16459,9 +18676,6 @@ msgstr "" msgid "Remove ID ranges" msgstr "" -msgid "Active Directory domain" -msgstr "" - msgid "Active Directory domain with POSIX attributes" msgstr "" @@ -16486,6 +18700,9 @@ msgstr "" msgid "Remove RADIUS servers" msgstr "" +msgid "Realm Domains" +msgstr "" + msgid "Check DNS" msgstr "" @@ -16658,6 +18875,33 @@ msgstr "" msgid "User categories" msgstr "" +msgid "Add subid" +msgstr "" + +msgid "Assigned subids" +msgstr "" + +msgid "DNA remaining" +msgstr "" + +msgid "SubGID range size" +msgstr "" + +msgid "SubGID range start" +msgstr "" + +msgid "SubUID range size" +msgstr "" + +msgid "SubUID range start" +msgstr "" + +msgid "Remaining subids" +msgstr "" + +msgid "Subordinate ID Statistics" +msgstr "" + msgid "Add sudo command" msgstr "" @@ -16942,6 +19186,14 @@ msgstr "" msgid "Add user '${primary_key}' into sudo rules" msgstr "" +msgid "Auto assign subordinate ids" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to auto-assign a subordinate id to user ${object}?" +msgstr "" + msgid "Contact Settings" msgstr "" @@ -17396,9 +19648,6 @@ msgstr "" msgid "Authentication" msgstr "" -msgid "Automember" -msgstr "" - msgid "Automount" msgstr "" @@ -17423,6 +19672,9 @@ msgstr "" msgid "Role-Based Access Control" msgstr "" +msgid "Subordinate IDs" +msgstr "" + msgid "Sudo" msgstr "" @@ -17537,318 +19789,10 @@ msgstr "" msgid "Unsupported value" msgstr "" -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -msgid "invalid port number" -msgstr "" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" -msgstr "" - -#, fuzzy, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - #, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -#, python-brace-format msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Access granted: %s" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." msgstr "" msgid "kerberos ticket policy settings" @@ -18015,6 +19959,1761 @@ msgstr "" msgid "Servers in location" msgstr "" +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +msgid "netgroups" +msgstr "" + +msgid "Netgroup" +msgstr "" + +#, fuzzy, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +msgid "URI" +msgstr "" + +#, fuzzy, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "cannot be empty" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"If the user authentication method is set to password+OTP, the user should\n" +"pass the --otp option when resetting the password.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To reset your own password when password+OTP is set as authentication " +"method:\n" +" ipa passwd --otp\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +msgid "The OTP if the user has a token configured" +msgstr "" + +#, fuzzy, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "" +"\n" +"Permissions\n" +msgstr "" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +msgid "" +"\n" +"Managed permissions\n" +msgstr "" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "must be enclosed in parentheses" +msgstr "" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "" + +#, python-format +msgid "Deprecated; use %s" +msgstr "" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, python-format +msgid "Entry %s not found" +msgstr "" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, python-format +msgid "option was renamed; use %s" +msgstr "" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, python-format +msgid "%s: group not found" +msgstr "" + +msgid "target and targetgroup are mutually exclusive" +msgstr "" + +msgid "subtree and type are mutually exclusive" +msgstr "" + +msgid "Bad search filter" +msgstr "" + +#, python-format +msgid "Entry %s does not exist" +msgstr "" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, fuzzy, python-format +msgid "Added permission \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "cannot delete managed permissions" +msgstr "" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "" + +#, fuzzy, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "%(count)d ভেরিয়াবেল" +msgstr[1] "%(count)d ভেরিয়াবেল" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, fuzzy, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +msgid "invalid port number" +msgstr "" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, fuzzy, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "Role" +msgstr "" + +#, fuzzy, python-format +msgid "Added role \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Modified role \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "" +"\n" +"API Schema\n" +msgstr "" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +msgid "Documentation" +msgstr "" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +msgid "Help topic" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +msgid "Method name" +msgstr "" + +msgid "Display information about a command." +msgstr "" + +msgid "Search for commands." +msgstr "" + +msgid "Return command defaults" +msgstr "" + +#, python-brace-format +msgid "{oname}: {command_name} not found" +msgstr "" + +msgid "Display information about a class." +msgstr "" + +msgid "Search for classes." +msgstr "" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +msgid "CLI name" +msgstr "" + +msgid "Confirm (password)" +msgstr "" + +msgid "Default" +msgstr "" + +msgid "Default from" +msgstr "" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" +msgstr "" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command output." +msgstr "" + +msgid "Search for command outputs." +msgstr "" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "self service permission" +msgstr "" + +msgid "self service permissions" +msgstr "" + +msgid "Self Service Permissions" +msgstr "" + +msgid "Self Service Permission" +msgstr "" + +#, fuzzy, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +msgid "SELinux User Map rule" +msgstr "" + +msgid "SELinux User Map rules" +msgstr "" + +msgid "SELinux User Maps" +msgstr "" + +msgid "SELinux User Map" +msgstr "" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "" + +#, fuzzy, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +msgid "server roles" +msgstr "" + +msgid "IPA Server Roles" +msgstr "" + +msgid "IPA Server Role" +msgstr "" + +msgid "IPA server role name" +msgstr "" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "IPA role name" +msgstr "" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +#, python-format +msgid "authentication indicators not allowed in service \"%s\"" +msgstr "" + +msgid "Malformed principal" +msgstr "" + +msgid "{} is required by the IPA master" +msgstr "" + +msgid "service" +msgstr "" + +msgid "services" +msgstr "" + +msgid "Service principal alias" +msgstr "" + +msgid "Base-64 encoded service certificate" +msgstr "" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +msgid "Add a new IPA service." +msgstr "" + +#, fuzzy, python-format +msgid "Added service \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "force principal name even if host not in DNS" +msgstr "" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +msgid "Add a new SMB service." +msgstr "" + +msgid "SMB service NetBIOS name" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Modified service \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "%(count)d ভেরিয়াবেল" +msgstr[1] "%(count)d ভেরিয়াবেল" + +#, fuzzy, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to a service" +msgstr "" + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a service" +msgstr "" + +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, fuzzy, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, fuzzy, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, fuzzy, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +#, fuzzy, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Subordinate ids\n" +"\n" +"Manage subordinate user and group ids for users\n" +"\n" +"EXAMPLES:\n" +"\n" +" Auto-assign a subordinate id range to current user\n" +" ipa subid-generate\n" +"\n" +" Auto-assign a subordinate id range to user alice:\n" +" ipa subid-generate --owner=alice\n" +"\n" +" Find subordinate ids for user alice:\n" +" ipa subid-find --owner=alice\n" +"\n" +" Match entry by any subordinate uid in range:\n" +" ipa subid-match --subuid=2147483649\n" +msgstr "" + +msgid "Subordinate id" +msgstr "" + +msgid "Subordinate ids" +msgstr "" + +msgid "Subordinate id description" +msgstr "" + +msgid "Owning user of subordinate id entry" +msgstr "" + +msgid "Start value for subordinate user ID (subuid) range" +msgstr "" + +msgid "Subordinate user ID count" +msgstr "" + +msgid "Start value for subordinate group ID (subgid) range" +msgstr "" + +msgid "Subordinate group ID count" +msgstr "" + +#, python-format +msgid "" +"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." +msgstr "" + +#, python-format +msgid "'%(dn)s is not a valid user" +msgstr "" + +msgid "subgidnumber must be equal to subuidnumber" +msgstr "" + +msgid "Add a new subordinate id." +msgstr "" + +#, fuzzy, python-format +msgid "Added subordinate id \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Delete a subordinate id." +msgstr "" + +#, fuzzy, python-format +msgid "Deleted subordinate id \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Modify a subordinate id." +msgstr "" + +#, fuzzy, python-format +msgid "Modified subordinate id \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Search for subordinate id." +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d subordinate id matched" +msgid_plural "%(count)d subordinate ids matched" +msgstr[0] "%(count)d ভেরিয়াবেল" +msgstr[1] "%(count)d ভেরিয়াবেল" + +msgid "Display information about a subordinate id." +msgstr "" + +msgid "Generate and auto-assign subuid and subgid range to user entry" +msgstr "" + +msgid "Match users by any subordinate uid in their range" +msgstr "" + +msgid "SubUID match" +msgstr "" + +msgid "Match value for subordinate user ID" +msgstr "" + +msgid "Subordinate id statistics" +msgstr "" + +#, python-format +msgid "%(remaining)i remaining subordinate id ranges" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +msgid "sudo command" +msgstr "" + +msgid "sudo commands" +msgstr "" + +msgid "Sudo Commands" +msgstr "" + +#, fuzzy, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, fuzzy, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + msgid "" "\n" "Topology\n" @@ -18231,1002 +21930,6 @@ msgid "" " replication agreements\n" msgstr "" -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -msgid "sudo command" -msgstr "" - -msgid "sudo commands" -msgstr "" - -msgid "Sudo Commands" -msgstr "" - -#, fuzzy, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -msgid "Self Service Permissions" -msgstr "" - -msgid "Self Service Permission" -msgstr "" - -#, fuzzy, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "A list of ACI values" -msgstr "" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -msgid "ACI prefix is required" -msgstr "" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -#, fuzzy, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -#, fuzzy, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "groups" -msgstr "" - -msgid "User Group" -msgstr "" - -#, fuzzy, python-format -msgid "Added group \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "privileged group" -msgstr "" - -#, fuzzy, python-format -msgid "Modified group \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -msgid "Not a managed group" -msgstr "" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -msgid "automount location" -msgstr "" - -msgid "automount locations" -msgstr "" - -msgid "Automount Locations" -msgstr "" - -msgid "Automount Location" -msgstr "" - -#, fuzzy, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "automount map" -msgstr "" - -msgid "automount maps" -msgstr "" - -msgid "Automount Maps" -msgstr "" - -msgid "Automount Map" -msgstr "" - -#, fuzzy, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Automount key object." -msgstr "" - -msgid "automount key" -msgstr "" - -msgid "automount keys" -msgstr "" - -msgid "Automount Keys" -msgstr "" - -msgid "Automount Key" -msgstr "" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, python-format -msgid "key named %(key)s already exists" -msgstr "" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, fuzzy, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" -msgstr[1] "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, fuzzy, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Delete an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Modify an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "%(count)d ভেরিয়াবেল" -msgstr[1] "%(count)d ভেরিয়াবেল" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -msgid "CA category" -msgstr "" - -msgid "CA category the ACL applies to" -msgstr "" - -msgid "CAs" -msgstr "" - -#, fuzzy, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, fuzzy, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, python-format -msgid "%i users or groups added." -msgstr "" - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, python-format -msgid "%i service added." -msgstr "" - -#, python-format -msgid "%i services added." -msgstr "" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - msgid "" "\n" "Cross-realm trusts\n" @@ -19392,12 +22095,6 @@ msgid "" " " msgstr "" -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - msgid "Type of trusted domain ID range, one of allowed values" msgstr "" @@ -19634,736 +22331,13 @@ msgid "" "itself" msgstr "" -msgid "" -"\n" -"DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "" - -msgid "DNS servers" -msgstr "" - -msgid "DNS Servers" -msgstr "" - -msgid "DNS Server" -msgstr "" - -msgid "DNS Server name" -msgstr "" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, fuzzy, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Search for DNS servers." +msgid "users" msgstr "" #, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, fuzzy, python-format -msgid "Added new DNS server \"%(value)s\"" +msgid "Added user \"%(value)s\"" msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" -msgid "Delete a DNS server" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -#, fuzzy, python-format -msgid "Added host \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, fuzzy, python-format -msgid "Modified host \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -#, fuzzy, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, fuzzy, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "" - -msgid "HBAC Services" -msgstr "" - -msgid "HBAC Service" -msgstr "" - -#, fuzzy, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -msgid "HBAC service group" -msgstr "" - -msgid "HBAC service groups" -msgstr "" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" -msgstr "" - -#, fuzzy, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -msgid "Delegations" -msgstr "" - -msgid "Delegation" -msgstr "" - -#, fuzzy, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, fuzzy, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "Role" -msgstr "" - -#, fuzzy, python-format -msgid "Added role \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified role \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -msgid "netgroups" -msgstr "" - -msgid "Netgroup" -msgstr "" - -#, fuzzy, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - msgid "Default group for new users is not POSIX" msgstr "" @@ -20379,12 +22353,6 @@ msgstr "" msgid "Modified user \"%(value)s\"" msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" -#, fuzzy, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - #, fuzzy, python-format msgid "Undeleted user account \"%(value)s\"" msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" @@ -20480,12 +22448,6 @@ msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হ msgid "Removed certificates from user \"%(value)s\"" msgstr "" -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - msgid "Add new principal alias to the user entry" msgstr "" @@ -20500,532 +22462,6 @@ msgstr "" msgid "Removed aliases from user \"%(value)s\"" msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "%(count)d ভেরিয়াবেল" -msgstr[1] "%(count)d ভেরিয়াবেল" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "%(count)d ভেরিয়াবেল" -msgstr[1] "%(count)d ভেরিয়াবেল" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" -msgstr "" - -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -msgid "SELinux User Maps" -msgstr "" - -msgid "SELinux User Map" -msgstr "" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "" - -#, fuzzy, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - msgid "" "\n" "Vaults\n" @@ -21368,107 +22804,156 @@ msgstr "" msgid "Checks if any of the servers has the KRA service enabled" msgstr "" -msgid "Member service groups" -msgstr "" - -msgid "Member HBAC service groups" -msgstr "" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" +msgid "operation not defined" msgstr "" #, python-format -msgid "container entry (%(container)s) not found" +msgid "not allowed to perform operation: %s" msgstr "" -#, python-format -msgid "%(parent)s: %(oname)s not found" +msgid "No such virtual command" msgstr "" -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "Class of Service object used for linking policies with groups" msgstr "" #, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +msgid "password policy" +msgstr "" + +msgid "password policies" +msgstr "" + +msgid "Password Policies" +msgstr "" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +msgid "User check" +msgstr "" + +msgid "Check if the password contains the username" +msgstr "" + msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" msgstr "" -#, python-format -msgid "added attribute value to entry %(value)s" +msgid "Maximum password life must be equal to or greater than the minimum." msgstr "" -#, python-format -msgid "removed attribute values from entry %(value)s" +msgid "cannot delete global password policy" msgstr "" -msgid "one or more values to remove" +msgid "priority cannot be set on global policy" msgstr "" msgid "" @@ -21615,6 +23100,10 @@ msgstr "" msgid "Ignoring topology connectivity errors." msgstr "" +#, python-format +msgid "Failed to remove server from security domain: %s" +msgstr "" + msgid "Server has already been deleted" msgstr "" @@ -21652,1390 +23141,186 @@ msgstr "" msgid "" "\n" -"Manage Certificate Authorities\n" +"Sudo Rules\n" msgstr "" msgid "" "\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" msgstr "" msgid "" "\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" msgstr "" msgid "" "\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" +"Each option needs to be added separately and no validation is done whether\n" +"the option is known by sudo or is in a valid format. Environment variables\n" +"also need to be set individually. For example env_keep=\"FOO BAR\" in " +"sudoers\n" +"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" +"+=BAR.\n" msgstr "" msgid "" "\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" msgstr "" msgid "" "\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" msgstr "" msgid "" "\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" msgstr "" msgid "" "\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" msgstr "" msgid "" "\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" "\n" -" ipa ca-del puppet\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" msgstr "" -msgid "Certificate Authority" +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" msgstr "" -msgid "Certificate Authorities" +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" msgstr "" -msgid "Name for referencing the CA" +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" msgstr "" -msgid "Description of the purpose of the CA" +msgid "" +"\n" +" Set multiple default Sudo options:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate' --" +"sudooption mail_badpass\n" msgstr "" -msgid "Authority ID" +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" msgstr "" -msgid "Dogtag Authority ID" +msgid "this option has been deprecated." msgstr "" -msgid "Subject DN" +msgid "sudo rules" msgstr "" -msgid "Subject Distinguished Name" +msgid "Sudo Rules" msgstr "" -msgid "Issuer Distinguished Name" +msgid "Sudo Rule" msgstr "" -msgid "Search for CAs." +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" msgstr "" #, fuzzy, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +msgid "command" +msgstr "" + +msgid "commands" +msgstr "" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +msgid "group runAs" +msgstr "" + +msgid "runAs groups" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgid "Display the properties of a CA." +msgid "commands cannot be added when command category='all'" msgstr "" -msgid "Create a CA." -msgstr "" - -#, fuzzy, python-format -msgid "Created CA \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." +msgid "users cannot be added when runAs user or runAs group category='all'" msgstr "" #, python-format -msgid "Unrecognized attributes: %(attrs)s" +msgid "RunAsUser does not accept '%(name)s' as a user name" msgstr "" #, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -msgid "IPA CA cannot be deleted" -msgstr "" - -msgid "Must be disabled first" -msgstr "" - -msgid "Modify CA configuration." -msgstr "" - -#, fuzzy, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -msgid "Disable a CA." -msgstr "" - -#, fuzzy, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "IPA CA cannot be disabled" -msgstr "" - -msgid "Enable a CA." -msgstr "" - -#, fuzzy, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, fuzzy, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Entry RDN is not 'uid'" +msgid "RunAsUser does not accept '%(name)s' as a group name" msgstr "" #, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -msgid "URI" -msgstr "" - -#, fuzzy, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "cannot be empty" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "invalid IP network format" -msgstr "" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -msgid "invalid address format" -msgstr "" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -msgid "flags value: allowed interval 0-255" -msgstr "" - -msgid "iterations value: allowed interval 0-65535" -msgstr "" - -#, python-format -msgid "salt value: %(err)s" -msgstr "" - -msgid "invalid domain-name: not fully qualified" -msgstr "" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" - -#, python-format -msgid "%s record" -msgstr "" - -#, python-format -msgid "Raw %s records" -msgstr "" - -#, python-format -msgid "%s Record" -msgstr "" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -msgid "Invalid number of parts!" -msgstr "" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -msgid "Create reverse" -msgstr "" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" - -msgid "Exchanger" -msgstr "" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -msgid "Priority (order)" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Relative weight for entries with the same priority." -msgstr "" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Target Uniform Resource Identifier" -msgstr "" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" - -msgid "Managedby permission" -msgstr "" - -msgid "cannot be used when a zone is specified" -msgstr "" - -#, fuzzy -msgid "Only one zone type is allowed per zone name" -msgstr "কেবলমাত্র একটি মান অনুমদিত" - -#, fuzzy, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "" - -#, fuzzy, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "DNS zone" -msgstr "" - -msgid "DNS zones" -msgstr "" - -msgid "DNS Zones" -msgstr "" - -msgid "DNS Zone" -msgstr "" - -msgid "Default time to live" -msgstr "" - -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -msgid "setting Authoritative nameserver" -msgstr "" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -msgid "" -msgstr "" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "is required" -msgstr "" - -#, fuzzy, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "DNS resource record" -msgstr "" - -msgid "DNS resource records" -msgstr "" - -msgid "DNS Resource Records" -msgstr "" - -msgid "DNS Resource Record" -msgstr "" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -msgid "only master zones can contain records" -msgstr "" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -msgid "DNS zone root record cannot be renamed" -msgstr "" - -msgid "DNS records can be only updated one at a time" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Found '%(value)s'" -msgstr "" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "" - -msgid "DNS configuration options" -msgstr "" - -msgid "DNS Global Configuration" -msgstr "" - -msgid "IPA DNS version" -msgstr "" - -msgid "List of IPA masters configured as DNS servers" -msgstr "" - -msgid "IPA server configured as DNSSec key master" -msgstr "" - -msgid "Global DNS configuration is empty" -msgstr "" - -msgid "DNS forward zone" -msgstr "" - -msgid "DNS forward zones" -msgstr "" - -msgid "DNS Forward Zones" -msgstr "" - -msgid "DNS Forward Zone" -msgstr "" - -msgid "Please specify forwarders." -msgstr "" - -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "" - -msgid "IPA DNS records" -msgstr "" - -msgid "IPA location records" -msgstr "" - -msgid "Update location and IPA server DNS records" -msgstr "" - -msgid "Result of the command" -msgstr "" - -msgid "Dry run" -msgstr "" - -msgid "Do not update records only return expected records" -msgstr "" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, fuzzy, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -#, fuzzy, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -msgid "Certificate Profile" -msgstr "" - -msgid "Certificate Profiles" -msgstr "" - -msgid "Profile configuration" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -#, fuzzy, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -msgid "must be enabled only on a single master" +msgid "RunAsGroup does not accept '%(name)s' as a group name" msgstr "" msgid "Request must be a dict" @@ -23059,6 +23344,17 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + #, python-format msgid "" "\n" @@ -23078,34 +23374,6 @@ msgstr "" msgid "Topology does not allow server %(server)s to replicate with servers:" msgstr "" -msgid "Trusting forest" -msgstr "" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Unknown" -msgstr "" - -msgid "Non-Active Directory domain" -msgstr "" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - msgid "" "\n" "Classes to manage trust joins using DCE-RPC calls\n" @@ -23265,33 +23533,6 @@ msgstr "" msgid "must be at least 1" msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" -#, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -msgid "Unable to initialize STARTTLS session\n" -msgstr "" - msgid "Out of memory\n" msgstr "" @@ -23318,3 +23559,30 @@ msgstr "" msgid "Bad or unsupported salt type.\n" msgstr "" + +#, c-format +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "" + +msgid "" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" +msgstr "" + +msgid "Unable to initialize STARTTLS session\n" +msgstr "" diff --git a/po/ca.po b/po/ca.po index 12f29d58b..980427cb7 100644 --- a/po/ca.po +++ b/po/ca.po @@ -14,548 +14,423 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" -msgid "Access Denied" -msgstr "S'ha denegat l'accés" +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "" -msgid "Access Granted" -msgstr "Accés permès" +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "" -msgid "Access time" -msgstr "Temps d'accés" +#, fuzzy, c-format +msgid "out of memory\n" +msgstr "Sense memòria\n" -msgid "Account" -msgstr "Compte" +#, c-format +msgid "read error\n" +msgstr "" -msgid "Account Settings" -msgstr "Paràmetres dels comptes" +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" -msgid "Actions" -msgstr "Accions" +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" -msgid "Active Directory domain" -msgstr "Domini d'Active Directory" +#, c-format +msgid "Removing principal %s\n" +msgstr "" -msgid "Add" -msgstr "Afegeix-ho" +#, c-format +msgid "Failed to open keytab\n" +msgstr "" -msgid "Affiliation Changed" -msgstr "L'afiliació ha canviat" +#, c-format +msgid "principal not found\n" +msgstr "" -msgid "Algorithm" -msgstr "Algorisme" +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" -msgid "Allow" -msgstr "Permet" +#, c-format +msgid "Unable to remove entry\n" +msgstr "" -msgid "Anyone" -msgstr "Qualsevol" +#, c-format +msgid "kvno %d\n" +msgstr "" -msgid "Apply" -msgstr "Aplica" +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" -msgid "Attribute" -msgstr "Atribut" +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" -msgid "Attributes" -msgstr "Atributs" +#, c-format +msgid "Unable to parse principal\n" +msgstr "" -msgid "Available" -msgstr "Disponible" +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" -msgid "Back" -msgstr "Enrere" +#, c-format +msgid "realm not found\n" +msgstr "" -msgid "CA Compromise" -msgstr "CA en compromís" - -msgid "Cancel" -msgstr "Cancel·la" - -msgid "Certificate" -msgstr "Certificat" - -msgid "Certificate Hold" -msgstr "Retenció del certificat" - -msgid "Certificates" -msgstr "Certificats" - -msgid "Cessation of Operation" -msgstr "Cessació de l'operació" - -msgid "City" -msgstr "Ciutat" - -msgid "Class" -msgstr "Classe" - -msgid "Close" -msgstr "Tanca" - -msgid "Command not implemented" -msgstr "No s'ha implementat l'ordre" - -msgid "Commands" -msgstr "Ordres" - -msgid "Common Name" -msgstr "Nom comú" - -msgid "Configuration" -msgstr "Configuració" - -msgid "Confirmation" -msgstr "Confirmació" - -msgid "Continue" -msgstr "Continua" - -msgid "DNS" -msgstr "DNS" - -msgid "Data" -msgstr "Dades" +msgid "Print debugging information" +msgstr "" msgid "Debugging output" msgstr "Sortida de depuració" -msgid "Delete" -msgstr "Suprimeix" +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" -msgid "Description" -msgstr "Descripció" +msgid "Kerberos Service Principal Name" +msgstr "" -msgid "Disable" -msgstr "Inhabilita" +msgid "The keytab file to remove the principcal(s) from" +msgstr "" -msgid "Disabled" -msgstr "Inhabilitat" +msgid "Keytab File Name" +msgstr "" -msgid "Domain" -msgstr "Domini" +msgid "Remove all principals in this realm" +msgstr "" -msgid "Edit" -msgstr "Edita" - -msgid "Email address" -msgstr "Adreça de correu electrònic" - -msgid "Enable" -msgstr "Habilita" - -msgid "Enabled" -msgstr "S'ha habilitat" - -msgid "Error" -msgstr "Error" - -msgid "Exclusive" -msgstr "Exclusiu" - -msgid "Expires On" -msgstr "Data de venciment" - -msgid "Expression" -msgstr "Expressió" - -msgid "External" -msgstr "Extern" - -msgid "False" -msgstr "Fals" - -msgid "Fax Number" -msgstr "Número de fax" - -msgid "Filter" -msgstr "Filtre" - -msgid "Find" -msgstr "Cerca" - -msgid "Fingerprint" -msgstr "Empremta" - -msgid "Fingerprints" -msgstr "Empremtes digitals" - -msgid "First name" -msgstr "Nom" - -msgid "Flags" -msgstr "Indicadors" - -msgid "Force" -msgstr "Força" - -msgid "Full name" -msgstr "Nom complet" - -msgid "General" -msgstr "General" - -msgid "Group" -msgstr "Grup" - -msgid "Group name" -msgstr "Nom del grup" - -msgid "Groups" -msgstr "Grups" - -msgid "Home directory" -msgstr "Directori de l'usuari" - -msgid "Host" -msgstr "Ordinador central" - -msgid "Host Name" -msgstr "Nom de l'ordinador" - -msgid "Host name" -msgstr "Nom de l'amfitrió" - -msgid "Hostname" -msgstr "Nom de l'ordinador" - -msgid "IP Address" -msgstr "Adreça IP" - -msgid "Identity" -msgstr "Identitat" - -msgid "Identity Settings" -msgstr "Paràmetres de la identitat" - -msgid "Initials" -msgstr "Inicials" - -msgid "Invalid credentials" -msgstr "Credencials no vàlides" - -msgid "Issued By" -msgstr "Emès per" - -msgid "Issued On" -msgstr "Data d'emissió" - -msgid "Issued To" -msgstr "Emès a nom de" - -msgid "Issuer" -msgstr "Emissor" - -msgid "Job Title" -msgstr "Càrrec" - -msgid "Key" -msgstr "Tecla" - -msgid "Key Compromise" -msgstr "Clau en compromís" - -msgid "Last name" -msgstr "Cognom" - -msgid "Locality" -msgstr "Localitat" - -msgid "Location" -msgstr "Ubicació" - -msgid "Login shell" -msgstr "Shell d'inici de sessió" - -msgid "Mailing Address" -msgstr "Adreça postal" - -msgid "Manager" -msgstr "Gestor" - -msgid "Map" -msgstr "Mapa" - -msgid "Matched" -msgstr "Coincideix" - -msgid "Modified" -msgstr "Modificat" - -msgid "Mount point" -msgstr "Punt de muntatge" - -msgid "Netgroup name" -msgstr "Nom de grup de xarxa" - -msgid "New Password" -msgstr "Contrasenya nova" - -msgid "Next" -msgstr "Següent" - -msgid "Not After" -msgstr "No després" - -msgid "Not Before" -msgstr "No abans" - -msgid "Note" -msgstr "Nota" - -msgid "OK" -msgstr "D'acord" - -msgid "Operating system" -msgstr "Sistema operatiu" - -msgid "Options" -msgstr "Opcions" - -msgid "Organization" -msgstr "Organització" - -msgid "Organizational Unit" -msgstr "Unitat organitzativa" - -msgid "Out of memory\n" -msgstr "Sense memòria\n" - -msgid "Page" -msgstr "Pàgina" - -msgid "Pager Number" -msgstr "Número de buscapersones" - -msgid "Password" -msgstr "Contrasenya" - -msgid "Passwords do not match" -msgstr "Les contrasenyes no coincideixen" - -msgid "Permission" -msgstr "Permís" - -msgid "Permissions" -msgstr "Permisos" - -msgid "Platform" -msgstr "Plataforma" - -msgid "Policy" -msgstr "Política" - -msgid "Port" -msgstr "Port" - -msgid "Prev" -msgstr "Anterior" - -msgid "Priority" -msgstr "Prioritat" - -msgid "Reason" -msgstr "Raó" - -msgid "Record Type" -msgstr "Tipus de registre" - -msgid "Refresh" -msgstr "Refresca" - -msgid "Regular Expression" -msgstr "Expressió regular" - -msgid "Rename" +#, fuzzy +msgid "Realm name" msgstr "Canvia el nom" -msgid "Reset" -msgstr "Reinicia" +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" -msgid "Reset Password" -msgstr "Reinicia la contrasenya" +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" -msgid "Restore" -msgstr "Restaura" +#, c-format +msgid "Closing keytab failed\n" +msgstr "" -msgid "Retry" -msgstr "Reintent" +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" -msgid "Revoke" -msgstr "Revoca" +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "" -msgid "Revoked" -msgstr "Revocat" +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "" -msgid "Rights" -msgstr "Drets" +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "" -msgid "Role" -msgstr "Rol" +#, fuzzy, c-format +msgid "Out of memory \n" +msgstr "Sense memòria\n" -msgid "Rules" -msgstr "Regles" +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "" -msgid "SHA1 Fingerprint" -msgstr "Empremta digital SHA1" +msgid "Simple bind failed\n" +msgstr "" -msgid "Search" -msgstr "Cerca" +msgid "SASL Bind failed\n" +msgstr "" -msgid "Select All" -msgstr "Selecciona-ho tot" +#, c-format +msgid "Operation failed: %s\n" +msgstr "" -msgid "Self" -msgstr "Ell mateix" +#, c-format +msgid "Failed to get result: %s\n" +msgstr "" -msgid "Serial Number" -msgstr "Número de sèrie" +#, c-format +msgid "Timeout exceeded." +msgstr "" -msgid "Serial number" -msgstr "Número de sèrie" +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "" -msgid "Server" -msgstr "Servidor" +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "" + +#, c-format +msgid "Missing reply control!\n" +msgstr "" + +#, fuzzy, c-format +msgid "Out of Memory!\n" +msgstr "Sense memòria\n" + +#, c-format +msgid "Failed to create control!\n" +msgstr "" + +#, c-format +msgid "Failed to bind to server!\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab!\n" +msgstr "" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "" + +msgid "Failed to decode control reply!\n" +msgstr "" + +#, fuzzy, c-format +msgid "Passwords do not match!\n" +msgstr "Les contrasenyes no coincideixen" + +#, c-format +msgid "Failed to open config file %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "" + +msgid "Failed to resolve symlink to keytab.\n" +msgstr "" + +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" + +msgid "Print as little as possible" +msgstr "" + +msgid "Output only on errors" +msgstr "" + +msgid "Output debug info" +msgstr "" + +msgid "Contact this specific KDC Server" +msgstr "" msgid "Server Name" msgstr "Nom del servidor" -msgid "Services" -msgstr "Serveis" +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" -msgid "Set" -msgstr "Aplica" +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" -msgid "Settings" -msgstr "Paràmetres" +msgid "Encryption types to request" +msgstr "" -msgid "Show details" -msgstr "Mostra els detalls" +msgid "Comma separated encryption types list" +msgstr "" -msgid "Size" -msgstr "Mida" +msgid "Show the list of permitted encryption types and exit" +msgstr "" -msgid "State/Province" -msgstr "Estat/província" +msgid "Permitted Encryption Types" +msgstr "" -msgid "Status" -msgstr "Estat" +msgid "Asks for a non-random password to use for the principal" +msgstr "" -msgid "Subject" -msgstr "Assumpte" +msgid "LDAP DN" +msgstr "" -msgid "Subtree" -msgstr "Subarbre" +msgid "DN to bind as if not using kerberos" +msgstr "" -msgid "Subtype" -msgstr "Subtipus" - -msgid "Superseded" -msgstr "Substituït" - -msgid "Target" -msgstr "Objectiu" - -msgid "Telephone Number" -msgstr "Número de telèfon" - -msgid "Time now" -msgstr "L'hora actual" - -msgid "True" -msgstr "Cert" - -msgid "Trust" -msgstr "Confiança" - -msgid "Type" -msgstr "Tipus" - -msgid "UID" -msgstr "UID" - -msgid "URL" -msgstr "URL" - -msgid "Unknown" -msgstr "Desconegut" - -msgid "Unknown Error" -msgstr "Error desconegut" - -msgid "Unmatched" -msgstr "No coincideix" - -msgid "Unsaved Changes" -msgstr "Canvis sense desar" - -msgid "Unselect All" -msgstr "No seleccionis res" - -msgid "Unspecified" -msgstr "Sense especificar" - -msgid "Update" -msgstr "Actualització" - -msgid "User" -msgstr "Usuari" - -msgid "User login" -msgstr "Entrada" - -msgid "User name" -msgstr "Nom d'usuari" - -msgid "Username" -msgstr "Nom d'usuari" - -msgid "Users" -msgstr "Usuaris" - -msgid "Validity" -msgstr "Validesa" - -msgid "View" -msgstr "Visualització" - -msgid "Warning" -msgstr "Avís" - -msgid "Weight" -msgstr "Pes" - -msgid "Who" -msgstr "Qui" - -msgid "description" -msgstr "descripció" - -msgid "entry" -msgstr "entrada" - -msgid "filename" -msgstr "nomdelfitxer" - -msgid "group" -msgstr "grup" - -msgid "password" +#, fuzzy +msgid "LDAP password" msgstr "contrasenya" -msgid "permissions" -msgstr "permisos" +msgid "password to use if not using kerberos" +msgstr "" -msgid "seconds" -msgstr "segons" +msgid "Prompt for LDAP password" +msgstr "" -msgid "services" -msgstr "serveis" +msgid "Path to the IPA CA certificate" +msgstr "" -msgid "user" -msgstr "usuari" +#, fuzzy +msgid "IPA CA certificate" +msgstr "Certificat" -msgid "users" -msgstr "usuaris" +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" + +msgid "url" +msgstr "" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" + +msgid "GSSAPI|EXTERNAL" +msgstr "" + +msgid "Retrieve current keys without changing them" +msgstr "" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +#, fuzzy +msgid "Enter LDAP password" +msgstr "Contrasenya nova" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "" + +#, c-format +msgid "DNS discovery for domain %s\n" +msgstr "" + +#, c-format +msgid "Discovered server %s\n" +msgstr "" + +#, c-format +msgid "Using discovered server %s\n" +msgstr "" + +#, c-format +msgid "DNS Discovery failed\n" +msgstr "" + +#, c-format +msgid "Using server from config %s\n" +msgstr "" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "" + +#, c-format +msgid "Using provided server %s\n" +msgstr "" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "" + +#, fuzzy +msgid "New Principal Password" +msgstr "Contrasenya nova" + +msgid "Verify Principal Password" +msgstr "" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" + +#, c-format +msgid "Failed to create key material\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "" #, fuzzy, c-format msgid "Out of memory!\n" @@ -581,9 +456,6 @@ msgstr "Sense memòria\n" msgid "Unable to enable SSL in LDAP\n" msgstr "" -msgid "SASL Bind failed\n" -msgstr "" - #, c-format msgid "Search for %1$s on rootdse failed with error %2$d\n" msgstr "" @@ -780,12 +652,18 @@ msgstr "" msgid "Specifies where to store keytab information." msgstr "" +msgid "filename" +msgstr "nomdelfitxer" + msgid "Force the host join. Rejoin even if already joined." msgstr "" msgid "LDAP password (if not using Kerberos)" msgstr "" +msgid "password" +msgstr "contrasenya" + msgid "LDAP basedn" msgstr "" @@ -804,388 +682,6 @@ msgstr "" msgid "The hostname must not be: %s\n" msgstr "" -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "" - -#, fuzzy, c-format -msgid "Out of memory \n" -msgstr "Sense memòria\n" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "" - -msgid "Simple bind failed\n" -msgstr "" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Out of Memory!\n" -msgstr "Sense memòria\n" - -#, c-format -msgid "Failed to create control!\n" -msgstr "" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "" - -msgid "Failed to decode control reply!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Passwords do not match!\n" -msgstr "Les contrasenyes no coincideixen" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "" - -msgid "Failed to resolve symlink to keytab.\n" -msgstr "" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Output only on errors" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Encryption types to request" -msgstr "" - -msgid "Comma separated encryption types list" -msgstr "" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -msgid "Permitted Encryption Types" -msgstr "" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -msgid "LDAP DN" -msgstr "" - -msgid "DN to bind as if not using kerberos" -msgstr "" - -#, fuzzy -msgid "LDAP password" -msgstr "contrasenya" - -msgid "password to use if not using kerberos" -msgstr "" - -msgid "Prompt for LDAP password" -msgstr "" - -msgid "Path to the IPA CA certificate" -msgstr "" - -#, fuzzy -msgid "IPA CA certificate" -msgstr "Certificat" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -#, fuzzy -msgid "Enter LDAP password" -msgstr "Contrasenya nova" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -#, fuzzy -msgid "New Principal Password" -msgstr "Contrasenya nova" - -msgid "Verify Principal Password" -msgstr "" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, c-format -msgid "Failed to create key material\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "" - -msgid "Print debugging information" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -#, fuzzy -msgid "Realm name" -msgstr "Canvia el nom" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "" - -#, fuzzy, c-format -msgid "out of memory\n" -msgstr "Sense memòria\n" - -#, c-format -msgid "read error\n" -msgstr "" - msgid "Failed members" msgstr "" @@ -1300,134 +796,36 @@ msgstr "" msgid "Skipped %(key)s" msgstr "" +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +#, fuzzy +msgid "Unrevoked" +msgstr "Revocat" + +msgid "Error" +msgstr "Error" + +#, fuzzy +msgid "Input filename" +msgstr "nomdelfitxer" + +msgid "File to load the certificate from." +msgstr "" + +msgid "cannot specify both raw certificate and file" +msgstr "" + msgid "Input file" msgstr "" msgid "File to load the certificate from" msgstr "" -msgid "cannot specify both raw certificate and file" -msgstr "" - #, python-format msgid "Profile configuration stored in file '%(file)s'" msgstr "" -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -#, fuzzy -msgid "Servers details:" -msgstr "Mostra els detalls" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "Add a new YubiKey OTP token." -msgstr "" - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -msgid "Maximum number of agreements per replica" -msgstr "" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -#, fuzzy -msgid "Delete a user" -msgstr "Suprimeix" - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - msgid "Split DNS record to parts" msgstr "" @@ -1493,6 +891,135 @@ msgstr "" msgid "file to store DNS records in nsupdate format" msgstr "" +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "" + +#, fuzzy +msgid "Servers details:" +msgstr "Mostra els detalls" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "" + +#, fuzzy +msgid "User ID" +msgstr "Usuari" + +msgid "Password" +msgstr "Contrasenya" + +#, fuzzy +msgid "First Code" +msgstr "Nom" + +msgid "Second Code" +msgstr "" + +msgid "Token ID" +msgstr "" + +msgid "python-yubico is not installed." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" + +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "Add a new YubiKey OTP token." +msgstr "" + +msgid "YubiKey slot" +msgstr "" + +msgid "No free YubiKey slot!" +msgstr "" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "" + +msgid "Topology is disconnected" +msgstr "" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "" + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "" + +msgid "Maximum number of agreements per replica" +msgstr "" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "" + +#, fuzzy +msgid "Delete a user" +msgstr "Suprimeix" + +msgid "preserve and no-preserve cannot be both set" +msgstr "" + #, python-format msgid "Cannot read file '%(filename)s': %(exc)s" msgstr "" @@ -1501,6 +1028,9 @@ msgstr "" msgid "Cannot decode file '%(filename)s': %(exc)s" msgstr "" +msgid "Invalid credentials" +msgstr "Credencials no vàlides" + msgid "Create a new vault." msgstr "" @@ -1604,51 +1134,29 @@ msgstr "" msgid "File containing the vault private key" msgstr "" +msgid "Data" +msgstr "Dades" + msgid "Private key specified multiple times" msgstr "" msgid "Missing vault private key" msgstr "" -msgid "Write certificate (chain if --chain used) to file" +#, python-format +msgid "Enabled Sudo Rule \"%s\"" msgstr "" -#, fuzzy -msgid "Unrevoked" -msgstr "Revocat" - -#, fuzzy -msgid "Input filename" -msgstr "nomdelfitxer" - -msgid "File to load the certificate from." +#, python-format +msgid "Disabled Sudo Rule \"%s\"" msgstr "" -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" msgstr "" -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -#, fuzzy -msgid "User ID" -msgstr "Usuari" - -#, fuzzy -msgid "First Code" -msgstr "Nom" - -msgid "Second Code" -msgstr "" - -msgid "Token ID" +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" msgstr "" msgid "" @@ -1775,6 +1283,9 @@ msgstr "" msgid "ACI name" msgstr "" +msgid "Permission" +msgstr "Permís" + msgid "Permission ACI grants access to" msgstr "" @@ -1785,12 +1296,21 @@ msgstr "grup" msgid "User group ACI grants access to" msgstr "" +msgid "Permissions" +msgstr "Permisos" + msgid "Permissions to grant(read, write, add, delete, all)" msgstr "" msgid "Attributes to which the permission applies" msgstr "" +msgid "Attributes" +msgstr "Atributs" + +msgid "Type" +msgstr "Tipus" + msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" msgstr "" @@ -1800,9 +1320,15 @@ msgstr "" msgid "Member of a group" msgstr "" +msgid "Filter" +msgstr "Filtre" + msgid "Legal LDAP filter (e.g. ou=Engineering)" msgstr "" +msgid "Subtree" +msgstr "Subarbre" + msgid "Subtree to apply ACI to" msgstr "" @@ -1906,6 +1432,247 @@ msgstr "" msgid "Location of the ACI" msgstr "" +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Description" +msgstr "Descripció" + +msgid "A description of this auto member rule" +msgstr "" + +msgid "Default (fallback) Group" +msgstr "" + +msgid "Default group for entries to land" +msgstr "" + +msgid "Add an automember rule." +msgstr "" + +msgid "Automember Rule" +msgstr "" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +#, fuzzy +msgid "Grouping Type" +msgstr "Nom del grup" + +msgid "Grouping to which the rule applies" +msgstr "" + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +#, fuzzy +msgid "Exclusive Regex" +msgstr "Exclusiu" + +#, fuzzy +msgid "Attribute Key" +msgstr "Atribut" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +msgid "Number of conditions added" +msgstr "" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +msgid "Display information about the default (fallback) automember groups." +msgstr "" + +msgid "Delete an automember rule." +msgstr "" + +msgid "List of deletions that failed" +msgstr "" + +msgid "Search for automember rules." +msgstr "" + +msgid "Modify an automember rule." +msgstr "" + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +msgid "Rights" +msgstr "Drets" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Users" +msgstr "Usuaris" + +msgid "Rebuild membership for specified users" +msgstr "" + +#, fuzzy +msgid "Hosts" +msgstr "Ordinador central" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +msgid "Conditions that could not be removed" +msgstr "" + +msgid "Number of conditions removed" +msgstr "" + +msgid "Display information about an automember rule." +msgstr "" + msgid "" "\n" "Automount\n" @@ -2013,6 +1780,9 @@ msgid "" " ipa automountkey-del baltimore auto.share --key=man\n" msgstr "" +msgid "Key" +msgstr "Tecla" + msgid "Automount key name." msgstr "" @@ -2020,34 +1790,30 @@ msgstr "" msgid "Mount information" msgstr "Confirmació" +msgid "description" +msgstr "descripció" + +msgid "Location" +msgstr "Ubicació" + msgid "Automount location name." msgstr "" +msgid "Map" +msgstr "Mapa" + msgid "Automount map name." msgstr "" msgid "Create a new automount key." msgstr "" -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - msgid "Delete an automount key." msgstr "" msgid "Continuous mode: Don't stop on errors." msgstr "" -msgid "List of deletions that failed" -msgstr "" - msgid "Search for an automount key." msgstr "" @@ -2066,20 +1832,13 @@ msgstr "" msgid "Modify an automount key." msgstr "" -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - #, fuzzy msgid "New mount information" msgstr "Confirmació" +msgid "Rename" +msgstr "Canvia el nom" + msgid "Rename the automount key object" msgstr "" @@ -2110,6 +1869,9 @@ msgstr "" msgid "Create a new indirect mount point." msgstr "" +msgid "Mount point" +msgstr "Punt de muntatge" + msgid "Parent map" msgstr "" @@ -2165,6 +1927,188 @@ msgstr "" msgid "Nested Methods to execute" msgstr "" +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +msgid "Search for existing certificates." +msgstr "" + +msgid "Match cn attribute in subject" +msgstr "" + +msgid "Reason" +msgstr "Raó" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "" + +#, fuzzy +msgid "minimum serial number" +msgstr "Número de sèrie" + +#, fuzzy +msgid "maximum serial number" +msgstr "Número de sèrie" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Maximum number of certs returned" +msgstr "" + +msgid "Take a revoked certificate off hold." +msgstr "" + +msgid "Serial number" +msgstr "Número de sèrie" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +msgid "Submit a certificate signing request." +msgstr "" + +msgid "CSR" +msgstr "" + +msgid "Principal" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +msgid "Dictionary mapping variable name to value" +msgstr "" + +#, fuzzy +msgid "Revoke a certificate." +msgstr "Certificat" + +msgid "Retrieve an existing certificate." +msgstr "" + +#, fuzzy +msgid "Output filename" +msgstr "nomdelfitxer" + +msgid "File to store the certificate in." +msgstr "" + +msgid "Check the status of a certificate signing request." +msgstr "" + +msgid "Request id" +msgstr "" + msgid "" "\n" "Server configuration\n" @@ -2728,6 +2672,9 @@ msgstr "" msgid "A IP Address" msgstr "Adreça IP" +msgid "IP Address" +msgstr "Adreça IP" + msgid "A Create reverse" msgstr "" @@ -2766,10 +2713,16 @@ msgstr "" msgid "AFSDB Subtype" msgstr "Subtipus" +msgid "Subtype" +msgstr "Subtipus" + #, fuzzy msgid "AFSDB Hostname" msgstr "Nom de l'ordinador" +msgid "Hostname" +msgstr "Nom de l'ordinador" + msgid "APL record" msgstr "" @@ -2800,6 +2753,9 @@ msgstr "" msgid "CERT Algorithm" msgstr "Algorisme" +msgid "Algorithm" +msgstr "Algorisme" + #, fuzzy msgid "CERT Certificate/CRL" msgstr "Certificat" @@ -2862,6 +2818,9 @@ msgstr "" msgid "DNAME Target" msgstr "Objectiu" +msgid "Target" +msgstr "Objectiu" + msgid "DNSKEY record" msgstr "" @@ -2987,6 +2946,9 @@ msgstr "" msgid "LOC Size" msgstr "Mida" +msgid "Size" +msgstr "Mida" + msgid "LOC Horizontal Precision" msgstr "" @@ -3036,6 +2998,9 @@ msgstr "" msgid "NAPTR Flags" msgstr "Indicadors" +msgid "Flags" +msgstr "Indicadors" + #, fuzzy msgid "NAPTR Service" msgstr "Serveis" @@ -3048,6 +3013,9 @@ msgstr "Serveis" msgid "NAPTR Regular Expression" msgstr "Expressió regular" +msgid "Regular Expression" +msgstr "Expressió regular" + msgid "NAPTR Replacement" msgstr "" @@ -3124,14 +3092,23 @@ msgstr "" msgid "SRV Priority" msgstr "Prioritat" +msgid "Priority" +msgstr "Prioritat" + #, fuzzy msgid "SRV Weight" msgstr "Pes" +msgid "Weight" +msgstr "Pes" + #, fuzzy msgid "SRV Port" msgstr "Port" +msgid "Port" +msgstr "Port" + #, fuzzy msgid "SRV Target" msgstr "Objectiu" @@ -3163,6 +3140,9 @@ msgstr "Empremta" msgid "SSHFP Fingerprint" msgstr "Empremta digital SHA1" +msgid "Fingerprint" +msgstr "Empremta" + msgid "TA record" msgstr "" @@ -3363,6 +3343,9 @@ msgstr "" msgid "Add new DNS resource record." msgstr "" +msgid "Force" +msgstr "Força" + msgid "force NS record creation even if its hostname is not in DNS" msgstr "" @@ -3432,6 +3415,312 @@ msgstr "" msgid "Display information about a DNS zone (SOA record)." msgstr "" +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "Group name" +msgstr "Nom del grup" + +#, fuzzy +msgid "Group description" +msgstr "descripció" + +#, fuzzy +msgid "GID" +msgstr "UID" + +msgid "GID (use this option to set it manually)" +msgstr "" + +msgid "Member users" +msgstr "" + +msgid "Member groups" +msgstr "" + +msgid "Member of groups" +msgstr "" + +#, fuzzy +msgid "Roles" +msgstr "Rol" + +msgid "Member of netgroups" +msgstr "" + +msgid "Member of Sudo rule" +msgstr "" + +msgid "Member of HBAC rule" +msgstr "" + +msgid "Indirect Member users" +msgstr "" + +msgid "Indirect Member groups" +msgstr "" + +msgid "Indirect Member of group" +msgstr "" + +msgid "Indirect Member of netgroup" +msgstr "" + +msgid "Indirect Member of role" +msgstr "" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +msgid "Create a new group." +msgstr "" + +msgid "Create as a non-POSIX group" +msgstr "" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +msgid "Add members to a group." +msgstr "" + +#, fuzzy +msgid "External member" +msgstr "Extern" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +msgid "member user" +msgstr "" + +msgid "users to add" +msgstr "" + +msgid "member group" +msgstr "" + +msgid "groups to add" +msgstr "" + +msgid "Members that could not be added" +msgstr "" + +msgid "Number of members added" +msgstr "" + +#, fuzzy +msgid "Delete group." +msgstr "Suprimeix" + +msgid "Detach a managed group from a user." +msgstr "" + +msgid "Search for groups." +msgstr "" + +msgid "search for private groups" +msgstr "" + +msgid "search for POSIX groups" +msgstr "" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +msgid "search for non-POSIX groups" +msgstr "" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "user" +msgstr "usuari" + +msgid "Search for groups with these member users." +msgstr "" + +msgid "Search for groups without these member users." +msgstr "" + +msgid "group" +msgstr "grup" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +#, fuzzy +msgid "netgroup" +msgstr "grup" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +msgid "HBAC rule" +msgstr "" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +msgid "Modify a group." +msgstr "" + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +msgid "Remove members from a group." +msgstr "" + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "" + +msgid "Number of members removed" +msgstr "" + +msgid "Display information about a named group." +msgstr "" + msgid "" "\n" "Host-based access control\n" @@ -3513,18 +3802,20 @@ msgstr "" msgid "Service category the rule applies to" msgstr "" +msgid "Enabled" +msgstr "S'ha habilitat" + #, fuzzy msgid "User Groups" msgstr "Grups" -#, fuzzy -msgid "Hosts" -msgstr "Ordinador central" - #, fuzzy msgid "Host Groups" msgstr "Grups" +msgid "Services" +msgstr "Serveis" + #, fuzzy msgid "Service Groups" msgstr "Serveis" @@ -3536,9 +3827,6 @@ msgstr "Extern" msgid "Create a new HBAC rule." msgstr "" -msgid "Suppress processing of membership attributes." -msgstr "" - msgid "Add target hosts and hostgroups to an HBAC rule." msgstr "" @@ -3554,12 +3842,6 @@ msgstr "" msgid "host groups to add" msgstr "" -msgid "Members that could not be added" -msgstr "" - -msgid "Number of members added" -msgstr "" - msgid "Add services to an HBAC rule." msgstr "" @@ -3578,18 +3860,6 @@ msgstr "" msgid "Add users and groups to an HBAC rule." msgstr "" -msgid "member user" -msgstr "" - -msgid "users to add" -msgstr "" - -msgid "member group" -msgstr "" - -msgid "groups to add" -msgstr "" - msgid "Delete an HBAC rule." msgstr "" @@ -3614,12 +3884,6 @@ msgstr "" msgid "host groups to remove" msgstr "" -msgid "Members that could not be removed" -msgstr "" - -msgid "Number of members removed" -msgstr "" - msgid "Remove service and service groups from an HBAC rule." msgstr "" @@ -3632,12 +3896,6 @@ msgstr "" msgid "Remove users and groups from an HBAC rule." msgstr "" -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - msgid "Display the properties of an HBAC rule." msgstr "" @@ -3750,6 +4008,244 @@ msgstr "" msgid "Display information about an HBAC service group." msgstr "" +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +msgid "User name" +msgstr "Nom d'usuari" + +#, fuzzy +msgid "Target host" +msgstr "Objectiu" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +msgid "Warning" +msgstr "Avís" + +#, fuzzy +msgid "Matched rules" +msgstr "Coincideix" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + msgid "" "\n" "Hosts/Machines\n" @@ -3814,18 +4310,30 @@ msgid "" " ipa host-allow-create-keytab test2 --users=tuser1\n" msgstr "" +msgid "Host name" +msgstr "Nom de l'amfitrió" + msgid "A description of this host" msgstr "" +msgid "Locality" +msgstr "Localitat" + msgid "Host locality (e.g. \"Baltimore, MD\")" msgstr "" msgid "Host location (e.g. \"Lab 2\")" msgstr "" +msgid "Platform" +msgstr "Plataforma" + msgid "Host hardware platform (e.g. \"Lenovo T61\")" msgstr "" +msgid "Operating system" +msgstr "Sistema operatiu" + msgid "Host operating system and version (e.g. \"Fedora 9\")" msgstr "" @@ -3843,6 +4351,9 @@ msgstr "" msgid "Random password" msgstr "contrasenya" +msgid "Certificate" +msgstr "Certificat" + msgid "Base-64 encoded server certificate" msgstr "" @@ -3859,6 +4370,9 @@ msgstr "" msgid "SSH public key" msgstr "" +msgid "Class" +msgstr "Classe" + msgid "" "Host category (semantics placed on this attribute are for local " "interpretation)" @@ -3882,34 +4396,9 @@ msgstr "" msgid "Member of host-groups" msgstr "" -#, fuzzy -msgid "Roles" -msgstr "Rol" - -msgid "Member of netgroups" -msgstr "" - -msgid "Member of Sudo rule" -msgstr "" - -msgid "Member of HBAC rule" -msgstr "" - -msgid "Indirect Member of netgroup" -msgstr "" - msgid "Indirect Member of host-group" msgstr "" -msgid "Indirect Member of role" -msgstr "" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - msgid "Keytab" msgstr "" @@ -4003,37 +4492,24 @@ msgstr "" msgid "Search for hosts without these member of host groups." msgstr "" -#, fuzzy -msgid "netgroup" -msgstr "grup" - msgid "Search for hosts with these member of netgroups." msgstr "" msgid "Search for hosts without these member of netgroups." msgstr "" -msgid "role" -msgstr "" - msgid "Search for hosts with these member of roles." msgstr "" msgid "Search for hosts without these member of roles." msgstr "" -msgid "HBAC rule" -msgstr "" - msgid "Search for hosts with these member of HBAC rules." msgstr "" msgid "Search for hosts without these member of HBAC rules." msgstr "" -msgid "sudo rule" -msgstr "" - msgid "Search for hosts with these member of sudo rules." msgstr "" @@ -4192,6 +4668,232 @@ msgstr "" msgid "Display information about a hostgroup." msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +#, fuzzy +msgid "Range name" +msgstr "Canvia el nom" + +msgid "First Posix ID of the range" +msgstr "" + +msgid "Number of IDs in the range" +msgstr "" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +msgid "Range type" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "Delete an ID range." +msgstr "" + +msgid "Search for ranges." +msgstr "" + +msgid "Modify ID range." +msgstr "" + +msgid "Display information about a range." +msgstr "" + msgid "" "\n" "ID Views\n" @@ -4208,14 +4910,16 @@ msgstr "" msgid "Anchor to override" msgstr "" -#, fuzzy -msgid "GID" -msgstr "UID" - #, fuzzy msgid "Group ID Number" msgstr "Nom del grup" +msgid "User login" +msgstr "Entrada" + +msgid "UID" +msgstr "UID" + #, fuzzy msgid "User ID Number" msgstr "Número de buscapersones" @@ -4223,6 +4927,12 @@ msgstr "Número de buscapersones" msgid "GECOS" msgstr "" +msgid "Home directory" +msgstr "Directori de l'usuari" + +msgid "Login shell" +msgstr "Shell d'inici de sessió" + msgid "ID View Name" msgstr "" @@ -4627,6 +5337,9 @@ msgid "" "RFC2307bis. The default is RFC2307bis" msgstr "" +msgid "Continue" +msgstr "Continua" + msgid "" "Continuous operation mode. Errors are reported but the process continues" msgstr "" @@ -4683,9 +5396,6 @@ msgid "" "retrieve and print all attributes from the server. Affects command output." msgstr "" -msgid "Dictionary mapping variable name to value" -msgstr "" - msgid "Total number of variables env (>= count)" msgstr "" @@ -4726,6 +5436,9 @@ msgid "" " ipa netgroup-del admins\n" msgstr "" +msgid "Netgroup name" +msgstr "Nom de grup de xarxa" + #, fuzzy msgid "Netgroup description" msgstr "descripció" @@ -4882,6 +5595,151 @@ msgstr "" msgid "Show the current OTP configuration." msgstr "" +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Manager" +msgstr "Gestor" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +msgid "Disabled" +msgstr "Inhabilitat" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +#, fuzzy +msgid "Validity start" +msgstr "Validesa" + +msgid "First date/time the token can be used" +msgstr "" + +#, fuzzy +msgid "Validity end" +msgstr "Validesa" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "" + +msgid "Token model (informational only)" +msgstr "" + +#, fuzzy +msgid "Serial" +msgstr "Número de sèrie" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +msgid "Add a new OTP token." +msgstr "" + +msgid "(deprecated)" +msgstr "" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +msgid "Delete an OTP token." +msgstr "" + +msgid "Search for OTP token." +msgstr "" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +msgid "Modify a OTP token." +msgstr "" + +msgid "Rename the OTP token object" +msgstr "" + +msgid "Display information about an OTP token." +msgstr "" + msgid "" "\n" "YubiKey Tokens\n" @@ -4921,6 +5779,9 @@ msgstr "" msgid "Set a user's password." msgstr "Reinicia la contrasenya" +msgid "New Password" +msgstr "Contrasenya nova" + #, fuzzy msgid "Current Password" msgstr "Reinicia la contrasenya" @@ -5248,6 +6109,9 @@ msgstr "" msgid "permission" msgstr "permisos" +msgid "permissions" +msgstr "permisos" + msgid "Number of permissions added" msgstr "" @@ -5323,6 +6187,9 @@ msgid "" " ipa pwpolicy-mod --minclasses=2 localadmins\n" msgstr "" +msgid "Group" +msgstr "Grup" + msgid "Manage password policy for specific group" msgstr "" @@ -5399,6 +6266,9 @@ msgstr "" msgid "Display information about password policy." msgstr "" +msgid "User" +msgstr "Usuari" + msgid "Display effective policy for a specific user" msgstr "" @@ -5436,6 +6306,9 @@ msgstr "" msgid "A description of this RADIUS proxy server" msgstr "" +msgid "Server" +msgstr "Servidor" + msgid "The hostname or IP (with or without port)" msgstr "" @@ -5506,6 +6379,9 @@ msgid "" " ipa realmdomains-mod --del-domain=olddomain.com\n" msgstr "" +msgid "Domain" +msgstr "Domini" + #, fuzzy msgid "Add domain" msgstr "Domini" @@ -5568,12 +6444,6 @@ msgstr "Canvia el nom" msgid "A description of this role-group" msgstr "" -msgid "Member users" -msgstr "" - -msgid "Member groups" -msgstr "" - msgid "Privileges" msgstr "" @@ -5846,9 +6716,6 @@ msgid "" "httpd.keytab\n" msgstr "" -msgid "Principal" -msgstr "" - msgid "Service principal" msgstr "" @@ -6584,9 +7451,8 @@ msgstr "" msgid "Sudo Command Group" msgstr "" -#, fuzzy -msgid "Group description" -msgstr "descripció" +msgid "Commands" +msgstr "Ordres" msgid "Member Sudo commands" msgstr "" @@ -6625,1658 +7491,6 @@ msgstr "" msgid "Display Sudo Command Group." msgstr "" -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -#, fuzzy -msgid "Display name" -msgstr "Nom" - -msgid "Kerberos principal" -msgstr "" - -msgid "Kerberos principal expiration" -msgstr "" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -msgid "Street address" -msgstr "" - -msgid "ZIP" -msgstr "" - -#, fuzzy -msgid "Mobile Telephone Number" -msgstr "Número de telèfon" - -msgid "Org. Unit" -msgstr "" - -msgid "Car License" -msgstr "" - -#, fuzzy -msgid "Account disabled" -msgstr "Paràmetres dels comptes" - -msgid "User authentication types" -msgstr "" - -msgid "Types of supported user authentication" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -#, fuzzy -msgid "RADIUS proxy configuration" -msgstr "Configuració" - -msgid "RADIUS proxy username" -msgstr "" - -#, fuzzy -msgid "Department Number" -msgstr "Número de buscapersones" - -#, fuzzy -msgid "Employee Number" -msgstr "Número de telèfon" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -msgid "Member of groups" -msgstr "" - -msgid "Indirect Member of group" -msgstr "" - -msgid "Kerberos keys available" -msgstr "" - -msgid "Add a new user." -msgstr "" - -msgid "Don't create user private group" -msgstr "" - -#, fuzzy -msgid "Delete a user." -msgstr "Suprimeix" - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -msgid "Search for users." -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -msgid "Modify a user." -msgstr "" - -msgid "Rename the user object" -msgstr "" - -msgid "Display information about a user." -msgstr "" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "A description of this auto member rule" -msgstr "" - -msgid "Default (fallback) Group" -msgstr "" - -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -msgid "Automember Rule" -msgstr "" - -#, fuzzy -msgid "Grouping Type" -msgstr "Nom del grup" - -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -#, fuzzy -msgid "Exclusive Regex" -msgstr "Exclusiu" - -#, fuzzy -msgid "Attribute Key" -msgstr "Atribut" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -msgid "Delete an automember rule." -msgstr "" - -msgid "Search for automember rules." -msgstr "" - -msgid "Modify an automember rule." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -msgid "Number of conditions removed" -msgstr "" - -msgid "Display information about an automember rule." -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -msgid "Search for existing certificates." -msgstr "" - -msgid "Match cn attribute in subject" -msgstr "" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -#, fuzzy -msgid "minimum serial number" -msgstr "Número de sèrie" - -#, fuzzy -msgid "maximum serial number" -msgstr "Número de sèrie" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -msgid "Submit a certificate signing request." -msgstr "" - -msgid "CSR" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -#, fuzzy -msgid "Revoke a certificate." -msgstr "Certificat" - -msgid "Retrieve an existing certificate." -msgstr "" - -#, fuzzy -msgid "Output filename" -msgstr "nomdelfitxer" - -msgid "File to store the certificate in." -msgstr "" - -msgid "Check the status of a certificate signing request." -msgstr "" - -msgid "Request id" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "GID (use this option to set it manually)" -msgstr "" - -msgid "Indirect Member users" -msgstr "" - -msgid "Indirect Member groups" -msgstr "" - -msgid "Create a new group." -msgstr "" - -msgid "Create as a non-POSIX group" -msgstr "" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Add members to a group." -msgstr "" - -#, fuzzy -msgid "External member" -msgstr "Extern" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -#, fuzzy -msgid "Delete group." -msgstr "Suprimeix" - -msgid "Detach a managed group from a user." -msgstr "" - -msgid "Search for groups." -msgstr "" - -msgid "search for private groups" -msgstr "" - -msgid "search for POSIX groups" -msgstr "" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -msgid "search for non-POSIX groups" -msgstr "" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "Modify a group." -msgstr "" - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -msgid "Remove members from a group." -msgstr "" - -msgid "Display information about a named group." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -#, fuzzy -msgid "Target host" -msgstr "Objectiu" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -#, fuzzy -msgid "Matched rules" -msgstr "Coincideix" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -#, fuzzy -msgid "NetBIOS name" -msgstr "Nom de grup de xarxa" - -#, fuzzy -msgid "Domain GUID" -msgstr "Domini" - -msgid "Fallback primary group" -msgstr "" - -#, fuzzy -msgid "Domain name" -msgstr "Domini" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -#, fuzzy -msgid "Active Directory domain administrator" -msgstr "Domini d'Active Directory" - -#, fuzzy -msgid "Active Directory domain administrator's password" -msgstr "Domini d'Active Directory" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "Range type" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -msgid "Delete a trust." -msgstr "" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -msgid "Search for trusts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -msgid "Display information about a trust." -msgstr "" - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -#, fuzzy -msgid "Range name" -msgstr "Canvia el nom" - -msgid "First Posix ID of the range" -msgstr "" - -msgid "Number of IDs in the range" -msgstr "" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "Delete an ID range." -msgstr "" - -msgid "Search for ranges." -msgstr "" - -msgid "Modify ID range." -msgstr "" - -msgid "Display information about a range." -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -#, fuzzy -msgid "Validity start" -msgstr "Validesa" - -msgid "First date/time the token can be used" -msgstr "" - -#, fuzzy -msgid "Validity end" -msgstr "Validesa" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -#, fuzzy -msgid "Serial" -msgstr "Número de sèrie" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -msgid "Add a new OTP token." -msgstr "" - -msgid "(deprecated)" -msgstr "" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -msgid "Delete an OTP token." -msgstr "" - -msgid "Search for OTP token." -msgstr "" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -msgid "Modify a OTP token." -msgstr "" - -msgid "Rename the OTP token object" -msgstr "" - -msgid "Display information about an OTP token." -msgstr "" - msgid "" "\n" "Sudo Rules\n" @@ -8493,6 +7707,510 @@ msgstr "" msgid "Display Sudo Rule." msgstr "" +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +#, fuzzy +msgid "NetBIOS name" +msgstr "Nom de grup de xarxa" + +#, fuzzy +msgid "Domain GUID" +msgstr "Domini" + +msgid "Fallback primary group" +msgstr "" + +#, fuzzy +msgid "Domain name" +msgstr "Domini" + +msgid "Trusted domain partner" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +#, fuzzy +msgid "Active Directory domain administrator" +msgstr "Domini d'Active Directory" + +#, fuzzy +msgid "Active Directory domain administrator's password" +msgstr "Domini d'Active Directory" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +msgid "Delete a trust." +msgstr "" + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +msgid "Search for trusts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +msgid "Display information about a trust." +msgstr "" + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "Nom" + +msgid "Last name" +msgstr "Cognom" + +msgid "Full name" +msgstr "Nom complet" + +#, fuzzy +msgid "Display name" +msgstr "Nom" + +msgid "Initials" +msgstr "Inicials" + +msgid "Kerberos principal" +msgstr "" + +msgid "Kerberos principal expiration" +msgstr "" + +msgid "Email address" +msgstr "Adreça de correu electrònic" + +msgid "Prompt to set the user password" +msgstr "" + +msgid "Generate a random user password" +msgstr "" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" + +msgid "Street address" +msgstr "" + +msgid "City" +msgstr "Ciutat" + +msgid "State/Province" +msgstr "Estat/província" + +msgid "ZIP" +msgstr "" + +msgid "Telephone Number" +msgstr "Número de telèfon" + +#, fuzzy +msgid "Mobile Telephone Number" +msgstr "Número de telèfon" + +msgid "Pager Number" +msgstr "Número de buscapersones" + +msgid "Fax Number" +msgstr "Número de fax" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "Càrrec" + +msgid "Car License" +msgstr "" + +#, fuzzy +msgid "Account disabled" +msgstr "Paràmetres dels comptes" + +msgid "User authentication types" +msgstr "" + +msgid "Types of supported user authentication" +msgstr "" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +#, fuzzy +msgid "RADIUS proxy configuration" +msgstr "Configuració" + +msgid "RADIUS proxy username" +msgstr "" + +#, fuzzy +msgid "Department Number" +msgstr "Número de buscapersones" + +#, fuzzy +msgid "Employee Number" +msgstr "Número de telèfon" + +msgid "Employee Type" +msgstr "" + +msgid "Preferred Language" +msgstr "" + +msgid "Kerberos keys available" +msgstr "" + +msgid "Add a new user." +msgstr "" + +msgid "Don't create user private group" +msgstr "" + +#, fuzzy +msgid "Delete a user." +msgstr "Suprimeix" + +msgid "Disable a user account." +msgstr "" + +msgid "Enable a user account." +msgstr "" + +msgid "Search for users." +msgstr "" + +msgid "Self" +msgstr "Ell mateix" + +msgid "Display user record for current Kerberos principal" +msgstr "" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +msgid "Search for users with these member of HBAC rules." +msgstr "" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +msgid "Modify a user." +msgstr "" + +msgid "Rename the user object" +msgstr "" + +msgid "Display information about a user." +msgstr "" + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + msgid "Time limit of search in seconds (0 is unlimited)" msgstr "" @@ -8613,6 +8331,114 @@ msgstr "" msgid "Display the properties of a CA ACL." msgstr "" +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "Profile ID" +msgstr "" + +#, fuzzy +msgid "Certificate Profile to use" +msgstr "Retenció del certificat" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +#, fuzzy +msgid "Profile description" +msgstr "descripció" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +#, fuzzy +msgid "Delete a Certificate Profile." +msgstr "Retenció del certificat" + +msgid "Search for Certificate Profiles." +msgstr "" + +#, fuzzy +msgid "Import a Certificate Profile." +msgstr "Retenció del certificat" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" msgstr "" @@ -8643,6 +8469,218 @@ msgstr "" msgid "Remove certificates from host entry" msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + msgid "Fallback to AD DC LDAP" msgstr "" @@ -8671,6 +8709,9 @@ msgid "" "to onelevel" msgstr "" +msgid "Remove users that can manage this token." +msgstr "" + msgid "Target DN subtree" msgstr "" @@ -9109,6 +9150,13 @@ msgid "" " " msgstr "" +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + msgid "Preserved user" msgstr "" @@ -9408,336 +9456,6 @@ msgstr "" msgid "Display information about a vault container." msgstr "" -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "Profile ID" -msgstr "" - -#, fuzzy -msgid "Certificate Profile to use" -msgstr "Retenció del certificat" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -#, fuzzy -msgid "Profile description" -msgstr "descripció" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -#, fuzzy -msgid "Delete a Certificate Profile." -msgstr "Retenció del certificat" - -msgid "Search for Certificate Profiles." -msgstr "" - -#, fuzzy -msgid "Import a Certificate Profile." -msgstr "Retenció del certificat" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - msgid "Resolve a host name in DNS. (Deprecated)" msgstr "" @@ -10976,6 +10694,9 @@ msgstr "" msgid "Register to the entitlement system." msgstr "" +msgid "Username" +msgstr "Nom d'usuari" + #, fuzzy msgid "Enrollment UUID (not implemented)" msgstr "No s'ha implementat l'ordre" @@ -11425,6 +11146,192 @@ msgid "" " ipa hostgroup-del baltimore\n" msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + msgid "" "Comma-separated list of objectclasses used to search for user entries in DS" msgstr "" @@ -11732,199 +11639,6 @@ msgstr "" msgid "comma-separated list of sudo commands to remove" msgstr "" -#, fuzzy -msgid "Active directory domain administrator's password" -msgstr "Domini d'Active Directory" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - msgid "" "\n" "Sudo Rules\n" @@ -11966,13 +11680,11 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" -msgid "A dictionary representing an LDAP entry" -msgstr "" +#, fuzzy +msgid "Active directory domain administrator's password" +msgstr "Domini d'Active Directory" -msgid "A list of LDAP entries" -msgstr "" - -msgid "All commands should at least have a result" +msgid "GECOS field" msgstr "" #, python-format @@ -12019,276 +11731,6 @@ msgstr "" msgid "No file to read" msgstr "" -#, python-format -msgid "%(filename)s: file not found" -msgstr "" - -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -msgid "Filename is empty" -msgstr "" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "" - -msgid "empty DNS label" -msgstr "" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "" - -msgid "cannot be longer that {} characters" -msgstr "" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "" - -msgid "invalid SSH public key" -msgstr "" - -msgid "options are not allowed" -msgstr "" - -msgid "invalid hostmask" -msgstr "" - -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" - -msgid "invalid escape code in domain name" -msgstr "" - -msgid "domain name cannot be longer than 255 characters" -msgstr "" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "" - -msgid "invalid domain name" -msgstr "" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -msgid "invalid IP address format" -msgstr "" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" - -msgid "Additional instructions:" -msgstr "" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "" - -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." -msgstr "" - #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" @@ -12397,6 +11839,12 @@ msgstr "" msgid "api has no such namespace: '%(name)s'" msgstr "" +msgid "Passwords do not match" +msgstr "Les contrasenyes no coincideixen" + +msgid "Command not implemented" +msgstr "No s'ha implementat l'ordre" + msgid "Client is not configured. Run ipa-client-install." msgstr "" @@ -12639,6 +12087,192 @@ msgid "" "prevents a trust to '%(conflict)s'" msgstr "" +msgid "Results are truncated, try a more specific search" +msgstr "" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "" + +msgid "Client version. Used to determine if server will accept request." +msgstr "" + +msgid "Additional instructions:" +msgstr "" + +#, python-format +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" + +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "%(line)s" +msgstr "" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "" + +#, python-format +msgid "%(count)d variables" +msgstr "" + +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "" +msgstr[1] "" + +msgid "A dictionary representing an LDAP entry" +msgstr "" + +msgid "A list of LDAP entries" +msgstr "" + +msgid "All commands should at least have a result" +msgstr "" + msgid "incorrect type" msgstr "" @@ -12772,27 +12406,116 @@ msgid "Service principal is required" msgstr "" #, python-format -msgid "%(count)d variables" +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +msgid "any of the configured servers" +msgstr "" + +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" msgstr "" #, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "" -msgstr[1] "" +msgid "Permission denied: %(file)s" +msgstr "" -msgid "Results are truncated, try a more specific search" +msgid "empty DNS label" +msgstr "" + +msgid "DNS label cannot be longer that 63 characters" msgstr "" #, python-format -msgid "Unknown option: %(option)s" +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" msgstr "" -msgid "Client version. Used to determine if server will accept request." +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "" + +msgid "cannot be longer that {} characters" +msgstr "" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "" + +msgid "invalid SSH public key" +msgstr "" + +msgid "options are not allowed" +msgstr "" + +msgid "invalid hostmask" msgstr "" #, python-format -msgid "objectclass %s not found" +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +msgid "invalid escape code in domain name" +msgstr "" + +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +msgid "invalid domain name" +msgstr "" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +msgid "invalid IP address format" +msgstr "" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" #, python-format @@ -12812,5922 +12535,52 @@ msgid "Retrieving CA status failed with status %d" msgstr "" #, python-format -msgid "Unable to communicate with CMS (status %d)" +msgid "objectclass %s not found" +msgstr "" + +msgid "Trusting forest" +msgstr "" + +msgid "Trusted forest" +msgstr "" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +msgid "Unknown" +msgstr "Desconegut" + +#, fuzzy +msgid "Non-Active Directory domain" +msgstr "Domini d'Active Directory" + +msgid "Active Directory domain" +msgstr "Domini d'Active Directory" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" msgstr "" #, python-format -msgid "Replication agreement for %(hostname)s not found" +msgid "Unable to communicate with CMS (status %d)" msgstr "" msgid "Failed to authenticate to CA REST API" msgstr "" -msgid "One time password commands" -msgstr "" - -#, fuzzy -msgid "OTP configuration options" -msgstr "Configuració" - -#, fuzzy -msgid "OTP Configuration" -msgstr "Configuració" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -#, fuzzy -msgid "server role" -msgstr "Nom del servidor" - -#, fuzzy -msgid "server roles" -msgstr "Nom del servidor" - -msgid "IPA Server Roles" -msgstr "" - -#, fuzzy -msgid "IPA Server Role" -msgstr "Nom del servidor" - -msgid "IPA server role name" -msgstr "" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include IPA master entries" -msgstr "" - -msgid "roles" -msgstr "" - -#, fuzzy -msgid "IPA role name" -msgstr "Nom del grup" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -#, fuzzy -msgid "password policy" -msgstr "contrasenya" - -#, fuzzy -msgid "password policies" -msgstr "contrasenya" - -#, fuzzy -msgid "Password Policies" -msgstr "Contrasenya" - -#, fuzzy -msgid "Password Policy" -msgstr "Contrasenya" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -#, fuzzy -msgid "User check" -msgstr "Nom d'usuari" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -#, fuzzy -msgid "Realm Domains" -msgstr "Domini" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -#, fuzzy -msgid "Name" -msgstr "Nom de l'ordinador" - -#, fuzzy -msgid "Documentation" -msgstr "Ubicació" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -msgid "Help topic" -msgstr "" - -#, fuzzy -msgid "Version" -msgstr "Permís" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -msgid "Method name" -msgstr "Nom de grup de xarxa" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -msgid "Search for classes." -msgstr "" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -msgid "CLI name" -msgstr "Cognom" - -#, fuzzy -msgid "Confirm (password)" -msgstr "contrasenya" - -msgid "Default" -msgstr "" - -msgid "Default from" -msgstr "" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -#, fuzzy -msgid "Option group" -msgstr "Opcions" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command output." -msgstr "" - -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" -msgstr "" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" - -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -msgid "Malformed principal" -msgstr "" - -msgid "{} is required by the IPA master" -msgstr "" - -#, fuzzy -msgid "service" -msgstr "serveis" - -msgid "Principal alias" -msgstr "" - -msgid "Service principal alias" -msgstr "" - -msgid "Base-64 encoded service certificate" -msgstr "" - -#, fuzzy -msgid "Serial Number (hex)" -msgstr "Número de sèrie" - -#, fuzzy -msgid "Fingerprint (SHA1)" -msgstr "Empremta" - -#, fuzzy -msgid "Fingerprint (SHA256)" -msgstr "Empremta" - -msgid "Revocation reason" -msgstr "" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "" - -msgid "Add a new IPA service." -msgstr "" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "" - -msgid "force principal name even if host not in DNS" -msgstr "" - -msgid "Skip host check" -msgstr "" - -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "" - -msgid "Add a new SMB service." -msgstr "" - -msgid "SMB service NetBIOS name" -msgstr "" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to a service" -msgstr "" - -#, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a service" -msgstr "" - -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -#, fuzzy -msgid "Sudo Rules" -msgstr "Regles" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -#, fuzzy -msgid "command" -msgstr "Ordres" - -#, fuzzy -msgid "commands" -msgstr "Ordres" - -msgid "runAs user" -msgstr "" - -#, fuzzy -msgid "runAs users" -msgstr "usuaris" - -#, fuzzy -msgid "group runAs" -msgstr "grup" - -msgid "runAs groups" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when user category='all'" -msgstr "" - -msgid "hosts cannot be added when host category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -msgid "pyhbac is not installed." -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -#, fuzzy -msgid " * 0 - unspecified\n" -msgstr "Sense especificar" - -#, fuzzy -msgid " * 1 - keyCompromise\n" -msgstr "Clau en compromís" - -#, fuzzy -msgid " * 2 - cACompromise\n" -msgstr "CA en compromís" - -#, fuzzy -msgid " * 3 - affiliationChanged\n" -msgstr "L'afiliació ha canviat" - -msgid " * 4 - superseded\n" -msgstr "" - -#, fuzzy -msgid " * 5 - cessationOfOperation\n" -msgstr "Cessació de l'operació" - -#, fuzzy -msgid " * 6 - certificateHold\n" -msgstr "Retenció del certificat" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Base-64 encoded certificate." -msgstr "" - -#, fuzzy -msgid "Certificate chain" -msgstr "Certificat" - -msgid "X.509 certificate chain" -msgstr "" - -#, fuzzy -msgid "Subject email address" -msgstr "Adreça de correu electrònic" - -#, fuzzy -msgid "Subject DNS name" -msgstr "Assumpte" - -msgid "Subject X.400 address" -msgstr "" - -#, fuzzy -msgid "Subject directory name" -msgstr "Directori de l'usuari" - -msgid "Subject EDI Party name" -msgstr "" - -#, fuzzy -msgid "Subject URI" -msgstr "Assumpte" - -#, fuzzy -msgid "Subject IP Address" -msgstr "Adreça IP" - -#, fuzzy -msgid "Subject OID" -msgstr "Assumpte" - -#, fuzzy -msgid "Subject UPN" -msgstr "Assumpte" - -msgid "Subject Kerberos principal name" -msgstr "" - -#, fuzzy -msgid "Subject Other Name" -msgstr "Nom del servidor" - -#, fuzzy -msgid "Issuer DN" -msgstr "Emissor" - -#, fuzzy -msgid "Serial number (hex)" -msgstr "Número de sèrie" - -msgid "Request status" -msgstr "" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -msgid "'add' option" -msgstr "" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, fuzzy -msgid "domain" -msgstr "Domini" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -#, fuzzy -msgid "Matching rule" -msgstr "Coincideix" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -#, fuzzy -msgid "User logins" -msgstr "Entrada" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Base-64 encoded user certificate" -msgstr "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "must be at least 10" -msgstr "" - -#, fuzzy -msgid "configuration options" -msgstr "Configuració" - -msgid "Maximum hostname length" -msgstr "" - -msgid "IPA masters" -msgstr "" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -msgid "IPA CA servers" -msgstr "" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA KRA servers" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" - -msgid "Domain resolution order" -msgstr "" - -msgid "colon-separated list of domains used for short name qualification" -msgstr "" - -msgid "IPA DNS servers" -msgstr "" - -msgid "IPA servers configured as domain name server" -msgstr "" - -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "IPA DNSSec key master" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -msgid "Empty domain is not allowed" -msgstr "" - -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -msgid "The group doesn't exist" -msgstr "" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" - -msgid "SELinux user map default user not in order list" -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "" - -msgid "sudo command groups" -msgstr "" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -#, fuzzy -msgid "host groups" -msgstr "grup" - -#, fuzzy -msgid "Host Group" -msgstr "Grup" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "hostgroup" -msgstr "grup" - -msgid "privileged hostgroup" -msgstr "" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "The OTP if the user has a token configured" -msgstr "" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Permissions\n" -msgstr "Permisos" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Managed permissions\n" -msgstr "permisos" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "must be enclosed in parentheses" -msgstr "" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -#, python-format -msgid "Deprecated; use %s" -msgstr "" - -msgid "ACI" -msgstr "" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, python-format -msgid "Entry %s not found" -msgstr "" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, python-format -msgid "%s: group not found" -msgstr "" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" -msgstr "" - -msgid "Bad search filter" -msgstr "" - -#, python-format -msgid "Entry %s does not exist" -msgstr "" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, python-format -msgid "Added permission \"%(value)s\"" -msgstr "" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "" - -msgid "cannot delete managed permissions" -msgstr "" - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "" - -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "" -msgstr[1] "" - -#, python-brace-format -msgid "{role}: role not found" -msgstr "" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -msgid "Internationalization messages" -msgstr "" - -msgid "Your session has expired. Please log in again." -msgstr "" - -msgid "Rebuild auto membership" -msgstr "" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -msgid "Are you sure you want to proceed with the action?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) added" -msgstr "" - -msgid "Direct Membership" -msgstr "" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "" - -msgid "Indirect Membership" -msgstr "" - -msgid "No entries." -msgstr "" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "" - -msgid "Remove" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "" - -#, fuzzy -msgid "Show Results" -msgstr "Mostra els detalls" - -msgid "Authentication indicators" -msgstr "" - -msgid "Authentication indicator" -msgstr "" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "Add Custom Authentication Indicator" -msgstr "" - -msgid "Two factor authentication (password + OTP)" -msgstr "" - -msgid "RADIUS" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -msgid "Disable per-user override" -msgstr "" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "About" -msgstr "" - -msgid "Activate" -msgstr "" - -msgid "Add and Add Another" -msgstr "" - -msgid "Add and Close" -msgstr "" - -msgid "Add and Edit" -msgstr "" - -msgid "Add Many" -msgstr "" - -msgid "Clear" -msgstr "" - -msgid "Clear all fields on the page." -msgstr "" - -msgid "Download" -msgstr "" - -msgid "Download certificate as PEM formatted file." -msgstr "" - -#, fuzzy -msgid "Get" -msgstr "Aplica" - -msgid "Hide" -msgstr "" - -#, fuzzy -msgid "Issue" -msgstr "Emissor" - -#, fuzzy -msgid "Match" -msgstr "Coincideix" - -msgid "Match users according to certificate." -msgstr "" - -msgid "Migrate" -msgstr "" - -msgid "Reload current settings from the server." -msgstr "" - -msgid "Remove hold" -msgstr "" - -#, fuzzy -msgid "Reset Password and Log in" -msgstr "Reinicia la contrasenya" - -msgid "Revert" -msgstr "" - -msgid "Save" -msgstr "" - -msgid "Show" -msgstr "" - -msgid "Stage" -msgstr "" - -#, fuzzy -msgid "Customization" -msgstr "Confirmació" - -msgid "Pagination Size" -msgstr "" - -msgid "Collapse All" -msgstr "" - -msgid "Expand All" -msgstr "" - -#, fuzzy -msgid "Record Settings" -msgstr "Paràmetres dels comptes" - -#, fuzzy, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "Paràmetres de la identitat" - -msgid "Back to Top" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "" - -msgid "Add custom value" -msgstr "" - -msgid "Some operations failed." -msgstr "" - -#, fuzzy -msgid "Operations Error" -msgstr "Opcions" - -msgid "Custom value" -msgstr "" - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" - -#, fuzzy, python-brace-format -msgid "Edit ${entity}" -msgstr "Identitat" - -#, fuzzy -msgid "Hide details" -msgstr "Mostra els detalls" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "" - -msgid "Prospective" -msgstr "" - -#, fuzzy -msgid "Redirection" -msgstr "Directori de l'usuari" - -msgid "Select entries to be removed." -msgstr "" - -msgid "Result" -msgstr "" - -msgid "Success" -msgstr "" - -msgid "Validation error" -msgstr "" - -msgid "Input form contains invalid or missing values." -msgstr "" - -msgid "Please try the following options:" -msgstr "" - -msgid "If the problem persists please contact the system administrator." -msgstr "" - -msgid "Refresh the page." -msgstr "" - -msgid "Reload the browser." -msgstr "" - -msgid "Return to the main page and retry the operation" -msgstr "" - -#, python-brace-format -msgid "An error has occurred (${error})" -msgstr "" - -#, fuzzy -msgid "HTTP Error" -msgstr "Error" - -msgid "Internal Error" -msgstr "" - -#, fuzzy -msgid "IPA Error" -msgstr "Error" - -msgid "No response" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} member managers:" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Allowed to create keytab" -msgstr "" - -msgid "Allowed to retrieve keytab" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Add Kerberos Principal Alias" -msgstr "" - -msgid "New kerberos principal alias" -msgstr "" - -msgid "Remove Kerberos Alias" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "" - -msgid "Inherited from server configuration" -msgstr "" - -msgid "MS-PAC" -msgstr "" - -msgid "Override inherited settings" -msgstr "" - -msgid "PAD" -msgstr "" - -#, fuzzy -msgid "Authenticating" -msgstr "Paràmetres dels comptes" - -msgid "Authentication with personal certificate failed" -msgstr "" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" - -msgid "Continue to next page" -msgstr "" - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" - -msgid "Login failed due to an unknown reason" -msgstr "" - -msgid "Logged In As" -msgstr "" - -msgid "Authentication with Kerberos failed" -msgstr "" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -msgid "Loading" -msgstr "" - -msgid "Kerberos Principal you entered is expired" -msgstr "" - -msgid "Loading data" -msgstr "" - -msgid "Log in" -msgstr "" - -#, fuzzy -msgid "Log In Using Certificate" -msgstr "Certificat" - -msgid "Log in using personal certificate" -msgstr "" - -msgid "Log out" -msgstr "" - -msgid "Log out error" -msgstr "" - -msgid "Password or Password+One-Time Password" -msgstr "" - -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "" - -msgid "Sync OTP Token" -msgstr "" - -msgid "Synchronizing" -msgstr "" - -msgid "The user account you entered is locked" -msgstr "" - -msgid "number of passwords" -msgstr "" - -#, fuzzy -msgid "Migrating" -msgstr "Configuració" - -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -msgid "Password migration was not successful" -msgstr "" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -msgid "The password or username you entered is incorrect" -msgstr "" - -msgid "Password migration was successful" -msgstr "" - -msgid "Add delegation" -msgstr "" - -msgid "Remove delegations" -msgstr "" - -#, fuzzy -msgid "Add permission" -msgstr "permisos" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove permissions" -msgstr "permisos" - -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "" - -msgid "Add privilege" -msgstr "" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -msgid "Remove privileges" -msgstr "" - -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "" - -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Role Settings" -msgstr "Paràmetres" - -msgid "Add role" -msgstr "" - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "" - -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -msgid "Remove roles" -msgstr "" - -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "" - -msgid "Add self service permission" -msgstr "" - -msgid "Remove self service permissions" -msgstr "" - -msgid "Add rule" -msgstr "" - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to change default group?" -msgstr "" - -msgid "Default host group" -msgstr "" - -msgid "Default user group" -msgstr "" - -msgid "Host group rule" -msgstr "" - -msgid "Host group rules" -msgstr "" - -#, fuzzy -msgid "Inclusive" -msgstr "Exclusiu" - -msgid "Remove auto membership rules" -msgstr "" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -msgid "User group rule" -msgstr "" - -msgid "User group rules" -msgstr "" - -msgid "Add automount key" -msgstr "" - -msgid "Remove automount keys" -msgstr "" - -msgid "Add automount location" -msgstr "" - -#, fuzzy -msgid "Automount Location Settings" -msgstr "Paràmetres dels comptes" - -msgid "Remove automount locations" -msgstr "" - -msgid "Add automount map" -msgstr "" - -#, fuzzy -msgid "Map Type" -msgstr "Tipus" - -msgid "Direct" -msgstr "" - -msgid "Indirect" -msgstr "" - -msgid "Remove automount maps" -msgstr "" - -msgid "Add certificate authority" -msgstr "" - -msgid "Remove certificate authorities" -msgstr "" - -msgid "Add CA ACL" -msgstr "" - -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "All" -msgstr "Permet" - -msgid "Any CA" -msgstr "" - -#, fuzzy -msgid "Any Host" -msgstr "Ordinador central" - -#, fuzzy -msgid "Any Service" -msgstr "Serveis" - -msgid "Any Profile" -msgstr "" - -#, fuzzy -msgid "Rule status" -msgstr "Regles" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" - -msgid "Remove CA ACLs" -msgstr "" - -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Specified CAs" -msgstr "Sense especificar" - -msgid "Specified Hosts and Groups" -msgstr "" - -msgid "Specified Profiles" -msgstr "" - -msgid "Specified Services and Groups" -msgstr "" - -msgid "Specified Users and Groups" -msgstr "" - -msgid "Permitted to have certificates issued" -msgstr "" - -#, fuzzy -msgid "Remove certificate profiles" -msgstr "Retenció del certificat" - -#, fuzzy -msgid "AA Compromise" -msgstr "CA en compromís" - -msgid "Add principal" -msgstr "" - -msgid "CA" -msgstr "" - -msgid "the certificate with serial number " -msgstr "" - -#, fuzzy -msgid "Issued on from" -msgstr "Data d'emissió" - -#, fuzzy -msgid "Issued on to" -msgstr "Data d'emissió" - -#, fuzzy -msgid "Maximum serial number" -msgstr "Número de sèrie" - -#, fuzzy -msgid "Minimum serial number" -msgstr "Número de sèrie" - -#, fuzzy -msgid "Revoked on from" -msgstr "Revocat" - -#, fuzzy -msgid "Revoked on to" -msgstr "Revocat" - -msgid "Valid not after from" -msgstr "" - -msgid "Valid not after to" -msgstr "" - -msgid "Valid not before from" -msgstr "" - -msgid "Valid not before to" -msgstr "" - -#, fuzzy -msgid "Get Certificate" -msgstr "Certificat" - -#, fuzzy -msgid "Certificate Hold Removed" -msgstr "Retenció del certificat" - -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Issue new certificate" -msgstr "Certificat" - -#, fuzzy -msgid "No Valid Certificate" -msgstr "Certificat" - -#, fuzzy -msgid "New Certificate" -msgstr "Certificat" - -msgid "Certificate in base64 or PEM format" -msgstr "" - -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "" - -msgid "Privilege Withdrawn" -msgstr "" - -#, fuzzy -msgid "Reason for Revocation" -msgstr "Cessació de l'operació" - -#, fuzzy -msgid "Remove certificate hold" -msgstr "Retenció del certificat" - -msgid "Do you want to remove the certificate hold?" -msgstr "" - -msgid "Remove from CRL" -msgstr "" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" - -#, fuzzy -msgid "Certificate requested" -msgstr "Certificats" - -#, fuzzy -msgid "Revoke certificate" -msgstr "Certificat" - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" - -#, fuzzy -msgid "Certificate Revoked" -msgstr "Retenció del certificat" - -msgid "REVOKED" -msgstr "" - -#, fuzzy -msgid "SHA256 Fingerprint" -msgstr "Empremta digital SHA1" - -#, fuzzy -msgid "Valid Certificate Present" -msgstr "Certificats" - -msgid "Valid from" -msgstr "" - -#, fuzzy -msgid "Valid to" -msgstr "Validesa" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "" - -#, fuzzy -msgid "View Certificate" -msgstr "Certificat" - -#, fuzzy -msgid "Certificate Data" -msgstr "Certificat" - -#, fuzzy -msgid "Certificate For Match" -msgstr "Retenció del certificat" - -#, fuzzy -msgid "Certificate Mapping Match" -msgstr "Certificat" - -#, fuzzy -msgid "Matched Users" -msgstr "Coincideix" - -#, fuzzy -msgid "User Login" -msgstr "Entrada" - -msgid "Add certificate identity mapping rule" -msgstr "" - -msgid "Add certificate mapping data" -msgstr "" - -#, fuzzy -msgid "Certificate mapping data" -msgstr "Retenció del certificat" - -#, fuzzy -msgid "Configuration string" -msgstr "Configuració" - -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "" - -msgid "Remove certificate mapping data" -msgstr "" - -msgid "Issuer and subject" -msgstr "" - -msgid "Remove certificate identity mapping rules" -msgstr "" - -#, fuzzy -msgid "Group Options" -msgstr "Opcions" - -#, fuzzy -msgid "Search Options" -msgstr "Opcions" - -#, fuzzy -msgid "SELinux Options" -msgstr "Opcions" - -#, fuzzy -msgid "Server Options" -msgstr "Opcions" - -#, fuzzy -msgid "Service Options" -msgstr "Serveis" - -#, fuzzy -msgid "User Options" -msgstr "Opcions" - -msgid "Forward first" -msgstr "" - -msgid "Forwarding disabled" -msgstr "" - -msgid "Forward only" -msgstr "" - -msgid "Update System DNS Records" -msgstr "" - -msgid "Do you want to update system DNS records?" -msgstr "" - -msgid "System DNS records updated" -msgstr "" - -msgid "Add DNS forward zone" -msgstr "" - -msgid "Remove DNS forward zones" -msgstr "" - -msgid "Add DNS resource record" -msgstr "" - -msgid "DNS record was deleted because it contained no data." -msgstr "" - -#, fuzzy -msgid "Other Record Types" -msgstr "Tipus de registre" - -msgid "Address not valid, can't redirect" -msgstr "" - -msgid "Create dns record" -msgstr "" - -msgid "Creating record." -msgstr "" - -msgid "Record creation failed." -msgstr "" - -msgid "Checking if record exists." -msgstr "" - -msgid "Record not found." -msgstr "" - -msgid "Redirection to PTR record" -msgstr "" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "" - -msgid "Target reverse zone not found." -msgstr "" - -msgid "Fetching DNS zones." -msgstr "" - -msgid "An error occurred while fetching dns zones." -msgstr "" - -msgid "You will be redirected to DNS Zone." -msgstr "" - -msgid "Remove DNS resource records" -msgstr "" - -#, fuzzy -msgid "Standard Record Types" -msgstr "Tipus de registre" - -msgid "Records for DNS Zone" -msgstr "" - -msgid "Add DNS zone" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "" - -#, fuzzy -msgid "DNS Zone Settings" -msgstr "Paràmetres dels comptes" - -msgid "Remove DNS zones" -msgstr "" - -#, fuzzy -msgid "Remove Permission" -msgstr "Permís" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "" - -msgid "Skip DNS check" -msgstr "" - -msgid "Skip overlap check" -msgstr "" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" - -msgid "Authoritative nameserver change" -msgstr "" - -msgid "Level" -msgstr "" - -msgid "Set Domain Level" -msgstr "" - -msgid "Add user group" -msgstr "" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Group Settings" -msgstr "Paràmetres dels comptes" - -#, fuzzy -msgid "Group categories" -msgstr "Nom del grup" - -msgid "Change to external group" -msgstr "" - -msgid "Change to POSIX group" -msgstr "" - -msgid "Non-POSIX" -msgstr "" - -msgid "POSIX" -msgstr "" - -msgid "Remove user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Group Type" -msgstr "Nom del grup" - -msgid "Add HBAC rule" -msgstr "" - -#, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Accessing" -msgstr "Temps d'accés" - -msgid "Remove HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Via Service" -msgstr "Serveis" - -msgid "Add HBAC service" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "" - -msgid "Remove HBAC services" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "" - -msgid "Add HBAC service group" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "" - -msgid "Remove HBAC service groups" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Include Disabled" -msgstr "Inhabilitat" - -#, fuzzy -msgid "Include Enabled" -msgstr "S'ha habilitat" - -msgid "HBAC Test" -msgstr "" - -msgid "Missing values: " -msgstr "" - -msgid "New Test" -msgstr "" - -msgid "Run Test" -msgstr "" - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "" - -msgid "Add host" -msgstr "" - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -#, fuzzy -msgid "Host Certificate" -msgstr "Certificat" - -msgid "Delete Key, Unprovision" -msgstr "" - -#, fuzzy -msgid "Host Settings" -msgstr "Paràmetres" - -msgid "Enrolled" -msgstr "" - -msgid "Enrollment" -msgstr "" - -msgid "Fully Qualified Host Name" -msgstr "" - -#, fuzzy -msgid "Generate OTP" -msgstr "General" - -#, fuzzy -msgid "Generated OTP" -msgstr "General" - -msgid "Kerberos Key" -msgstr "" - -msgid "Kerberos Key Not Present" -msgstr "" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "" - -#, fuzzy -msgid "One-Time Password" -msgstr "Reinicia la contrasenya" - -msgid "One-Time Password Not Present" -msgstr "" - -msgid "One-Time Password Present" -msgstr "" - -#, fuzzy -msgid "Reset OTP" -msgstr "Reinicia" - -#, fuzzy -msgid "Reset One-Time Password" -msgstr "Reinicia la contrasenya" - -msgid "Set OTP" -msgstr "" - -msgid "OTP set" -msgstr "" - -#, fuzzy -msgid "Set One-Time Password" -msgstr "Reinicia la contrasenya" - -msgid "Remove hosts" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "" - -#, fuzzy -msgid "Unprovision" -msgstr "permisos" - -msgid "Are you sure you want to unprovision this host?" -msgstr "" - -msgid "Unprovisioning host" -msgstr "" - -msgid "Host unprovisioned" -msgstr "" - -msgid "Add host group" -msgstr "" - -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Host Group Settings" -msgstr "Paràmetres dels comptes" - -msgid "Remove host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -msgid "User to override" -msgstr "" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" - -msgid "Enter trusted user login." -msgstr "" - -msgid "Profile" -msgstr "" - -msgid "Group to override" -msgstr "" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" - -#, fuzzy -msgid "Enter trusted group name." -msgstr "Nom de grup de xarxa" - -msgid "Add ID view" -msgstr "" - -msgid "Add group ID override" -msgstr "" - -msgid "Add user ID override" -msgstr "" - -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "" - -msgid "Applied to hosts" -msgstr "" - -msgid "Apply to host groups" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" - -msgid "Apply to hosts" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "" - -msgid "Remove ID views" -msgstr "" - -msgid "Remove user ID overrides" -msgstr "" - -msgid "Remove group ID overrides" -msgstr "" - -msgid "Un-apply from host groups" -msgstr "" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" - -#, fuzzy -msgid "Un-apply" -msgstr "Aplica" - -msgid "Un-apply from hosts" -msgstr "" - -msgid "Un-apply ID Views from hosts" -msgstr "" - -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "" - -msgid "Add netgroup" -msgstr "" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Netgroup Settings" -msgstr "Paràmetres dels comptes" - -#, fuzzy -msgid "Netgroups" -msgstr "Nom de grup de xarxa" - -msgid "Remove netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "" - -msgid "Add OTP token" -msgstr "" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" - -#, fuzzy -msgid "Configure your token" -msgstr "Configuració" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" - -#, fuzzy -msgid "OTP Token Settings" -msgstr "Paràmetres dels comptes" - -#, fuzzy -msgid "Disable token" -msgstr "Inhabilita" - -#, fuzzy -msgid "Enable token" -msgstr "Habilita" - -msgid "Remove OTP tokens" -msgstr "" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" - -msgid "Show QR code" -msgstr "" - -#, fuzzy -msgid "Show configuration uri" -msgstr "Configuració" - -msgid "Counter-based (HOTP)" -msgstr "" - -msgid "Time-based (TOTP)" -msgstr "" - -#, fuzzy -msgid "Add Custom Attribute" -msgstr "Atribut" - -#, fuzzy -msgid "Permission settings" -msgstr "Permisos" - -#, fuzzy -msgid "Attribute breakdown" -msgstr "Atribut" - -#, fuzzy -msgid "Privilege Settings" -msgstr "Paràmetres" - -msgid "Public key:" -msgstr "" - -msgid "Set public key" -msgstr "" - -msgid "Show/Set key" -msgstr "" - -msgid "Modified: key not set" -msgstr "" - -msgid "New: key not set" -msgstr "" - -msgid "New: key set" -msgstr "" - -msgid "Add password policy" -msgstr "" - -msgid "Remove password policies" -msgstr "" - -msgid "Add ID range" -msgstr "" - -#, fuzzy -msgid "Range Settings" -msgstr "Paràmetres" - -msgid "Base ID" -msgstr "" - -msgid "Primary RID base" -msgstr "" - -msgid "Range size" -msgstr "" - -#, fuzzy -msgid "Domain SID" -msgstr "Domini" - -msgid "Secondary RID base" -msgstr "" - -msgid "Remove ID ranges" -msgstr "" - -#, fuzzy -msgid "Active Directory domain with POSIX attributes" -msgstr "Domini d'Active Directory" - -msgid "Detect" -msgstr "" - -#, fuzzy -msgid "Local domain" -msgstr "Localitat" - -msgid "IPA trust" -msgstr "" - -#, fuzzy -msgid "Active Directory winsync" -msgstr "Domini d'Active Directory" - -msgid "Add RADIUS server" -msgstr "" - -msgid "RADIUS Proxy Server Settings" -msgstr "" - -msgid "Remove RADIUS servers" -msgstr "" - -msgid "Check DNS" -msgstr "" - -msgid "Do you also want to perform DNS check?" -msgstr "" - -#, fuzzy -msgid "Force Update" -msgstr "Actualització" - -msgid "Add SELinux user map" -msgstr "" - -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "" - -msgid "Remove selinux user maps" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Server Roles" -msgstr "Nom del servidor" - -#, fuzzy -msgid "Server Role" -msgstr "Nom del servidor" - -msgid "Warning: Consider service replication" -msgstr "" - -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" - -#, fuzzy -msgid "Delete Server" -msgstr "Suprimeix" - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" - -#, fuzzy -msgid "Add service" -msgstr "serveis" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -#, fuzzy -msgid "Service Certificate" -msgstr "Certificat" - -#, fuzzy -msgid "Service Settings" -msgstr "Paràmetres de la identitat" - -#, fuzzy -msgid "Provisioning" -msgstr "Permís" - -#, fuzzy -msgid "Remove services" -msgstr "serveis" - -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to unprovision this service?" -msgstr "" - -msgid "Unprovisioning service" -msgstr "" - -msgid "Service unprovisioned" -msgstr "" - -msgid "Kerberos Key Present, Service Provisioned" -msgstr "" - -msgid "SSH public keys" -msgstr "" - -msgid "SSH public key:" -msgstr "" - -msgid "Set SSH key" -msgstr "" - -msgid "Are you sure you want to activate selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "" - -msgid "Add stage user" -msgstr "" - -#, fuzzy -msgid "Stage users" -msgstr "usuaris" - -msgid "Preserved users" -msgstr "" - -msgid "Remove preserved users" -msgstr "" - -msgid "Remove stage users" -msgstr "" - -msgid "Are you sure you want to stage selected users?" -msgstr "" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "" - -msgid "Are you sure you want to restore selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "" - -msgid "User categories" -msgstr "" - -msgid "Add sudo command" -msgstr "" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "" - -msgid "Remove sudo commands" -msgstr "" - -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "" - -msgid "Add sudo command group" -msgstr "" - -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "" - -msgid "Remove sudo command groups" -msgstr "" - -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "" - -msgid "Add sudo rule" -msgstr "" - -msgid "Add sudo option" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Any Command" -msgstr "Ordres" - -#, fuzzy -msgid "Any Group" -msgstr "Grup" - -#, fuzzy -msgid "Run Commands" -msgstr "Ordres" - -msgid "Deny" -msgstr "" - -#, fuzzy -msgid "Access this host" -msgstr "Temps d'accés" - -#, fuzzy -msgid "Option added" -msgstr "Opcions" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "" - -msgid "Remove sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -msgid "As Whom" -msgstr "" - -msgid "Specified Commands and Groups" -msgstr "" - -msgid "Specified Groups" -msgstr "" - -msgid "Remove sudo options" -msgstr "" - -msgid "Autogenerated" -msgstr "" - -#, fuzzy -msgid "Segment details" -msgstr "Mostra els detalls" - -#, fuzzy -msgid "Replication configuration" -msgstr "Cessació de l'operació" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" - -msgid "Add IPA location" -msgstr "" - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -msgid "Remove IPA locations" -msgstr "" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -msgid "Add topology segment" -msgstr "" - -msgid "Remove topology segments" -msgstr "" - -msgid "Add trust" -msgstr "" - -msgid "Administrative account" -msgstr "" - -msgid "SID blocklists" -msgstr "" - -#, fuzzy -msgid "Trust Settings" -msgstr "Paràmetres dels comptes" - -msgid "Establish using" -msgstr "" - -msgid "Fetch domains" -msgstr "" - -#, fuzzy -msgid "Pre-shared password" -msgstr "Reinicia la contrasenya" - -msgid "Remove trusts" -msgstr "" - -msgid "Remove domains" -msgstr "" - -msgid "Trust direction" -msgstr "" - -msgid "Trust status" -msgstr "" - -#, fuzzy -msgid "Trust type" -msgstr "Confiança" - -msgid "Alternative UPN suffixes" -msgstr "" - -msgid "User attributes for SMB services" -msgstr "" - -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -msgid "Path to a user home directory, in UNC format" -msgstr "" - -msgid "Drive to mount a home directory" -msgstr "" - -#, fuzzy -msgid "Account Status" -msgstr "Paràmetres dels comptes" - -msgid "Active users" -msgstr "" - -#, fuzzy -msgid "Add user" -msgstr "usuari" - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -#, fuzzy -msgid "Contact Settings" -msgstr "Paràmetres dels comptes" - -#, fuzzy -msgid "Delete mode" -msgstr "Suprimeix" - -#, fuzzy -msgid "Employee Information" -msgstr "Confirmació" - -msgid "Error changing account status" -msgstr "" - -msgid "Password expiration" -msgstr "" - -#, fuzzy -msgid "Misc. Information" -msgstr "Confirmació" - -#, fuzzy -msgid "delete" -msgstr "Suprimeix" - -#, fuzzy -msgid "preserve" -msgstr "serveis" - -msgid "No private group" -msgstr "" - -msgid "Remove users" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" - -#, python-brace-format -msgid "Click to ${action}" -msgstr "" - -msgid "Unlock" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "" - -msgid "Add vault" -msgstr "" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -msgid "Asymmetric" -msgstr "" - -msgid "Vaults Config" -msgstr "" - -msgid "Members" -msgstr "" - -msgid "My User Vaults" -msgstr "" - -msgid "Owners" -msgstr "" - -msgid "Remove vaults" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Service Vaults" -msgstr "Serveis" - -msgid "Shared" -msgstr "" - -msgid "Shared Vaults" -msgstr "" - -msgid "Standard" -msgstr "" - -msgid "Symmetric" -msgstr "" - -msgid "Vault Type" -msgstr "" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -#, fuzzy -msgid "User Vaults" -msgstr "Usuaris" - -msgid "Current password is required" -msgstr "" - -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "" - -#, fuzzy -msgid "First OTP" -msgstr "Nom" - -#, fuzzy -msgid "New password is required" -msgstr "Contrasenya nova" - -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" - -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" - -msgid "Token synchronization failed" -msgstr "" - -msgid "The username, password or token codes are not correct" -msgstr "" - -msgid "Token was synchronized" -msgstr "" - -msgid "Password change complete" -msgstr "" - -msgid "Your password has expired. Please enter a new password." -msgstr "" - -#, fuzzy -msgid "Passwords must match" -msgstr "Les contrasenyes no coincideixen" - -msgid "Password reset was not successful." -msgstr "" - -#, fuzzy -msgid "Reset your password." -msgstr "Reinicia la contrasenya" - -msgid "Second OTP" -msgstr "" - -#, fuzzy -msgid "Verify Password" -msgstr "Contrasenya nova" - -msgid "Are you sure you want to delete selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "" - -msgid "Are you sure you want to disable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "" - -msgid "Are you sure you want to enable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "" - -msgid "Some entries were not deleted" -msgstr "" - -msgid "Quick Links" -msgstr "" - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" - -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" - -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" - -msgid "Working" -msgstr "" - -msgid "Audit" -msgstr "" - -msgid "Authentication" -msgstr "" - -msgid "Automember" -msgstr "" - -#, fuzzy -msgid "Automount" -msgstr "Compte" - -msgid "Host-Based Access Control" -msgstr "" - -#, fuzzy -msgid "IPA Server" -msgstr "Servidor" - -#, fuzzy -msgid "Network Services" -msgstr "Serveis" - -msgid "Role-Based Access Control" -msgstr "" - -msgid "Sudo" -msgstr "" - -msgid "Topology" -msgstr "" - -#, fuzzy -msgid "Trusts" -msgstr "Confiança" - -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" - -msgid "API Browser" -msgstr "" - -#, fuzzy -msgid "First" -msgstr "Nom" - -#, fuzzy -msgid "Last" -msgstr "Cognom" - -msgid "Undo" -msgstr "" - -msgid "Undo this change." -msgstr "" - -#, fuzzy -msgid "Undo All" -msgstr "No seleccionis res" - -msgid "Undo all changes in this field." -msgstr "" - -msgid "Text does not match field pattern" -msgstr "" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" - -msgid "Must be a decimal number" -msgstr "" - -msgid "Format error" -msgstr "" - -msgid "Must be an integer" -msgstr "" - -msgid "Not a valid IP address" -msgstr "" - -msgid "Not a valid IPv4 address" -msgstr "" - -msgid "Not a valid IPv6 address" -msgstr "" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "" - -msgid "Parse error" -msgstr "" - -msgid "Must be a positive number" -msgstr "" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "" - -msgid "Required field" -msgstr "" - -msgid "Unsupported value" -msgstr "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -#, fuzzy -msgid "invalid port number" -msgstr "Número de sèrie" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -#, fuzzy -msgid "RADIUS Servers" -msgstr "Servidor" - -#, fuzzy -msgid "RADIUS Server" -msgstr "Servidor" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, fuzzy, python-format -msgid "Access granted: %s" -msgstr "Accés permès" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -#, fuzzy -msgid "" -"\n" -"IPA locations\n" -msgstr "Accions" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -#, fuzzy -msgid "location" -msgstr "Ubicació" - -#, fuzzy -msgid "locations" -msgstr "Ubicació" - -#, fuzzy -msgid "IPA Locations" -msgstr "Ubicació" - -#, fuzzy -msgid "IPA Location" -msgstr "Ubicació" - -#, fuzzy -msgid "Location name" -msgstr "Ubicació" - -msgid "IPA location name" -msgstr "" - -#, fuzzy -msgid "IPA Location description" -msgstr "descripció" - -#, fuzzy -msgid "Servers" -msgstr "Servidor" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "" - -msgid "Delete an IPA location." -msgstr "" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "" - -msgid "Modify information about an IPA location." -msgstr "" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "" - -msgid "Search for IPA locations." -msgstr "" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an IPA location." -msgstr "" - -msgid "Servers in location" -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(value)s" -msgstr "" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -#, fuzzy -msgid "sudo command" -msgstr "Ordres" - -#, fuzzy -msgid "sudo commands" -msgstr "Ordres" - -#, fuzzy -msgid "Sudo Commands" -msgstr "Ordres" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -msgid "self service permission" -msgstr "" - -#, fuzzy -msgid "self service permissions" -msgstr "permisos" - -#, fuzzy -msgid "Self Service Permissions" -msgstr "Permisos" - -#, fuzzy -msgid "Self Service Permission" -msgstr "Permís" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" - #, python-format -msgid "Modified selfservice \"%(value)s\"" +msgid "Replication agreement for %(hostname)s not found" msgstr "" -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - msgid "A list of ACI values" msgstr "" @@ -18776,6 +12629,9 @@ msgstr "" msgid "ACIs" msgstr "" +msgid "ACI" +msgstr "" + #, python-format msgid "Created ACI \"%(value)s\"" msgstr "" @@ -18798,2265 +12654,6 @@ msgstr[1] "" msgid "Renamed ACI to \"%(value)s\"" msgstr "" -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -#, fuzzy -msgid "groups" -msgstr "grup" - -#, fuzzy -msgid "User Group" -msgstr "Grup" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "" - -msgid "privileged group" -msgstr "" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -msgid "Not a managed group" -msgstr "" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -msgid "automount location" -msgstr "" - -msgid "automount locations" -msgstr "" - -msgid "Automount Locations" -msgstr "" - -#, fuzzy -msgid "Automount Location" -msgstr "Ubicació" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "automount map" -msgstr "" - -msgid "automount maps" -msgstr "" - -msgid "Automount Maps" -msgstr "" - -msgid "Automount Map" -msgstr "" - -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Automount key object." -msgstr "" - -msgid "automount key" -msgstr "" - -msgid "automount keys" -msgstr "" - -msgid "Automount Keys" -msgstr "" - -msgid "Automount Key" -msgstr "" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, python-format -msgid "key named %(key)s already exists" -msgstr "" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "ID View" -msgstr "Visualització" - -msgid "system ID View" -msgstr "" - -#, fuzzy -msgid "ID Views" -msgstr "Visualització" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -msgid "Delete an ID override." -msgstr "" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -msgid "Modify an ID override." -msgstr "" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -msgid "CA category" -msgstr "" - -msgid "CA category the ACL applies to" -msgstr "" - -msgid "CAs" -msgstr "" - -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, python-format -msgid "%i users or groups added." -msgstr "" - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, python-format -msgid "%i service added." -msgstr "" - -#, fuzzy, python-format -msgid "%i services added." -msgstr "serveis" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -#, fuzzy -msgid "trust" -msgstr "Confiança" - -#, fuzzy -msgid "trusts" -msgstr "Confiança" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -#, fuzzy -msgid "Active Directory domain range" -msgstr "Domini d'Active Directory" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -#, fuzzy -msgid "External trust" -msgstr "Extern" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "trust configuration" -msgstr "Configuració" - -#, fuzzy -msgid "Global Trust Configuration" -msgstr "Configuració" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -#, fuzzy -msgid "SID" -msgstr "UID" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -#, fuzzy -msgid "Domain enabled" -msgstr "Inhabilitat" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"DNS server configuration\n" -msgstr "Configuració" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -#, fuzzy -msgid "DNS server" -msgstr "Servidor" - -#, fuzzy -msgid "DNS servers" -msgstr "Servidor" - -#, fuzzy -msgid "DNS Servers" -msgstr "Servidor" - -#, fuzzy -msgid "DNS Server" -msgstr "Servidor" - -#, fuzzy -msgid "DNS Server name" -msgstr "Nom del servidor" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "" - -msgid "Search for DNS servers." -msgstr "" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "" - -msgid "Delete a DNS server" -msgstr "" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -#, fuzzy -msgid "SSH public key fingerprint" -msgstr "Empremta digital SHA1" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -#, fuzzy -msgid "HBAC services" -msgstr "serveis" - -#, fuzzy -msgid "HBAC Services" -msgstr "Serveis" - -#, fuzzy -msgid "HBAC Service" -msgstr "Serveis" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -msgid "HBAC service group" -msgstr "" - -msgid "HBAC service groups" -msgstr "" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" -msgstr "" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -msgid "Delegations" -msgstr "" - -#, fuzzy -msgid "Delegation" -msgstr "Suprimeix" - -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, fuzzy -msgid "netgroups" -msgstr "grup" - -#, fuzzy -msgid "Netgroup" -msgstr "grup" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Failed logins" -msgstr "Entrada" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" -msgstr[1] "" - msgid "" "\n" "Auto Membership Rule.\n" @@ -21391,10 +12988,16 @@ msgstr "" msgid "Automember rebuild membership task started" msgstr "" +msgid "Automember rebuild membership task completed" +msgstr "" + #, python-format msgid "Task DN = '%s'" msgstr "" +msgid "Automember" +msgstr "" + msgid "" "\n" " Search for orphan automember rules. The command might need to be run as\n" @@ -21405,413 +13008,123 @@ msgstr "" msgid "Remove orphan automember rules" msgstr "" -msgid "HBAC rule and local members cannot both be set" +msgid "automount location" msgstr "" -msgid "Invalid SELinux user name, must match {}" +msgid "automount locations" msgstr "" -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -msgid "SELinux User Maps" -msgstr "" - -msgid "SELinux User Map" -msgstr "" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "" - -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" +msgid "Automount Locations" msgstr "" #, fuzzy -msgid "Vault Container" -msgstr "Continua" +msgid "Automount Location" +msgstr "Ubicació" -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" +#, python-format +msgid "Added automount location \"%(value)s\"" msgstr "" #, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." +msgid "Deleted automount location \"%(value)s\"" msgstr "" #, python-format -msgid "Added vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" msgstr[0] "" msgstr[1] "" +msgid "automount map" +msgstr "" + +msgid "automount maps" +msgstr "" + +msgid "Automount Maps" +msgstr "" + +msgid "Automount Map" +msgstr "" + +#, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Automount key object." +msgstr "" + +msgid "automount key" +msgstr "" + +msgid "automount keys" +msgstr "" + +msgid "Automount Keys" +msgstr "" + +msgid "Automount Key" +msgstr "" + +#, python-format msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" msgstr "" #, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Vault configuration" -msgstr "Configuració" - -msgid "IPA servers configured as key recovery agents" +msgid "key named %(key)s already exists" msgstr "" #, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "" - -msgid "Retrieve data from a vault." +msgid "The automount key %(key)s with info %(info)s does not exist" msgstr "" #, python-format -msgid "Retrieved data from vault \"%(value)s\"" +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." msgstr "" -msgid "No archived data." +#, python-format +msgid "Added automount key \"%(value)s\"" msgstr "" -msgid "Checks if any of the servers has the KRA service enabled" +#, python-format +msgid "Added automount indirect map \"%(value)s\"" msgstr "" +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "" +msgstr[1] "" + msgid "Member service groups" msgstr "" @@ -21839,6 +13152,9 @@ msgstr "" msgid "An IPA master host cannot be deleted or disabled" msgstr "" +msgid "entry" +msgstr "entrada" + #, fuzzy msgid "entries" msgstr "entrada" @@ -21855,6 +13171,10 @@ msgstr "" msgid "%(parent)s: %(oname)s not found" msgstr "" +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "" + #, python-format msgid "%(oname)s with name \"%(pkey)s\" already exists" msgstr "" @@ -21884,6 +13204,10 @@ msgstr "" msgid "%s" msgstr "" +#, python-format +msgid "member %s" +msgstr "" + #, python-format msgid "%s to add" msgstr "" @@ -21892,6 +13216,10 @@ msgstr "" msgid "%s to remove" msgstr "" +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + #, python-format msgid "" "Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." @@ -21916,188 +13244,133 @@ msgstr "" msgid "" "\n" -"IPA servers\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" +msgstr "" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "Principal alias" +msgstr "" + +msgid "User password expiration" +msgstr "" + +#, fuzzy +msgid "SSH public key fingerprint" +msgstr "Empremta digital SHA1" + +msgid "Base-64 encoded user certificate" +msgstr "" + +#, fuzzy +msgid "Certificate mapping data" +msgstr "Retenció del certificat" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +#, fuzzy +msgid "SMB Home Directory" +msgstr "Directori de l'usuari" + +#, fuzzy +msgid "SMB Home Directory Drive" +msgstr "Directori de l'usuari" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "" + +msgid "Issuer" +msgstr "Emissor" + +msgid "Issuer of the certificate" +msgstr "" + +msgid "Subject" +msgstr "Assumpte" + +msgid "Subject of the certificate" +msgstr "" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" msgstr "" msgid "" "\n" -"Get information about installed IPA servers.\n" -msgstr "" - -msgid "" +"Plugin to make multiple ipa calls via one remote procedure call\n" "\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" "\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" msgstr "" -#, fuzzy -msgid "server" -msgstr "Servidor" - -#, fuzzy -msgid "servers" -msgstr "serveis" - -#, fuzzy -msgid "IPA Servers" -msgstr "Servidor" - -#, fuzzy -msgid "Server location" -msgstr "Nom del servidor" - -#, fuzzy -msgid "Service weight" -msgstr "Serveis" - -msgid "Weight for server services" +msgid "Make multiple ipa calls via one remote procedure call" msgstr "" -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "" - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -#, fuzzy -msgid "State" -msgstr "Estat" - -#, fuzzy -msgid "Server state" -msgstr "Nom del servidor" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." +msgid "must contain a tuple (list, dict)" msgstr "" msgid "" @@ -22172,6 +13445,10 @@ msgstr "Retenció del certificat" msgid "Certificate Authorities" msgstr "Certificats" +#, fuzzy +msgid "Name" +msgstr "Nom de l'ordinador" + msgid "Name for referencing the CA" msgstr "" @@ -22191,9 +13468,23 @@ msgstr "Assumpte" msgid "Subject Distinguished Name" msgstr "" +#, fuzzy +msgid "Issuer DN" +msgstr "Emissor" + msgid "Issuer Distinguished Name" msgstr "" +msgid "Base-64 encoded certificate." +msgstr "" + +#, fuzzy +msgid "Certificate chain" +msgstr "Certificat" + +msgid "X.509 certificate chain" +msgstr "" + msgid "Search for CAs." msgstr "" @@ -22203,6 +13494,9 @@ msgid_plural "%(count)d CAs matched" msgstr[0] "" msgstr[1] "" +msgid "Include certificate chain in output" +msgstr "" + msgid "Display the properties of a CA." msgstr "" @@ -22235,6 +13529,9 @@ msgstr "" msgid "Insufficient privilege to delete a CA." msgstr "" +msgid "CA" +msgstr "" + msgid "IPA CA cannot be deleted" msgstr "" @@ -22273,317 +13570,1216 @@ msgstr "" msgid "" "\n" -"Stageusers\n" +"Manage CA ACL rules.\n" "\n" -"Manage stage user entries.\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" "\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" +"SUBJECT PRINCIPAL SCOPE:\n" "\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" "\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" "\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" +"CERTIFICATE AUTHORITY SCOPE:\n" "\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" "\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"PROFILE SCOPE:\n" "\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" "\n" "EXAMPLES:\n" "\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" "\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" "\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" msgstr "" -#, fuzzy -msgid "Stage Users" -msgstr "Usuaris" - -msgid "Stage User" +msgid "CA ACL" msgstr "" -msgid "stage user" +msgid "CA ACLs" msgstr "" -#, fuzzy -msgid "stage users" -msgstr "usuaris" - -#, python-format -msgid "Added stage user \"%(value)s\"" +msgid "CA category" msgstr "" -msgid "givenname is required" +msgid "CA category the ACL applies to" msgstr "" -msgid "sn is required" +msgid "CAs" msgstr "" #, python-format -msgid "Deleted stage user \"%(value)s\"" +msgid "Added CA ACL \"%(value)s\"" msgstr "" #, python-format -msgid "Modified stage user \"%(value)s\"" +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "" + +msgid "default CA ACL can be only disabled" msgstr "" #, python-format -msgid "Activate a stage user \"%(value)s\"" +msgid "Modified CA ACL \"%(value)s\"" msgstr "" -msgid "Entry RDN is not 'uid'" +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" msgstr "" #, python-format -msgid "Entry has no '%(attribute)s'" +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled CA ACL \"%(value)s\"" msgstr "" #, python-format -msgid "active user with name \"%(user)s\" already exists" +msgid "Disabled CA ACL \"%(value)s\"" msgstr "" #, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" +msgid "%i user or group added." msgstr "" #, python-format -msgid "Added certificates to stageuser \"%(value)s\"" +msgid "%i users or groups added." msgstr "" -msgid "Remove one or more certificates to the stageuser entry" +msgid "users cannot be added when user category='all'" msgstr "" #, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" +msgid "%i user or group removed." msgstr "" #, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" +msgid "%i users or groups removed." msgstr "" #, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" +msgid "%i host or hostgroup added." msgstr "" -msgid "Add one or more certificate mappings to the stage user entry." +#, python-format +msgid "%i hosts or hostgroups added." msgstr "" -msgid "Remove one or more certificate mappings from the stage user entry." +msgid "hosts cannot be added when host category='all'" +msgstr "" + +#, python-format +msgid "%i host or hostgroup removed." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups removed." +msgstr "" + +#, python-format +msgid "%i service added." +msgstr "" + +#, fuzzy, python-format +msgid "%i services added." +msgstr "serveis" + +msgid "services cannot be added when service category='all'" +msgstr "" + +#, python-format +msgid "%i service removed." +msgstr "" + +#, python-format +msgid "%i services removed." +msgstr "" + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, python-format +msgid "%i profiles removed." +msgstr "" + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." +msgstr "" + +msgid "pyhbac is not installed." msgstr "" msgid "" "\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" +"IPA certificate operations\n" msgstr "" msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." +"\n" +"Implements a set of commands for managing server SSL certificates.\n" msgstr "" -msgid "User password expiration" +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" msgstr "" -msgid "SMB logon script path" +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" msgstr "" -msgid "SMB profile path" +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" msgstr "" #, fuzzy -msgid "SMB Home Directory" +msgid " * 0 - unspecified\n" +msgstr "Sense especificar" + +#, fuzzy +msgid " * 1 - keyCompromise\n" +msgstr "Clau en compromís" + +#, fuzzy +msgid " * 2 - cACompromise\n" +msgstr "CA en compromís" + +#, fuzzy +msgid " * 3 - affiliationChanged\n" +msgstr "L'afiliació ha canviat" + +msgid " * 4 - superseded\n" +msgstr "" + +#, fuzzy +msgid " * 5 - cessationOfOperation\n" +msgstr "Cessació de l'operació" + +#, fuzzy +msgid " * 6 - certificateHold\n" +msgstr "Retenció del certificat" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +#, fuzzy +msgid "Subject email address" +msgstr "Adreça de correu electrònic" + +#, fuzzy +msgid "Subject DNS name" +msgstr "Assumpte" + +msgid "Subject X.400 address" +msgstr "" + +#, fuzzy +msgid "Subject directory name" msgstr "Directori de l'usuari" -#, fuzzy -msgid "SMB Home Directory Drive" -msgstr "Directori de l'usuari" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" +msgid "Subject EDI Party name" msgstr "" #, fuzzy -msgid "URI" -msgstr "UID" +msgid "Subject URI" +msgstr "Assumpte" -#, python-format -msgid "Added OTP token \"%(value)s\"" +#, fuzzy +msgid "Subject IP Address" +msgstr "Adreça IP" + +#, fuzzy +msgid "Subject OID" +msgstr "Assumpte" + +#, fuzzy +msgid "Subject UPN" +msgstr "Assumpte" + +msgid "Subject Kerberos principal name" msgstr "" -msgid "cannot be empty" +#, fuzzy +msgid "Subject Other Name" +msgstr "Nom del servidor" + +msgid "Not Before" +msgstr "No abans" + +msgid "Not After" +msgstr "No després" + +#, fuzzy +msgid "Fingerprint (SHA1)" +msgstr "Empremta" + +#, fuzzy +msgid "Fingerprint (SHA256)" +msgstr "Empremta" + +#, fuzzy +msgid "Serial number (hex)" +msgstr "Número de sèrie" + +msgid "Request status" +msgstr "" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" msgstr "" #, python-format -msgid "Deleted OTP token \"%(value)s\"" +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." msgstr "" #, python-format -msgid "Modified OTP token \"%(value)s\"" +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" msgstr "" #, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +msgid "'add' option" +msgstr "" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "Estat" + +msgid "Revoked" +msgstr "Revocat" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "" + +#, fuzzy +msgid "Status of the certificate" +msgstr "Certificat" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, fuzzy +msgid "domain" +msgstr "Domini" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +#, fuzzy +msgid "Matching rule" +msgstr "Coincideix" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +#, fuzzy +msgid "User logins" +msgstr "Entrada" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" msgstr[0] "" msgstr[1] "" msgid "" "\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" +"Manage Certificate Profiles\n" "\n" -"To run this code in the lite-server\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" "\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" "\n" -"where the contents of the file batch_request.json follow the below example\n" +"PROFILE ID SYNTAX:\n" "\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" "\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" +"EXAMPLES:\n" "\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" "\n" -"And then a nested response for each IPA command method sent in the request\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" "\n" msgstr "" -msgid "Make multiple ipa calls via one remote procedure call" +msgid "invalid Profile ID" msgstr "" -msgid "must contain a tuple (list, dict)" +#, fuzzy +msgid "Certificate Profile" +msgstr "Retenció del certificat" + +#, fuzzy +msgid "Certificate Profiles" +msgstr "Retenció del certificat" + +#, fuzzy +msgid "Profile configuration" +msgstr "Configuració" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Imported profile \"%(value)s\"" msgstr "" +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "must be at least 10" +msgstr "" + +#, fuzzy +msgid "configuration options" +msgstr "Configuració" + +msgid "Configuration" +msgstr "Configuració" + +msgid "Maximum hostname length" +msgstr "" + +msgid "Enable adding subids to new users" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +msgid "IPA CA servers" +msgstr "" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA KRA servers" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "Domain resolution order" +msgstr "" + +msgid "colon-separated list of domains used for short name qualification" +msgstr "" + +msgid "IPA DNS servers" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "IPA DNSSec key master" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +#, fuzzy +msgid "Setup SID configuration" +msgstr "Configuració" + +msgid "New users and groups automatically get a SID assigned" +msgstr "" + +#, fuzzy +msgid "Add SIDs" +msgstr "usuari" + +msgid "Add SIDs for existing users and groups" +msgstr "" + +msgid "NetBIOS name of the IPA domain" +msgstr "" + +msgid "Empty domain is not allowed" +msgstr "" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "not allowed to enable SID generation" +msgstr "" + +msgid "" +"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " +"allowed. Empty string is not allowed." +msgstr "" + +msgid "Failed to call DBus" +msgstr "" + +msgid "Configuration of SID failed. See details in the error log" +msgstr "" + +msgid "The group doesn't exist" +msgstr "" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" + +msgid "SELinux user map default user not in order list" +msgstr "" + +#, python-format +msgid "You cannot specify %s without the --enable-sid option" +msgstr "" + +msgid "delegation" +msgstr "" + +msgid "delegations" +msgstr "" + +msgid "Delegations" +msgstr "" + +#, fuzzy +msgid "Delegation" +msgstr "Suprimeix" + +#, python-format +msgid "Added delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "" +msgstr[1] "" + msgid "" "\n" "Domain Name System (DNS)\n" @@ -23015,6 +15211,12 @@ msgid "" "All nameservers failed to answer the query for DNS reverse zone %(revdns)s" msgstr "" +#, python-format +msgid "" +"No answers could be found in the specified lifetime for DNS reverse zone " +"%(revdns)s" +msgstr "" + #, python-format msgid "" "DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " @@ -23130,6 +15332,9 @@ msgstr "" msgid "Managedby permission" msgstr "permisos" +msgid "DNS is not configured" +msgstr "" + msgid "cannot be used when a zone is specified" msgstr "" @@ -23344,6 +15549,313 @@ msgstr "" msgid "Do not update records only return expected records" msgstr "" +#, fuzzy +msgid "" +"\n" +"DNS server configuration\n" +msgstr "Configuració" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +#, fuzzy +msgid "DNS server" +msgstr "Servidor" + +#, fuzzy +msgid "DNS servers" +msgstr "Servidor" + +#, fuzzy +msgid "DNS Servers" +msgstr "Servidor" + +#, fuzzy +msgid "DNS Server" +msgstr "Servidor" + +#, fuzzy +msgid "DNS Server name" +msgstr "Nom del servidor" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +msgid "Search for DNS servers." +msgstr "" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "" + +msgid "Delete a DNS server" +msgstr "" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +#, fuzzy +msgid "groups" +msgstr "grup" + +#, fuzzy +msgid "User Group" +msgstr "Grup" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "" + +msgid "gid cannot be set for external group" +msgstr "" + +msgid "attribute \"gidNumber\" not allowed with --nonposix" +msgstr "" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "" + +msgid "privileged group" +msgstr "" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + msgid "The deny type has been deprecated." msgstr "" @@ -23354,6 +15866,13 @@ msgstr "" msgid "HBAC Rules" msgstr "Regles" +#, fuzzy +msgid "HBAC Services" +msgstr "Serveis" + +msgid "HBAC Service Groups" +msgstr "" + #, python-format msgid "Added HBAC rule \"%(value)s\"" msgstr "" @@ -23380,127 +15899,7896 @@ msgstr "" msgid "Disabled HBAC rule \"%(value)s\"" msgstr "" +msgid "Access time" +msgstr "Temps d'accés" + msgid "Add source hosts and hostgroups to an HBAC rule." msgstr "" msgid "" "\n" -"Manage Certificate Profiles\n" +"HBAC Services\n" "\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" "\n" "EXAMPLES:\n" "\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" "\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" "\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" "\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" "\n" msgstr "" -msgid "invalid Profile ID" -msgstr "" +#, fuzzy +msgid "HBAC services" +msgstr "serveis" #, fuzzy -msgid "Certificate Profile" -msgstr "Retenció del certificat" - -#, fuzzy -msgid "Certificate Profiles" -msgstr "Retenció del certificat" - -#, fuzzy -msgid "Profile configuration" -msgstr "Configuració" +msgid "HBAC Service" +msgstr "Serveis" #, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" +msgid "Added HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC service group" +msgstr "" + +msgid "HBAC service groups" +msgstr "" + +msgid "HBAC Service Group" +msgstr "" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, fuzzy, python-format +msgid "Access granted: %s" +msgstr "Accés permès" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host" +msgstr "Ordinador central" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Serial Number" +msgstr "Número de sèrie" + +#, fuzzy +msgid "Serial Number (hex)" +msgstr "Número de sèrie" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" msgstr[0] "" msgstr[1] "" #, python-format -msgid "Imported profile \"%(value)s\"" +msgid "Disabled host \"%(value)s\"" msgstr "" #, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" +msgid "Added certificates to host \"%(value)s\"" msgstr "" #, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" msgstr "" #, python-format -msgid "Deleted profile \"%(value)s\"" +msgid "Added new aliases to host \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a host entry" msgstr "" #, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#, fuzzy +msgid "host groups" +msgstr "grup" + +#, fuzzy +msgid "Host Group" +msgstr "Grup" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" msgstr "" #, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" msgstr "" #, python-format -msgid "all masters must have %(role)s role enabled" +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "hostgroup" +msgstr "grup" + +msgid "privileged hostgroup" msgstr "" #, python-format -msgid "must have %(role)s role enabled" +msgid "Modified hostgroup \"%(value)s\"" msgstr "" -msgid "must be enabled only on a single master" +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"and an ID range of a trusted domain may set\n" +" - auto-private-groups: [true|false|hybrid] automatic creation of private " +"groups\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +#, fuzzy +msgid "Active Directory domain range" +msgstr "Domini d'Active Directory" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +#, fuzzy +msgid "Auto private groups" +msgstr "grup" + +msgid "Auto creation of private groups, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --auto-private-groups\n" +"\n" +" may be given for a new ID range for a trusted AD domain and\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" +"private-groups is specified" +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +#, fuzzy +msgid "ID View" +msgstr "Visualització" + +msgid "system ID View" +msgstr "" + +#, fuzzy +msgid "ID Views" +msgstr "Visualització" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +msgid "Hosts the view applies to" +msgstr "" + +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "" + +msgid "Delete an ID override." +msgstr "" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "" + +msgid "Modify an ID override." +msgstr "" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Internationalization messages" +msgstr "" + +msgid "Your session has expired. Please log in again." +msgstr "" + +msgid "Apply" +msgstr "Aplica" + +msgid "Rebuild auto membership" +msgstr "" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "" + +msgid "Are you sure you want to proceed with the action?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "" + +msgid "Actions" +msgstr "Accions" + +msgid "Add" +msgstr "Afegeix-ho" + +#, python-brace-format +msgid "${count} item(s) added" +msgstr "" + +msgid "Direct Membership" +msgstr "" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "" + +msgid "Indirect Membership" +msgstr "" + +msgid "No entries." +msgstr "" + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "" + +msgid "Remove" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "" + +#, fuzzy +msgid "Show Results" +msgstr "Mostra els detalls" + +msgid "Authentication indicators" +msgstr "" + +msgid "Authentication indicator" +msgstr "" + +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "Add Custom Authentication Indicator" +msgstr "" + +msgid "Two factor authentication (password + OTP)" +msgstr "" + +msgid "RADIUS" +msgstr "" + +msgid "PKINIT" +msgstr "" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "" + +msgid "Disable per-user override" +msgstr "" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "About" +msgstr "" + +msgid "Activate" +msgstr "" + +msgid "Add and Add Another" +msgstr "" + +msgid "Add and Close" +msgstr "" + +msgid "Add and Edit" +msgstr "" + +msgid "Add Many" +msgstr "" + +msgid "Back" +msgstr "Enrere" + +msgid "Cancel" +msgstr "Cancel·la" + +msgid "Clear" +msgstr "" + +msgid "Clear all fields on the page." +msgstr "" + +msgid "Close" +msgstr "Tanca" + +msgid "Disable" +msgstr "Inhabilita" + +msgid "Download" +msgstr "" + +msgid "Download certificate as PEM formatted file." +msgstr "" + +msgid "Edit" +msgstr "Edita" + +msgid "Enable" +msgstr "Habilita" + +msgid "Find" +msgstr "Cerca" + +#, fuzzy +msgid "Get" +msgstr "Aplica" + +msgid "Hide" +msgstr "" + +#, fuzzy +msgid "Issue" +msgstr "Emissor" + +#, fuzzy +msgid "Match" +msgstr "Coincideix" + +msgid "Match users according to certificate." +msgstr "" + +msgid "Migrate" +msgstr "" + +msgid "OK" +msgstr "D'acord" + +msgid "Refresh" +msgstr "Refresca" + +msgid "Reload current settings from the server." +msgstr "" + +msgid "Delete" +msgstr "Suprimeix" + +msgid "Remove hold" +msgstr "" + +msgid "Reset" +msgstr "Reinicia" + +msgid "Reset Password" +msgstr "Reinicia la contrasenya" + +#, fuzzy +msgid "Reset Password and Log in" +msgstr "Reinicia la contrasenya" + +msgid "Restore" +msgstr "Restaura" + +msgid "Retry" +msgstr "Reintent" + +msgid "Revert" +msgstr "" + +msgid "Revoke" +msgstr "Revoca" + +msgid "Save" +msgstr "" + +msgid "Set" +msgstr "Aplica" + +msgid "Show" +msgstr "" + +msgid "Stage" +msgstr "" + +msgid "Update" +msgstr "Actualització" + +msgid "View" +msgstr "Visualització" + +#, fuzzy +msgid "Customization" +msgstr "Confirmació" + +msgid "Pagination Size" +msgstr "" + +msgid "Collapse All" +msgstr "" + +msgid "Expand All" +msgstr "" + +msgid "General" +msgstr "General" + +msgid "Identity Settings" +msgstr "Paràmetres de la identitat" + +#, fuzzy +msgid "Record Settings" +msgstr "Paràmetres dels comptes" + +#, fuzzy, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "Paràmetres de la identitat" + +msgid "Back to Top" +msgstr "" + +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "" + +msgid "Add custom value" +msgstr "" + +msgid "Available" +msgstr "Disponible" + +msgid "Some operations failed." +msgstr "" + +#, fuzzy +msgid "Operations Error" +msgstr "Opcions" + +msgid "Confirmation" +msgstr "Confirmació" + +msgid "Custom value" +msgstr "" + +msgid "This page has unsaved changes. Please save or revert." +msgstr "" + +msgid "Unsaved Changes" +msgstr "Canvis sense desar" + +#, fuzzy, python-brace-format +msgid "Edit ${entity}" +msgstr "Identitat" + +#, fuzzy +msgid "Hide details" +msgstr "Mostra els detalls" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "" + +msgid "Prospective" +msgstr "" + +#, fuzzy +msgid "Redirection" +msgstr "Directori de l'usuari" + +msgid "Select entries to be removed." +msgstr "" + +msgid "Result" +msgstr "" + +msgid "Show details" +msgstr "Mostra els detalls" + +msgid "Success" +msgstr "" + +msgid "Validation error" +msgstr "" + +msgid "Input form contains invalid or missing values." +msgstr "" + +msgid "Please try the following options:" +msgstr "" + +msgid "If the problem persists please contact the system administrator." +msgstr "" + +msgid "Refresh the page." +msgstr "" + +msgid "Reload the browser." +msgstr "" + +msgid "Return to the main page and retry the operation" +msgstr "" + +#, python-brace-format +msgid "An error has occurred (${error})" +msgstr "" + +#, fuzzy +msgid "HTTP Error" +msgstr "Error" + +msgid "Internal Error" +msgstr "" + +#, fuzzy +msgid "IPA Error" +msgstr "Error" + +msgid "No response" +msgstr "" + +msgid "Unknown Error" +msgstr "Error desconegut" + +msgid "URL" +msgstr "URL" + +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} members:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} member managers:" +msgstr "" + +msgid "Settings" +msgstr "Paràmetres" + +msgid "Search" +msgstr "Cerca" + +msgid "False" +msgstr "Fals" + +#, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Allowed to create keytab" +msgstr "" + +msgid "Allowed to retrieve keytab" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Add Kerberos Principal Alias" +msgstr "" + +msgid "New kerberos principal alias" +msgstr "" + +msgid "Remove Kerberos Alias" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "" + +msgid "Inherited from server configuration" +msgstr "" + +msgid "MS-PAC" +msgstr "" + +msgid "Override inherited settings" +msgstr "" + +msgid "PAD" +msgstr "" + +#, fuzzy +msgid "Authenticating" +msgstr "Paràmetres dels comptes" + +msgid "Authentication with personal certificate failed" +msgstr "" + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" + +msgid "Continue to next page" +msgstr "" + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" + +msgid "Login failed due to an unknown reason" +msgstr "" + +msgid "Logged In As" +msgstr "" + +msgid "Authentication with Kerberos failed" +msgstr "" + +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" + +msgid "Loading" +msgstr "" + +msgid "Kerberos Principal you entered is expired" +msgstr "" + +msgid "Loading data" +msgstr "" + +msgid "Log in" +msgstr "" + +#, fuzzy +msgid "Log In Using Certificate" +msgstr "Certificat" + +msgid "Log in using personal certificate" +msgstr "" + +msgid "Log out" +msgstr "" + +msgid "Log out error" +msgstr "" + +msgid "Password or Password+One-Time Password" +msgstr "" + +#, python-brace-format +msgid "You will be redirected in ${count}s" +msgstr "" + +msgid "Sync OTP Token" +msgstr "" + +msgid "Synchronizing" +msgstr "" + +msgid "The user account you entered is locked" +msgstr "" + +msgid "number of passwords" +msgstr "" + +msgid "seconds" +msgstr "segons" + +#, fuzzy +msgid "Migrating" +msgstr "Configuració" + +msgid "There was a problem with your request. Please, try again later." +msgstr "" + +msgid "Password migration was not successful" +msgstr "" + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" + +msgid "The password or username you entered is incorrect" +msgstr "" + +msgid "Password migration was successful" +msgstr "" + +msgid "Attribute" +msgstr "Atribut" + +msgid "Add delegation" +msgstr "" + +msgid "Remove delegations" +msgstr "" + +#, fuzzy +msgid "Add permission" +msgstr "permisos" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Remove permissions" +msgstr "permisos" + +#, python-brace-format +msgid "Remove privileges from permission '${primary_key}'" +msgstr "" + +msgid "Add privilege" +msgstr "" + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "" + +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "" + +msgid "Remove privileges" +msgstr "" + +#, python-brace-format +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "" + +#, python-brace-format +msgid "Remove roles from privilege '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Role Settings" +msgstr "Paràmetres" + +msgid "Add role" +msgstr "" + +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "" + +#, python-brace-format +msgid "Add services into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "" + +msgid "Remove roles" +msgstr "" + +#, python-brace-format +msgid "Remove role '${primary_key}' from privileges" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from role '${primary_key}'" +msgstr "" + +msgid "Add self service permission" +msgstr "" + +msgid "Remove self service permissions" +msgstr "" + +msgid "Add rule" +msgstr "" + +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to change default group?" +msgstr "" + +msgid "Default host group" +msgstr "" + +msgid "Default user group" +msgstr "" + +msgid "Exclusive" +msgstr "Exclusiu" + +msgid "Expression" +msgstr "Expressió" + +msgid "Host group rule" +msgstr "" + +msgid "Host group rules" +msgstr "" + +#, fuzzy +msgid "Inclusive" +msgstr "Exclusiu" + +msgid "Remove auto membership rules" +msgstr "" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "" + +msgid "User group rule" +msgstr "" + +msgid "User group rules" +msgstr "" + +msgid "Add automount key" +msgstr "" + +msgid "Remove automount keys" +msgstr "" + +msgid "Add automount location" +msgstr "" + +#, fuzzy +msgid "Automount Location Settings" +msgstr "Paràmetres dels comptes" + +msgid "Remove automount locations" +msgstr "" + +msgid "Add automount map" +msgstr "" + +#, fuzzy +msgid "Map Type" +msgstr "Tipus" + +msgid "Direct" +msgstr "" + +msgid "Indirect" +msgstr "" + +msgid "Remove automount maps" +msgstr "" + +msgid "Add certificate authority" +msgstr "" + +msgid "Remove certificate authorities" +msgstr "" + +msgid "Add CA ACL" +msgstr "" + +#, python-brace-format +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "All" +msgstr "Permet" + +msgid "Any CA" +msgstr "" + +#, fuzzy +msgid "Any Host" +msgstr "Ordinador central" + +#, fuzzy +msgid "Any Service" +msgstr "Serveis" + +msgid "Any Profile" +msgstr "" + +msgid "Anyone" +msgstr "Qualsevol" + +#, fuzzy +msgid "Rule status" +msgstr "Regles" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "" + +msgid "Remove CA ACLs" +msgstr "" + +#, python-brace-format +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Specified CAs" +msgstr "Sense especificar" + +msgid "Specified Hosts and Groups" +msgstr "" + +msgid "Specified Profiles" +msgstr "" + +msgid "Specified Services and Groups" +msgstr "" + +msgid "Specified Users and Groups" +msgstr "" + +msgid "Permitted to have certificates issued" +msgstr "" + +#, fuzzy +msgid "Remove certificate profiles" +msgstr "Retenció del certificat" + +#, fuzzy +msgid "AA Compromise" +msgstr "CA en compromís" + +msgid "Add principal" +msgstr "" + +msgid "Affiliation Changed" +msgstr "L'afiliació ha canviat" + +msgid "CA Compromise" +msgstr "CA en compromís" + +msgid "Certificates" +msgstr "Certificats" + +msgid "Certificate Hold" +msgstr "Retenció del certificat" + +msgid "Cessation of Operation" +msgstr "Cessació de l'operació" + +msgid "Common Name" +msgstr "Nom comú" + +msgid "the certificate with serial number " +msgstr "" + +msgid "Expires On" +msgstr "Data de venciment" + +#, fuzzy +msgid "Issued on from" +msgstr "Data d'emissió" + +#, fuzzy +msgid "Issued on to" +msgstr "Data d'emissió" + +#, fuzzy +msgid "Maximum serial number" +msgstr "Número de sèrie" + +#, fuzzy +msgid "Minimum serial number" +msgstr "Número de sèrie" + +#, fuzzy +msgid "Revoked on from" +msgstr "Revocat" + +#, fuzzy +msgid "Revoked on to" +msgstr "Revocat" + +msgid "Valid not after from" +msgstr "" + +msgid "Valid not after to" +msgstr "" + +msgid "Valid not before from" +msgstr "" + +msgid "Valid not before to" +msgstr "" + +msgid "Fingerprints" +msgstr "Empremtes digitals" + +#, fuzzy +msgid "Get Certificate" +msgstr "Certificat" + +#, fuzzy +msgid "Certificate Hold Removed" +msgstr "Retenció del certificat" + +#, python-brace-format +msgid "Issue new certificate for host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for user '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Issue new certificate" +msgstr "Certificat" + +msgid "Issued By" +msgstr "Emès per" + +msgid "Issued On" +msgstr "Data d'emissió" + +msgid "Issued To" +msgstr "Emès a nom de" + +msgid "Key Compromise" +msgstr "Clau en compromís" + +#, fuzzy +msgid "No Valid Certificate" +msgstr "Certificat" + +#, fuzzy +msgid "New Certificate" +msgstr "Certificat" + +msgid "Certificate in base64 or PEM format" +msgstr "" + +msgid "Note" +msgstr "Nota" + +msgid "Organization" +msgstr "Organització" + +msgid "Organizational Unit" +msgstr "Unitat organitzativa" + +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "" + +msgid "Privilege Withdrawn" +msgstr "" + +#, fuzzy +msgid "Reason for Revocation" +msgstr "Cessació de l'operació" + +#, fuzzy +msgid "Remove certificate hold" +msgstr "Retenció del certificat" + +msgid "Do you want to remove the certificate hold?" +msgstr "" + +msgid "Remove from CRL" +msgstr "" + +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" + +#, python-brace-format +msgid " -8 '${cn}'" +msgstr "" + +#, fuzzy +msgid "Certificate requested" +msgstr "Certificats" + +#, fuzzy +msgid "Revoke certificate" +msgstr "Certificat" + +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "" + +#, fuzzy +msgid "Certificate Revoked" +msgstr "Retenció del certificat" + +msgid "REVOKED" +msgstr "" + +msgid "SHA1 Fingerprint" +msgstr "Empremta digital SHA1" + +#, fuzzy +msgid "SHA256 Fingerprint" +msgstr "Empremta digital SHA1" + +msgid "Superseded" +msgstr "Substituït" + +msgid "Unspecified" +msgstr "Sense especificar" + +#, fuzzy +msgid "Valid Certificate Present" +msgstr "Certificats" + +msgid "Valid from" +msgstr "" + +#, fuzzy +msgid "Valid to" +msgstr "Validesa" + +msgid "Validity" +msgstr "Validesa" + +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "" + +#, fuzzy +msgid "View Certificate" +msgstr "Certificat" + +#, fuzzy +msgid "Certificate Data" +msgstr "Certificat" + +#, fuzzy +msgid "Certificate For Match" +msgstr "Retenció del certificat" + +#, fuzzy +msgid "Certificate Mapping Match" +msgstr "Certificat" + +#, fuzzy +msgid "Matched Users" +msgstr "Coincideix" + +#, fuzzy +msgid "User Login" +msgstr "Entrada" + +msgid "Add certificate identity mapping rule" +msgstr "" + +msgid "Add certificate mapping data" +msgstr "" + +#, fuzzy +msgid "Configuration string" +msgstr "Configuració" + +#, python-brace-format +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "" + +msgid "Remove certificate mapping data" +msgstr "" + +msgid "Issuer and subject" +msgstr "" + +msgid "Remove certificate identity mapping rules" +msgstr "" + +#, fuzzy +msgid "Version" +msgstr "Permís" + +#, fuzzy +msgid "Group Options" +msgstr "Opcions" + +#, fuzzy +msgid "Search Options" +msgstr "Opcions" + +#, fuzzy +msgid "SELinux Options" +msgstr "Opcions" + +#, fuzzy +msgid "Server Options" +msgstr "Opcions" + +#, fuzzy +msgid "Service Options" +msgstr "Serveis" + +#, fuzzy +msgid "User Options" +msgstr "Opcions" + +msgid "Forward first" +msgstr "" + +msgid "Forwarding disabled" +msgstr "" + +msgid "Forward only" +msgstr "" + +msgid "Options" +msgstr "Opcions" + +msgid "Update System DNS Records" +msgstr "" + +msgid "Do you want to update system DNS records?" +msgstr "" + +msgid "System DNS records updated" +msgstr "" + +msgid "Add DNS forward zone" +msgstr "" + +msgid "Remove DNS forward zones" +msgstr "" + +msgid "Add DNS resource record" +msgstr "" + +msgid "DNS record was deleted because it contained no data." +msgstr "" + +#, fuzzy +msgid "Other Record Types" +msgstr "Tipus de registre" + +msgid "Address not valid, can't redirect" +msgstr "" + +msgid "Create dns record" +msgstr "" + +msgid "Creating record." +msgstr "" + +msgid "Record creation failed." +msgstr "" + +msgid "Checking if record exists." +msgstr "" + +msgid "Record not found." +msgstr "" + +msgid "Redirection to PTR record" +msgstr "" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "" + +msgid "Target reverse zone not found." +msgstr "" + +msgid "Fetching DNS zones." +msgstr "" + +msgid "An error occurred while fetching dns zones." +msgstr "" + +msgid "You will be redirected to DNS Zone." +msgstr "" + +msgid "Remove DNS resource records" +msgstr "" + +#, fuzzy +msgid "Standard Record Types" +msgstr "Tipus de registre" + +msgid "Records for DNS Zone" +msgstr "" + +msgid "Record Type" +msgstr "Tipus de registre" + +msgid "Add DNS zone" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "" + +#, fuzzy +msgid "DNS Zone Settings" +msgstr "Paràmetres dels comptes" + +msgid "Remove DNS zones" +msgstr "" + +#, fuzzy +msgid "Remove Permission" +msgstr "Permís" + +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "" + +msgid "Skip DNS check" +msgstr "" + +msgid "Skip overlap check" +msgstr "" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" + +msgid "Authoritative nameserver change" +msgstr "" + +msgid "Level" +msgstr "" + +msgid "Set Domain Level" +msgstr "" + +msgid "Add user group" +msgstr "" + +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user ID override into user group '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Group Settings" +msgstr "Paràmetres dels comptes" + +msgid "External" +msgstr "Extern" + +msgid "Groups" +msgstr "Grups" + +#, fuzzy +msgid "Group categories" +msgstr "Nom del grup" + +msgid "Change to external group" +msgstr "" + +msgid "Change to POSIX group" +msgstr "" + +msgid "Non-POSIX" +msgstr "" + +msgid "POSIX" +msgstr "" + +msgid "Remove user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Group Type" +msgstr "Nom del grup" + +msgid "Add HBAC rule" +msgstr "" + +#, python-brace-format +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Accessing" +msgstr "Temps d'accés" + +msgid "Remove HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Via Service" +msgstr "Serveis" + +msgid "Who" +msgstr "Qui" + +msgid "Add HBAC service" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "" + +msgid "Remove HBAC services" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "" + +msgid "Add HBAC service group" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "" + +msgid "Remove HBAC service groups" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "" + +msgid "Access Denied" +msgstr "S'ha denegat l'accés" + +msgid "Access Granted" +msgstr "Accés permès" + +#, fuzzy +msgid "Include Disabled" +msgstr "Inhabilitat" + +#, fuzzy +msgid "Include Enabled" +msgstr "S'ha habilitat" + +msgid "HBAC Test" +msgstr "" + +msgid "Matched" +msgstr "Coincideix" + +msgid "Missing values: " +msgstr "" + +msgid "New Test" +msgstr "" + +msgid "Rules" +msgstr "Regles" + +msgid "Run Test" +msgstr "" + +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "" + +msgid "Unmatched" +msgstr "No coincideix" + +msgid "Add host" +msgstr "" + +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "" + +#, fuzzy +msgid "Host Certificate" +msgstr "Certificat" + +msgid "Host Name" +msgstr "Nom de l'ordinador" + +msgid "Delete Key, Unprovision" +msgstr "" + +#, fuzzy +msgid "Host Settings" +msgstr "Paràmetres" + +msgid "Enrolled" +msgstr "" + +msgid "Enrollment" +msgstr "" + +msgid "Fully Qualified Host Name" +msgstr "" + +#, fuzzy +msgid "Generate OTP" +msgstr "General" + +#, fuzzy +msgid "Generated OTP" +msgstr "General" + +msgid "Kerberos Key" +msgstr "" + +msgid "Kerberos Key Not Present" +msgstr "" + +msgid "Kerberos Key Present, Host Provisioned" +msgstr "" + +#, fuzzy +msgid "One-Time Password" +msgstr "Reinicia la contrasenya" + +msgid "One-Time Password Not Present" +msgstr "" + +msgid "One-Time Password Present" +msgstr "" + +#, fuzzy +msgid "Reset OTP" +msgstr "Reinicia" + +#, fuzzy +msgid "Reset One-Time Password" +msgstr "Reinicia la contrasenya" + +msgid "Set OTP" +msgstr "" + +msgid "OTP set" +msgstr "" + +#, fuzzy +msgid "Set One-Time Password" +msgstr "Reinicia la contrasenya" + +msgid "Remove hosts" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "" + +#, fuzzy +msgid "Unprovision" +msgstr "permisos" + +msgid "Are you sure you want to unprovision this host?" +msgstr "" + +msgid "Unprovisioning host" +msgstr "" + +msgid "Host unprovisioned" +msgstr "" + +msgid "Add host group" +msgstr "" + +#, python-brace-format +msgid "Add hosts into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Host Group Settings" +msgstr "Paràmetres dels comptes" + +msgid "Remove host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "" + +msgid "User to override" +msgstr "" + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" + +msgid "Enter trusted user login." +msgstr "" + +msgid "Profile" +msgstr "" + +msgid "Group to override" +msgstr "" + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" + +#, fuzzy +msgid "Enter trusted group name." +msgstr "Nom de grup de xarxa" + +msgid "Add ID view" +msgstr "" + +msgid "Add group ID override" +msgstr "" + +msgid "Add user ID override" +msgstr "" + +#, python-brace-format +msgid "${primary_key} applies to:" +msgstr "" + +msgid "Applied to hosts" +msgstr "" + +msgid "Apply to host groups" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "" + +msgid "Apply to hosts" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "" + +#, python-brace-format +msgid "${primary_key} overrides:" +msgstr "" + +msgid "Remove ID views" +msgstr "" + +msgid "Remove user ID overrides" +msgstr "" + +msgid "Remove group ID overrides" +msgstr "" + +msgid "Un-apply from host groups" +msgstr "" + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" + +#, fuzzy +msgid "Un-apply" +msgstr "Aplica" + +msgid "Un-apply from hosts" +msgstr "" + +msgid "Un-apply ID Views from hosts" +msgstr "" + +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "" + +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "" + +msgid "Add netgroup" +msgstr "" + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Netgroup Settings" +msgstr "Paràmetres dels comptes" + +#, fuzzy +msgid "Netgroups" +msgstr "Nom de grup de xarxa" + +msgid "Remove netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from netgroup '${primary_key}'" +msgstr "" + +msgid "Add OTP token" +msgstr "" + +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" + +#, fuzzy +msgid "Configure your token" +msgstr "Configuració" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" + +#, fuzzy +msgid "OTP Token Settings" +msgstr "Paràmetres dels comptes" + +#, fuzzy +msgid "Disable token" +msgstr "Inhabilita" + +#, fuzzy +msgid "Enable token" +msgstr "Habilita" + +msgid "Remove OTP tokens" +msgstr "" + +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "" + +msgid "Show QR code" +msgstr "" + +#, fuzzy +msgid "Show configuration uri" +msgstr "Configuració" + +msgid "Counter-based (HOTP)" +msgstr "" + +msgid "Time-based (TOTP)" +msgstr "" + +#, fuzzy +msgid "Add Custom Attribute" +msgstr "Atribut" + +#, fuzzy +msgid "Permission settings" +msgstr "Permisos" + +#, fuzzy +msgid "Attribute breakdown" +msgstr "Atribut" + +#, fuzzy +msgid "Privilege Settings" +msgstr "Paràmetres" + +msgid "Public key:" +msgstr "" + +msgid "Set public key" +msgstr "" + +msgid "Show/Set key" +msgstr "" + +msgid "Modified: key not set" +msgstr "" + +msgid "Modified" +msgstr "Modificat" + +msgid "New: key not set" +msgstr "" + +msgid "New: key set" +msgstr "" + +msgid "Add password policy" +msgstr "" + +#, fuzzy +msgid "Password Policy" +msgstr "Contrasenya" + +msgid "Remove password policies" +msgstr "" + +msgid "Add ID range" +msgstr "" + +#, fuzzy +msgid "Range Settings" +msgstr "Paràmetres" + +msgid "Base ID" +msgstr "" + +msgid "Primary RID base" +msgstr "" + +msgid "Range size" +msgstr "" + +#, fuzzy +msgid "Domain SID" +msgstr "Domini" + +msgid "Secondary RID base" +msgstr "" + +msgid "Remove ID ranges" +msgstr "" + +#, fuzzy +msgid "Active Directory domain with POSIX attributes" +msgstr "Domini d'Active Directory" + +msgid "Detect" +msgstr "" + +#, fuzzy +msgid "Local domain" +msgstr "Localitat" + +msgid "IPA trust" +msgstr "" + +#, fuzzy +msgid "Active Directory winsync" +msgstr "Domini d'Active Directory" + +msgid "Add RADIUS server" +msgstr "" + +msgid "RADIUS Proxy Server Settings" +msgstr "" + +msgid "Remove RADIUS servers" +msgstr "" + +#, fuzzy +msgid "Realm Domains" +msgstr "Domini" + +msgid "Check DNS" +msgstr "" + +msgid "Do you also want to perform DNS check?" +msgstr "" + +#, fuzzy +msgid "Force Update" +msgstr "Actualització" + +msgid "Add SELinux user map" +msgstr "" + +#, python-brace-format +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "" + +msgid "Remove selinux user maps" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Server Roles" +msgstr "Nom del servidor" + +#, fuzzy +msgid "Server Role" +msgstr "Nom del servidor" + +msgid "Warning: Consider service replication" +msgstr "" + +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" + +#, fuzzy +msgid "Delete Server" +msgstr "Suprimeix" + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" + +#, fuzzy +msgid "Add service" +msgstr "serveis" + +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "" + +#, fuzzy +msgid "Service Certificate" +msgstr "Certificat" + +#, fuzzy +msgid "Service Settings" +msgstr "Paràmetres de la identitat" + +#, fuzzy +msgid "Provisioning" +msgstr "Permís" + +#, fuzzy +msgid "Remove services" +msgstr "serveis" + +#, python-brace-format +msgid "Remove service '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing service '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to unprovision this service?" +msgstr "" + +msgid "Unprovisioning service" +msgstr "" + +msgid "Service unprovisioned" +msgstr "" + +msgid "Kerberos Key Present, Service Provisioned" +msgstr "" + +msgid "SSH public keys" +msgstr "" + +msgid "SSH public key:" +msgstr "" + +msgid "Set SSH key" +msgstr "" + +msgid "Are you sure you want to activate selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "" + +msgid "Add stage user" +msgstr "" + +#, fuzzy +msgid "Stage users" +msgstr "usuaris" + +msgid "Preserved users" +msgstr "" + +msgid "Remove preserved users" +msgstr "" + +msgid "Remove stage users" +msgstr "" + +msgid "Are you sure you want to stage selected users?" +msgstr "" + +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "" + +msgid "Are you sure you want to restore selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "" + +msgid "User categories" +msgstr "" + +#, fuzzy +msgid "Add subid" +msgstr "serveis" + +msgid "Assigned subids" +msgstr "" + +msgid "DNA remaining" +msgstr "" + +msgid "SubGID range size" +msgstr "" + +msgid "SubGID range start" +msgstr "" + +msgid "SubUID range size" +msgstr "" + +msgid "SubUID range start" +msgstr "" + +msgid "Remaining subids" +msgstr "" + +msgid "Subordinate ID Statistics" +msgstr "" + +msgid "Add sudo command" +msgstr "" + +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "" + +msgid "Remove sudo commands" +msgstr "" + +#, python-brace-format +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "" + +msgid "Add sudo command group" +msgstr "" + +#, python-brace-format +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "" + +msgid "Remove sudo command groups" +msgstr "" + +#, python-brace-format +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "" + +msgid "Add sudo rule" +msgstr "" + +msgid "Add sudo option" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "" + +msgid "Allow" +msgstr "Permet" + +#, fuzzy +msgid "Any Command" +msgstr "Ordres" + +#, fuzzy +msgid "Any Group" +msgstr "Grup" + +#, fuzzy +msgid "Run Commands" +msgstr "Ordres" + +msgid "Deny" +msgstr "" + +#, fuzzy +msgid "Access this host" +msgstr "Temps d'accés" + +#, fuzzy +msgid "Option added" +msgstr "Opcions" + +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "" + +msgid "Remove sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "" + +msgid "As Whom" +msgstr "" + +msgid "Specified Commands and Groups" +msgstr "" + +msgid "Specified Groups" +msgstr "" + +msgid "Remove sudo options" +msgstr "" + +msgid "Autogenerated" +msgstr "" + +#, fuzzy +msgid "Segment details" +msgstr "Mostra els detalls" + +#, fuzzy +msgid "Replication configuration" +msgstr "Cessació de l'operació" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" + +msgid "Add IPA location" +msgstr "" + +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "" + +msgid "Remove IPA locations" +msgstr "" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "" + +msgid "Add topology segment" +msgstr "" + +msgid "Remove topology segments" +msgstr "" + +msgid "Account" +msgstr "Compte" + +msgid "Add trust" +msgstr "" + +msgid "Administrative account" +msgstr "" + +msgid "SID blocklists" +msgstr "" + +#, fuzzy +msgid "Trust Settings" +msgstr "Paràmetres dels comptes" + +msgid "Establish using" +msgstr "" + +msgid "Fetch domains" +msgstr "" + +#, fuzzy +msgid "Pre-shared password" +msgstr "Reinicia la contrasenya" + +msgid "Remove trusts" +msgstr "" + +msgid "Remove domains" +msgstr "" + +msgid "Trust direction" +msgstr "" + +msgid "Trust status" +msgstr "" + +#, fuzzy +msgid "Trust type" +msgstr "Confiança" + +msgid "Alternative UPN suffixes" +msgstr "" + +msgid "User attributes for SMB services" +msgstr "" + +msgid "Path to a script executed on a Windows system at logon" +msgstr "" + +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "" + +msgid "Path to a user home directory, in UNC format" +msgstr "" + +msgid "Drive to mount a home directory" +msgstr "" + +msgid "Account Settings" +msgstr "Paràmetres dels comptes" + +#, fuzzy +msgid "Account Status" +msgstr "Paràmetres dels comptes" + +msgid "Active users" +msgstr "" + +#, fuzzy +msgid "Add user" +msgstr "usuari" + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "" + +msgid "Auto assign subordinate ids" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to auto-assign a subordinate id to user ${object}?" +msgstr "" + +#, fuzzy +msgid "Contact Settings" +msgstr "Paràmetres dels comptes" + +#, fuzzy +msgid "Delete mode" +msgstr "Suprimeix" + +#, fuzzy +msgid "Employee Information" +msgstr "Confirmació" + +msgid "Error changing account status" +msgstr "" + +msgid "Password expiration" +msgstr "" + +msgid "Mailing Address" +msgstr "Adreça postal" + +#, fuzzy +msgid "Misc. Information" +msgstr "Confirmació" + +#, fuzzy +msgid "delete" +msgstr "Suprimeix" + +#, fuzzy +msgid "preserve" +msgstr "serveis" + +msgid "No private group" +msgstr "" + +msgid "Remove users" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" + +#, python-brace-format +msgid "Click to ${action}" +msgstr "" + +msgid "Unlock" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "" + +msgid "Add vault" +msgstr "" + +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "" + +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" + +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" + +msgid "Asymmetric" +msgstr "" + +msgid "Vaults Config" +msgstr "" + +msgid "Members" +msgstr "" + +msgid "My User Vaults" +msgstr "" + +msgid "Owners" +msgstr "" + +msgid "Remove vaults" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Service Vaults" +msgstr "Serveis" + +msgid "Shared" +msgstr "" + +msgid "Shared Vaults" +msgstr "" + +msgid "Standard" +msgstr "" + +msgid "Symmetric" +msgstr "" + +msgid "Vault Type" +msgstr "" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" + +#, fuzzy +msgid "User Vaults" +msgstr "Usuaris" + +msgid "Current password is required" +msgstr "" + +#, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "" + +#, fuzzy +msgid "First OTP" +msgstr "Nom" + +#, fuzzy +msgid "New password is required" +msgstr "Contrasenya nova" + +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" + +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" + +msgid "Token synchronization failed" +msgstr "" + +msgid "The username, password or token codes are not correct" +msgstr "" + +msgid "Token was synchronized" +msgstr "" + +msgid "Password change complete" +msgstr "" + +msgid "Your password has expired. Please enter a new password." +msgstr "" + +#, fuzzy +msgid "Passwords must match" +msgstr "Les contrasenyes no coincideixen" + +msgid "Password reset was not successful." +msgstr "" + +#, fuzzy +msgid "Reset your password." +msgstr "Reinicia la contrasenya" + +msgid "Second OTP" +msgstr "" + +#, fuzzy +msgid "Verify Password" +msgstr "Contrasenya nova" + +msgid "Are you sure you want to delete selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "" + +msgid "Are you sure you want to disable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "" + +msgid "Are you sure you want to enable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "" + +msgid "Some entries were not deleted" +msgstr "" + +msgid "Quick Links" +msgstr "" + +msgid "Select All" +msgstr "Selecciona-ho tot" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" + +msgid "Unselect All" +msgstr "No seleccionis res" + +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" + +msgid "Working" +msgstr "" + +msgid "Audit" +msgstr "" + +msgid "Authentication" +msgstr "" + +#, fuzzy +msgid "Automount" +msgstr "Compte" + +msgid "DNS" +msgstr "DNS" + +msgid "Host-Based Access Control" +msgstr "" + +msgid "Identity" +msgstr "Identitat" + +#, fuzzy +msgid "IPA Server" +msgstr "Servidor" + +#, fuzzy +msgid "Network Services" +msgstr "Serveis" + +msgid "Policy" +msgstr "Política" + +msgid "Role-Based Access Control" +msgstr "" + +msgid "Subordinate IDs" +msgstr "" + +msgid "Sudo" +msgstr "" + +msgid "Topology" +msgstr "" + +#, fuzzy +msgid "Trusts" +msgstr "Confiança" + +msgid "True" +msgstr "Cert" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" + +msgid "API Browser" +msgstr "" + +#, fuzzy +msgid "First" +msgstr "Nom" + +#, fuzzy +msgid "Last" +msgstr "Cognom" + +msgid "Next" +msgstr "Següent" + +msgid "Page" +msgstr "Pàgina" + +msgid "Prev" +msgstr "Anterior" + +msgid "Undo" +msgstr "" + +msgid "Undo this change." +msgstr "" + +#, fuzzy +msgid "Undo All" +msgstr "No seleccionis res" + +msgid "Undo all changes in this field." +msgstr "" + +msgid "Text does not match field pattern" +msgstr "" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" + +msgid "Must be a decimal number" +msgstr "" + +msgid "Format error" +msgstr "" + +msgid "Must be an integer" +msgstr "" + +msgid "Not a valid IP address" +msgstr "" + +msgid "Not a valid IPv4 address" +msgstr "" + +msgid "Not a valid IPv6 address" +msgstr "" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "" + +msgid "Parse error" +msgstr "" + +msgid "Must be a positive number" +msgstr "" + +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "" + +msgid "Required field" +msgstr "" + +msgid "Unsupported value" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +#, fuzzy +msgid "" +"\n" +"IPA locations\n" +msgstr "Accions" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +#, fuzzy +msgid "location" +msgstr "Ubicació" + +#, fuzzy +msgid "locations" +msgstr "Ubicació" + +#, fuzzy +msgid "IPA Locations" +msgstr "Ubicació" + +#, fuzzy +msgid "IPA Location" +msgstr "Ubicació" + +#, fuzzy +msgid "Location name" +msgstr "Ubicació" + +msgid "IPA location name" +msgstr "" + +#, fuzzy +msgid "IPA Location description" +msgstr "descripció" + +#, fuzzy +msgid "Servers" +msgstr "Servidor" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "" + +msgid "Delete an IPA location." +msgstr "" + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "" + +msgid "Modify information about an IPA location." +msgstr "" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "" + +msgid "Search for IPA locations." +msgstr "" + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an IPA location." +msgstr "" + +msgid "Servers in location" +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +#, fuzzy +msgid "netgroups" +msgstr "grup" + +#, fuzzy +msgid "Netgroup" +msgstr "grup" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "One time password commands" +msgstr "" + +#, fuzzy +msgid "OTP configuration options" +msgstr "Configuració" + +#, fuzzy +msgid "OTP Configuration" +msgstr "Configuració" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +#, fuzzy +msgid "URI" +msgstr "UID" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "" + +msgid "cannot be empty" +msgstr "" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"If the user authentication method is set to password+OTP, the user should\n" +"pass the --otp option when resetting the password.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To reset your own password when password+OTP is set as authentication " +"method:\n" +" ipa passwd --otp\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +msgid "The OTP if the user has a token configured" +msgstr "" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "" +"\n" +"Permissions\n" +msgstr "Permisos" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +#, fuzzy +msgid "" +"\n" +"Managed permissions\n" +msgstr "permisos" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "must be enclosed in parentheses" +msgstr "" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "" + +#, python-format +msgid "Deprecated; use %s" +msgstr "" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, python-format +msgid "Entry %s not found" +msgstr "" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, python-format +msgid "option was renamed; use %s" +msgstr "" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, python-format +msgid "%s: group not found" +msgstr "" + +msgid "target and targetgroup are mutually exclusive" +msgstr "" + +msgid "subtree and type are mutually exclusive" +msgstr "" + +msgid "Bad search filter" +msgstr "" + +#, python-format +msgid "Entry %s does not exist" +msgstr "" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, python-format +msgid "Added permission \"%(value)s\"" +msgstr "" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "" + +msgid "cannot delete managed permissions" +msgstr "" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "" + +#, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +#, fuzzy +msgid "invalid port number" +msgstr "Número de sèrie" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +#, fuzzy +msgid "RADIUS Servers" +msgstr "Servidor" + +#, fuzzy +msgid "RADIUS Server" +msgstr "Servidor" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "Role" +msgstr "Rol" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"API Schema\n" +msgstr "" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +#, fuzzy +msgid "Documentation" +msgstr "Ubicació" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +msgid "Help topic" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +#, fuzzy +msgid "Method name" +msgstr "Nom de grup de xarxa" + +msgid "Display information about a command." +msgstr "" + +msgid "Search for commands." +msgstr "" + +msgid "Return command defaults" +msgstr "" + +#, python-brace-format +msgid "{oname}: {command_name} not found" +msgstr "" + +msgid "Display information about a class." +msgstr "" + +msgid "Search for classes." +msgstr "" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +msgid "CLI name" +msgstr "Cognom" + +#, fuzzy +msgid "Confirm (password)" +msgstr "contrasenya" + +msgid "Default" +msgstr "" + +msgid "Default from" +msgstr "" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +#, fuzzy +msgid "Option group" +msgstr "Opcions" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" +msgstr "" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command output." +msgstr "" + +msgid "Search for command outputs." +msgstr "" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "self service permission" +msgstr "" + +#, fuzzy +msgid "self service permissions" +msgstr "permisos" + +#, fuzzy +msgid "Self Service Permissions" +msgstr "Permisos" + +#, fuzzy +msgid "Self Service Permission" +msgstr "Permís" + +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +msgid "SELinux User Map rule" +msgstr "" + +msgid "SELinux User Map rules" +msgstr "" + +msgid "SELinux User Maps" +msgstr "" + +msgid "SELinux User Map" +msgstr "" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "" + +#, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +#, fuzzy +msgid "server role" +msgstr "Nom del servidor" + +#, fuzzy +msgid "server roles" +msgstr "Nom del servidor" + +msgid "IPA Server Roles" +msgstr "" + +#, fuzzy +msgid "IPA Server Role" +msgstr "Nom del servidor" + +msgid "IPA server role name" +msgstr "" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +#, fuzzy +msgid "IPA role name" +msgstr "Nom del grup" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +#, python-format +msgid "authentication indicators not allowed in service \"%s\"" +msgstr "" + +msgid "Malformed principal" +msgstr "" + +msgid "{} is required by the IPA master" +msgstr "" + +#, fuzzy +msgid "service" +msgstr "serveis" + +msgid "services" +msgstr "serveis" + +msgid "Service principal alias" +msgstr "" + +msgid "Base-64 encoded service certificate" +msgstr "" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +msgid "Add a new IPA service." +msgstr "" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "" + +msgid "force principal name even if host not in DNS" +msgstr "" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +msgid "Add a new SMB service." +msgstr "" + +msgid "SMB service NetBIOS name" +msgstr "" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to a service" +msgstr "" + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a service" +msgstr "" + +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +#, fuzzy +msgid "Stage Users" +msgstr "Usuaris" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +#, fuzzy +msgid "stage users" +msgstr "usuaris" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Subordinate ids\n" +"\n" +"Manage subordinate user and group ids for users\n" +"\n" +"EXAMPLES:\n" +"\n" +" Auto-assign a subordinate id range to current user\n" +" ipa subid-generate\n" +"\n" +" Auto-assign a subordinate id range to user alice:\n" +" ipa subid-generate --owner=alice\n" +"\n" +" Find subordinate ids for user alice:\n" +" ipa subid-find --owner=alice\n" +"\n" +" Match entry by any subordinate uid in range:\n" +" ipa subid-match --subuid=2147483649\n" +msgstr "" + +msgid "Subordinate id" +msgstr "" + +msgid "Subordinate ids" +msgstr "" + +#, fuzzy +msgid "Subordinate id description" +msgstr "descripció" + +msgid "Owning user of subordinate id entry" +msgstr "" + +msgid "Start value for subordinate user ID (subuid) range" +msgstr "" + +msgid "Subordinate user ID count" +msgstr "" + +msgid "Start value for subordinate group ID (subgid) range" +msgstr "" + +msgid "Subordinate group ID count" +msgstr "" + +#, python-format +msgid "" +"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." +msgstr "" + +#, python-format +msgid "'%(dn)s is not a valid user" +msgstr "" + +msgid "subgidnumber must be equal to subuidnumber" +msgstr "" + +#, fuzzy +msgid "Add a new subordinate id." +msgstr "permisos" + +#, python-format +msgid "Added subordinate id \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "Delete a subordinate id." +msgstr "Retenció del certificat" + +#, python-format +msgid "Deleted subordinate id \"%(value)s\"" +msgstr "" + +msgid "Modify a subordinate id." +msgstr "" + +#, python-format +msgid "Modified subordinate id \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "Search for subordinate id." +msgstr "permisos" + +#, python-format +msgid "%(count)d subordinate id matched" +msgid_plural "%(count)d subordinate ids matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about a subordinate id." +msgstr "" + +msgid "Generate and auto-assign subuid and subgid range to user entry" +msgstr "" + +msgid "Match users by any subordinate uid in their range" +msgstr "" + +msgid "SubUID match" +msgstr "" + +msgid "Match value for subordinate user ID" +msgstr "" + +msgid "Subordinate id statistics" +msgstr "" + +#, python-format +msgid "%(remaining)i remaining subordinate id ranges" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +#, fuzzy +msgid "sudo command" +msgstr "Ordres" + +#, fuzzy +msgid "sudo commands" +msgstr "Ordres" + +#, fuzzy +msgid "Sudo Commands" +msgstr "Ordres" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(value)s" +msgstr "" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +#, fuzzy +msgid "trust" +msgstr "Confiança" + +#, fuzzy +msgid "trusts" +msgstr "Confiança" + +msgid "Trust" +msgstr "Confiança" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +#, fuzzy +msgid "External trust" +msgstr "Extern" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +msgid "trust configuration" +msgstr "Configuració" + +#, fuzzy +msgid "Global Trust Configuration" +msgstr "Configuració" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "" + +#, fuzzy +msgid "SID" +msgstr "UID" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +#, fuzzy +msgid "Domain enabled" +msgstr "Inhabilitat" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "users" +msgstr "usuaris" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "Failed logins" +msgstr "Entrada" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +msgid "Time now" +msgstr "L'hora actual" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the user entry" +msgstr "" + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +#, fuzzy +msgid "Vault Container" +msgstr "Continua" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "Vault configuration" +msgstr "Configuració" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "" + +msgid "Retrieve data from a vault." +msgstr "" + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +#, fuzzy +msgid "password policy" +msgstr "contrasenya" + +#, fuzzy +msgid "password policies" +msgstr "contrasenya" + +#, fuzzy +msgid "Password Policies" +msgstr "Contrasenya" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +#, fuzzy +msgid "User check" +msgstr "Nom d'usuari" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be equal to or greater than the minimum." +msgstr "" + +msgid "cannot delete global password policy" +msgstr "" + +msgid "priority cannot be set on global policy" +msgstr "" + +msgid "" +"\n" +"IPA servers\n" +msgstr "" + +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "" + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +#, fuzzy +msgid "server" +msgstr "Servidor" + +#, fuzzy +msgid "servers" +msgstr "serveis" + +#, fuzzy +msgid "IPA Servers" +msgstr "Servidor" + +#, fuzzy +msgid "Server location" +msgstr "Nom del servidor" + +#, fuzzy +msgid "Service weight" +msgstr "Serveis" + +msgid "Weight for server services" +msgstr "" + +msgid "Service relative weight" +msgstr "" + +msgid "Relative weight for server services (counts per location)" +msgstr "" + +msgid "Enabled server roles" +msgstr "" + +msgid "List of enabled roles" +msgstr "" + +msgid "Modify information about an IPA server." +msgstr "" + +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +#, python-format +msgid "Failed to remove server from security domain: %s" +msgstr "" + +msgid "Server has already been deleted" +msgstr "" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +#, fuzzy +msgid "State" +msgstr "Estat" + +#, fuzzy +msgid "Server state" +msgstr "Nom del servidor" + +#, python-format +msgid "Changed server state of \"%(value)s\"." +msgstr "" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." +msgstr "" + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"Each option needs to be added separately and no validation is done whether\n" +"the option is known by sudo or is in a valid format. Environment variables\n" +"also need to be set individually. For example env_keep=\"FOO BAR\" in " +"sudoers\n" +"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" +"+=BAR.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set multiple default Sudo options:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate' --" +"sudooption mail_badpass\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "" + +#, fuzzy +msgid "Sudo Rules" +msgstr "Regles" + +msgid "Sudo Rule" +msgstr "" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +#, fuzzy +msgid "command" +msgstr "Ordres" + +#, fuzzy +msgid "commands" +msgstr "Ordres" + +msgid "runAs user" +msgstr "" + +#, fuzzy +msgid "runAs users" +msgstr "usuaris" + +#, fuzzy +msgid "group runAs" +msgstr "grup" + +msgid "runAs groups" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" msgstr "" msgid "Request must be a dict" @@ -23524,6 +23812,17 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + #, python-format msgid "" "\n" @@ -23543,32 +23842,6 @@ msgstr "" msgid "Topology does not allow server %(server)s to replicate with servers:" msgstr "" -msgid "Trusting forest" -msgstr "" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -#, fuzzy -msgid "Non-Active Directory domain" -msgstr "Domini d'Active Directory" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - msgid "" "\n" "Classes to manage trust joins using DCE-RPC calls\n" @@ -23730,6 +24003,34 @@ msgstr "" msgid "must be at least 1" msgstr "" +msgid "Out of memory\n" +msgstr "Sense memòria\n" + +msgid "Warning unrecognized encryption type.\n" +msgstr "" + +msgid "Warning unrecognized salt type.\n" +msgstr "" + +#, fuzzy +msgid "Out of memory!?\n" +msgstr "Sense memòria\n" + +msgid "Enctype comparison failed!\n" +msgstr "" + +msgid "Password is too long!\n" +msgstr "" + +msgid "Failed to create random key!\n" +msgstr "" + +msgid "Failed to create key!\n" +msgstr "" + +msgid "Bad or unsupported salt type.\n" +msgstr "" + #, c-format msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" msgstr "" @@ -23756,28 +24057,3 @@ msgstr "" msgid "Unable to initialize STARTTLS session\n" msgstr "" - -msgid "Warning unrecognized encryption type.\n" -msgstr "" - -msgid "Warning unrecognized salt type.\n" -msgstr "" - -#, fuzzy -msgid "Out of memory!?\n" -msgstr "Sense memòria\n" - -msgid "Enctype comparison failed!\n" -msgstr "" - -msgid "Password is too long!\n" -msgstr "" - -msgid "Failed to create random key!\n" -msgstr "" - -msgid "Failed to create key!\n" -msgstr "" - -msgid "Bad or unsupported salt type.\n" -msgstr "" diff --git a/po/cs.po b/po/cs.po index 103badce0..721bce5aa 100644 --- a/po/cs.po +++ b/po/cs.po @@ -16,778 +16,445 @@ msgstr "" "Plural-Forms: nplurals=3; plural=(n==1) ? 0 : (n>=2 && n<=4) ? 1 : 2\n" "X-Generator: Zanata 4.6.2\n" -msgid " ipa --help" -msgstr " ipa --help" - -#, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +#, c-format +msgid "cannot open configuration file %s\n" msgstr "" -"Verze %(cver)s klienta není kompatibilní s verzí %(sver)s serveru " -"'%(server)s'" -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" - -# auto translated by TM merge from project: libguestfs, version: master, -# DocId: po/libguestfs -#, python-format -msgid "%s" -msgstr "%s" - -msgid "A string searched in all relevant object attributes" -msgstr "Řetězec vyhledávaný ve všech odpovídajících atributech objektu" - -# auto translated by TM merge from project: Spacewalk Web UI, version: master, -# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource -msgid "Account" -msgstr "Účet" +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "" # auto translated by TM merge from project: selinux (policycoreutils), # version: master, DocId: policycoreutils -msgid "Add" -msgstr "Přidat" +#, fuzzy, c-format +msgid "out of memory\n" +msgstr "Nedostatek paměti\n" -# auto translated by TM merge from project: Fedora Elections Guide, version: -# master, DocId: Casting -msgid "Any Group" -msgstr "Jakákoli skupina" +#, c-format +msgid "read error\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "" + +#, c-format +msgid "principal not found\n" +msgstr "" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "realm not found\n" +msgstr "" + +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" +msgstr "" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "Kerberos Service Principal Name" +msgstr "" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +# auto translated by TM merge from project: dnf, version: master, DocId: dnf +#, fuzzy +msgid "Realm name" +msgstr "Uživatelské jméno" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "" # auto translated by TM merge from project: selinux (policycoreutils), # version: master, DocId: policycoreutils -msgid "Apply" -msgstr "Použít" +#, fuzzy, c-format +msgid "Out of memory \n" +msgstr "Nedostatek paměti\n" -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -msgid "Audit" -msgstr "Auditovat" +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "" -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -msgid "Authentication" -msgstr "Autentizace" +msgid "Simple bind failed\n" +msgstr "" -# auto translated by TM merge from project: libvirt, version: master, DocId: -# libvirt -msgid "Available" -msgstr "Dostupný" +msgid "SASL Bind failed\n" +msgstr "" -# auto translated by TM merge from project: authconfig, version: master, -# DocId: po/authconfig -msgid "Back" -msgstr "Zpět" +#, c-format +msgid "Operation failed: %s\n" +msgstr "" -# auto translated by TM merge from project: Cockpit, version: master, DocId: -# cockpit -msgid "Cancel" -msgstr "Zrušit" +#, c-format +msgid "Failed to get result: %s\n" +msgstr "" -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -msgid "City" -msgstr "Město" +#, c-format +msgid "Timeout exceeded." +msgstr "" + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "" + +#, c-format +msgid "Missing reply control!\n" +msgstr "" # auto translated by TM merge from project: selinux (policycoreutils), # version: master, DocId: policycoreutils -msgid "Class" -msgstr "Třída" +#, fuzzy, c-format +msgid "Out of Memory!\n" +msgstr "Nedostatek paměti\n" -# auto translated by TM merge from project: ibus-libpinyin, version: master, -# DocId: ibus-libpinyin -msgid "Clear" -msgstr "Vymazat" +#, c-format +msgid "Failed to create control!\n" +msgstr "" -# auto translated by TM merge from project: SETroubleShoot, version: stable, -# DocId: framework/po/setroubleshoot -msgid "Close" -msgstr "Zavřít" +#, c-format +msgid "Failed to bind to server!\n" +msgstr "" -msgid "Command name" -msgstr "Název příkazu" +#, c-format +msgid "Failed to get keytab!\n" +msgstr "" -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -msgid "Configuration" -msgstr "Nastavení" +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "" -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -msgid "Continue" -msgstr "Pokračovat" +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "" -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -msgid "DNS" -msgstr "DNS" +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "" -# auto translated by TM merge from project: ibus-input-pad, version: head, -# DocId: ibus-input-pad -msgid "Default" -msgstr "Výchozí" +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "" -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -msgid "Delete" -msgstr "Smazat" +#, c-format +msgid "Failed to retrieve any keys" +msgstr "" -msgid "Deprecated options" -msgstr "Zastaralé volby" +msgid "Failed to decode control reply!\n" +msgstr "" -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Description" -msgstr "Popis" +#, fuzzy, c-format +msgid "Passwords do not match!\n" +msgstr "Hesla se neshodují!" -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Disable" -msgstr "Zakázat" +#, c-format +msgid "Failed to open config file %s\n" +msgstr "" -# auto translated by TM merge from project: Cockpit, version: master, DocId: -# cockpit -msgid "Disabled" -msgstr "Zakázáno" +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "" + +msgid "Failed to resolve symlink to keytab.\n" +msgstr "" + +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" + +msgid "Print as little as possible" +msgstr "" + +msgid "Output only on errors" +msgstr "" + +msgid "Output debug info" +msgstr "" + +msgid "Contact this specific KDC Server" +msgstr "" # auto translated by TM merge from project: Fedora Websites, version: # alt.fedoraproject.org, DocId: po/alt.fedoraproject.org -msgid "Documentation" -msgstr "Dokumentace" +#, fuzzy +msgid "Server Name" +msgstr "Server" -# auto translated by TM merge from project: Fedora Websites, version: -# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org -msgid "Download" -msgstr "Stáhnout" +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" -# auto translated by TM merge from project: ibus-libpinyin, version: master, -# DocId: ibus-libpinyin -msgid "Edit" -msgstr "Upravit" +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Enable" -msgstr "Povolit" +msgid "Encryption types to request" +msgstr "" -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Enabled" -msgstr "Povoleno" +msgid "Comma separated encryption types list" +msgstr "" -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "Vložte znovu své %(label)s, aby se ověřila jeho správnost." +msgid "Show the list of permitted encryption types and exit" +msgstr "" -# auto translated by TM merge from project: firewalld, version: master, DocId: -# po/firewalld -msgid "Entry" -msgstr "Položka" +msgid "Permitted Encryption Types" +msgstr "" -# auto translated by TM merge from project: python-simpleline, version: -# master, DocId: python-simpleline -msgid "Error" -msgstr "Chyba" +msgid "Asks for a non-random password to use for the principal" +msgstr "" -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -msgid "Expression" -msgstr "Výraz" +msgid "LDAP DN" +msgstr "" -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Filter" -msgstr "Filtr" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -msgid "Find" -msgstr "Hledat" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -msgid "Fingerprint" -msgstr "Otisk" - -# auto translated by TM merge from project: Fedora Websites, version: -# fedoraproject.org, DocId: po/fedora-web -msgid "First" -msgstr "Prvenství " - -# auto translated by TM merge from project: ibus, version: head, DocId: ibus10 -msgid "Flags" -msgstr "Vlajky" - -# auto translated by TM merge from project: asknot-ng, version: 0.1, DocId: -# locale/asknot-ng -msgid "General" -msgstr "Obecné" - -# auto translated by TM merge from project: dnf, version: master, DocId: -# po/dnf -msgid "Group" -msgstr "Skupina" - -# auto translated by TM merge from project: libreport, version: rhel6, DocId: -# libreport -msgid "Groups" -msgstr "Skupiny" - -# auto translated by TM merge from project: abrt, version: rhel7, DocId: abrt -msgid "Hide" -msgstr "Skrýt" - -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -msgid "Host" -msgstr "Počítač" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -msgid "Host Name" -msgstr "Název počítače" - -# auto translated by TM merge from project: anaconda, version: rhel7-branch, -# DocId: anaconda -msgid "Host name" -msgstr "Název počítače" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -msgid "IP Address" -msgstr "IP adresa" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "Neplatný požadavek JSON-RPC: %(error)s" - -# auto translated by TM merge from project: authconfig, version: master, -# DocId: po/authconfig -msgid "Invalid LDAP URI." -msgstr "Neplatné URI pro LDAP." - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Chyba Kerberos: %(major)s/%(minor)s" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -msgid "Key" -msgstr "Klíč" +msgid "DN to bind as if not using kerberos" +msgstr "" # auto translated by TM merge from project: authconfig, version: master, # DocId: po/authconfig msgid "LDAP password" msgstr "LDAP heslo" -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -msgid "Label" -msgstr "Název" - -# auto translated by TM merge from project: abrt, version: master, DocId: abrt -msgid "Last" -msgstr "Poslední" - -# auto translated by TM merge from project: docbook-locales, version: master, -# DocId: locale -msgid "Level" -msgstr "Úroveň" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -msgid "Location" -msgstr "Umístění" - -# auto translated by TM merge from project: libvirt, version: master, DocId: -# libvirt -msgid "MAC address" -msgstr "MAC adresa" - -# auto translated by TM merge from project: Spacewalk Web UI, version: master, -# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource -msgid "Mailing Address" -msgstr "Poštovní adresa" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -msgid "Members" -msgstr "Členové" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "Chybějící nebo neplatný HTTP Referer, %(referer)s" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -msgid "Model" -msgstr "Model" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -msgid "Mount point" -msgstr "Místo připojení" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Name" -msgstr "Název" - -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -msgid "Next" -msgstr "Další" - -msgid "No credentials cache found" -msgstr "Nenalezena mezipamět ověřovacích údajů" - -msgid "No file to read" -msgstr "Žádný soubor k přečtení" - -msgid "No matching entries found" -msgstr "Nenalezeny žádné shodné položky" - -# auto translated by TM merge from project: System Administrator's Guide, -# version: master, DocId: Network_Interfaces -msgid "Note" -msgstr "Poznámka" - -# auto translated by TM merge from project: Fedora Websites, version: -# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org -msgid "OK" -msgstr "Budiž" - -msgid "Operating system" -msgstr "Operační systém" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -msgid "Options" -msgstr "Přepínače" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -msgid "Order" -msgstr "Další" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, c-format -msgid "Out of memory!\n" -msgstr "Nedostatek paměti\n" - -# auto translated by TM merge from project: docbook-locales, version: master, -# DocId: locale -msgid "Page" -msgstr "Strana" - -# auto translated by TM merge from project: python-simpleline, version: -# master, DocId: python-simpleline -msgid "Password" -msgstr "Heslo" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -msgid "Passwords do not match" -msgstr "Hesla nejsou stejná." - -msgid "Passwords do not match!" -msgstr "Hesla se neshodují!" - -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -msgid "Platform" -msgstr "Platforma" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Port" -msgstr "Port" - -msgid "Positional arguments" -msgstr "Poziční argumenty" - -# auto translated by TM merge from project: docbook-locales, version: master, -# DocId: locale -msgid "Prev" -msgstr "Předchozí" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Priority" -msgstr "Priorita" - -# auto translated by TM merge from project: OSCAP Anaconda Addon, version: -# master, DocId: oscap-anaconda-addon -msgid "Profile" -msgstr "Profil" - -# auto translated by TM merge from project: Spacewalk Web UI, version: master, -# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource -msgid "Profiles" -msgstr "Profily" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Protocol" -msgstr "Protokol" - -# auto translated by TM merge from project: Spacewalk Web UI, version: master, -# DocId: java/code/src/com/redhat/rhn/frontend/strings/database/StringResource -msgid "Provisioning" -msgstr "Zajištění" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -msgid "RADIUS" -msgstr "RADIUS" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -msgid "Record Type" -msgstr "Typ záznamu" - -# auto translated by TM merge from project: virt-viewer, version: master, -# DocId: virt-viewer -msgid "Refresh" -msgstr "Obnovit" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -msgid "Reset" -msgstr "Reset" - -# auto translated by TM merge from project: Fedora Media Writer, version: -# master, DocId: mediawriter -msgid "Restore" -msgstr "Obnovit" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Retry" -msgstr "Opakovat" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Revert" -msgstr "Vrátit" - -# auto translated by TM merge from project: dnf, version: master, DocId: -# po/dnf -msgid "Rights" -msgstr "Práva" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Role" -msgstr "Role" - -# auto translated by TM merge from project: firewalld, version: master, DocId: -# po/firewalld -msgid "Rules" -msgstr "Pravidla" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "SELinux User" -msgstr "Uživatel SELinuxu" - -#, python-format -msgid "Same as --%s" -msgstr "Stejné jako --%s" - -# auto translated by TM merge from project: fedora-software, version: master, -# DocId: template/django -msgid "Save" -msgstr "Uložit" - -# auto translated by TM merge from project: libreport, version: rhel6, DocId: -# libreport -msgid "Search" -msgstr "Hledat" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -msgid "Secret" -msgstr "Tajné" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -msgid "Serial" -msgstr "Sériový" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -msgid "Serial Number" -msgstr "Sériové číslo" - -# auto translated by TM merge from project: Fedora Websites, version: -# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org -msgid "Server" -msgstr "Server" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -msgid "Server Roles" -msgstr "Serverové role" - -# auto translated by TM merge from project: System Administrator's Guide, -# version: master, DocId: Deployment_Guide -msgid "Servers" -msgstr "Servery" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Service" -msgstr "Služba" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "Služba '%(service)s' nenalezena v databázi Kerberosu" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -msgid "Service Settings" -msgstr "Nastavení služeb" - -# auto translated by TM merge from project: firewalld, version: master, DocId: -# po/firewalld -msgid "Services" -msgstr "Služby" - -# auto translated by TM merge from project: docbook-locales, version: master, -# DocId: locale -msgid "Set" -msgstr "Sada" - -# auto translated by TM merge from project: fedora-software, version: master, -# DocId: template/django -msgid "Settings" -msgstr "Nastavení" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -msgid "Shared" -msgstr "Sdílená" - -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -msgid "Show" -msgstr "Ukázat" - -# auto translated by TM merge from project: blivet-gui, version: f23-branch, -# DocId: blivet-gui -msgid "Size" -msgstr "Velikost" - -# auto translated by TM merge from project: Fedora Websites, version: -# labs.fedoraproject.org, DocId: po/labs.fedoraproject.org -msgid "Stage" -msgstr "Stage" - -# auto translated by TM merge from project: ibus-libpinyin, version: master, -# DocId: ibus-libpinyin -msgid "Standard" -msgstr "Standard" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Status" -msgstr "Stav" - -# auto translated by TM merge from project: libreport, version: master, DocId: -# libreport -msgid "Subject" -msgstr "Předmět" - -# auto translated by TM merge from project: Linux PAM, version: master, DocId: -# po/Linux-PAM -msgid "Success" -msgstr "Úspěch" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -msgid "Target" -msgstr "Cíl" - -msgid "The topic or command name." -msgstr "Název tématu nebo příkazu." - -msgid "Ticket expired" -msgstr "Platnost lístku skončila" - -# auto translated by TM merge from project: Pulseaudio, version: 6.0, DocId: -# pulseaudio.pot -msgid "Timeout" -msgstr "Časový limit" - -msgid "To get command help, use:" -msgstr "Chceteli získat nápovědu k příkazu, použijte:" - -msgid "Topic commands:" -msgstr "Příkazy tématu:" - -msgid "Topic or Command" -msgstr "Téma nebo příkaz" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Type" -msgstr "Typ" - -# auto translated by TM merge from project: dnf, version: master, DocId: -# po/dnf -msgid "URL" -msgstr "URL" - -# auto translated by TM merge from project: libvirt, version: master, DocId: -# libvirt -msgid "UUID" -msgstr "UUID:" - -# auto translated by TM merge from project: anaconda, version: master, DocId: -# main -msgid "Unknown" -msgstr "Neznámý" - -# auto translated by TM merge from project: GSS NTLMSSP, version: master, -# DocId: gssntlmssp -msgid "Unknown Error" -msgstr "Neznámá chyba" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -msgid "Unspecified" -msgstr "Nespecifikováno" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Update" -msgstr "Aktualizovat" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -msgid "User" -msgstr "Uživatel" - -# auto translated by TM merge from project: firewalld, version: master, DocId: -# po/firewalld -msgid "User ID" -msgstr "ID uživatele" - -# auto translated by TM merge from project: dnf, version: master, DocId: dnf -msgid "User name" -msgstr "Uživatelské jméno" - -msgid "User password" -msgstr "Uživatelské heslo" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -msgid "Username" -msgstr "Jméno uživatele" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Users" -msgstr "Uživatelé" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -msgid "Vendor" -msgstr "Výrobce" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Version" -msgstr "Verze" +msgid "password to use if not using kerberos" +msgstr "" # auto translated by TM merge from project: authconfig, version: master, # DocId: po/authconfig -msgid "Warning" -msgstr "Varování" +#, fuzzy +msgid "Prompt for LDAP password" +msgstr "LDAP heslo" -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -msgid "Working" -msgstr "Pracuje" +msgid "Path to the IPA CA certificate" +msgstr "" -msgid "an internal error has occurred" -msgstr "Vyskytla se vnitřní chyba" +msgid "IPA CA certificate" +msgstr "" -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "na serveru '%(server)s' se vyskytla interní chyba" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "nelze se připojit k '%(uri)s': %(error)s" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -msgid "command" -msgstr "příkaz" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "commands" -msgstr "příkazy" - -# auto translated by TM merge from project: anaconda, version: f22-branch, -# DocId: anaconda -msgid "description" -msgstr "popis" - -msgid "did not receive Kerberos credentials" -msgstr "neobdrženy ověřovací údaje Kerberos" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "chyba marshallingu dat pro přenos XML-RPC: %(error)s" - -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "chyba na serveru '%(server)s': %(error)s" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -msgid "group" -msgstr "skupinu" - -msgid "incorrect type" -msgstr "nesprávný typ" - -# auto translated by TM merge from project: anaconda, version: rhel7-branch, -# DocId: anaconda -msgid "password" -msgstr "heslo" - -# auto translated by TM merge from project: virt-manager, version: master, -# DocId: virt-manager -msgid "seconds" -msgstr "sekund" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -msgid "service" -msgstr "službu" - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "neznámý příkaz '%(name)s'" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "neznámý kód %(code)d chyby ze serveru %(server)s: %(error)s" +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" # auto translated by TM merge from project: Spacewalk Web UI, version: master, # DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource msgid "url" msgstr "url" -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -msgid "user" -msgstr "uživatel" +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" + +msgid "GSSAPI|EXTERNAL" +msgstr "" + +msgid "Retrieve current keys without changing them" +msgstr "" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +# auto translated by TM merge from project: authconfig, version: master, +# DocId: po/authconfig +#, fuzzy +msgid "Enter LDAP password" +msgstr "LDAP heslo" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "" + +#, c-format +msgid "DNS discovery for domain %s\n" +msgstr "" + +#, c-format +msgid "Discovered server %s\n" +msgstr "" + +#, c-format +msgid "Using discovered server %s\n" +msgstr "" + +#, c-format +msgid "DNS Discovery failed\n" +msgstr "" + +#, c-format +msgid "Using server from config %s\n" +msgstr "" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "" + +#, c-format +msgid "Using provided server %s\n" +msgstr "" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "" + +msgid "New Principal Password" +msgstr "" + +msgid "Verify Principal Password" +msgstr "" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" + +#, c-format +msgid "Failed to create key material\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, c-format +msgid "Out of memory!\n" +msgstr "Nedostatek paměti\n" #, c-format msgid "No permission to join this host to the IPA domain.\n" @@ -811,9 +478,6 @@ msgstr "Nedostatek paměti\n" msgid "Unable to enable SSL in LDAP\n" msgstr "" -msgid "SASL Bind failed\n" -msgstr "" - #, c-format msgid "Search for %1$s on rootdse failed with error %2$d\n" msgstr "" @@ -1027,6 +691,11 @@ msgstr "" msgid "LDAP password (if not using Kerberos)" msgstr "" +# auto translated by TM merge from project: anaconda, version: rhel7-branch, +# DocId: anaconda +msgid "password" +msgstr "heslo" + # auto translated by TM merge from project: authconfig, version: master, # DocId: po/authconfig #, fuzzy @@ -1048,400 +717,6 @@ msgstr "" msgid "The hostname must not be: %s\n" msgstr "" -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy, c-format -msgid "Out of memory \n" -msgstr "Nedostatek paměti\n" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "" - -msgid "Simple bind failed\n" -msgstr "" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy, c-format -msgid "Out of Memory!\n" -msgstr "Nedostatek paměti\n" - -#, c-format -msgid "Failed to create control!\n" -msgstr "" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "" - -msgid "Failed to decode control reply!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Passwords do not match!\n" -msgstr "Hesla se neshodují!" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "" - -msgid "Failed to resolve symlink to keytab.\n" -msgstr "" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Output only on errors" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org -#, fuzzy -msgid "Server Name" -msgstr "Server" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Encryption types to request" -msgstr "" - -msgid "Comma separated encryption types list" -msgstr "" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -msgid "Permitted Encryption Types" -msgstr "" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -msgid "LDAP DN" -msgstr "" - -msgid "DN to bind as if not using kerberos" -msgstr "" - -msgid "password to use if not using kerberos" -msgstr "" - -# auto translated by TM merge from project: authconfig, version: master, -# DocId: po/authconfig -#, fuzzy -msgid "Prompt for LDAP password" -msgstr "LDAP heslo" - -msgid "Path to the IPA CA certificate" -msgstr "" - -msgid "IPA CA certificate" -msgstr "" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -# auto translated by TM merge from project: authconfig, version: master, -# DocId: po/authconfig -#, fuzzy -msgid "Enter LDAP password" -msgstr "LDAP heslo" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -msgid "New Principal Password" -msgstr "" - -msgid "Verify Principal Password" -msgstr "" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, c-format -msgid "Failed to create key material\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -# auto translated by TM merge from project: dnf, version: master, DocId: dnf -#, fuzzy -msgid "Realm name" -msgstr "Uživatelské jméno" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy, c-format -msgid "out of memory\n" -msgstr "Nedostatek paměti\n" - -#, c-format -msgid "read error\n" -msgstr "" - msgid "Failed members" msgstr "" @@ -1560,138 +835,36 @@ msgstr "" msgid "Skipped %(key)s" msgstr "" +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +msgid "Unrevoked" +msgstr "" + +# auto translated by TM merge from project: python-simpleline, version: +# master, DocId: python-simpleline +msgid "Error" +msgstr "Chyba" + +msgid "Input filename" +msgstr "" + +msgid "File to load the certificate from." +msgstr "" + +msgid "cannot specify both raw certificate and file" +msgstr "" + msgid "Input file" msgstr "" msgid "File to load the certificate from" msgstr "" -msgid "cannot specify both raw certificate and file" -msgstr "" - #, python-format msgid "Profile configuration stored in file '%(file)s'" msgstr "" -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "Servers details:" -msgstr "Serverové role" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "Add a new YubiKey OTP token." -msgstr "" - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -msgid "Maximum number of agreements per replica" -msgstr "" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -#, fuzzy -msgid "Delete a user" -msgstr "Smazat" - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - msgid "Split DNS record to parts" msgstr "" @@ -1760,6 +933,144 @@ msgstr "" msgid "file to store DNS records in nsupdate format" msgstr "" +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +msgid "Servers details:" +msgstr "Serverové role" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "" + +# auto translated by TM merge from project: firewalld, version: master, DocId: +# po/firewalld +msgid "User ID" +msgstr "ID uživatele" + +# auto translated by TM merge from project: python-simpleline, version: +# master, DocId: python-simpleline +msgid "Password" +msgstr "Heslo" + +# auto translated by TM merge from project: Fedora Websites, version: +# fedoraproject.org, DocId: po/fedora-web +#, fuzzy +msgid "First Code" +msgstr "Prvenství " + +msgid "Second Code" +msgstr "" + +msgid "Token ID" +msgstr "" + +msgid "python-yubico is not installed." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" + +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "Add a new YubiKey OTP token." +msgstr "" + +msgid "YubiKey slot" +msgstr "" + +msgid "No free YubiKey slot!" +msgstr "" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "" + +msgid "Topology is disconnected" +msgstr "" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "" + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "" + +msgid "Maximum number of agreements per replica" +msgstr "" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +#, fuzzy +msgid "Delete a user" +msgstr "Smazat" + +msgid "preserve and no-preserve cannot be both set" +msgstr "" + #, python-format msgid "Cannot read file '%(filename)s': %(exc)s" msgstr "" @@ -1887,41 +1198,20 @@ msgstr "" msgid "Missing vault private key" msgstr "" -msgid "Write certificate (chain if --chain used) to file" +#, python-format +msgid "Enabled Sudo Rule \"%s\"" msgstr "" -msgid "Unrevoked" +#, python-format +msgid "Disabled Sudo Rule \"%s\"" msgstr "" -msgid "Input filename" +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" msgstr "" -msgid "File to load the certificate from." -msgstr "" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# fedoraproject.org, DocId: po/fedora-web -#, fuzzy -msgid "First Code" -msgstr "Prvenství " - -msgid "Second Code" -msgstr "" - -msgid "Token ID" +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" msgstr "" msgid "" @@ -2082,6 +1372,11 @@ msgstr "" msgid "Attributes" msgstr "" +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Type" +msgstr "Typ" + msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" msgstr "" @@ -2094,6 +1389,11 @@ msgstr "Členové" msgid "Member of a group" msgstr "" +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Filter" +msgstr "Filtr" + msgid "Legal LDAP filter (e.g. ou=Engineering)" msgstr "" @@ -2176,6 +1476,9 @@ msgid "" " " msgstr "" +msgid "A string searched in all relevant object attributes" +msgstr "Řetězec vyhledávaný ve všech odpovídajících atributech objektu" + msgid "Primary key only" msgstr "" @@ -2203,6 +1506,252 @@ msgstr "" msgid "Location of the ACI" msgstr "" +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Description" +msgstr "Popis" + +msgid "A description of this auto member rule" +msgstr "" + +msgid "Default (fallback) Group" +msgstr "" + +msgid "Default group for entries to land" +msgstr "" + +msgid "Add an automember rule." +msgstr "" + +msgid "Automember Rule" +msgstr "" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +msgid "Grouping Type" +msgstr "" + +msgid "Grouping to which the rule applies" +msgstr "" + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +msgid "Exclusive Regex" +msgstr "" + +msgid "Attribute Key" +msgstr "" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +msgid "Number of conditions added" +msgstr "" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +msgid "Display information about the default (fallback) automember groups." +msgstr "" + +msgid "Delete an automember rule." +msgstr "" + +msgid "List of deletions that failed" +msgstr "" + +msgid "Search for automember rules." +msgstr "" + +msgid "Modify an automember rule." +msgstr "" + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +# auto translated by TM merge from project: dnf, version: master, DocId: +# po/dnf +msgid "Rights" +msgstr "Práva" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Users" +msgstr "Uživatelé" + +msgid "Rebuild membership for specified users" +msgstr "" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +#, fuzzy +msgid "Hosts" +msgstr "Počítač" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +msgid "Conditions that could not be removed" +msgstr "" + +msgid "Number of conditions removed" +msgstr "" + +msgid "Display information about an automember rule." +msgstr "" + msgid "" "\n" "Automount\n" @@ -2310,6 +1859,11 @@ msgid "" " ipa automountkey-del baltimore auto.share --key=man\n" msgstr "" +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +msgid "Key" +msgstr "Klíč" + msgid "Automount key name." msgstr "" @@ -2319,6 +1873,16 @@ msgstr "" msgid "Mount information" msgstr "Místo připojení" +# auto translated by TM merge from project: anaconda, version: f22-branch, +# DocId: anaconda +msgid "description" +msgstr "popis" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +msgid "Location" +msgstr "Umístění" + msgid "Automount location name." msgstr "" @@ -2331,25 +1895,12 @@ msgstr "" msgid "Create a new automount key." msgstr "" -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - msgid "Delete an automount key." msgstr "" msgid "Continuous mode: Don't stop on errors." msgstr "" -msgid "List of deletions that failed" -msgstr "" - msgid "Search for an automount key." msgstr "" @@ -2368,16 +1919,6 @@ msgstr "" msgid "Modify an automount key." msgstr "" -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - msgid "New mount information" msgstr "" @@ -2417,6 +1958,11 @@ msgstr "" msgid "Create a new indirect mount point." msgstr "" +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +msgid "Mount point" +msgstr "Místo připojení" + msgid "Parent map" msgstr "" @@ -2472,6 +2018,194 @@ msgstr "" msgid "Nested Methods to execute" msgstr "" +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +msgid "Search for existing certificates." +msgstr "" + +msgid "Match cn attribute in subject" +msgstr "" + +#, fuzzy +msgid "Reason" +msgstr "%(reason)s" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +#, fuzzy +msgid "minimum serial number" +msgstr "Sériové číslo" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +#, fuzzy +msgid "maximum serial number" +msgstr "Sériové číslo" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Maximum number of certs returned" +msgstr "" + +msgid "Take a revoked certificate off hold." +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +#, fuzzy +msgid "Serial number" +msgstr "Sériové číslo" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +msgid "Submit a certificate signing request." +msgstr "" + +msgid "CSR" +msgstr "" + +msgid "Principal" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +msgid "Dictionary mapping variable name to value" +msgstr "" + +msgid "Revoke a certificate." +msgstr "" + +msgid "Retrieve an existing certificate." +msgstr "" + +msgid "Output filename" +msgstr "" + +msgid "File to store the certificate in." +msgstr "" + +msgid "Check the status of a certificate signing request." +msgstr "" + +msgid "Request id" +msgstr "" + msgid "" "\n" "Server configuration\n" @@ -3050,6 +2784,11 @@ msgstr "" msgid "A IP Address" msgstr "IP adresa" +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +msgid "IP Address" +msgstr "IP adresa" + msgid "A Create reverse" msgstr "" @@ -3197,6 +2936,11 @@ msgstr "" msgid "DNAME Target" msgstr "Cíl" +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +msgid "Target" +msgstr "Cíl" + msgid "DNSKEY record" msgstr "" @@ -3323,6 +3067,11 @@ msgstr "" msgid "LOC Size" msgstr "Velikost" +# auto translated by TM merge from project: blivet-gui, version: f23-branch, +# DocId: blivet-gui +msgid "Size" +msgstr "Velikost" + msgid "LOC Horizontal Precision" msgstr "" @@ -3362,6 +3111,11 @@ msgstr "" msgid "NAPTR Order" msgstr "Další" +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +msgid "Order" +msgstr "Další" + msgid "NAPTR Preference" msgstr "" @@ -3373,12 +3127,21 @@ msgstr "" msgid "NAPTR Flags" msgstr "Vlajky" +# auto translated by TM merge from project: ibus, version: head, DocId: ibus10 +msgid "Flags" +msgstr "Vlajky" + # auto translated by TM merge from project: selinux (policycoreutils), # version: master, DocId: policycoreutils #, fuzzy msgid "NAPTR Service" msgstr "Služba" +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Service" +msgstr "Služba" + msgid "NAPTR Regular Expression" msgstr "" @@ -3472,6 +3235,11 @@ msgstr "" msgid "SRV Priority" msgstr "Priorita" +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Priority" +msgstr "Priorita" + # auto translated by TM merge from project: dnf, version: master, DocId: # po/dnf #, fuzzy @@ -3490,6 +3258,11 @@ msgstr "Práva" msgid "SRV Port" msgstr "Port" +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Port" +msgstr "Port" + # auto translated by TM merge from project: anaconda, version: f25, DocId: # main #, fuzzy @@ -3528,6 +3301,11 @@ msgstr "Otisk" msgid "SSHFP Fingerprint" msgstr "Otisk" +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +msgid "Fingerprint" +msgstr "Otisk" + msgid "TA record" msgstr "" @@ -3799,6 +3577,340 @@ msgstr "" msgid "Display information about a DNS zone (SOA record)." msgstr "" +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +# auto translated by TM merge from project: dnf, version: master, DocId: +# po/dnf +#, fuzzy +msgid "Group name" +msgstr "Skupina" + +# auto translated by TM merge from project: anaconda, version: f22-branch, +# DocId: anaconda +#, fuzzy +msgid "Group description" +msgstr "popis" + +msgid "GID" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +msgid "Member users" +msgstr "Členové" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +msgid "Member groups" +msgstr "Členové" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +msgid "Member of groups" +msgstr "Členové" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +msgid "Roles" +msgstr "Role" + +msgid "Member of netgroups" +msgstr "" + +msgid "Member of Sudo rule" +msgstr "" + +msgid "Member of HBAC rule" +msgstr "" + +msgid "Indirect Member users" +msgstr "" + +msgid "Indirect Member groups" +msgstr "" + +msgid "Indirect Member of group" +msgstr "" + +msgid "Indirect Member of netgroup" +msgstr "" + +msgid "Indirect Member of role" +msgstr "" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +msgid "Create a new group." +msgstr "" + +msgid "Create as a non-POSIX group" +msgstr "" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +msgid "Add members to a group." +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +#, fuzzy +msgid "External member" +msgstr "Sériové číslo" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +msgid "member user" +msgstr "Členové" + +msgid "users to add" +msgstr "" + +msgid "member group" +msgstr "" + +msgid "groups to add" +msgstr "" + +msgid "Members that could not be added" +msgstr "" + +msgid "Number of members added" +msgstr "" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +#, fuzzy +msgid "Delete group." +msgstr "Smazat" + +msgid "Detach a managed group from a user." +msgstr "" + +msgid "Search for groups." +msgstr "" + +msgid "search for private groups" +msgstr "" + +msgid "search for POSIX groups" +msgstr "" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +msgid "search for non-POSIX groups" +msgstr "" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +msgid "user" +msgstr "uživatel" + +msgid "Search for groups with these member users." +msgstr "" + +msgid "Search for groups without these member users." +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +msgid "group" +msgstr "skupinu" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +msgid "netgroup" +msgstr "skupinu" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +msgid "HBAC rule" +msgstr "" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +msgid "Modify a group." +msgstr "" + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +msgid "Remove members from a group." +msgstr "" + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "" + +msgid "Number of members removed" +msgstr "" + +msgid "Display information about a named group." +msgstr "" + msgid "" "\n" "Host-based access control\n" @@ -3886,24 +3998,28 @@ msgstr "Nastavení služeb" msgid "Service category the rule applies to" msgstr "" +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Enabled" +msgstr "Povoleno" + # auto translated by TM merge from project: libreport, version: rhel6, DocId: # libreport #, fuzzy msgid "User Groups" msgstr "Skupiny" -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -#, fuzzy -msgid "Hosts" -msgstr "Počítač" - # auto translated by TM merge from project: libreport, version: rhel6, DocId: # libreport #, fuzzy msgid "Host Groups" msgstr "Skupiny" +# auto translated by TM merge from project: firewalld, version: master, DocId: +# po/firewalld +msgid "Services" +msgstr "Služby" + # auto translated by TM merge from project: firewalld, version: master, DocId: # po/firewalld #, fuzzy @@ -3916,9 +4032,6 @@ msgstr "" msgid "Create a new HBAC rule." msgstr "" -msgid "Suppress processing of membership attributes." -msgstr "" - msgid "Add target hosts and hostgroups to an HBAC rule." msgstr "" @@ -3937,12 +4050,6 @@ msgstr "" msgid "host groups to add" msgstr "" -msgid "Members that could not be added" -msgstr "" - -msgid "Number of members added" -msgstr "" - msgid "Add services to an HBAC rule." msgstr "" @@ -3961,21 +4068,6 @@ msgstr "" msgid "Add users and groups to an HBAC rule." msgstr "" -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "member user" -msgstr "Členové" - -msgid "users to add" -msgstr "" - -msgid "member group" -msgstr "" - -msgid "groups to add" -msgstr "" - msgid "Delete an HBAC rule." msgstr "" @@ -4000,12 +4092,6 @@ msgstr "" msgid "host groups to remove" msgstr "" -msgid "Members that could not be removed" -msgstr "" - -msgid "Number of members removed" -msgstr "" - msgid "Remove service and service groups from an HBAC rule." msgstr "" @@ -4018,12 +4104,6 @@ msgstr "" msgid "Remove users and groups from an HBAC rule." msgstr "" -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - msgid "Display the properties of an HBAC rule." msgstr "" @@ -4141,6 +4221,248 @@ msgstr "" msgid "Display information about an HBAC service group." msgstr "" +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +# auto translated by TM merge from project: dnf, version: master, DocId: dnf +msgid "User name" +msgstr "Uživatelské jméno" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +msgid "Target host" +msgstr "Cíl" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +# auto translated by TM merge from project: authconfig, version: master, +# DocId: po/authconfig +msgid "Warning" +msgstr "Varování" + +msgid "Matched rules" +msgstr "" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + msgid "" "\n" "Hosts/Machines\n" @@ -4205,6 +4527,11 @@ msgid "" " ipa host-allow-create-keytab test2 --users=tuser1\n" msgstr "" +# auto translated by TM merge from project: anaconda, version: rhel7-branch, +# DocId: anaconda +msgid "Host name" +msgstr "Název počítače" + msgid "A description of this host" msgstr "" @@ -4220,12 +4547,23 @@ msgstr "" msgid "Host location (e.g. \"Lab 2\")" msgstr "" +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +msgid "Platform" +msgstr "Platforma" + msgid "Host hardware platform (e.g. \"Lenovo T61\")" msgstr "" +msgid "Operating system" +msgstr "Operační systém" + msgid "Host operating system and version (e.g. \"Fedora 9\")" msgstr "" +msgid "User password" +msgstr "Uživatelské heslo" + msgid "Password used in bulk enrollment" msgstr "" @@ -4247,12 +4585,22 @@ msgstr "" msgid "Principal name" msgstr "" +# auto translated by TM merge from project: libvirt, version: master, DocId: +# libvirt +msgid "MAC address" +msgstr "MAC adresa" + msgid "Hardware MAC address(es) on this host" msgstr "" msgid "SSH public key" msgstr "" +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Class" +msgstr "Třída" + msgid "" "Host category (semantics placed on this attribute are for local " "interpretation)" @@ -4279,36 +4627,9 @@ msgstr "" msgid "Member of host-groups" msgstr "" -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Roles" -msgstr "Role" - -msgid "Member of netgroups" -msgstr "" - -msgid "Member of Sudo rule" -msgstr "" - -msgid "Member of HBAC rule" -msgstr "" - -msgid "Indirect Member of netgroup" -msgstr "" - msgid "Indirect Member of host-group" msgstr "" -msgid "Indirect Member of role" -msgstr "" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - msgid "Keytab" msgstr "" @@ -4404,39 +4725,24 @@ msgstr "" msgid "Search for hosts without these member of host groups." msgstr "" -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "netgroup" -msgstr "skupinu" - msgid "Search for hosts with these member of netgroups." msgstr "" msgid "Search for hosts without these member of netgroups." msgstr "" -msgid "role" -msgstr "" - msgid "Search for hosts with these member of roles." msgstr "" msgid "Search for hosts without these member of roles." msgstr "" -msgid "HBAC rule" -msgstr "" - msgid "Search for hosts with these member of HBAC rules." msgstr "" msgid "Search for hosts without these member of HBAC rules." msgstr "" -msgid "sudo rule" -msgstr "" - msgid "Search for hosts with these member of sudo rules." msgstr "" @@ -4600,6 +4906,232 @@ msgstr "" msgid "Display information about a hostgroup." msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +#, fuzzy +msgid "Range name" +msgstr "Název příkazu" + +msgid "First Posix ID of the range" +msgstr "" + +msgid "Number of IDs in the range" +msgstr "" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +msgid "Range type" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "Delete an ID range." +msgstr "" + +msgid "Search for ranges." +msgstr "" + +msgid "Modify ID range." +msgstr "" + +msgid "Display information about a range." +msgstr "" + msgid "" "\n" "ID Views\n" @@ -4616,15 +5148,6 @@ msgstr "" msgid "Anchor to override" msgstr "" -# auto translated by TM merge from project: dnf, version: master, DocId: -# po/dnf -#, fuzzy -msgid "Group name" -msgstr "Skupina" - -msgid "GID" -msgstr "" - msgid "Group ID Number" msgstr "" @@ -5065,6 +5588,11 @@ msgid "" "RFC2307bis. The default is RFC2307bis" msgstr "" +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +msgid "Continue" +msgstr "Pokračovat" + msgid "" "Continuous operation mode. Errors are reported but the process continues" msgstr "" @@ -5120,9 +5648,6 @@ msgid "" "retrieve and print all attributes from the server. Affects command output." msgstr "" -msgid "Dictionary mapping variable name to value" -msgstr "" - msgid "Total number of variables env (>= count)" msgstr "" @@ -5346,6 +5871,157 @@ msgstr "" msgid "Show the current OTP configuration." msgstr "" +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Manager" +msgstr "" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +# auto translated by TM merge from project: Cockpit, version: master, DocId: +# cockpit +msgid "Disabled" +msgstr "Zakázáno" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +msgid "Validity start" +msgstr "" + +msgid "First date/time the token can be used" +msgstr "" + +msgid "Validity end" +msgstr "" + +msgid "Last date/time the token can be used" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +msgid "Vendor" +msgstr "Výrobce" + +msgid "Token vendor name (informational only)" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +msgid "Model" +msgstr "Model" + +msgid "Token model (informational only)" +msgstr "" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +msgid "Serial" +msgstr "Sériový" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +msgid "Add a new OTP token." +msgstr "" + +#, fuzzy +msgid "(deprecated)" +msgstr "Zastaralé volby" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +msgid "Delete an OTP token." +msgstr "" + +msgid "Search for OTP token." +msgstr "" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +msgid "Modify a OTP token." +msgstr "" + +msgid "Rename the OTP token object" +msgstr "" + +msgid "Display information about an OTP token." +msgstr "" + msgid "" "\n" "YubiKey Tokens\n" @@ -5802,6 +6478,11 @@ msgid "" " ipa pwpolicy-mod --minclasses=2 localadmins\n" msgstr "" +# auto translated by TM merge from project: dnf, version: master, DocId: +# po/dnf +msgid "Group" +msgstr "Skupina" + msgid "Manage password policy for specific group" msgstr "" @@ -5880,6 +6561,11 @@ msgstr "" msgid "Display information about password policy." msgstr "" +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +msgid "User" +msgstr "Uživatel" + msgid "Display effective policy for a specific user" msgstr "" @@ -5917,12 +6603,27 @@ msgstr "" msgid "A description of this RADIUS proxy server" msgstr "" +# auto translated by TM merge from project: Fedora Websites, version: +# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org +msgid "Server" +msgstr "Server" + msgid "The hostname or IP (with or without port)" msgstr "" +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +msgid "Secret" +msgstr "Tajné" + msgid "The secret used to encrypt data" msgstr "" +# auto translated by TM merge from project: Pulseaudio, version: 6.0, DocId: +# pulseaudio.pot +msgid "Timeout" +msgstr "Časový limit" + msgid "The total timeout across all retries (in seconds)" msgstr "" @@ -6051,18 +6752,6 @@ msgstr "Název počítače" msgid "A description of this role-group" msgstr "" -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "Member users" -msgstr "Členové" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "Member groups" -msgstr "Členové" - msgid "Privileges" msgstr "" @@ -6240,6 +6929,11 @@ msgid "" " and the default SELinux user are available in the config-show command.\n" msgstr "" +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "SELinux User" +msgstr "Uživatel SELinuxu" + msgid "HBAC Rule" msgstr "" @@ -6349,9 +7043,6 @@ msgid "" "httpd.keytab\n" msgstr "" -msgid "Principal" -msgstr "" - # auto translated by TM merge from project: system-config-firewall, version: # master, DocId: po/system-config-firewall #, fuzzy @@ -7091,12 +7782,6 @@ msgstr "" msgid "Sudo Command Group" msgstr "" -# auto translated by TM merge from project: anaconda, version: f22-branch, -# DocId: anaconda -#, fuzzy -msgid "Group description" -msgstr "popis" - # auto translated by TM merge from project: selinux (policycoreutils), # version: master, DocId: policycoreutils #, fuzzy @@ -7140,1725 +7825,6 @@ msgstr "" msgid "Display Sudo Command Group." msgstr "" -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel7-branch, -# DocId: anaconda -#, fuzzy -msgid "First name" -msgstr "Název počítače" - -# auto translated by TM merge from project: anaconda, version: rhel7-branch, -# DocId: anaconda -#, fuzzy -msgid "Last name" -msgstr "Název počítače" - -msgid "Full name" -msgstr "" - -msgid "Display name" -msgstr "" - -msgid "Initials" -msgstr "" - -msgid "Kerberos principal" -msgstr "" - -msgid "Kerberos principal expiration" -msgstr "" - -# auto translated by TM merge from project: Spacewalk Web UI, version: master, -# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource -#, fuzzy -msgid "Email address" -msgstr "Poštovní adresa" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -# auto translated by TM merge from project: libvirt, version: master, DocId: -# libvirt -#, fuzzy -msgid "Street address" -msgstr "MAC adresa" - -msgid "State/Province" -msgstr "" - -msgid "ZIP" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -msgid "Telephone Number" -msgstr "Sériové číslo" - -msgid "Mobile Telephone Number" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -msgid "Pager Number" -msgstr "Sériové číslo" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -msgid "Fax Number" -msgstr "Sériové číslo" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "" - -msgid "Manager" -msgstr "" - -msgid "Car License" -msgstr "" - -# auto translated by TM merge from project: Spacewalk Web UI, version: master, -# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource -#, fuzzy -msgid "Account disabled" -msgstr "Účet" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "User authentication types" -msgstr "Autentizace" - -msgid "Types of supported user authentication" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "RADIUS proxy configuration" -msgstr "Nastavení" - -msgid "RADIUS proxy username" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -msgid "Department Number" -msgstr "Sériové číslo" - -msgid "Employee Number" -msgstr "" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "Member of groups" -msgstr "Členové" - -msgid "Indirect Member of group" -msgstr "" - -msgid "Kerberos keys available" -msgstr "" - -msgid "Add a new user." -msgstr "" - -msgid "Don't create user private group" -msgstr "" - -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -#, fuzzy -msgid "Delete a user." -msgstr "Smazat" - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -msgid "Search for users." -msgstr "" - -msgid "Self" -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -msgid "Modify a user." -msgstr "" - -msgid "Rename the user object" -msgstr "" - -msgid "Display information about a user." -msgstr "" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "A description of this auto member rule" -msgstr "" - -msgid "Default (fallback) Group" -msgstr "" - -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -msgid "Automember Rule" -msgstr "" - -msgid "Grouping Type" -msgstr "" - -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -msgid "Attribute Key" -msgstr "" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -msgid "Delete an automember rule." -msgstr "" - -msgid "Search for automember rules." -msgstr "" - -msgid "Modify an automember rule." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -msgid "Number of conditions removed" -msgstr "" - -msgid "Display information about an automember rule." -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -msgid "Search for existing certificates." -msgstr "" - -msgid "Match cn attribute in subject" -msgstr "" - -#, fuzzy -msgid "Reason" -msgstr "%(reason)s" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -msgid "minimum serial number" -msgstr "Sériové číslo" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -msgid "maximum serial number" -msgstr "Sériové číslo" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -msgid "Serial number" -msgstr "Sériové číslo" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -msgid "Submit a certificate signing request." -msgstr "" - -msgid "CSR" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -msgid "Revoke a certificate." -msgstr "" - -msgid "Retrieve an existing certificate." -msgstr "" - -msgid "Output filename" -msgstr "" - -msgid "File to store the certificate in." -msgstr "" - -msgid "Check the status of a certificate signing request." -msgstr "" - -msgid "Request id" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "GID (use this option to set it manually)" -msgstr "" - -msgid "Indirect Member users" -msgstr "" - -msgid "Indirect Member groups" -msgstr "" - -msgid "Create a new group." -msgstr "" - -msgid "Create as a non-POSIX group" -msgstr "" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Add members to a group." -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -msgid "External member" -msgstr "Sériové číslo" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -#, fuzzy -msgid "Delete group." -msgstr "Smazat" - -msgid "Detach a managed group from a user." -msgstr "" - -msgid "Search for groups." -msgstr "" - -msgid "search for private groups" -msgstr "" - -msgid "search for POSIX groups" -msgstr "" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -msgid "search for non-POSIX groups" -msgstr "" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "Modify a group." -msgstr "" - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -msgid "Remove members from a group." -msgstr "" - -msgid "Display information about a named group." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "Target host" -msgstr "Cíl" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Matched rules" -msgstr "" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -msgid "NetBIOS name" -msgstr "" - -msgid "Domain GUID" -msgstr "" - -msgid "Fallback primary group" -msgstr "" - -#, fuzzy -msgid "Domain name" -msgstr "Název příkazu" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -msgid "Active Directory domain administrator" -msgstr "" - -msgid "Active Directory domain administrator's password" -msgstr "" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "Range type" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -msgid "Delete a trust." -msgstr "" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -msgid "Search for trusts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -msgid "Display information about a trust." -msgstr "" - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -#, fuzzy -msgid "Range name" -msgstr "Název příkazu" - -msgid "First Posix ID of the range" -msgstr "" - -msgid "Number of IDs in the range" -msgstr "" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "Delete an ID range." -msgstr "" - -msgid "Search for ranges." -msgstr "" - -msgid "Modify ID range." -msgstr "" - -msgid "Display information about a range." -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -msgid "Validity start" -msgstr "" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Validity end" -msgstr "" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -msgid "Add a new OTP token." -msgstr "" - -#, fuzzy -msgid "(deprecated)" -msgstr "Zastaralé volby" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -msgid "Delete an OTP token." -msgstr "" - -msgid "Search for OTP token." -msgstr "" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -msgid "Modify a OTP token." -msgstr "" - -msgid "Rename the OTP token object" -msgstr "" - -msgid "Display information about an OTP token." -msgstr "" - msgid "" "\n" "Sudo Rules\n" @@ -9083,6 +8049,537 @@ msgstr "" msgid "Display Sudo Rule." msgstr "" +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +msgid "NetBIOS name" +msgstr "" + +msgid "Domain GUID" +msgstr "" + +msgid "Fallback primary group" +msgstr "" + +#, fuzzy +msgid "Domain name" +msgstr "Název příkazu" + +msgid "Trusted domain partner" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +msgid "Active Directory domain administrator" +msgstr "" + +msgid "Active Directory domain administrator's password" +msgstr "" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +msgid "Delete a trust." +msgstr "" + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +msgid "Search for trusts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +msgid "Display information about a trust." +msgstr "" + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel7-branch, +# DocId: anaconda +#, fuzzy +msgid "First name" +msgstr "Název počítače" + +# auto translated by TM merge from project: anaconda, version: rhel7-branch, +# DocId: anaconda +#, fuzzy +msgid "Last name" +msgstr "Název počítače" + +msgid "Full name" +msgstr "" + +msgid "Display name" +msgstr "" + +msgid "Initials" +msgstr "" + +msgid "Kerberos principal" +msgstr "" + +msgid "Kerberos principal expiration" +msgstr "" + +# auto translated by TM merge from project: Spacewalk Web UI, version: master, +# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource +#, fuzzy +msgid "Email address" +msgstr "Poštovní adresa" + +msgid "Prompt to set the user password" +msgstr "" + +msgid "Generate a random user password" +msgstr "" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" + +# auto translated by TM merge from project: libvirt, version: master, DocId: +# libvirt +#, fuzzy +msgid "Street address" +msgstr "MAC adresa" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +msgid "City" +msgstr "Město" + +msgid "State/Province" +msgstr "" + +msgid "ZIP" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +#, fuzzy +msgid "Telephone Number" +msgstr "Sériové číslo" + +msgid "Mobile Telephone Number" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +#, fuzzy +msgid "Pager Number" +msgstr "Sériové číslo" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +#, fuzzy +msgid "Fax Number" +msgstr "Sériové číslo" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "" + +msgid "Car License" +msgstr "" + +# auto translated by TM merge from project: Spacewalk Web UI, version: master, +# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource +#, fuzzy +msgid "Account disabled" +msgstr "Účet" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +msgid "User authentication types" +msgstr "Autentizace" + +msgid "Types of supported user authentication" +msgstr "" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +msgid "RADIUS proxy configuration" +msgstr "Nastavení" + +msgid "RADIUS proxy username" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +#, fuzzy +msgid "Department Number" +msgstr "Sériové číslo" + +msgid "Employee Number" +msgstr "" + +msgid "Employee Type" +msgstr "" + +msgid "Preferred Language" +msgstr "" + +msgid "Kerberos keys available" +msgstr "" + +msgid "Add a new user." +msgstr "" + +msgid "Don't create user private group" +msgstr "" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +#, fuzzy +msgid "Delete a user." +msgstr "Smazat" + +msgid "Disable a user account." +msgstr "" + +msgid "Enable a user account." +msgstr "" + +msgid "Search for users." +msgstr "" + +msgid "Self" +msgstr "" + +msgid "Display user record for current Kerberos principal" +msgstr "" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +msgid "Search for users with these member of HBAC rules." +msgstr "" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +msgid "Modify a user." +msgstr "" + +msgid "Rename the user object" +msgstr "" + +msgid "Display information about a user." +msgstr "" + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + msgid "Time limit of search in seconds (0 is unlimited)" msgstr "" @@ -9146,6 +8643,11 @@ msgstr "" msgid "Service category the ACL applies to" msgstr "" +# auto translated by TM merge from project: Spacewalk Web UI, version: master, +# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource +msgid "Profiles" +msgstr "Profily" + msgid "Create a new CA ACL." msgstr "" @@ -9200,6 +8702,116 @@ msgstr "" msgid "Display the properties of a CA ACL." msgstr "" +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +# auto translated by TM merge from project: OSCAP Anaconda Addon, version: +# master, DocId: oscap-anaconda-addon +#, fuzzy +msgid "Profile ID" +msgstr "Profil" + +msgid "Certificate Profile to use" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f22-branch, +# DocId: anaconda +#, fuzzy +msgid "Profile description" +msgstr "popis" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +msgid "Search for Certificate Profiles." +msgstr "" + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" msgstr "" @@ -9229,6 +8841,218 @@ msgstr "" msgid "Remove certificates from host entry" msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + msgid "Fallback to AD DC LDAP" msgstr "" @@ -9259,6 +9083,9 @@ msgid "" "to onelevel" msgstr "" +msgid "Remove users that can manage this token." +msgstr "" + msgid "Target DN subtree" msgstr "" @@ -9698,6 +9525,13 @@ msgid "" " " msgstr "" +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + msgid "Preserved user" msgstr "" @@ -10012,338 +9846,6 @@ msgstr "" msgid "Display information about a vault container." msgstr "" -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -# auto translated by TM merge from project: OSCAP Anaconda Addon, version: -# master, DocId: oscap-anaconda-addon -#, fuzzy -msgid "Profile ID" -msgstr "Profil" - -msgid "Certificate Profile to use" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f22-branch, -# DocId: anaconda -#, fuzzy -msgid "Profile description" -msgstr "popis" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -msgid "Search for Certificate Profiles." -msgstr "" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - msgid "Resolve a host name in DNS. (Deprecated)" msgstr "" @@ -11344,6 +10846,11 @@ msgstr "Vlajky" msgid "KEY Protocol" msgstr "Protokol" +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Protocol" +msgstr "Protokol" + msgid "KEY Algorithm" msgstr "" @@ -11577,12 +11084,22 @@ msgstr "" msgid "Import an entitlement certificate." msgstr "" +# auto translated by TM merge from project: libvirt, version: master, DocId: +# libvirt +msgid "UUID" +msgstr "UUID:" + msgid "Enrollment UUID" msgstr "" msgid "Register to the entitlement system." msgstr "" +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +msgid "Username" +msgstr "Jméno uživatele" + msgid "Enrollment UUID (not implemented)" msgstr "" @@ -12031,6 +11548,192 @@ msgid "" " ipa hostgroup-del baltimore\n" msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + msgid "" "Comma-separated list of objectclasses used to search for user entries in DS" msgstr "" @@ -12337,198 +12040,6 @@ msgstr "" msgid "comma-separated list of sudo commands to remove" msgstr "" -msgid "Active directory domain administrator's password" -msgstr "" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - msgid "" "\n" "Sudo Rules\n" @@ -12570,284 +12081,93 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" -msgid "A dictionary representing an LDAP entry" +msgid "Active directory domain administrator's password" msgstr "" -msgid "A list of LDAP entries" -msgstr "" - -msgid "All commands should at least have a result" +msgid "GECOS field" msgstr "" #, python-format -msgid "%(filename)s: file not found" -msgstr "" +msgid "Enter %(label)s again to verify: " +msgstr "Vložte znovu své %(label)s, aby se ověřila jeho správnost." -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" +msgid "Passwords do not match!" +msgstr "Hesla se neshodují!" -msgid "Filename is empty" -msgstr "" +msgid "No matching entries found" +msgstr "Nenalezeny žádné shodné položky" + +msgid "Topic or Command" +msgstr "Téma nebo příkaz" + +msgid "The topic or command name." +msgstr "Název tématu nebo příkazu." + +msgid "Topic commands:" +msgstr "Příkazy tématu:" + +msgid "To get command help, use:" +msgstr "Chceteli získat nápovědu k příkazu, použijte:" + +msgid " ipa --help" +msgstr " ipa --help" + +msgid "Command name" +msgstr "Název příkazu" + +msgid "Positional arguments" +msgstr "Poziční argumenty" #, python-format -msgid "Permission denied: %(file)s" -msgstr "" +msgid "Same as --%s" +msgstr "Stejné jako --%s" -msgid "empty DNS label" -msgstr "" +msgid "Deprecated options" +msgstr "Zastaralé volby" -msgid "DNS label cannot be longer that 63 characters" -msgstr "" +msgid "No file to read" +msgstr "Žádný soubor k přečtení" #, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" +"Verze %(cver)s klienta není kompatibilní s verzí %(sver)s serveru " +"'%(server)s'" -msgid "single label {}s are not supported" -msgstr "" +#, python-format +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "neznámý kód %(code)d chyby ze serveru %(server)s: %(error)s" -msgid "too many '@' characters" -msgstr "" +msgid "an internal error has occurred" +msgstr "Vyskytla se vnitřní chyba" -msgid "cannot be longer that {} characters" -msgstr "" +#, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "na serveru '%(server)s' se vyskytla interní chyba" -msgid "hostname contains empty label (consecutive dots)" -msgstr "" +#, python-format +msgid "unknown command '%(name)s'" +msgstr "neznámý příkaz '%(name)s'" -msgid "not fully qualified" -msgstr "" - -msgid "invalid SSH public key" -msgstr "" - -msgid "options are not allowed" -msgstr "" - -msgid "invalid hostmask" -msgstr "" - -#, fuzzy, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" +#, python-format +msgid "error on server '%(server)s': %(error)s" msgstr "chyba na serveru '%(server)s': %(error)s" #, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "" +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "nelze se připojit k '%(uri)s': %(error)s" #, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "Neplatný požadavek JSON-RPC: %(error)s" #, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" - -msgid "invalid escape code in domain name" -msgstr "" - -msgid "domain name cannot be longer than 255 characters" -msgstr "" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "" - -msgid "invalid domain name" -msgstr "" +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "chyba marshallingu dat pro přenos XML-RPC: %(error)s" #, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -msgid "invalid IP address format" -msgstr "" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" - -msgid "Additional instructions:" -msgstr "" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, fuzzy, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "chyba na serveru '%(server)s': %(error)s" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "" - -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." -msgstr "" +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "Chybějící nebo neplatný HTTP Referer, %(referer)s" #, python-format msgid "" @@ -12855,6 +12175,23 @@ msgid "" "\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." msgstr "" +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Chyba Kerberos: %(major)s/%(minor)s" + +msgid "did not receive Kerberos credentials" +msgstr "neobdrženy ověřovací údaje Kerberos" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "Služba '%(service)s' nenalezena v databázi Kerberosu" + +msgid "No credentials cache found" +msgstr "Nenalezena mezipamět ověřovacích údajů" + +msgid "Ticket expired" +msgstr "Platnost lístku skončila" + msgid "Credentials cache permissions incorrect" msgstr "" @@ -12903,6 +12240,11 @@ msgstr "Neplatný požadavek JSON-RPC: %(error)s" msgid "api has no such namespace: '%(name)s'" msgstr "" +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +msgid "Passwords do not match" +msgstr "Hesla nejsou stejná." + #, fuzzy msgid "Command not implemented" msgstr "Název příkazu" @@ -12922,6 +12264,10 @@ msgstr "" msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" msgstr "" +#, python-format +msgid "%(reason)s" +msgstr "%(reason)s" + msgid "This entry already exists" msgstr "" @@ -13148,6 +12494,196 @@ msgid "" "prevents a trust to '%(conflict)s'" msgstr "" +msgid "Results are truncated, try a more specific search" +msgstr "" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "" + +msgid "Client version. Used to determine if server will accept request." +msgstr "" + +msgid "Additional instructions:" +msgstr "" + +#, python-format +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" + +#, fuzzy, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "chyba na serveru '%(server)s': %(error)s" + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "%(line)s" +msgstr "" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "" + +#, python-format +msgid "%(count)d variables" +msgstr "" + +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "A dictionary representing an LDAP entry" +msgstr "" + +msgid "A list of LDAP entries" +msgstr "" + +msgid "All commands should at least have a result" +msgstr "" + +msgid "incorrect type" +msgstr "nesprávný typ" + msgid "Only one value is allowed" msgstr "" @@ -13276,28 +12812,116 @@ msgid "Service principal is required" msgstr "" #, python-format -msgid "%(count)d variables" +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +msgid "any of the configured servers" +msgstr "" + +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" msgstr "" #, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" +msgid "Permission denied: %(file)s" +msgstr "" -msgid "Results are truncated, try a more specific search" +msgid "empty DNS label" +msgstr "" + +msgid "DNS label cannot be longer that 63 characters" msgstr "" #, python-format -msgid "Unknown option: %(option)s" +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" msgstr "" -msgid "Client version. Used to determine if server will accept request." +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "" + +msgid "cannot be longer that {} characters" +msgstr "" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "" + +msgid "invalid SSH public key" +msgstr "" + +msgid "options are not allowed" +msgstr "" + +msgid "invalid hostmask" +msgstr "" + +#, fuzzy, python-format +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "chyba na serveru '%(server)s': %(error)s" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" msgstr "" #, python-format -msgid "objectclass %s not found" +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +msgid "invalid escape code in domain name" +msgstr "" + +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +msgid "invalid domain name" +msgstr "" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +msgid "invalid IP address format" +msgstr "" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" #, python-format @@ -13317,6252 +12941,53 @@ msgid "Retrieving CA status failed with status %d" msgstr "" #, python-format -msgid "Unable to communicate with CMS (status %d)" +msgid "objectclass %s not found" msgstr "" -#, python-format -msgid "Replication agreement for %(hostname)s not found" +msgid "Trusting forest" msgstr "" -msgid "Failed to authenticate to CA REST API" +msgid "Trusted forest" msgstr "" -msgid "One time password commands" +msgid "Established and verified" msgstr "" -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "OTP configuration options" -msgstr "Nastavení" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "OTP Configuration" -msgstr "Nastavení" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "" -"\n" -"IPA server roles\n" -msgstr "Serverové role" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "server role" -msgstr "Serverové role" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "server roles" -msgstr "Serverové role" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "IPA Server Roles" -msgstr "Serverové role" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "IPA Server Role" -msgstr "Serverové role" - -msgid "IPA server role name" -msgstr "" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "Include IPA master entries" -msgstr "" - -msgid "roles" -msgstr "" - -msgid "IPA role name" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel7-branch, -# DocId: anaconda -#, fuzzy -msgid "password policy" -msgstr "heslo" - -# auto translated by TM merge from project: anaconda, version: rhel7-branch, -# DocId: anaconda -#, fuzzy -msgid "password policies" -msgstr "heslo" - -# auto translated by TM merge from project: python-simpleline, version: -# master, DocId: python-simpleline -#, fuzzy -msgid "Password Policies" -msgstr "Heslo" - -# auto translated by TM merge from project: python-simpleline, version: -# master, DocId: python-simpleline -#, fuzzy -msgid "Password Policy" -msgstr "Heslo" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -# auto translated by TM merge from project: dnf, version: master, DocId: dnf -#, fuzzy -msgid "User check" -msgstr "Uživatelské jméno" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -msgid "Help topic" -msgstr "" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -msgid "Method name" -msgstr "Název příkazu" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command." -msgstr "" - -#, fuzzy -msgid "Search for commands." -msgstr "Téma nebo příkaz" - -msgid "Return command defaults" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -msgid "Search for classes." -msgstr "" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -msgid "CLI name" -msgstr "Název příkazu" - -#, fuzzy -msgid "Confirm (password)" -msgstr "Uživatelské heslo" - -# auto translated by TM merge from project: ibus-input-pad, version: head, -# DocId: ibus-input-pad -#, fuzzy -msgid "Default from" -msgstr "Výchozí" - -msgid "Convert on server" -msgstr "" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -#, fuzzy -msgid "Option group" -msgstr "Přepínače" - -msgid "Sensitive" -msgstr "" - -#, fuzzy -msgid "Positional argument" -msgstr "Poziční argumenty" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command output." -msgstr "" - -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" -msgstr "" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy, python-format -msgid "member %s" -msgstr "Členové" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "service delegation rules" -msgstr "Nastavení služeb" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "Service delegation rules" -msgstr "Nastavení služeb" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "Service delegation rule" -msgstr "Nastavení služeb" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "service delegation target" -msgstr "" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "service delegation targets" -msgstr "Nastavení služeb" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "Service delegation targets" -msgstr "Nastavení služeb" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "Service delegation target" -msgstr "Nastavení služeb" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" - -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -msgid "Malformed principal" -msgstr "" - -msgid "{} is required by the IPA master" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "services" -msgstr "službu" - -msgid "Principal alias" -msgstr "" - -msgid "Service principal alias" -msgstr "" - -msgid "Base-64 encoded service certificate" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -msgid "Serial Number (hex)" -msgstr "Sériové číslo" - -msgid "Issuer" -msgstr "" - -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "Fingerprint (SHA1)" -msgstr "Otisk" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "Fingerprint (SHA256)" -msgstr "Otisk" - -msgid "Revocation reason" +msgid "Waiting for confirmation by remote side" msgstr "" -# auto translated by TM merge from project: anaconda, version: f25, DocId: +# auto translated by TM merge from project: anaconda, version: master, DocId: # main -#, fuzzy -msgid "Authentication Indicators" -msgstr "Autentizace" +msgid "Unknown" +msgstr "Neznámý" -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "" - -msgid "Add a new IPA service." -msgstr "" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "" - -msgid "force principal name even if host not in DNS" -msgstr "" - -msgid "Skip host check" -msgstr "" - -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "" - -msgid "Add a new SMB service." -msgstr "" - -msgid "SMB service NetBIOS name" -msgstr "" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to a service" -msgstr "" - -#, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a service" -msgstr "" - -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -# auto translated by TM merge from project: firewalld, version: master, DocId: -# po/firewalld -#, fuzzy -msgid "Sudo Rules" -msgstr "Pravidla" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "users" -msgstr "uživatel" - -msgid "runAs user" -msgstr "" - -msgid "runAs users" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "group runAs" -msgstr "skupinu" - -msgid "runAs groups" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when user category='all'" -msgstr "" - -msgid "hosts cannot be added when host category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -msgid "pyhbac is not installed." -msgstr "" - -#, fuzzy -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "Zastaralé volby" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -#, fuzzy -msgid " * 0 - unspecified\n" -msgstr "Nespecifikováno" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Base-64 encoded certificate." -msgstr "" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - -msgid "Subject email address" -msgstr "" - -# auto translated by TM merge from project: libreport, version: master, DocId: -# libreport -#, fuzzy -msgid "Subject DNS name" -msgstr "Předmět" - -msgid "Subject X.400 address" -msgstr "" - -msgid "Subject directory name" -msgstr "" - -msgid "Subject EDI Party name" -msgstr "" - -# auto translated by TM merge from project: libreport, version: master, DocId: -# libreport -#, fuzzy -msgid "Subject URI" -msgstr "Předmět" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "Subject IP Address" -msgstr "IP adresa" - -# auto translated by TM merge from project: libreport, version: master, DocId: -# libreport -#, fuzzy -msgid "Subject OID" -msgstr "Předmět" - -# auto translated by TM merge from project: libreport, version: master, DocId: -# libreport -#, fuzzy -msgid "Subject UPN" -msgstr "Předmět" - -msgid "Subject Kerberos principal name" -msgstr "" - -msgid "Subject Other Name" -msgstr "" - -msgid "Issuer DN" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -msgid "Serial number (hex)" -msgstr "Sériové číslo" - -msgid "Request status" -msgstr "" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -#, fuzzy -msgid "'add' option" -msgstr "Zastaralé volby" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Revoked" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -msgid "domain" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "User logins" -msgstr "Uživatelé" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "Base-64 encoded user certificate" -msgstr "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "must be at least 10" -msgstr "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "configuration options" -msgstr "Nastavení" - -msgid "Maximum hostname length" -msgstr "" - -msgid "IPA masters" -msgstr "" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -msgid "IPA CA servers" -msgstr "" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA KRA servers" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" - -msgid "Domain resolution order" -msgstr "" - -msgid "colon-separated list of domains used for short name qualification" -msgstr "" - -# auto translated by TM merge from project: System Administrator's Guide, -# version: master, DocId: Deployment_Guide -#, fuzzy -msgid "IPA DNS servers" -msgstr "Servery" - -msgid "IPA servers configured as domain name server" -msgstr "" - -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "IPA DNSSec key master" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -msgid "Empty domain is not allowed" -msgstr "" - -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -msgid "The group doesn't exist" -msgstr "" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, fuzzy, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "chyba na serveru '%(server)s': %(error)s" - -msgid "SELinux user map default user not in order list" -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "" - -msgid "sudo command groups" -msgstr "" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "host groups" -msgstr "skupinu" - -# auto translated by TM merge from project: dnf, version: master, DocId: -# po/dnf -#, fuzzy -msgid "Host Group" -msgstr "Skupina" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "hostgroup" -msgstr "skupinu" - -msgid "privileged hostgroup" -msgstr "" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "The OTP if the user has a token configured" -msgstr "" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "" -"\n" -"Permissions\n" -msgstr "Verze" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -msgid "" -"\n" -"Managed permissions\n" -msgstr "" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "must be enclosed in parentheses" -msgstr "" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -#, fuzzy, python-format -msgid "Deprecated; use %s" -msgstr "Zastaralé volby" - -msgid "ACI" -msgstr "" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, python-format -msgid "Entry %s not found" -msgstr "" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, python-format -msgid "%s: group not found" -msgstr "" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" -msgstr "" - -msgid "Bad search filter" -msgstr "" - -#, python-format -msgid "Entry %s does not exist" -msgstr "" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, python-format -msgid "Added permission \"%(value)s\"" -msgstr "" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "" - -msgid "cannot delete managed permissions" -msgstr "" - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "" - -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-brace-format -msgid "{role}: role not found" -msgstr "" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -msgid "Internationalization messages" -msgstr "" - -msgid "Your session has expired. Please log in again." -msgstr "" - -msgid "Rebuild auto membership" -msgstr "" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -msgid "Are you sure you want to proceed with the action?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -#, fuzzy -msgid "Actions" -msgstr "Přepínače" - -#, python-brace-format -msgid "${count} item(s) added" -msgstr "" - -msgid "Direct Membership" -msgstr "" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "" - -msgid "Indirect Membership" -msgstr "" - -msgid "No entries." -msgstr "" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "" - -msgid "Remove" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "" - -msgid "Show Results" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "Authentication indicators" -msgstr "Autentizace" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "Authentication indicator" -msgstr "Autentizace" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "Add Custom Authentication Indicator" -msgstr "" - -msgid "Two factor authentication (password + OTP)" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -msgid "Disable per-user override" -msgstr "" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "About" -msgstr "" - -msgid "Activate" -msgstr "" - -msgid "Add and Add Another" -msgstr "" - -msgid "Add and Close" -msgstr "" - -msgid "Add and Edit" -msgstr "" - -msgid "Add Many" -msgstr "" - -msgid "Clear all fields on the page." -msgstr "" - -msgid "Download certificate as PEM formatted file." -msgstr "" - -# auto translated by TM merge from project: docbook-locales, version: master, -# DocId: locale -#, fuzzy -msgid "Get" -msgstr "Sada" - -msgid "Issue" -msgstr "" - -msgid "Match" -msgstr "" - -msgid "Match users according to certificate." -msgstr "" - -msgid "Migrate" -msgstr "" - -msgid "Reload current settings from the server." -msgstr "" - -msgid "Remove hold" -msgstr "" - -#, fuzzy -msgid "Reset Password" -msgstr "Uživatelské heslo" - -msgid "Reset Password and Log in" -msgstr "" - -msgid "Revoke" -msgstr "" - -msgid "View" -msgstr "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "Customization" -msgstr "Nastavení" - -msgid "Pagination Size" -msgstr "" - -msgid "Collapse All" -msgstr "" - -msgid "Expand All" -msgstr "" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "Identity Settings" -msgstr "Nastavení služeb" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "Record Settings" -msgstr "Nastavení služeb" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "" - -msgid "Back to Top" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "" - -msgid "Add custom value" -msgstr "" - -msgid "Some operations failed." -msgstr "" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -#, fuzzy -msgid "Operations Error" -msgstr "Přepínače" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "Confirmation" -msgstr "Nastavení" - -msgid "Custom value" -msgstr "" - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" - -msgid "Unsaved Changes" -msgstr "" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "" - -msgid "Hide details" -msgstr "" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "" - -msgid "Prospective" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f22-branch, -# DocId: anaconda -#, fuzzy -msgid "Redirection" -msgstr "popis" - -msgid "Select entries to be removed." -msgstr "" - -msgid "Result" -msgstr "" - -msgid "Show details" -msgstr "" - -msgid "Validation error" -msgstr "" - -msgid "Input form contains invalid or missing values." -msgstr "" - -msgid "Please try the following options:" -msgstr "" - -msgid "If the problem persists please contact the system administrator." -msgstr "" - -msgid "Refresh the page." -msgstr "" - -msgid "Reload the browser." -msgstr "" - -msgid "Return to the main page and retry the operation" -msgstr "" - -#, fuzzy, python-brace-format -msgid "An error has occurred (${error})" -msgstr "Vyskytla se vnitřní chyba" - -# auto translated by TM merge from project: python-simpleline, version: -# master, DocId: python-simpleline -#, fuzzy -msgid "HTTP Error" -msgstr "Chyba" - -msgid "Internal Error" -msgstr "" - -# auto translated by TM merge from project: python-simpleline, version: -# master, DocId: python-simpleline -#, fuzzy -msgid "IPA Error" -msgstr "Chyba" - -msgid "No response" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} member managers:" -msgstr "" - -msgid "False" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Allowed to create keytab" -msgstr "" - -msgid "Allowed to retrieve keytab" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Add Kerberos Principal Alias" -msgstr "" - -msgid "New kerberos principal alias" -msgstr "" - -msgid "Remove Kerberos Alias" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "" - -msgid "Inherited from server configuration" -msgstr "" - -msgid "MS-PAC" -msgstr "" - -msgid "Override inherited settings" -msgstr "" - -msgid "PAD" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "Authenticating" -msgstr "Autentizace" - -msgid "Authentication with personal certificate failed" -msgstr "" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" - -msgid "Continue to next page" -msgstr "" - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" - -msgid "Login failed due to an unknown reason" -msgstr "" - -msgid "Logged In As" -msgstr "" - -msgid "Authentication with Kerberos failed" -msgstr "" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -msgid "Loading" -msgstr "" - -msgid "Kerberos Principal you entered is expired" -msgstr "" - -msgid "Loading data" -msgstr "" - -msgid "Log in" -msgstr "" - -msgid "Log In Using Certificate" -msgstr "" - -msgid "Log in using personal certificate" -msgstr "" - -msgid "Log out" -msgstr "" - -msgid "Log out error" -msgstr "" - -msgid "Password or Password+One-Time Password" -msgstr "" - -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "" - -msgid "Sync OTP Token" -msgstr "" - -msgid "Synchronizing" -msgstr "" - -msgid "The user account you entered is locked" -msgstr "" - -#, fuzzy -msgid "number of passwords" -msgstr "Uživatelské heslo" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "Migrating" -msgstr "Nastavení" - -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -msgid "Password migration was not successful" -msgstr "" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -msgid "The password or username you entered is incorrect" -msgstr "" - -msgid "Password migration was successful" -msgstr "" - -msgid "Attribute" -msgstr "" - -msgid "Add delegation" -msgstr "" - -msgid "Remove delegations" -msgstr "" - -msgid "Add permission" -msgstr "" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -msgid "Remove permissions" -msgstr "" - -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "" - -msgid "Add privilege" -msgstr "" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -msgid "Remove privileges" -msgstr "" - -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "" - -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "" - -# auto translated by TM merge from project: fedora-software, version: master, -# DocId: template/django -#, fuzzy -msgid "Role Settings" -msgstr "Nastavení" - -msgid "Add role" -msgstr "" - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "" - -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "Remove roles" -msgstr "Serverové role" - -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "" - -msgid "Add self service permission" -msgstr "" - -msgid "Remove self service permissions" -msgstr "" - -msgid "Add rule" -msgstr "" - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to change default group?" -msgstr "" - -msgid "Default host group" -msgstr "" - -msgid "Default user group" -msgstr "" - -msgid "Exclusive" -msgstr "" - -msgid "Host group rule" -msgstr "" - -msgid "Host group rules" -msgstr "" - -msgid "Inclusive" -msgstr "" - -msgid "Remove auto membership rules" -msgstr "" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -msgid "User group rule" -msgstr "" - -msgid "User group rules" -msgstr "" - -msgid "Add automount key" -msgstr "" - -msgid "Remove automount keys" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "Add automount location" -msgstr "Autentizace" - -msgid "Automount Location Settings" -msgstr "" - -msgid "Remove automount locations" -msgstr "" - -msgid "Add automount map" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Map Type" -msgstr "Typ" - -msgid "Direct" -msgstr "" - -msgid "Indirect" -msgstr "" - -msgid "Remove automount maps" -msgstr "" - -msgid "Add certificate authority" -msgstr "" - -msgid "Remove certificate authorities" -msgstr "" - -msgid "Add CA ACL" -msgstr "" - -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -msgid "All" -msgstr "" - -msgid "Any CA" -msgstr "" - -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -#, fuzzy -msgid "Any Host" -msgstr "Počítač" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Any Service" -msgstr "Služba" - -# auto translated by TM merge from project: OSCAP Anaconda Addon, version: -# master, DocId: oscap-anaconda-addon -#, fuzzy -msgid "Any Profile" -msgstr "Profil" - -msgid "Anyone" -msgstr "" - -# auto translated by TM merge from project: firewalld, version: master, DocId: -# po/firewalld -#, fuzzy -msgid "Rule status" -msgstr "Pravidla" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" - -msgid "Remove CA ACLs" -msgstr "" - -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -#, fuzzy -msgid "Specified CAs" -msgstr "Nespecifikováno" - -msgid "Specified Hosts and Groups" -msgstr "" - -# auto translated by TM merge from project: Spacewalk Web UI, version: master, -# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource -#, fuzzy -msgid "Specified Profiles" -msgstr "Profily" - -msgid "Specified Services and Groups" -msgstr "" - -msgid "Specified Users and Groups" -msgstr "" - -msgid "Permitted to have certificates issued" -msgstr "" - -msgid "Remove certificate profiles" -msgstr "" - -msgid "AA Compromise" -msgstr "" - -msgid "Add principal" -msgstr "" - -msgid "Affiliation Changed" -msgstr "" - -msgid "CA" -msgstr "" - -msgid "CA Compromise" -msgstr "" - -msgid "Certificates" -msgstr "" - -msgid "Certificate Hold" -msgstr "" - -msgid "Cessation of Operation" -msgstr "" - -#, fuzzy -msgid "Common Name" -msgstr "Název příkazu" - -msgid "the certificate with serial number " -msgstr "" - -msgid "Expires On" -msgstr "" - -msgid "Issued on from" -msgstr "" - -msgid "Issued on to" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -msgid "Maximum serial number" -msgstr "Sériové číslo" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -msgid "Minimum serial number" -msgstr "Sériové číslo" - -msgid "Revoked on from" -msgstr "" - -msgid "Revoked on to" -msgstr "" - -msgid "Valid not after from" -msgstr "" - -msgid "Valid not after to" -msgstr "" - -msgid "Valid not before from" -msgstr "" - -msgid "Valid not before to" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "Fingerprints" -msgstr "Otisk" - -msgid "Get Certificate" -msgstr "" - -msgid "Certificate Hold Removed" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "" - -msgid "Issue new certificate" -msgstr "" - -msgid "Issued By" -msgstr "" - -msgid "Issued On" -msgstr "" - -msgid "Issued To" -msgstr "" - -msgid "Key Compromise" -msgstr "" - -msgid "No Valid Certificate" -msgstr "" - -msgid "New Certificate" -msgstr "" - -msgid "Certificate in base64 or PEM format" -msgstr "" - -msgid "Organization" -msgstr "" - -msgid "Organizational Unit" -msgstr "" - -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "" - -msgid "Privilege Withdrawn" -msgstr "" - -msgid "Reason for Revocation" -msgstr "" - -msgid "Remove certificate hold" -msgstr "" - -msgid "Do you want to remove the certificate hold?" -msgstr "" - -msgid "Remove from CRL" -msgstr "" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" - -msgid "Certificate requested" -msgstr "" - -msgid "Revoke certificate" -msgstr "" - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" - -msgid "Certificate Revoked" -msgstr "" - -msgid "REVOKED" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "SHA1 Fingerprint" -msgstr "Otisk" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "SHA256 Fingerprint" -msgstr "Otisk" - -msgid "Superseded" -msgstr "" - -msgid "Valid Certificate Present" -msgstr "" - -msgid "Valid from" -msgstr "" - -msgid "Valid to" -msgstr "" - -msgid "Validity" -msgstr "" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "" - -msgid "View Certificate" -msgstr "" - -msgid "Certificate Data" -msgstr "" - -msgid "Certificate For Match" -msgstr "" - -msgid "Certificate Mapping Match" -msgstr "" - -msgid "Matched Users" -msgstr "" - -# auto translated by TM merge from project: dnf, version: master, DocId: dnf -#, fuzzy -msgid "User Login" -msgstr "Uživatelské jméno" - -msgid "Add certificate identity mapping rule" -msgstr "" - -msgid "Add certificate mapping data" -msgstr "" - -msgid "Certificate mapping data" -msgstr "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "Configuration string" -msgstr "Nastavení" - -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "" - -msgid "Remove certificate mapping data" -msgstr "" - -msgid "Issuer and subject" -msgstr "" - -msgid "Remove certificate identity mapping rules" -msgstr "" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -#, fuzzy -msgid "Group Options" -msgstr "Přepínače" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -#, fuzzy -msgid "Search Options" -msgstr "Přepínače" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "SELinux Options" -msgstr "Uživatel SELinuxu" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "Server Options" -msgstr "Serverové role" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "Service Options" -msgstr "Nastavení služeb" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -#, fuzzy -msgid "User Options" -msgstr "Přepínače" - -msgid "Forward first" -msgstr "" - -msgid "Forwarding disabled" -msgstr "" - -msgid "Forward only" -msgstr "" - -msgid "Update System DNS Records" -msgstr "" - -msgid "Do you want to update system DNS records?" -msgstr "" - -msgid "System DNS records updated" -msgstr "" - -msgid "Add DNS forward zone" -msgstr "" - -msgid "Remove DNS forward zones" -msgstr "" - -msgid "Add DNS resource record" -msgstr "" - -msgid "DNS record was deleted because it contained no data." -msgstr "" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -#, fuzzy -msgid "Other Record Types" -msgstr "Typ záznamu" - -msgid "Address not valid, can't redirect" -msgstr "" - -msgid "Create dns record" -msgstr "" - -msgid "Creating record." -msgstr "" - -msgid "Record creation failed." -msgstr "" - -msgid "Checking if record exists." -msgstr "" - -msgid "Record not found." -msgstr "" - -msgid "Redirection to PTR record" -msgstr "" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "" - -msgid "Target reverse zone not found." -msgstr "" - -msgid "Fetching DNS zones." -msgstr "" - -msgid "An error occurred while fetching dns zones." -msgstr "" - -msgid "You will be redirected to DNS Zone." -msgstr "" - -msgid "Remove DNS resource records" -msgstr "" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -#, fuzzy -msgid "Standard Record Types" -msgstr "Typ záznamu" - -msgid "Records for DNS Zone" -msgstr "" - -msgid "Add DNS zone" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "DNS Zone Settings" -msgstr "Nastavení služeb" - -msgid "Remove DNS zones" -msgstr "" - -msgid "Remove Permission" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "" - -msgid "Skip DNS check" -msgstr "" - -msgid "Skip overlap check" -msgstr "" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" - -msgid "Authoritative nameserver change" -msgstr "" - -msgid "Set Domain Level" -msgstr "" - -msgid "Add user group" -msgstr "" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -# auto translated by TM merge from project: fedora-software, version: master, -# DocId: template/django -#, fuzzy -msgid "Group Settings" -msgstr "Nastavení" - -msgid "External" -msgstr "" - -msgid "Group categories" -msgstr "" - -msgid "Change to external group" -msgstr "" - -msgid "Change to POSIX group" -msgstr "" - -msgid "Non-POSIX" -msgstr "" - -msgid "POSIX" -msgstr "" - -msgid "Remove user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -# auto translated by TM merge from project: dnf, version: master, DocId: -# po/dnf -#, fuzzy -msgid "Group Type" -msgstr "Skupina" - -msgid "Add HBAC rule" -msgstr "" - -#, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "" - -# auto translated by TM merge from project: Linux PAM, version: master, DocId: -# po/Linux-PAM -#, fuzzy -msgid "Accessing" -msgstr "Úspěch" - -msgid "Remove HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Via Service" -msgstr "Služba" - -msgid "Who" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "Add HBAC service" -msgstr "službu" - -#, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "" - -msgid "Remove HBAC services" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "" - -msgid "Add HBAC service group" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "" - -msgid "Remove HBAC service groups" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "" - -msgid "Access Denied" -msgstr "" - -msgid "Access Granted" -msgstr "" - -# auto translated by TM merge from project: Cockpit, version: master, DocId: -# cockpit -#, fuzzy -msgid "Include Disabled" -msgstr "Zakázáno" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Include Enabled" -msgstr "Povoleno" - -msgid "HBAC Test" -msgstr "" - -msgid "Matched" -msgstr "" - -msgid "Missing values: " -msgstr "" - -msgid "New Test" -msgstr "" - -msgid "Run Test" -msgstr "" - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "" - -msgid "Unmatched" -msgstr "" - -msgid "Add host" -msgstr "" - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -msgid "Host Certificate" -msgstr "" - -msgid "Delete Key, Unprovision" -msgstr "" - -# auto translated by TM merge from project: fedora-software, version: master, -# DocId: template/django -#, fuzzy -msgid "Host Settings" -msgstr "Nastavení" - -msgid "Enrolled" -msgstr "" - -msgid "Enrollment" -msgstr "" - -msgid "Fully Qualified Host Name" -msgstr "" - -# auto translated by TM merge from project: asknot-ng, version: 0.1, DocId: -# locale/asknot-ng -#, fuzzy -msgid "Generate OTP" -msgstr "Obecné" - -# auto translated by TM merge from project: asknot-ng, version: 0.1, DocId: -# locale/asknot-ng -#, fuzzy -msgid "Generated OTP" -msgstr "Obecné" - -msgid "Kerberos Key" -msgstr "" - -msgid "Kerberos Key Not Present" -msgstr "" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "" - -# auto translated by TM merge from project: python-simpleline, version: -# master, DocId: python-simpleline -#, fuzzy -msgid "One-Time Password" -msgstr "Heslo" - -msgid "One-Time Password Not Present" -msgstr "" - -msgid "One-Time Password Present" -msgstr "" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "Reset OTP" -msgstr "Reset" - -msgid "Reset One-Time Password" -msgstr "" - -msgid "Set OTP" -msgstr "" - -msgid "OTP set" -msgstr "" - -msgid "Set One-Time Password" -msgstr "" - -msgid "Remove hosts" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "" - -# auto translated by TM merge from project: Spacewalk Web UI, version: master, -# DocId: java/code/src/com/redhat/rhn/frontend/strings/database/StringResource -#, fuzzy -msgid "Unprovision" -msgstr "Zajištění" - -msgid "Are you sure you want to unprovision this host?" -msgstr "" - -# auto translated by TM merge from project: Spacewalk Web UI, version: master, -# DocId: java/code/src/com/redhat/rhn/frontend/strings/database/StringResource -#, fuzzy -msgid "Unprovisioning host" -msgstr "Zajištění" - -msgid "Host unprovisioned" -msgstr "" - -msgid "Add host group" -msgstr "" - -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" - -msgid "Host Group Settings" -msgstr "" - -msgid "Remove host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -msgid "User to override" -msgstr "" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" - -msgid "Enter trusted user login." -msgstr "" - -msgid "Group to override" -msgstr "" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" - -msgid "Enter trusted group name." -msgstr "" - -msgid "Add ID view" -msgstr "" - -msgid "Add group ID override" -msgstr "" - -msgid "Add user ID override" -msgstr "" - -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "" - -msgid "Applied to hosts" -msgstr "" - -msgid "Apply to host groups" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" - -msgid "Apply to hosts" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "" - -msgid "Remove ID views" -msgstr "" - -msgid "Remove user ID overrides" -msgstr "" - -msgid "Remove group ID overrides" -msgstr "" - -msgid "Un-apply from host groups" -msgstr "" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Un-apply" -msgstr "Použít" - -msgid "Un-apply from hosts" -msgstr "" - -msgid "Un-apply ID Views from hosts" -msgstr "" - -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "" - -msgid "Add netgroup" -msgstr "" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "Netgroup Settings" -msgstr "Nastavení služeb" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "Netgroups" -msgstr "skupinu" - -msgid "Remove netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "" - -msgid "Add OTP token" -msgstr "" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "Configure your token" -msgstr "Nastavení" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" - -# auto translated by TM merge from project: fedora-software, version: master, -# DocId: template/django -#, fuzzy -msgid "OTP Token Settings" -msgstr "Nastavení" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Disable token" -msgstr "Zakázat" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Enable token" -msgstr "Povolit" - -msgid "Remove OTP tokens" -msgstr "" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" - -msgid "Show QR code" -msgstr "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "Show configuration uri" -msgstr "Nastavení" - -msgid "Counter-based (HOTP)" -msgstr "" - -msgid "Time-based (TOTP)" -msgstr "" - -msgid "Add Custom Attribute" -msgstr "" - -# auto translated by TM merge from project: Spacewalk Web UI, version: master, -# DocId: java/code/src/com/redhat/rhn/frontend/strings/database/StringResource -#, fuzzy -msgid "Permission settings" -msgstr "Zajištění" - -msgid "Attribute breakdown" -msgstr "" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "Privilege Settings" -msgstr "Nastavení služeb" - -msgid "Public key:" -msgstr "" - -msgid "Set public key" -msgstr "" - -msgid "Show/Set key" -msgstr "" - -msgid "Modified: key not set" -msgstr "" - -msgid "Modified" -msgstr "" - -msgid "New: key not set" -msgstr "" - -msgid "New: key set" -msgstr "" - -# auto translated by TM merge from project: authconfig, version: master, -# DocId: po/authconfig -#, fuzzy -msgid "Add password policy" -msgstr "LDAP heslo" - -msgid "Remove password policies" -msgstr "" - -msgid "Add ID range" -msgstr "" - -# auto translated by TM merge from project: fedora-software, version: master, -# DocId: template/django -#, fuzzy -msgid "Range Settings" -msgstr "Nastavení" - -msgid "Base ID" -msgstr "" - -msgid "Primary RID base" -msgstr "" - -msgid "Range size" -msgstr "" - -msgid "Domain SID" -msgstr "" - -msgid "Secondary RID base" -msgstr "" - -msgid "Remove ID ranges" +msgid "Non-Active Directory domain" msgstr "" msgid "Active Directory domain" msgstr "" -msgid "Active Directory domain with POSIX attributes" -msgstr "" - -msgid "Detect" -msgstr "" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "Local domain" -msgstr "Umístění" - -msgid "IPA trust" -msgstr "" - -msgid "Active Directory winsync" -msgstr "" - -msgid "Add RADIUS server" -msgstr "" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "RADIUS Proxy Server Settings" -msgstr "Nastavení služeb" - -msgid "Remove RADIUS servers" -msgstr "" - -msgid "Check DNS" -msgstr "" - -msgid "Do you also want to perform DNS check?" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Force Update" -msgstr "Aktualizovat" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Add SELinux user map" -msgstr "Uživatel SELinuxu" - -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "" - -msgid "Remove selinux user maps" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "Server Role" -msgstr "Serverové role" - -msgid "Warning: Consider service replication" +msgid "RFC4120-compliant Kerberos realm" msgstr "" msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" +"Non-transitive external trust to a domain in another Active Directory forest" msgstr "" -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -#, fuzzy -msgid "Delete Server" -msgstr "Smazat" - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "Add service" -msgstr "službu" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "Service Certificate" -msgstr "Nastavení služeb" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "Remove services" -msgstr "službu" - -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to unprovision this service?" -msgstr "" - -# auto translated by TM merge from project: Spacewalk Web UI, version: master, -# DocId: java/code/src/com/redhat/rhn/frontend/strings/database/StringResource -#, fuzzy -msgid "Unprovisioning service" -msgstr "Zajištění" - -msgid "Service unprovisioned" -msgstr "" - -msgid "Kerberos Key Present, Service Provisioned" -msgstr "" - -msgid "SSH public keys" -msgstr "" - -msgid "SSH public key:" -msgstr "" - -msgid "Set SSH key" -msgstr "" - -msgid "Are you sure you want to activate selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "" - -msgid "Add stage user" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# labs.fedoraproject.org, DocId: po/labs.fedoraproject.org -#, fuzzy -msgid "Stage users" -msgstr "Stage" - -msgid "Preserved users" -msgstr "" - -msgid "Remove preserved users" -msgstr "" - -msgid "Remove stage users" -msgstr "" - -msgid "Are you sure you want to stage selected users?" -msgstr "" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "" - -msgid "Are you sure you want to restore selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "" - -msgid "User categories" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "Add sudo command" -msgstr "příkaz" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "" - -msgid "Remove sudo commands" -msgstr "" - -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "" - -msgid "Add sudo command group" -msgstr "" - -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "" - -msgid "Remove sudo command groups" -msgstr "" - -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "" - -msgid "Add sudo rule" -msgstr "" - -msgid "Add sudo option" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -msgid "Allow" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "Any Command" -msgstr "příkaz" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Run Commands" -msgstr "příkazy" - -msgid "Deny" -msgstr "" - -msgid "Access this host" -msgstr "" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -#, fuzzy -msgid "Option added" -msgstr "Přepínače" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "" - -msgid "Remove sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -msgid "As Whom" -msgstr "" - -msgid "Specified Commands and Groups" -msgstr "" - -msgid "Specified Groups" -msgstr "" - -msgid "Remove sudo options" -msgstr "" - -msgid "Autogenerated" -msgstr "" - -msgid "Segment details" -msgstr "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "Replication configuration" -msgstr "Nastavení" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" - -msgid "Add IPA location" -msgstr "" - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -msgid "Remove IPA locations" -msgstr "" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -msgid "Add topology segment" -msgstr "" - -msgid "Remove topology segments" -msgstr "" - -msgid "Add trust" -msgstr "" - -msgid "Administrative account" -msgstr "" - -msgid "SID blocklists" -msgstr "" - -# auto translated by TM merge from project: fedora-software, version: master, -# DocId: template/django -#, fuzzy -msgid "Trust Settings" -msgstr "Nastavení" - -msgid "Establish using" -msgstr "" - -msgid "Fetch domains" -msgstr "" - -#, fuzzy -msgid "Pre-shared password" -msgstr "Uživatelské heslo" - -msgid "Remove trusts" -msgstr "" - -msgid "Remove domains" -msgstr "" - -msgid "Trust direction" -msgstr "" - -msgid "Trust status" -msgstr "" - -msgid "Trust type" -msgstr "" - -msgid "Alternative UPN suffixes" -msgstr "" - -msgid "User attributes for SMB services" -msgstr "" - -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -msgid "Path to a user home directory, in UNC format" -msgstr "" - -msgid "Drive to mount a home directory" -msgstr "" - -# auto translated by TM merge from project: fedora-software, version: master, -# DocId: template/django -#, fuzzy -msgid "Account Settings" -msgstr "Nastavení" - -# auto translated by TM merge from project: Spacewalk Web UI, version: master, -# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource -#, fuzzy -msgid "Account Status" -msgstr "Účet" - -msgid "Active users" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "Add user" -msgstr "uživatel" - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -# auto translated by TM merge from project: fedora-software, version: master, -# DocId: template/django -#, fuzzy -msgid "Contact Settings" -msgstr "Nastavení" - -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -#, fuzzy -msgid "Delete mode" -msgstr "Smazat" - -msgid "Employee Information" -msgstr "" - -msgid "Error changing account status" -msgstr "" - -msgid "Password expiration" -msgstr "" - -msgid "Misc. Information" -msgstr "" - -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -#, fuzzy -msgid "delete" -msgstr "Smazat" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "preserve" -msgstr "službu" - -msgid "No private group" -msgstr "" - -msgid "Remove users" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" - -#, python-brace-format -msgid "Click to ${action}" -msgstr "" - -msgid "Unlock" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "" - -msgid "Add vault" -msgstr "" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -msgid "Asymmetric" -msgstr "" - -msgid "Vaults Config" -msgstr "" - -msgid "My User Vaults" -msgstr "" - -msgid "Owners" -msgstr "" - -msgid "Remove vaults" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - -# auto translated by TM merge from project: firewalld, version: master, DocId: -# po/firewalld -#, fuzzy -msgid "Service Vaults" -msgstr "Služby" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "Shared Vaults" -msgstr "Sdílená" - -msgid "Symmetric" -msgstr "" - -msgid "Vault Type" -msgstr "" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "User Vaults" -msgstr "Uživatelé" - -msgid "Current password is required" -msgstr "" - -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# fedoraproject.org, DocId: po/fedora-web -#, fuzzy -msgid "First OTP" -msgstr "Prvenství " - -msgid "New password is required" -msgstr "" - -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" - -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" - -msgid "Token synchronization failed" -msgstr "" - -msgid "The username, password or token codes are not correct" -msgstr "" - -msgid "Token was synchronized" -msgstr "" - -msgid "Password change complete" -msgstr "" - -msgid "Your password has expired. Please enter a new password." -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -msgid "Passwords must match" -msgstr "Hesla nejsou stejná." - -msgid "Password reset was not successful." -msgstr "" - -#, fuzzy -msgid "Reset your password." -msgstr "Uživatelské heslo" - -msgid "Second OTP" -msgstr "" - -#, fuzzy -msgid "Verify Password" -msgstr "Uživatelské heslo" - -msgid "Are you sure you want to delete selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "" - -msgid "Are you sure you want to disable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "" - -msgid "Are you sure you want to enable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "" - -msgid "Some entries were not deleted" -msgstr "" - -msgid "Quick Links" -msgstr "" - -msgid "Select All" -msgstr "" - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" - -msgid "Unselect All" -msgstr "" - -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" - -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" - -msgid "Automember" -msgstr "" - -# auto translated by TM merge from project: Spacewalk Web UI, version: master, -# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource -#, fuzzy -msgid "Automount" -msgstr "Účet" - -msgid "Host-Based Access Control" -msgstr "" - -msgid "Identity" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org -#, fuzzy -msgid "IPA Server" -msgstr "Server" - -# auto translated by TM merge from project: firewalld, version: master, DocId: -# po/firewalld -#, fuzzy -msgid "Network Services" -msgstr "Služby" - -msgid "Policy" -msgstr "" - -msgid "Role-Based Access Control" -msgstr "" - -msgid "Sudo" -msgstr "" - -msgid "Topology" -msgstr "" - -msgid "Trusts" -msgstr "" - -msgid "True" -msgstr "" - -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" - -msgid "API Browser" -msgstr "" - -msgid "Undo" -msgstr "" - -msgid "Undo this change." -msgstr "" - -msgid "Undo All" -msgstr "" - -msgid "Undo all changes in this field." -msgstr "" - -msgid "Text does not match field pattern" -msgstr "" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" - -msgid "Must be a decimal number" -msgstr "" - -msgid "Format error" -msgstr "" - -msgid "Must be an integer" -msgstr "" - -msgid "Not a valid IP address" -msgstr "" - -msgid "Not a valid IPv4 address" -msgstr "" - -msgid "Not a valid IPv6 address" -msgstr "" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "" - -msgid "Parse error" -msgstr "" - -msgid "Must be a positive number" -msgstr "" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "" - -msgid "Required field" -msgstr "" - -msgid "Unsupported value" -msgstr "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -msgid "invalid port number" -msgstr "" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -# auto translated by TM merge from project: System Administrator's Guide, -# version: master, DocId: Deployment_Guide -#, fuzzy -msgid "RADIUS Servers" -msgstr "Servery" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "RADIUS Server" -msgstr "RADIUS" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" msgstr "" #, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgid "Unable to communicate with CMS (status %d)" +msgstr "" + +msgid "Failed to authenticate to CA REST API" msgstr "" #, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" +msgid "Replication agreement for %(hostname)s not found" msgstr "" -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "" -"\n" -"IPA locations\n" -msgstr "Umístění" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "location" -msgstr "Umístění" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "locations" -msgstr "Umístění" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "IPA Locations" -msgstr "Umístění" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "IPA Location" -msgstr "Umístění" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "Location name" -msgstr "Umístění" - -msgid "IPA location name" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f22-branch, -# DocId: anaconda -#, fuzzy -msgid "IPA Location description" -msgstr "popis" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "" - -msgid "Delete an IPA location." -msgstr "" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "" - -msgid "Modify information about an IPA location." -msgstr "" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "" - -msgid "Search for IPA locations." -msgstr "" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "Display information about an IPA location." -msgstr "" - -msgid "Servers in location" -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(value)s" -msgstr "" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "sudo command" -msgstr "příkaz" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "sudo commands" -msgstr "příkazy" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Sudo Commands" -msgstr "příkazy" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "Self Service Permissions" -msgstr "Nastavení služeb" - -msgid "Self Service Permission" -msgstr "" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - msgid "A list of ACI values" msgstr "" @@ -19611,6 +13036,9 @@ msgstr "" msgid "ACIs" msgstr "" +msgid "ACI" +msgstr "" + #, python-format msgid "Created ACI \"%(value)s\"" msgstr "" @@ -19634,2332 +13062,6 @@ msgstr[2] "" msgid "Renamed ACI to \"%(value)s\"" msgstr "" -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "groups" -msgstr "skupinu" - -# auto translated by TM merge from project: dnf, version: master, DocId: -# po/dnf -#, fuzzy -msgid "User Group" -msgstr "Skupina" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "" - -msgid "privileged group" -msgstr "" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -msgid "Not a managed group" -msgstr "" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "automount location" -msgstr "Autentizace" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "automount locations" -msgstr "Autentizace" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "Automount Locations" -msgstr "Autentizace" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "Automount Location" -msgstr "Autentizace" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "automount map" -msgstr "" - -msgid "automount maps" -msgstr "" - -msgid "Automount Maps" -msgstr "" - -msgid "Automount Map" -msgstr "" - -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "Automount key object." -msgstr "" - -msgid "automount key" -msgstr "" - -msgid "automount keys" -msgstr "" - -msgid "Automount Keys" -msgstr "" - -msgid "Automount Key" -msgstr "" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, python-format -msgid "key named %(key)s already exists" -msgstr "" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -msgid "Delete an ID override." -msgstr "" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -msgid "Modify an ID override." -msgstr "" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "Display information about an ID override." -msgstr "" - -# auto translated by TM merge from project: firewalld, version: master, DocId: -# po/firewalld -#, fuzzy -msgid "User ID override" -msgstr "ID uživatele" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -msgid "CA category" -msgstr "" - -msgid "CA category the ACL applies to" -msgstr "" - -msgid "CAs" -msgstr "" - -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, python-format -msgid "%i users or groups added." -msgstr "" - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, python-format -msgid "%i service added." -msgstr "" - -#, python-format -msgid "%i services added." -msgstr "" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "trust configuration" -msgstr "Nastavení" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "Global Trust Configuration" -msgstr "Nastavení" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -msgid "SID" -msgstr "" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -# auto translated by TM merge from project: Cockpit, version: master, DocId: -# cockpit -#, fuzzy -msgid "Domain enabled" -msgstr "Zakázáno" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "" -"\n" -"DNS server configuration\n" -msgstr "Nastavení" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org -#, fuzzy -msgid "DNS server" -msgstr "Server" - -# auto translated by TM merge from project: System Administrator's Guide, -# version: master, DocId: Deployment_Guide -#, fuzzy -msgid "DNS servers" -msgstr "Servery" - -# auto translated by TM merge from project: System Administrator's Guide, -# version: master, DocId: Deployment_Guide -#, fuzzy -msgid "DNS Servers" -msgstr "Servery" - -# auto translated by TM merge from project: Fedora Websites, version: -# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org -#, fuzzy -msgid "DNS Server" -msgstr "Server" - -msgid "DNS Server name" -msgstr "" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "" - -msgid "Search for DNS servers." -msgstr "" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "" - -msgid "Delete a DNS server" -msgstr "" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "HBAC services" -msgstr "službu" - -# auto translated by TM merge from project: firewalld, version: master, DocId: -# po/firewalld -#, fuzzy -msgid "HBAC Services" -msgstr "Služby" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "HBAC Service" -msgstr "Služba" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "HBAC service group" -msgstr "" - -msgid "HBAC service groups" -msgstr "" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" -msgstr "" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -#, fuzzy -msgid "Delegations" -msgstr "Zastaralé volby" - -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -#, fuzzy -msgid "Delegation" -msgstr "Smazat" - -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "netgroups" -msgstr "skupinu" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "Netgroup" -msgstr "skupinu" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "" - -msgid "Failed logins" -msgstr "" - -msgid "Last successful authentication" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "Last failed authentication" -msgstr "Autentizace" - -# auto translated by TM merge from project: Pulseaudio, version: 6.0, DocId: -# pulseaudio.pot -#, fuzzy -msgid "Time now" -msgstr "Časový limit" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - msgid "" "\n" "Auto Membership Rule.\n" @@ -22295,10 +13397,16 @@ msgstr "" msgid "Automember rebuild membership task started" msgstr "" +msgid "Automember rebuild membership task completed" +msgstr "" + #, python-format msgid "Task DN = '%s'" msgstr "" +msgid "Automember" +msgstr "" + msgid "" "\n" " Search for orphan automember rules. The command might need to be run as\n" @@ -22309,443 +13417,137 @@ msgstr "" msgid "Remove orphan automember rules" msgstr "" -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main #, fuzzy -msgid "SELinux User Map rule" -msgstr "Uživatel SELinuxu" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "SELinux User Map rules" -msgstr "Uživatel SELinuxu" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "SELinux User Maps" -msgstr "Uživatel SELinuxu" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "SELinux User Map" -msgstr "Uživatel SELinuxu" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "" - -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" +msgid "automount location" +msgstr "Autentizace" # auto translated by TM merge from project: anaconda, version: f25, DocId: # main #, fuzzy -msgid "Vault Container" -msgstr "Pokračovat" +msgid "automount locations" +msgstr "Autentizace" -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +msgid "Automount Locations" +msgstr "Autentizace" -msgid "Host is not supported" -msgstr "" +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +msgid "Automount Location" +msgstr "Autentizace" -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" +#, python-format +msgid "Added automount location \"%(value)s\"" msgstr "" #, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -# auto translated by TM merge from project: ibus-input-pad, version: head, -# DocId: ibus-input-pad -#, fuzzy -msgid "vault" -msgstr "Výchozí" - -# auto translated by TM merge from project: ibus-input-pad, version: head, -# DocId: ibus-input-pad -#, fuzzy -msgid "vaults" -msgstr "Výchozí" - -# auto translated by TM merge from project: ibus-input-pad, version: head, -# DocId: ibus-input-pad -#, fuzzy -msgid "Vaults" -msgstr "Výchozí" - -# auto translated by TM merge from project: ibus-input-pad, version: head, -# DocId: ibus-input-pad -#, fuzzy -msgid "Vault" -msgstr "Výchozí" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." +msgid "Deleted automount location \"%(value)s\"" msgstr "" #, python-format -msgid "Added vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" msgstr[0] "" msgstr[1] "" msgstr[2] "" +msgid "automount map" +msgstr "" + +msgid "automount maps" +msgstr "" + +msgid "Automount Maps" +msgstr "" + +msgid "Automount Map" +msgstr "" + +#, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "Automount key object." +msgstr "" + +msgid "automount key" +msgstr "" + +msgid "automount keys" +msgstr "" + +msgid "Automount Keys" +msgstr "" + +msgid "Automount Key" +msgstr "" + +#, python-format msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" msgstr "" #, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "Vault configuration" -msgstr "Nastavení" - -msgid "IPA servers configured as key recovery agents" +msgid "key named %(key)s already exists" msgstr "" #, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "" - -msgid "Retrieve data from a vault." +msgid "The automount key %(key)s with info %(info)s does not exist" msgstr "" #, python-format -msgid "Retrieved data from vault \"%(value)s\"" +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." msgstr "" -msgid "No archived data." +#, python-format +msgid "Added automount key \"%(value)s\"" msgstr "" -msgid "Checks if any of the servers has the KRA service enabled" +#, python-format +msgid "Added automount indirect map \"%(value)s\"" msgstr "" +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + msgid "Member service groups" msgstr "" @@ -22782,6 +13584,11 @@ msgstr "Položka" msgid "entries" msgstr "" +# auto translated by TM merge from project: firewalld, version: master, DocId: +# po/firewalld +msgid "Entry" +msgstr "Položka" + #, python-format msgid "container entry (%(container)s) not found" msgstr "" @@ -22790,6 +13597,10 @@ msgstr "" msgid "%(parent)s: %(oname)s not found" msgstr "" +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "" + #, python-format msgid "%(oname)s with name \"%(pkey)s\" already exists" msgstr "" @@ -22815,6 +13626,18 @@ msgstr "" msgid "the entry was deleted while being modified" msgstr "" +# auto translated by TM merge from project: libguestfs, version: master, +# DocId: po/libguestfs +#, python-format +msgid "%s" +msgstr "%s" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy, python-format +msgid "member %s" +msgstr "Členové" + #, python-format msgid "%s to add" msgstr "" @@ -22823,6 +13646,10 @@ msgstr "" msgid "%s to remove" msgstr "" +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + #, python-format msgid "" "Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." @@ -22845,214 +13672,134 @@ msgstr "" msgid "one or more values to remove" msgstr "" -# auto translated by TM merge from project: System Administrator's Guide, -# version: master, DocId: Deployment_Guide -#, fuzzy msgid "" "\n" -"IPA servers\n" -msgstr "Servery" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" +msgstr "" msgid "" -"\n" -"Get information about installed IPA servers.\n" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "Principal alias" +msgstr "" + +#, fuzzy +msgid "User password expiration" +msgstr "Uživatelské heslo" + +msgid "SSH public key fingerprint" +msgstr "" + +msgid "Base-64 encoded user certificate" +msgstr "" + +msgid "Certificate mapping data" +msgstr "" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "" + +msgid "Issuer" +msgstr "" + +msgid "Issuer of the certificate" +msgstr "" + +# auto translated by TM merge from project: libreport, version: master, DocId: +# libreport +msgid "Subject" +msgstr "Předmět" + +msgid "Subject of the certificate" +msgstr "" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" msgstr "" msgid "" "\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" "\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" msgstr "" -# auto translated by TM merge from project: Fedora Websites, version: -# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org -#, fuzzy -msgid "server" -msgstr "Server" - -# auto translated by TM merge from project: System Administrator's Guide, -# version: master, DocId: Deployment_Guide -#, fuzzy -msgid "servers" -msgstr "Servery" - -# auto translated by TM merge from project: System Administrator's Guide, -# version: master, DocId: Deployment_Guide -#, fuzzy -msgid "IPA Servers" -msgstr "Servery" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "Server location" -msgstr "Umístění" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "Service weight" -msgstr "Nastavení služeb" - -msgid "Weight for server services" +msgid "Make multiple ipa calls via one remote procedure call" msgstr "" -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "Service relative weight" -msgstr "Nastavení služeb" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "Enabled server roles" -msgstr "Serverové role" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "" - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, fuzzy, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "chyba na serveru '%(server)s': %(error)s" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "State" -msgstr "Stav" - -# auto translated by TM merge from project: System Administrator's Guide, -# version: master, DocId: Deployment_Guide -#, fuzzy -msgid "Server state" -msgstr "Servery" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." +msgid "must contain a tuple (list, dict)" msgstr "" msgid "" @@ -23125,6 +13872,11 @@ msgstr "" msgid "Certificate Authorities" msgstr "" +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Name" +msgstr "Název" + msgid "Name for referencing the CA" msgstr "" @@ -23146,9 +13898,21 @@ msgstr "Předmět" msgid "Subject Distinguished Name" msgstr "" +msgid "Issuer DN" +msgstr "" + msgid "Issuer Distinguished Name" msgstr "" +msgid "Base-64 encoded certificate." +msgstr "" + +msgid "Certificate chain" +msgstr "" + +msgid "X.509 certificate chain" +msgstr "" + msgid "Search for CAs." msgstr "" @@ -23159,6 +13923,9 @@ msgstr[0] "" msgstr[1] "" msgstr[2] "" +msgid "Include certificate chain in output" +msgstr "" + msgid "Display the properties of a CA." msgstr "" @@ -23191,6 +13958,9 @@ msgstr "" msgid "Insufficient privilege to delete a CA." msgstr "" +msgid "CA" +msgstr "" + msgid "IPA CA cannot be deleted" msgstr "" @@ -23235,323 +14005,1250 @@ msgstr "" msgid "" "\n" -"Stageusers\n" +"Manage CA ACL rules.\n" "\n" -"Manage stage user entries.\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" "\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" +"SUBJECT PRINCIPAL SCOPE:\n" "\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" "\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" "\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" +"CERTIFICATE AUTHORITY SCOPE:\n" "\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" "\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"PROFILE SCOPE:\n" "\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" "\n" "EXAMPLES:\n" "\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" "\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" "\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "" + +msgid "CA ACLs" +msgstr "" + +msgid "CA category" +msgstr "" + +msgid "CA category the ACL applies to" +msgstr "" + +msgid "CAs" +msgstr "" + +#, python-format +msgid "Added CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "" + +msgid "default CA ACL can be only disabled" +msgstr "" + +#, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" + +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%i user or group added." +msgstr "" + +#, python-format +msgid "%i users or groups added." +msgstr "" + +msgid "users cannot be added when user category='all'" +msgstr "" + +#, python-format +msgid "%i user or group removed." +msgstr "" + +#, python-format +msgid "%i users or groups removed." +msgstr "" + +#, python-format +msgid "%i host or hostgroup added." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "" + +msgid "hosts cannot be added when host category='all'" +msgstr "" + +#, python-format +msgid "%i host or hostgroup removed." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups removed." +msgstr "" + +#, python-format +msgid "%i service added." +msgstr "" + +#, python-format +msgid "%i services added." +msgstr "" + +msgid "services cannot be added when service category='all'" +msgstr "" + +#, python-format +msgid "%i service removed." +msgstr "" + +#, python-format +msgid "%i services removed." +msgstr "" + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, python-format +msgid "%i profiles removed." +msgstr "" + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +#, fuzzy +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "Zastaralé volby" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +#, fuzzy +msgid " * 0 - unspecified\n" +msgstr "Nespecifikováno" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +msgid "Subject email address" +msgstr "" + +# auto translated by TM merge from project: libreport, version: master, DocId: +# libreport +#, fuzzy +msgid "Subject DNS name" +msgstr "Předmět" + +msgid "Subject X.400 address" +msgstr "" + +msgid "Subject directory name" +msgstr "" + +msgid "Subject EDI Party name" +msgstr "" + +# auto translated by TM merge from project: libreport, version: master, DocId: +# libreport +#, fuzzy +msgid "Subject URI" +msgstr "Předmět" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +msgid "Subject IP Address" +msgstr "IP adresa" + +# auto translated by TM merge from project: libreport, version: master, DocId: +# libreport +#, fuzzy +msgid "Subject OID" +msgstr "Předmět" + +# auto translated by TM merge from project: libreport, version: master, DocId: +# libreport +#, fuzzy +msgid "Subject UPN" +msgstr "Předmět" + +msgid "Subject Kerberos principal name" +msgstr "" + +msgid "Subject Other Name" +msgstr "" + +msgid "Not Before" +msgstr "" + +msgid "Not After" msgstr "" # auto translated by TM merge from project: Fedora Websites, version: -# labs.fedoraproject.org, DocId: po/labs.fedoraproject.org +# getfedora.org, DocId: po/getfedora #, fuzzy -msgid "Stage Users" -msgstr "Stage" +msgid "Fingerprint (SHA1)" +msgstr "Otisk" # auto translated by TM merge from project: Fedora Websites, version: -# labs.fedoraproject.org, DocId: po/labs.fedoraproject.org +# getfedora.org, DocId: po/getfedora #, fuzzy -msgid "Stage User" -msgstr "Stage" +msgid "Fingerprint (SHA256)" +msgstr "Otisk" -msgid "stage user" -msgstr "" +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +#, fuzzy +msgid "Serial number (hex)" +msgstr "Sériové číslo" -msgid "stage users" -msgstr "" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." +msgid "Request status" msgstr "" msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" +"automatically add the principal if it doesn't exist (service principals only)" msgstr "" -msgid "must be TRUE or FALSE" +#, python-format +msgid "krbtgt certs can use only the %s profile" msgstr "" +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" msgstr "" #, fuzzy -msgid "User password expiration" -msgstr "Uživatelské heslo" +msgid "'add' option" +msgstr "Zastaralé volby" -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" +msgid "The principal for this request doesn't exist." msgstr "" #, python-format -msgid "invalid e-mail format: %(email)s" +msgid "IP address in subjectAltName (%s) unreachable from DNS names" msgstr "" #, python-format -msgid "manager %(manager)s not found" -msgstr "" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" +msgid "IP address in subjectAltName (%s) does not have PTR record" msgstr "" #, python-format -msgid "Added certificate mappings to user \"%(value)s\"" +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Status" +msgstr "Stav" + +msgid "Revoked" +msgstr "" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " msgstr "" #, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "" + +msgid "Status of the certificate" +msgstr "" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." msgstr "" msgid "" "\n" -"OTP Tokens\n" +"Certificate Identity Mapping\n" msgstr "" msgid "" "\n" -"Manage OTP tokens.\n" +"Manage Certificate Identity Mapping configuration and rules.\n" msgstr "" msgid "" "\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" msgstr "" msgid "" "\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" msgstr "" msgid "" "\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" msgstr "" msgid "" "\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" msgstr "" msgid "" "\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" msgstr "" -msgid "OTP token" +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" msgstr "" -msgid "OTP tokens" +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" msgstr "" -msgid "OTP Tokens" +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" msgstr "" -msgid "OTP Token" +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" msgstr "" -# auto translated by TM merge from project: dnf, version: master, DocId: -# po/dnf +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +msgid "domain" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils #, fuzzy -msgid "URI" -msgstr "URL" +msgid "User logins" +msgstr "Uživatelé" -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "" - -msgid "cannot be empty" +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " msgstr "" #, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" msgstr[0] "" msgstr[1] "" msgstr[2] "" msgid "" "\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" +"Manage Certificate Profiles\n" "\n" -"To run this code in the lite-server\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" "\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" "\n" -"where the contents of the file batch_request.json follow the below example\n" +"PROFILE ID SYNTAX:\n" "\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" "\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" +"EXAMPLES:\n" "\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" "\n" -"And then a nested response for each IPA command method sent in the request\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" "\n" msgstr "" -msgid "Make multiple ipa calls via one remote procedure call" +msgid "invalid Profile ID" msgstr "" -msgid "must contain a tuple (list, dict)" +msgid "Certificate Profile" msgstr "" +msgid "Certificate Profiles" +msgstr "" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +msgid "Profile configuration" +msgstr "Nastavení" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "must be at least 10" +msgstr "" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +msgid "configuration options" +msgstr "Nastavení" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +msgid "Configuration" +msgstr "Nastavení" + +msgid "Maximum hostname length" +msgstr "" + +msgid "Enable adding subids to new users" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +msgid "IPA CA servers" +msgstr "" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA KRA servers" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "Domain resolution order" +msgstr "" + +msgid "colon-separated list of domains used for short name qualification" +msgstr "" + +# auto translated by TM merge from project: System Administrator's Guide, +# version: master, DocId: Deployment_Guide +#, fuzzy +msgid "IPA DNS servers" +msgstr "Servery" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "IPA DNSSec key master" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +msgid "Setup SID configuration" +msgstr "Nastavení" + +msgid "New users and groups automatically get a SID assigned" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +msgid "Add SIDs" +msgstr "uživatel" + +msgid "Add SIDs for existing users and groups" +msgstr "" + +msgid "NetBIOS name of the IPA domain" +msgstr "" + +msgid "Empty domain is not allowed" +msgstr "" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "not allowed to enable SID generation" +msgstr "" + +msgid "" +"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " +"allowed. Empty string is not allowed." +msgstr "" + +#, fuzzy +msgid "Failed to call DBus" +msgstr "Žádný soubor k přečtení" + +msgid "Configuration of SID failed. See details in the error log" +msgstr "" + +msgid "The group doesn't exist" +msgstr "" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, fuzzy, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "chyba na serveru '%(server)s': %(error)s" + +msgid "SELinux user map default user not in order list" +msgstr "" + +#, python-format +msgid "You cannot specify %s without the --enable-sid option" +msgstr "" + +msgid "delegation" +msgstr "" + +msgid "delegations" +msgstr "" + +#, fuzzy +msgid "Delegations" +msgstr "Zastaralé volby" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +#, fuzzy +msgid "Delegation" +msgstr "Smazat" + +#, python-format +msgid "Added delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + msgid "" "\n" "Domain Name System (DNS)\n" @@ -23983,6 +15680,12 @@ msgid "" "All nameservers failed to answer the query for DNS reverse zone %(revdns)s" msgstr "" +#, python-format +msgid "" +"No answers could be found in the specified lifetime for DNS reverse zone " +"%(revdns)s" +msgstr "" + #, python-format msgid "" "DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " @@ -24101,6 +15804,9 @@ msgstr "" msgid "Managedby permission" msgstr "" +msgid "DNS is not configured" +msgstr "" + msgid "cannot be used when a zone is specified" msgstr "" @@ -24319,6 +16025,328 @@ msgstr "" msgid "Do not update records only return expected records" msgstr "" +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +msgid "" +"\n" +"DNS server configuration\n" +msgstr "Nastavení" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org +#, fuzzy +msgid "DNS server" +msgstr "Server" + +# auto translated by TM merge from project: System Administrator's Guide, +# version: master, DocId: Deployment_Guide +#, fuzzy +msgid "DNS servers" +msgstr "Servery" + +# auto translated by TM merge from project: System Administrator's Guide, +# version: master, DocId: Deployment_Guide +#, fuzzy +msgid "DNS Servers" +msgstr "Servery" + +# auto translated by TM merge from project: Fedora Websites, version: +# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org +#, fuzzy +msgid "DNS Server" +msgstr "Server" + +msgid "DNS Server name" +msgstr "" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +msgid "Search for DNS servers." +msgstr "" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "" + +msgid "Delete a DNS server" +msgstr "" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +msgid "groups" +msgstr "skupinu" + +# auto translated by TM merge from project: dnf, version: master, DocId: +# po/dnf +#, fuzzy +msgid "User Group" +msgstr "Skupina" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "" + +msgid "gid cannot be set for external group" +msgstr "" + +msgid "attribute \"gidNumber\" not allowed with --nonposix" +msgstr "" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "" + +msgid "privileged group" +msgstr "" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + msgid "The deny type has been deprecated." msgstr "" @@ -24331,6 +16359,15 @@ msgstr "" msgid "HBAC Rules" msgstr "Pravidla" +# auto translated by TM merge from project: firewalld, version: master, DocId: +# po/firewalld +#, fuzzy +msgid "HBAC Services" +msgstr "Služby" + +msgid "HBAC Service Groups" +msgstr "" + #, python-format msgid "Added HBAC rule \"%(value)s\"" msgstr "" @@ -24366,123 +16403,8390 @@ msgstr "" msgid "" "\n" -"Manage Certificate Profiles\n" +"HBAC Services\n" "\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" "\n" "EXAMPLES:\n" "\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" "\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" "\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" "\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" "\n" msgstr "" -msgid "invalid Profile ID" -msgstr "" - -msgid "Certificate Profile" -msgstr "" - -msgid "Certificate Profiles" -msgstr "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users #, fuzzy -msgid "Profile configuration" -msgstr "Nastavení" +msgid "HBAC services" +msgstr "službu" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +msgid "HBAC Service" +msgstr "Služba" #, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" +msgid "Added HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "HBAC service group" +msgstr "" + +msgid "HBAC service groups" +msgstr "" + +msgid "HBAC Service Group" +msgstr "" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Access granted: %s" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +msgid "Host" +msgstr "Počítač" + +msgid "Base-64 encoded host certificate" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +msgid "Serial Number" +msgstr "Sériové číslo" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +#, fuzzy +msgid "Serial Number (hex)" +msgstr "Sériové číslo" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +msgid "Authentication Indicators" +msgstr "Autentizace" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" msgstr[0] "" msgstr[1] "" msgstr[2] "" #, python-format -msgid "Imported profile \"%(value)s\"" +msgid "Disabled host \"%(value)s\"" msgstr "" #, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" +msgid "Added certificates to host \"%(value)s\"" msgstr "" #, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" msgstr "" #, python-format -msgid "Deleted profile \"%(value)s\"" +msgid "Added new aliases to host \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a host entry" msgstr "" #, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +msgid "host groups" +msgstr "skupinu" + +# auto translated by TM merge from project: dnf, version: master, DocId: +# po/dnf +#, fuzzy +msgid "Host Group" +msgstr "Skupina" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" msgstr "" #, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" msgstr "" #, python-format -msgid "all masters must have %(role)s role enabled" +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +msgid "hostgroup" +msgstr "skupinu" + +msgid "privileged hostgroup" msgstr "" #, python-format -msgid "must have %(role)s role enabled" +msgid "Modified hostgroup \"%(value)s\"" msgstr "" -msgid "must be enabled only on a single master" +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"and an ID range of a trusted domain may set\n" +" - auto-private-groups: [true|false|hybrid] automatic creation of private " +"groups\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +msgid "Auto private groups" +msgstr "skupinu" + +msgid "Auto creation of private groups, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --auto-private-groups\n" +"\n" +" may be given for a new ID range for a trusted AD domain and\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" +"private-groups is specified" +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +msgid "ID View" +msgstr "" + +msgid "system ID View" +msgstr "" + +msgid "ID Views" +msgstr "" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +msgid "Hosts the view applies to" +msgstr "" + +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "" + +msgid "Delete an ID override." +msgstr "" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "" + +msgid "Modify an ID override." +msgstr "" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "Display information about an ID override." +msgstr "" + +# auto translated by TM merge from project: firewalld, version: master, DocId: +# po/firewalld +#, fuzzy +msgid "User ID override" +msgstr "ID uživatele" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "Internationalization messages" +msgstr "" + +msgid "Your session has expired. Please log in again." +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Apply" +msgstr "Použít" + +msgid "Rebuild auto membership" +msgstr "" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "" + +msgid "Are you sure you want to proceed with the action?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +#, fuzzy +msgid "Actions" +msgstr "Přepínače" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Add" +msgstr "Přidat" + +#, python-brace-format +msgid "${count} item(s) added" +msgstr "" + +msgid "Direct Membership" +msgstr "" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "" + +msgid "Indirect Membership" +msgstr "" + +msgid "No entries." +msgstr "" + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "" + +msgid "Remove" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "" + +msgid "Show Results" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +msgid "Authentication indicators" +msgstr "Autentizace" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +msgid "Authentication indicator" +msgstr "Autentizace" + +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "Add Custom Authentication Indicator" +msgstr "" + +msgid "Two factor authentication (password + OTP)" +msgstr "" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +msgid "RADIUS" +msgstr "RADIUS" + +msgid "PKINIT" +msgstr "" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "" + +msgid "Disable per-user override" +msgstr "" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "About" +msgstr "" + +msgid "Activate" +msgstr "" + +msgid "Add and Add Another" +msgstr "" + +msgid "Add and Close" +msgstr "" + +msgid "Add and Edit" +msgstr "" + +msgid "Add Many" +msgstr "" + +# auto translated by TM merge from project: authconfig, version: master, +# DocId: po/authconfig +msgid "Back" +msgstr "Zpět" + +# auto translated by TM merge from project: Cockpit, version: master, DocId: +# cockpit +msgid "Cancel" +msgstr "Zrušit" + +# auto translated by TM merge from project: ibus-libpinyin, version: master, +# DocId: ibus-libpinyin +msgid "Clear" +msgstr "Vymazat" + +msgid "Clear all fields on the page." +msgstr "" + +# auto translated by TM merge from project: SETroubleShoot, version: stable, +# DocId: framework/po/setroubleshoot +msgid "Close" +msgstr "Zavřít" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Disable" +msgstr "Zakázat" + +# auto translated by TM merge from project: Fedora Websites, version: +# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org +msgid "Download" +msgstr "Stáhnout" + +msgid "Download certificate as PEM formatted file." +msgstr "" + +# auto translated by TM merge from project: ibus-libpinyin, version: master, +# DocId: ibus-libpinyin +msgid "Edit" +msgstr "Upravit" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Enable" +msgstr "Povolit" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +msgid "Find" +msgstr "Hledat" + +# auto translated by TM merge from project: docbook-locales, version: master, +# DocId: locale +#, fuzzy +msgid "Get" +msgstr "Sada" + +# auto translated by TM merge from project: abrt, version: rhel7, DocId: abrt +msgid "Hide" +msgstr "Skrýt" + +msgid "Issue" +msgstr "" + +msgid "Match" +msgstr "" + +msgid "Match users according to certificate." +msgstr "" + +msgid "Migrate" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org +msgid "OK" +msgstr "Budiž" + +# auto translated by TM merge from project: virt-viewer, version: master, +# DocId: virt-viewer +msgid "Refresh" +msgstr "Obnovit" + +msgid "Reload current settings from the server." +msgstr "" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +msgid "Delete" +msgstr "Smazat" + +msgid "Remove hold" +msgstr "" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +msgid "Reset" +msgstr "Reset" + +#, fuzzy +msgid "Reset Password" +msgstr "Uživatelské heslo" + +msgid "Reset Password and Log in" +msgstr "" + +# auto translated by TM merge from project: Fedora Media Writer, version: +# master, DocId: mediawriter +msgid "Restore" +msgstr "Obnovit" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Retry" +msgstr "Opakovat" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Revert" +msgstr "Vrátit" + +msgid "Revoke" +msgstr "" + +# auto translated by TM merge from project: fedora-software, version: master, +# DocId: template/django +msgid "Save" +msgstr "Uložit" + +# auto translated by TM merge from project: docbook-locales, version: master, +# DocId: locale +msgid "Set" +msgstr "Sada" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +msgid "Show" +msgstr "Ukázat" + +# auto translated by TM merge from project: Fedora Websites, version: +# labs.fedoraproject.org, DocId: po/labs.fedoraproject.org +msgid "Stage" +msgstr "Stage" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Update" +msgstr "Aktualizovat" + +msgid "View" +msgstr "" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +msgid "Customization" +msgstr "Nastavení" + +msgid "Pagination Size" +msgstr "" + +msgid "Collapse All" +msgstr "" + +msgid "Expand All" +msgstr "" + +# auto translated by TM merge from project: asknot-ng, version: 0.1, DocId: +# locale/asknot-ng +msgid "General" +msgstr "Obecné" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +msgid "Identity Settings" +msgstr "Nastavení služeb" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +msgid "Record Settings" +msgstr "Nastavení služeb" + +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "" + +msgid "Back to Top" +msgstr "" + +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "" + +msgid "Add custom value" +msgstr "" + +# auto translated by TM merge from project: libvirt, version: master, DocId: +# libvirt +msgid "Available" +msgstr "Dostupný" + +msgid "Some operations failed." +msgstr "" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +#, fuzzy +msgid "Operations Error" +msgstr "Přepínače" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +msgid "Confirmation" +msgstr "Nastavení" + +msgid "Custom value" +msgstr "" + +msgid "This page has unsaved changes. Please save or revert." +msgstr "" + +msgid "Unsaved Changes" +msgstr "" + +#, python-brace-format +msgid "Edit ${entity}" +msgstr "" + +msgid "Hide details" +msgstr "" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "" + +msgid "Prospective" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f22-branch, +# DocId: anaconda +#, fuzzy +msgid "Redirection" +msgstr "popis" + +msgid "Select entries to be removed." +msgstr "" + +msgid "Result" +msgstr "" + +msgid "Show details" +msgstr "" + +# auto translated by TM merge from project: Linux PAM, version: master, DocId: +# po/Linux-PAM +msgid "Success" +msgstr "Úspěch" + +msgid "Validation error" +msgstr "" + +msgid "Input form contains invalid or missing values." +msgstr "" + +msgid "Please try the following options:" +msgstr "" + +msgid "If the problem persists please contact the system administrator." +msgstr "" + +msgid "Refresh the page." +msgstr "" + +msgid "Reload the browser." +msgstr "" + +msgid "Return to the main page and retry the operation" +msgstr "" + +#, fuzzy, python-brace-format +msgid "An error has occurred (${error})" +msgstr "Vyskytla se vnitřní chyba" + +# auto translated by TM merge from project: python-simpleline, version: +# master, DocId: python-simpleline +#, fuzzy +msgid "HTTP Error" +msgstr "Chyba" + +msgid "Internal Error" +msgstr "" + +# auto translated by TM merge from project: python-simpleline, version: +# master, DocId: python-simpleline +#, fuzzy +msgid "IPA Error" +msgstr "Chyba" + +msgid "No response" +msgstr "" + +# auto translated by TM merge from project: GSS NTLMSSP, version: master, +# DocId: gssntlmssp +msgid "Unknown Error" +msgstr "Neznámá chyba" + +# auto translated by TM merge from project: dnf, version: master, DocId: +# po/dnf +msgid "URL" +msgstr "URL" + +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} members:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} member managers:" +msgstr "" + +# auto translated by TM merge from project: fedora-software, version: master, +# DocId: template/django +msgid "Settings" +msgstr "Nastavení" + +# auto translated by TM merge from project: libreport, version: rhel6, DocId: +# libreport +msgid "Search" +msgstr "Hledat" + +msgid "False" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Allowed to create keytab" +msgstr "" + +msgid "Allowed to retrieve keytab" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Add Kerberos Principal Alias" +msgstr "" + +msgid "New kerberos principal alias" +msgstr "" + +msgid "Remove Kerberos Alias" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "" + +msgid "Inherited from server configuration" +msgstr "" + +msgid "MS-PAC" +msgstr "" + +msgid "Override inherited settings" +msgstr "" + +msgid "PAD" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +msgid "Authenticating" +msgstr "Autentizace" + +msgid "Authentication with personal certificate failed" +msgstr "" + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" + +msgid "Continue to next page" +msgstr "" + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" + +msgid "Login failed due to an unknown reason" +msgstr "" + +msgid "Logged In As" +msgstr "" + +msgid "Authentication with Kerberos failed" +msgstr "" + +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" + +msgid "Loading" +msgstr "" + +msgid "Kerberos Principal you entered is expired" +msgstr "" + +msgid "Loading data" +msgstr "" + +msgid "Log in" +msgstr "" + +msgid "Log In Using Certificate" +msgstr "" + +msgid "Log in using personal certificate" +msgstr "" + +msgid "Log out" +msgstr "" + +msgid "Log out error" +msgstr "" + +msgid "Password or Password+One-Time Password" +msgstr "" + +#, python-brace-format +msgid "You will be redirected in ${count}s" +msgstr "" + +msgid "Sync OTP Token" +msgstr "" + +msgid "Synchronizing" +msgstr "" + +msgid "The user account you entered is locked" +msgstr "" + +#, fuzzy +msgid "number of passwords" +msgstr "Uživatelské heslo" + +# auto translated by TM merge from project: virt-manager, version: master, +# DocId: virt-manager +msgid "seconds" +msgstr "sekund" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +msgid "Migrating" +msgstr "Nastavení" + +msgid "There was a problem with your request. Please, try again later." +msgstr "" + +msgid "Password migration was not successful" +msgstr "" + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" + +msgid "The password or username you entered is incorrect" +msgstr "" + +msgid "Password migration was successful" +msgstr "" + +msgid "Attribute" +msgstr "" + +msgid "Add delegation" +msgstr "" + +msgid "Remove delegations" +msgstr "" + +msgid "Add permission" +msgstr "" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "" + +msgid "Remove permissions" +msgstr "" + +#, python-brace-format +msgid "Remove privileges from permission '${primary_key}'" +msgstr "" + +msgid "Add privilege" +msgstr "" + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "" + +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "" + +msgid "Remove privileges" +msgstr "" + +#, python-brace-format +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "" + +#, python-brace-format +msgid "Remove roles from privilege '${primary_key}'" +msgstr "" + +# auto translated by TM merge from project: fedora-software, version: master, +# DocId: template/django +#, fuzzy +msgid "Role Settings" +msgstr "Nastavení" + +msgid "Add role" +msgstr "" + +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "" + +#, python-brace-format +msgid "Add services into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +msgid "Remove roles" +msgstr "Serverové role" + +#, python-brace-format +msgid "Remove role '${primary_key}' from privileges" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from role '${primary_key}'" +msgstr "" + +msgid "Add self service permission" +msgstr "" + +msgid "Remove self service permissions" +msgstr "" + +msgid "Add rule" +msgstr "" + +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to change default group?" +msgstr "" + +msgid "Default host group" +msgstr "" + +msgid "Default user group" +msgstr "" + +msgid "Exclusive" +msgstr "" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +msgid "Expression" +msgstr "Výraz" + +msgid "Host group rule" +msgstr "" + +msgid "Host group rules" +msgstr "" + +msgid "Inclusive" +msgstr "" + +msgid "Remove auto membership rules" +msgstr "" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "" + +msgid "User group rule" +msgstr "" + +msgid "User group rules" +msgstr "" + +msgid "Add automount key" +msgstr "" + +msgid "Remove automount keys" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +msgid "Add automount location" +msgstr "Autentizace" + +msgid "Automount Location Settings" +msgstr "" + +msgid "Remove automount locations" +msgstr "" + +msgid "Add automount map" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +msgid "Map Type" +msgstr "Typ" + +msgid "Direct" +msgstr "" + +msgid "Indirect" +msgstr "" + +msgid "Remove automount maps" +msgstr "" + +msgid "Add certificate authority" +msgstr "" + +msgid "Remove certificate authorities" +msgstr "" + +msgid "Add CA ACL" +msgstr "" + +#, python-brace-format +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "" + +msgid "All" +msgstr "" + +msgid "Any CA" +msgstr "" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +#, fuzzy +msgid "Any Host" +msgstr "Počítač" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +msgid "Any Service" +msgstr "Služba" + +# auto translated by TM merge from project: OSCAP Anaconda Addon, version: +# master, DocId: oscap-anaconda-addon +#, fuzzy +msgid "Any Profile" +msgstr "Profil" + +msgid "Anyone" +msgstr "" + +# auto translated by TM merge from project: firewalld, version: master, DocId: +# po/firewalld +#, fuzzy +msgid "Rule status" +msgstr "Pravidla" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "" + +msgid "Remove CA ACLs" +msgstr "" + +#, python-brace-format +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +#, fuzzy +msgid "Specified CAs" +msgstr "Nespecifikováno" + +msgid "Specified Hosts and Groups" +msgstr "" + +# auto translated by TM merge from project: Spacewalk Web UI, version: master, +# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource +#, fuzzy +msgid "Specified Profiles" +msgstr "Profily" + +msgid "Specified Services and Groups" +msgstr "" + +msgid "Specified Users and Groups" +msgstr "" + +msgid "Permitted to have certificates issued" +msgstr "" + +msgid "Remove certificate profiles" +msgstr "" + +msgid "AA Compromise" +msgstr "" + +msgid "Add principal" +msgstr "" + +msgid "Affiliation Changed" +msgstr "" + +msgid "CA Compromise" +msgstr "" + +msgid "Certificates" +msgstr "" + +msgid "Certificate Hold" +msgstr "" + +msgid "Cessation of Operation" +msgstr "" + +#, fuzzy +msgid "Common Name" +msgstr "Název příkazu" + +msgid "the certificate with serial number " +msgstr "" + +msgid "Expires On" +msgstr "" + +msgid "Issued on from" +msgstr "" + +msgid "Issued on to" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +#, fuzzy +msgid "Maximum serial number" +msgstr "Sériové číslo" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +#, fuzzy +msgid "Minimum serial number" +msgstr "Sériové číslo" + +msgid "Revoked on from" +msgstr "" + +msgid "Revoked on to" +msgstr "" + +msgid "Valid not after from" +msgstr "" + +msgid "Valid not after to" +msgstr "" + +msgid "Valid not before from" +msgstr "" + +msgid "Valid not before to" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +msgid "Fingerprints" +msgstr "Otisk" + +msgid "Get Certificate" +msgstr "" + +msgid "Certificate Hold Removed" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for user '${primary_key}'" +msgstr "" + +msgid "Issue new certificate" +msgstr "" + +msgid "Issued By" +msgstr "" + +msgid "Issued On" +msgstr "" + +msgid "Issued To" +msgstr "" + +msgid "Key Compromise" +msgstr "" + +msgid "No Valid Certificate" +msgstr "" + +msgid "New Certificate" +msgstr "" + +msgid "Certificate in base64 or PEM format" +msgstr "" + +# auto translated by TM merge from project: System Administrator's Guide, +# version: master, DocId: Network_Interfaces +msgid "Note" +msgstr "Poznámka" + +msgid "Organization" +msgstr "" + +msgid "Organizational Unit" +msgstr "" + +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "" + +msgid "Privilege Withdrawn" +msgstr "" + +msgid "Reason for Revocation" +msgstr "" + +msgid "Remove certificate hold" +msgstr "" + +msgid "Do you want to remove the certificate hold?" +msgstr "" + +msgid "Remove from CRL" +msgstr "" + +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" + +#, python-brace-format +msgid " -8 '${cn}'" +msgstr "" + +msgid "Certificate requested" +msgstr "" + +msgid "Revoke certificate" +msgstr "" + +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "" + +msgid "Certificate Revoked" +msgstr "" + +msgid "REVOKED" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +msgid "SHA1 Fingerprint" +msgstr "Otisk" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +msgid "SHA256 Fingerprint" +msgstr "Otisk" + +msgid "Superseded" +msgstr "" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +msgid "Unspecified" +msgstr "Nespecifikováno" + +msgid "Valid Certificate Present" +msgstr "" + +msgid "Valid from" +msgstr "" + +msgid "Valid to" +msgstr "" + +msgid "Validity" +msgstr "" + +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "" + +msgid "View Certificate" +msgstr "" + +msgid "Certificate Data" +msgstr "" + +msgid "Certificate For Match" +msgstr "" + +msgid "Certificate Mapping Match" +msgstr "" + +msgid "Matched Users" +msgstr "" + +# auto translated by TM merge from project: dnf, version: master, DocId: dnf +#, fuzzy +msgid "User Login" +msgstr "Uživatelské jméno" + +msgid "Add certificate identity mapping rule" +msgstr "" + +msgid "Add certificate mapping data" +msgstr "" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +msgid "Configuration string" +msgstr "Nastavení" + +#, python-brace-format +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "" + +msgid "Remove certificate mapping data" +msgstr "" + +msgid "Issuer and subject" +msgstr "" + +msgid "Remove certificate identity mapping rules" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Version" +msgstr "Verze" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +#, fuzzy +msgid "Group Options" +msgstr "Přepínače" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +#, fuzzy +msgid "Search Options" +msgstr "Přepínače" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +msgid "SELinux Options" +msgstr "Uživatel SELinuxu" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +msgid "Server Options" +msgstr "Serverové role" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +msgid "Service Options" +msgstr "Nastavení služeb" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +#, fuzzy +msgid "User Options" +msgstr "Přepínače" + +msgid "Forward first" +msgstr "" + +msgid "Forwarding disabled" +msgstr "" + +msgid "Forward only" +msgstr "" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +msgid "Options" +msgstr "Přepínače" + +msgid "Update System DNS Records" +msgstr "" + +msgid "Do you want to update system DNS records?" +msgstr "" + +msgid "System DNS records updated" +msgstr "" + +msgid "Add DNS forward zone" +msgstr "" + +msgid "Remove DNS forward zones" +msgstr "" + +msgid "Add DNS resource record" +msgstr "" + +msgid "DNS record was deleted because it contained no data." +msgstr "" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +#, fuzzy +msgid "Other Record Types" +msgstr "Typ záznamu" + +msgid "Address not valid, can't redirect" +msgstr "" + +msgid "Create dns record" +msgstr "" + +msgid "Creating record." +msgstr "" + +msgid "Record creation failed." +msgstr "" + +msgid "Checking if record exists." +msgstr "" + +msgid "Record not found." +msgstr "" + +msgid "Redirection to PTR record" +msgstr "" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "" + +msgid "Target reverse zone not found." +msgstr "" + +msgid "Fetching DNS zones." +msgstr "" + +msgid "An error occurred while fetching dns zones." +msgstr "" + +msgid "You will be redirected to DNS Zone." +msgstr "" + +msgid "Remove DNS resource records" +msgstr "" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +#, fuzzy +msgid "Standard Record Types" +msgstr "Typ záznamu" + +msgid "Records for DNS Zone" +msgstr "" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +msgid "Record Type" +msgstr "Typ záznamu" + +msgid "Add DNS zone" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +msgid "DNS Zone Settings" +msgstr "Nastavení služeb" + +msgid "Remove DNS zones" +msgstr "" + +msgid "Remove Permission" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "" + +msgid "Skip DNS check" +msgstr "" + +msgid "Skip overlap check" +msgstr "" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" + +msgid "Authoritative nameserver change" +msgstr "" + +# auto translated by TM merge from project: docbook-locales, version: master, +# DocId: locale +msgid "Level" +msgstr "Úroveň" + +msgid "Set Domain Level" +msgstr "" + +msgid "Add user group" +msgstr "" + +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user ID override into user group '${primary_key}'" +msgstr "" + +# auto translated by TM merge from project: fedora-software, version: master, +# DocId: template/django +#, fuzzy +msgid "Group Settings" +msgstr "Nastavení" + +msgid "External" +msgstr "" + +# auto translated by TM merge from project: libreport, version: rhel6, DocId: +# libreport +msgid "Groups" +msgstr "Skupiny" + +msgid "Group categories" +msgstr "" + +msgid "Change to external group" +msgstr "" + +msgid "Change to POSIX group" +msgstr "" + +msgid "Non-POSIX" +msgstr "" + +msgid "POSIX" +msgstr "" + +msgid "Remove user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "" + +# auto translated by TM merge from project: dnf, version: master, DocId: +# po/dnf +#, fuzzy +msgid "Group Type" +msgstr "Skupina" + +msgid "Add HBAC rule" +msgstr "" + +#, python-brace-format +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "" + +# auto translated by TM merge from project: Linux PAM, version: master, DocId: +# po/Linux-PAM +#, fuzzy +msgid "Accessing" +msgstr "Úspěch" + +msgid "Remove HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +msgid "Via Service" +msgstr "Služba" + +msgid "Who" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +msgid "Add HBAC service" +msgstr "službu" + +#, python-brace-format +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "" + +msgid "Remove HBAC services" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "" + +msgid "Add HBAC service group" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "" + +msgid "Remove HBAC service groups" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "" + +msgid "Access Denied" +msgstr "" + +msgid "Access Granted" +msgstr "" + +# auto translated by TM merge from project: Cockpit, version: master, DocId: +# cockpit +#, fuzzy +msgid "Include Disabled" +msgstr "Zakázáno" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +msgid "Include Enabled" +msgstr "Povoleno" + +msgid "HBAC Test" +msgstr "" + +msgid "Matched" +msgstr "" + +msgid "Missing values: " +msgstr "" + +msgid "New Test" +msgstr "" + +# auto translated by TM merge from project: firewalld, version: master, DocId: +# po/firewalld +msgid "Rules" +msgstr "Pravidla" + +msgid "Run Test" +msgstr "" + +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "" + +msgid "Unmatched" +msgstr "" + +msgid "Add host" +msgstr "" + +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "" + +msgid "Host Certificate" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +msgid "Host Name" +msgstr "Název počítače" + +msgid "Delete Key, Unprovision" +msgstr "" + +# auto translated by TM merge from project: fedora-software, version: master, +# DocId: template/django +#, fuzzy +msgid "Host Settings" +msgstr "Nastavení" + +msgid "Enrolled" +msgstr "" + +msgid "Enrollment" +msgstr "" + +msgid "Fully Qualified Host Name" +msgstr "" + +# auto translated by TM merge from project: asknot-ng, version: 0.1, DocId: +# locale/asknot-ng +#, fuzzy +msgid "Generate OTP" +msgstr "Obecné" + +# auto translated by TM merge from project: asknot-ng, version: 0.1, DocId: +# locale/asknot-ng +#, fuzzy +msgid "Generated OTP" +msgstr "Obecné" + +msgid "Kerberos Key" +msgstr "" + +msgid "Kerberos Key Not Present" +msgstr "" + +msgid "Kerberos Key Present, Host Provisioned" +msgstr "" + +# auto translated by TM merge from project: python-simpleline, version: +# master, DocId: python-simpleline +#, fuzzy +msgid "One-Time Password" +msgstr "Heslo" + +msgid "One-Time Password Not Present" +msgstr "" + +msgid "One-Time Password Present" +msgstr "" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +msgid "Reset OTP" +msgstr "Reset" + +msgid "Reset One-Time Password" +msgstr "" + +msgid "Set OTP" +msgstr "" + +msgid "OTP set" +msgstr "" + +msgid "Set One-Time Password" +msgstr "" + +msgid "Remove hosts" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "" + +# auto translated by TM merge from project: Spacewalk Web UI, version: master, +# DocId: java/code/src/com/redhat/rhn/frontend/strings/database/StringResource +#, fuzzy +msgid "Unprovision" +msgstr "Zajištění" + +msgid "Are you sure you want to unprovision this host?" +msgstr "" + +# auto translated by TM merge from project: Spacewalk Web UI, version: master, +# DocId: java/code/src/com/redhat/rhn/frontend/strings/database/StringResource +#, fuzzy +msgid "Unprovisioning host" +msgstr "Zajištění" + +msgid "Host unprovisioned" +msgstr "" + +msgid "Add host group" +msgstr "" + +#, python-brace-format +msgid "Add hosts into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "" + +msgid "Host Group Settings" +msgstr "" + +msgid "Remove host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "" + +msgid "User to override" +msgstr "" + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" + +msgid "Enter trusted user login." +msgstr "" + +# auto translated by TM merge from project: OSCAP Anaconda Addon, version: +# master, DocId: oscap-anaconda-addon +msgid "Profile" +msgstr "Profil" + +msgid "Group to override" +msgstr "" + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" + +msgid "Enter trusted group name." +msgstr "" + +msgid "Add ID view" +msgstr "" + +msgid "Add group ID override" +msgstr "" + +msgid "Add user ID override" +msgstr "" + +#, python-brace-format +msgid "${primary_key} applies to:" +msgstr "" + +msgid "Applied to hosts" +msgstr "" + +msgid "Apply to host groups" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "" + +msgid "Apply to hosts" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "" + +#, python-brace-format +msgid "${primary_key} overrides:" +msgstr "" + +msgid "Remove ID views" +msgstr "" + +msgid "Remove user ID overrides" +msgstr "" + +msgid "Remove group ID overrides" +msgstr "" + +msgid "Un-apply from host groups" +msgstr "" + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +msgid "Un-apply" +msgstr "Použít" + +msgid "Un-apply from hosts" +msgstr "" + +msgid "Un-apply ID Views from hosts" +msgstr "" + +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "" + +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "" + +msgid "Add netgroup" +msgstr "" + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +msgid "Netgroup Settings" +msgstr "Nastavení služeb" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +msgid "Netgroups" +msgstr "skupinu" + +msgid "Remove netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from netgroup '${primary_key}'" +msgstr "" + +msgid "Add OTP token" +msgstr "" + +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +msgid "Configure your token" +msgstr "Nastavení" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" + +# auto translated by TM merge from project: fedora-software, version: master, +# DocId: template/django +#, fuzzy +msgid "OTP Token Settings" +msgstr "Nastavení" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +msgid "Disable token" +msgstr "Zakázat" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +msgid "Enable token" +msgstr "Povolit" + +msgid "Remove OTP tokens" +msgstr "" + +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "" + +msgid "Show QR code" +msgstr "" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +msgid "Show configuration uri" +msgstr "Nastavení" + +msgid "Counter-based (HOTP)" +msgstr "" + +msgid "Time-based (TOTP)" +msgstr "" + +msgid "Add Custom Attribute" +msgstr "" + +# auto translated by TM merge from project: Spacewalk Web UI, version: master, +# DocId: java/code/src/com/redhat/rhn/frontend/strings/database/StringResource +#, fuzzy +msgid "Permission settings" +msgstr "Zajištění" + +msgid "Attribute breakdown" +msgstr "" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +msgid "Privilege Settings" +msgstr "Nastavení služeb" + +msgid "Public key:" +msgstr "" + +msgid "Set public key" +msgstr "" + +msgid "Show/Set key" +msgstr "" + +msgid "Modified: key not set" +msgstr "" + +msgid "Modified" +msgstr "" + +msgid "New: key not set" +msgstr "" + +msgid "New: key set" +msgstr "" + +# auto translated by TM merge from project: authconfig, version: master, +# DocId: po/authconfig +#, fuzzy +msgid "Add password policy" +msgstr "LDAP heslo" + +# auto translated by TM merge from project: python-simpleline, version: +# master, DocId: python-simpleline +#, fuzzy +msgid "Password Policy" +msgstr "Heslo" + +msgid "Remove password policies" +msgstr "" + +msgid "Add ID range" +msgstr "" + +# auto translated by TM merge from project: fedora-software, version: master, +# DocId: template/django +#, fuzzy +msgid "Range Settings" +msgstr "Nastavení" + +msgid "Base ID" +msgstr "" + +msgid "Primary RID base" +msgstr "" + +msgid "Range size" +msgstr "" + +msgid "Domain SID" +msgstr "" + +msgid "Secondary RID base" +msgstr "" + +msgid "Remove ID ranges" +msgstr "" + +msgid "Active Directory domain with POSIX attributes" +msgstr "" + +msgid "Detect" +msgstr "" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +msgid "Local domain" +msgstr "Umístění" + +msgid "IPA trust" +msgstr "" + +msgid "Active Directory winsync" +msgstr "" + +msgid "Add RADIUS server" +msgstr "" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +msgid "RADIUS Proxy Server Settings" +msgstr "Nastavení služeb" + +msgid "Remove RADIUS servers" +msgstr "" + +msgid "Realm Domains" +msgstr "" + +msgid "Check DNS" +msgstr "" + +msgid "Do you also want to perform DNS check?" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +msgid "Force Update" +msgstr "Aktualizovat" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +msgid "Add SELinux user map" +msgstr "Uživatel SELinuxu" + +#, python-brace-format +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "" + +msgid "Remove selinux user maps" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +msgid "Server Roles" +msgstr "Serverové role" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +msgid "Server Role" +msgstr "Serverové role" + +msgid "Warning: Consider service replication" +msgstr "" + +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +#, fuzzy +msgid "Delete Server" +msgstr "Smazat" + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +msgid "Add service" +msgstr "službu" + +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +msgid "Service Certificate" +msgstr "Nastavení služeb" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +msgid "Service Settings" +msgstr "Nastavení služeb" + +# auto translated by TM merge from project: Spacewalk Web UI, version: master, +# DocId: java/code/src/com/redhat/rhn/frontend/strings/database/StringResource +msgid "Provisioning" +msgstr "Zajištění" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +msgid "Remove services" +msgstr "službu" + +#, python-brace-format +msgid "Remove service '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing service '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to unprovision this service?" +msgstr "" + +# auto translated by TM merge from project: Spacewalk Web UI, version: master, +# DocId: java/code/src/com/redhat/rhn/frontend/strings/database/StringResource +#, fuzzy +msgid "Unprovisioning service" +msgstr "Zajištění" + +msgid "Service unprovisioned" +msgstr "" + +msgid "Kerberos Key Present, Service Provisioned" +msgstr "" + +msgid "SSH public keys" +msgstr "" + +msgid "SSH public key:" +msgstr "" + +msgid "Set SSH key" +msgstr "" + +msgid "Are you sure you want to activate selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "" + +msgid "Add stage user" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# labs.fedoraproject.org, DocId: po/labs.fedoraproject.org +#, fuzzy +msgid "Stage users" +msgstr "Stage" + +msgid "Preserved users" +msgstr "" + +msgid "Remove preserved users" +msgstr "" + +msgid "Remove stage users" +msgstr "" + +msgid "Are you sure you want to stage selected users?" +msgstr "" + +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "" + +msgid "Are you sure you want to restore selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "" + +msgid "User categories" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +msgid "Add subid" +msgstr "službu" + +msgid "Assigned subids" +msgstr "" + +msgid "DNA remaining" +msgstr "" + +msgid "SubGID range size" +msgstr "" + +msgid "SubGID range start" +msgstr "" + +msgid "SubUID range size" +msgstr "" + +msgid "SubUID range start" +msgstr "" + +msgid "Remaining subids" +msgstr "" + +msgid "Subordinate ID Statistics" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +msgid "Add sudo command" +msgstr "příkaz" + +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "" + +msgid "Remove sudo commands" +msgstr "" + +#, python-brace-format +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "" + +msgid "Add sudo command group" +msgstr "" + +#, python-brace-format +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "" + +msgid "Remove sudo command groups" +msgstr "" + +#, python-brace-format +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "" + +msgid "Add sudo rule" +msgstr "" + +msgid "Add sudo option" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "" + +msgid "Allow" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +msgid "Any Command" +msgstr "příkaz" + +# auto translated by TM merge from project: Fedora Elections Guide, version: +# master, DocId: Casting +msgid "Any Group" +msgstr "Jakákoli skupina" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +msgid "Run Commands" +msgstr "příkazy" + +msgid "Deny" +msgstr "" + +msgid "Access this host" +msgstr "" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +#, fuzzy +msgid "Option added" +msgstr "Přepínače" + +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "" + +msgid "Remove sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "" + +msgid "As Whom" +msgstr "" + +msgid "Specified Commands and Groups" +msgstr "" + +msgid "Specified Groups" +msgstr "" + +msgid "Remove sudo options" +msgstr "" + +msgid "Autogenerated" +msgstr "" + +msgid "Segment details" +msgstr "" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +msgid "Replication configuration" +msgstr "Nastavení" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" + +msgid "Add IPA location" +msgstr "" + +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "" + +msgid "Remove IPA locations" +msgstr "" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "" + +msgid "Add topology segment" +msgstr "" + +msgid "Remove topology segments" +msgstr "" + +# auto translated by TM merge from project: Spacewalk Web UI, version: master, +# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource +msgid "Account" +msgstr "Účet" + +msgid "Add trust" +msgstr "" + +msgid "Administrative account" +msgstr "" + +msgid "SID blocklists" +msgstr "" + +# auto translated by TM merge from project: fedora-software, version: master, +# DocId: template/django +#, fuzzy +msgid "Trust Settings" +msgstr "Nastavení" + +msgid "Establish using" +msgstr "" + +msgid "Fetch domains" +msgstr "" + +#, fuzzy +msgid "Pre-shared password" +msgstr "Uživatelské heslo" + +msgid "Remove trusts" +msgstr "" + +msgid "Remove domains" +msgstr "" + +msgid "Trust direction" +msgstr "" + +msgid "Trust status" +msgstr "" + +msgid "Trust type" +msgstr "" + +msgid "Alternative UPN suffixes" +msgstr "" + +msgid "User attributes for SMB services" +msgstr "" + +msgid "Path to a script executed on a Windows system at logon" +msgstr "" + +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "" + +msgid "Path to a user home directory, in UNC format" +msgstr "" + +msgid "Drive to mount a home directory" +msgstr "" + +# auto translated by TM merge from project: fedora-software, version: master, +# DocId: template/django +#, fuzzy +msgid "Account Settings" +msgstr "Nastavení" + +# auto translated by TM merge from project: Spacewalk Web UI, version: master, +# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource +#, fuzzy +msgid "Account Status" +msgstr "Účet" + +msgid "Active users" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +msgid "Add user" +msgstr "uživatel" + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "" + +msgid "Auto assign subordinate ids" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to auto-assign a subordinate id to user ${object}?" +msgstr "" + +# auto translated by TM merge from project: fedora-software, version: master, +# DocId: template/django +#, fuzzy +msgid "Contact Settings" +msgstr "Nastavení" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +#, fuzzy +msgid "Delete mode" +msgstr "Smazat" + +msgid "Employee Information" +msgstr "" + +msgid "Error changing account status" +msgstr "" + +msgid "Password expiration" +msgstr "" + +# auto translated by TM merge from project: Spacewalk Web UI, version: master, +# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource +msgid "Mailing Address" +msgstr "Poštovní adresa" + +msgid "Misc. Information" +msgstr "" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +#, fuzzy +msgid "delete" +msgstr "Smazat" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +msgid "preserve" +msgstr "službu" + +msgid "No private group" +msgstr "" + +msgid "Remove users" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" + +#, python-brace-format +msgid "Click to ${action}" +msgstr "" + +msgid "Unlock" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "" + +msgid "Add vault" +msgstr "" + +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "" + +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" + +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" + +msgid "Asymmetric" +msgstr "" + +msgid "Vaults Config" +msgstr "" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +msgid "Members" +msgstr "Členové" + +msgid "My User Vaults" +msgstr "" + +msgid "Owners" +msgstr "" + +msgid "Remove vaults" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "" + +# auto translated by TM merge from project: firewalld, version: master, DocId: +# po/firewalld +#, fuzzy +msgid "Service Vaults" +msgstr "Služby" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +msgid "Shared" +msgstr "Sdílená" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +msgid "Shared Vaults" +msgstr "Sdílená" + +# auto translated by TM merge from project: ibus-libpinyin, version: master, +# DocId: ibus-libpinyin +msgid "Standard" +msgstr "Standard" + +msgid "Symmetric" +msgstr "" + +msgid "Vault Type" +msgstr "" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +msgid "User Vaults" +msgstr "Uživatelé" + +msgid "Current password is required" +msgstr "" + +#, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# fedoraproject.org, DocId: po/fedora-web +#, fuzzy +msgid "First OTP" +msgstr "Prvenství " + +msgid "New password is required" +msgstr "" + +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" + +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" + +msgid "Token synchronization failed" +msgstr "" + +msgid "The username, password or token codes are not correct" +msgstr "" + +msgid "Token was synchronized" +msgstr "" + +msgid "Password change complete" +msgstr "" + +msgid "Your password has expired. Please enter a new password." +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +#, fuzzy +msgid "Passwords must match" +msgstr "Hesla nejsou stejná." + +msgid "Password reset was not successful." +msgstr "" + +#, fuzzy +msgid "Reset your password." +msgstr "Uživatelské heslo" + +msgid "Second OTP" +msgstr "" + +#, fuzzy +msgid "Verify Password" +msgstr "Uživatelské heslo" + +msgid "Are you sure you want to delete selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "" + +msgid "Are you sure you want to disable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "" + +msgid "Are you sure you want to enable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "" + +msgid "Some entries were not deleted" +msgstr "" + +msgid "Quick Links" +msgstr "" + +msgid "Select All" +msgstr "" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" + +msgid "Unselect All" +msgstr "" + +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +msgid "Working" +msgstr "Pracuje" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +msgid "Audit" +msgstr "Auditovat" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +msgid "Authentication" +msgstr "Autentizace" + +# auto translated by TM merge from project: Spacewalk Web UI, version: master, +# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource +#, fuzzy +msgid "Automount" +msgstr "Účet" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +msgid "DNS" +msgstr "DNS" + +msgid "Host-Based Access Control" +msgstr "" + +msgid "Identity" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org +#, fuzzy +msgid "IPA Server" +msgstr "Server" + +# auto translated by TM merge from project: firewalld, version: master, DocId: +# po/firewalld +#, fuzzy +msgid "Network Services" +msgstr "Služby" + +msgid "Policy" +msgstr "" + +msgid "Role-Based Access Control" +msgstr "" + +msgid "Subordinate IDs" +msgstr "" + +msgid "Sudo" +msgstr "" + +msgid "Topology" +msgstr "" + +msgid "Trusts" +msgstr "" + +msgid "True" +msgstr "" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" + +msgid "API Browser" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# fedoraproject.org, DocId: po/fedora-web +msgid "First" +msgstr "Prvenství " + +# auto translated by TM merge from project: abrt, version: master, DocId: abrt +msgid "Last" +msgstr "Poslední" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +msgid "Next" +msgstr "Další" + +# auto translated by TM merge from project: docbook-locales, version: master, +# DocId: locale +msgid "Page" +msgstr "Strana" + +# auto translated by TM merge from project: docbook-locales, version: master, +# DocId: locale +msgid "Prev" +msgstr "Předchozí" + +msgid "Undo" +msgstr "" + +msgid "Undo this change." +msgstr "" + +msgid "Undo All" +msgstr "" + +msgid "Undo all changes in this field." +msgstr "" + +msgid "Text does not match field pattern" +msgstr "" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" + +msgid "Must be a decimal number" +msgstr "" + +msgid "Format error" +msgstr "" + +msgid "Must be an integer" +msgstr "" + +msgid "Not a valid IP address" +msgstr "" + +msgid "Not a valid IPv4 address" +msgstr "" + +msgid "Not a valid IPv6 address" +msgstr "" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "" + +msgid "Parse error" +msgstr "" + +msgid "Must be a positive number" +msgstr "" + +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "" + +msgid "Required field" +msgstr "" + +msgid "Unsupported value" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +msgid "" +"\n" +"IPA locations\n" +msgstr "Umístění" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +msgid "location" +msgstr "Umístění" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +msgid "locations" +msgstr "Umístění" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +msgid "IPA Locations" +msgstr "Umístění" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +msgid "IPA Location" +msgstr "Umístění" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +msgid "Location name" +msgstr "Umístění" + +msgid "IPA location name" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f22-branch, +# DocId: anaconda +#, fuzzy +msgid "IPA Location description" +msgstr "popis" + +# auto translated by TM merge from project: System Administrator's Guide, +# version: master, DocId: Deployment_Guide +msgid "Servers" +msgstr "Servery" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "" + +msgid "Delete an IPA location." +msgstr "" + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "" + +msgid "Modify information about an IPA location." +msgstr "" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "" + +msgid "Search for IPA locations." +msgstr "" + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "Display information about an IPA location." +msgstr "" + +msgid "Servers in location" +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +# auto translated by TM merge from project: authconfig, version: master, +# DocId: po/authconfig +msgid "Invalid LDAP URI." +msgstr "Neplatné URI pro LDAP." + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +msgid "netgroups" +msgstr "skupinu" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +msgid "Netgroup" +msgstr "skupinu" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "One time password commands" +msgstr "" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +msgid "OTP configuration options" +msgstr "Nastavení" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +msgid "OTP Configuration" +msgstr "Nastavení" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +# auto translated by TM merge from project: dnf, version: master, DocId: +# po/dnf +#, fuzzy +msgid "URI" +msgstr "URL" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "" + +msgid "cannot be empty" +msgstr "" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"If the user authentication method is set to password+OTP, the user should\n" +"pass the --otp option when resetting the password.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To reset your own password when password+OTP is set as authentication " +"method:\n" +" ipa passwd --otp\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +msgid "The OTP if the user has a token configured" +msgstr "" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +msgid "" +"\n" +"Permissions\n" +msgstr "Verze" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +msgid "" +"\n" +"Managed permissions\n" +msgstr "" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "must be enclosed in parentheses" +msgstr "" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "" + +#, fuzzy, python-format +msgid "Deprecated; use %s" +msgstr "Zastaralé volby" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, python-format +msgid "Entry %s not found" +msgstr "" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, python-format +msgid "option was renamed; use %s" +msgstr "" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, python-format +msgid "%s: group not found" +msgstr "" + +msgid "target and targetgroup are mutually exclusive" +msgstr "" + +msgid "subtree and type are mutually exclusive" +msgstr "" + +msgid "Bad search filter" +msgstr "" + +#, python-format +msgid "Entry %s does not exist" +msgstr "" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, python-format +msgid "Added permission \"%(value)s\"" +msgstr "" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "" + +msgid "cannot delete managed permissions" +msgstr "" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "" + +#, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +msgid "invalid port number" +msgstr "" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +# auto translated by TM merge from project: System Administrator's Guide, +# version: master, DocId: Deployment_Guide +#, fuzzy +msgid "RADIUS Servers" +msgstr "Servery" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +msgid "RADIUS Server" +msgstr "RADIUS" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "roles" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Role" +msgstr "Role" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"\n" +"API Schema\n" +msgstr "" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org +msgid "Documentation" +msgstr "Dokumentace" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +msgid "Help topic" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +#, fuzzy +msgid "Method name" +msgstr "Název příkazu" + +msgid "Display information about a command." +msgstr "" + +#, fuzzy +msgid "Search for commands." +msgstr "Téma nebo příkaz" + +msgid "Return command defaults" +msgstr "" + +#, python-brace-format +msgid "{oname}: {command_name} not found" +msgstr "" + +msgid "Display information about a class." +msgstr "" + +msgid "Search for classes." +msgstr "" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +msgid "CLI name" +msgstr "Název příkazu" + +#, fuzzy +msgid "Confirm (password)" +msgstr "Uživatelské heslo" + +# auto translated by TM merge from project: ibus-input-pad, version: head, +# DocId: ibus-input-pad +msgid "Default" +msgstr "Výchozí" + +# auto translated by TM merge from project: ibus-input-pad, version: head, +# DocId: ibus-input-pad +#, fuzzy +msgid "Default from" +msgstr "Výchozí" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +msgid "Label" +msgstr "Název" + +msgid "Convert on server" +msgstr "" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +#, fuzzy +msgid "Option group" +msgstr "Přepínače" + +msgid "Sensitive" +msgstr "" + +#, fuzzy +msgid "Positional argument" +msgstr "Poziční argumenty" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command output." +msgstr "" + +msgid "Search for command outputs." +msgstr "" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "self service permission" +msgstr "" + +msgid "self service permissions" +msgstr "" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +msgid "Self Service Permissions" +msgstr "Nastavení služeb" + +msgid "Self Service Permission" +msgstr "" + +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +msgid "SELinux User Map rule" +msgstr "Uživatel SELinuxu" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +msgid "SELinux User Map rules" +msgstr "Uživatel SELinuxu" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +msgid "SELinux User Maps" +msgstr "Uživatel SELinuxu" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +msgid "SELinux User Map" +msgstr "Uživatel SELinuxu" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "" + +#, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +msgid "" +"\n" +"IPA server roles\n" +msgstr "Serverové role" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +msgid "server role" +msgstr "Serverové role" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +msgid "server roles" +msgstr "Serverové role" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +msgid "IPA Server Roles" +msgstr "Serverové role" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +msgid "IPA Server Role" +msgstr "Serverové role" + +msgid "IPA server role name" +msgstr "" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "IPA role name" +msgstr "" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy, python-format +msgid "authentication indicators not allowed in service \"%s\"" +msgstr "Autentizace" + +msgid "Malformed principal" +msgstr "" + +msgid "{} is required by the IPA master" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +msgid "service" +msgstr "službu" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +msgid "services" +msgstr "službu" + +msgid "Service principal alias" +msgstr "" + +msgid "Base-64 encoded service certificate" +msgstr "" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +msgid "Add a new IPA service." +msgstr "" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "" + +msgid "force principal name even if host not in DNS" +msgstr "" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +msgid "Add a new SMB service." +msgstr "" + +msgid "SMB service NetBIOS name" +msgstr "" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to a service" +msgstr "" + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a service" +msgstr "" + +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +msgid "service delegation rules" +msgstr "Nastavení služeb" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +msgid "Service delegation rules" +msgstr "Nastavení služeb" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +msgid "Service delegation rule" +msgstr "Nastavení služeb" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "service delegation target" +msgstr "" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +msgid "service delegation targets" +msgstr "Nastavení služeb" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +msgid "Service delegation targets" +msgstr "Nastavení služeb" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +msgid "Service delegation target" +msgstr "Nastavení služeb" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# labs.fedoraproject.org, DocId: po/labs.fedoraproject.org +#, fuzzy +msgid "Stage Users" +msgstr "Stage" + +# auto translated by TM merge from project: Fedora Websites, version: +# labs.fedoraproject.org, DocId: po/labs.fedoraproject.org +#, fuzzy +msgid "Stage User" +msgstr "Stage" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Subordinate ids\n" +"\n" +"Manage subordinate user and group ids for users\n" +"\n" +"EXAMPLES:\n" +"\n" +" Auto-assign a subordinate id range to current user\n" +" ipa subid-generate\n" +"\n" +" Auto-assign a subordinate id range to user alice:\n" +" ipa subid-generate --owner=alice\n" +"\n" +" Find subordinate ids for user alice:\n" +" ipa subid-find --owner=alice\n" +"\n" +" Match entry by any subordinate uid in range:\n" +" ipa subid-match --subuid=2147483649\n" +msgstr "" + +msgid "Subordinate id" +msgstr "" + +msgid "Subordinate ids" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f22-branch, +# DocId: anaconda +#, fuzzy +msgid "Subordinate id description" +msgstr "popis" + +msgid "Owning user of subordinate id entry" +msgstr "" + +msgid "Start value for subordinate user ID (subuid) range" +msgstr "" + +msgid "Subordinate user ID count" +msgstr "" + +msgid "Start value for subordinate group ID (subgid) range" +msgstr "" + +msgid "Subordinate group ID count" +msgstr "" + +#, python-format +msgid "" +"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." +msgstr "" + +#, python-format +msgid "'%(dn)s is not a valid user" +msgstr "" + +msgid "subgidnumber must be equal to subuidnumber" +msgstr "" + +msgid "Add a new subordinate id." +msgstr "" + +#, python-format +msgid "Added subordinate id \"%(value)s\"" +msgstr "" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +#, fuzzy +msgid "Delete a subordinate id." +msgstr "Smazat" + +#, python-format +msgid "Deleted subordinate id \"%(value)s\"" +msgstr "" + +msgid "Modify a subordinate id." +msgstr "" + +#, python-format +msgid "Modified subordinate id \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "Search for subordinate id." +msgstr "Téma nebo příkaz" + +#, python-format +msgid "%(count)d subordinate id matched" +msgid_plural "%(count)d subordinate ids matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "Display information about a subordinate id." +msgstr "" + +msgid "Generate and auto-assign subuid and subgid range to user entry" +msgstr "" + +msgid "Match users by any subordinate uid in their range" +msgstr "" + +msgid "SubUID match" +msgstr "" + +msgid "Match value for subordinate user ID" +msgstr "" + +msgid "Subordinate id statistics" +msgstr "" + +#, python-format +msgid "%(remaining)i remaining subordinate id ranges" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +msgid "sudo command" +msgstr "příkaz" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +msgid "sudo commands" +msgstr "příkazy" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +msgid "Sudo Commands" +msgstr "příkazy" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(value)s" +msgstr "" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +msgid "trust configuration" +msgstr "Nastavení" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +msgid "Global Trust Configuration" +msgstr "Nastavení" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "" + +msgid "SID" +msgstr "" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +# auto translated by TM merge from project: Cockpit, version: master, DocId: +# cockpit +#, fuzzy +msgid "Domain enabled" +msgstr "Zakázáno" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +msgid "users" +msgstr "uživatel" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "" + +msgid "Failed logins" +msgstr "" + +msgid "Last successful authentication" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +msgid "Last failed authentication" +msgstr "Autentizace" + +# auto translated by TM merge from project: Pulseaudio, version: 6.0, DocId: +# pulseaudio.pot +#, fuzzy +msgid "Time now" +msgstr "Časový limit" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the user entry" +msgstr "" + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +msgid "Vault Container" +msgstr "Pokračovat" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +# auto translated by TM merge from project: ibus-input-pad, version: head, +# DocId: ibus-input-pad +#, fuzzy +msgid "vault" +msgstr "Výchozí" + +# auto translated by TM merge from project: ibus-input-pad, version: head, +# DocId: ibus-input-pad +#, fuzzy +msgid "vaults" +msgstr "Výchozí" + +# auto translated by TM merge from project: ibus-input-pad, version: head, +# DocId: ibus-input-pad +#, fuzzy +msgid "Vaults" +msgstr "Výchozí" + +# auto translated by TM merge from project: ibus-input-pad, version: head, +# DocId: ibus-input-pad +#, fuzzy +msgid "Vault" +msgstr "Výchozí" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +msgid "Vault configuration" +msgstr "Nastavení" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "" + +msgid "Retrieve data from a vault." +msgstr "" + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel7-branch, +# DocId: anaconda +#, fuzzy +msgid "password policy" +msgstr "heslo" + +# auto translated by TM merge from project: anaconda, version: rhel7-branch, +# DocId: anaconda +#, fuzzy +msgid "password policies" +msgstr "heslo" + +# auto translated by TM merge from project: python-simpleline, version: +# master, DocId: python-simpleline +#, fuzzy +msgid "Password Policies" +msgstr "Heslo" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +# auto translated by TM merge from project: dnf, version: master, DocId: dnf +#, fuzzy +msgid "User check" +msgstr "Uživatelské jméno" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be equal to or greater than the minimum." +msgstr "" + +msgid "cannot delete global password policy" +msgstr "" + +msgid "priority cannot be set on global policy" +msgstr "" + +# auto translated by TM merge from project: System Administrator's Guide, +# version: master, DocId: Deployment_Guide +#, fuzzy +msgid "" +"\n" +"IPA servers\n" +msgstr "Servery" + +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "" + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org +#, fuzzy +msgid "server" +msgstr "Server" + +# auto translated by TM merge from project: System Administrator's Guide, +# version: master, DocId: Deployment_Guide +#, fuzzy +msgid "servers" +msgstr "Servery" + +# auto translated by TM merge from project: System Administrator's Guide, +# version: master, DocId: Deployment_Guide +#, fuzzy +msgid "IPA Servers" +msgstr "Servery" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +msgid "Server location" +msgstr "Umístění" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +msgid "Service weight" +msgstr "Nastavení služeb" + +msgid "Weight for server services" +msgstr "" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +msgid "Service relative weight" +msgstr "Nastavení služeb" + +msgid "Relative weight for server services (counts per location)" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +msgid "Enabled server roles" +msgstr "Serverové role" + +msgid "List of enabled roles" +msgstr "" + +msgid "Modify information about an IPA server." +msgstr "" + +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#, fuzzy, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "chyba na serveru '%(server)s': %(error)s" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +#, fuzzy, python-format +msgid "Failed to remove server from security domain: %s" +msgstr "chyba na serveru '%(server)s': %(error)s" + +msgid "Server has already been deleted" +msgstr "" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +msgid "State" +msgstr "Stav" + +# auto translated by TM merge from project: System Administrator's Guide, +# version: master, DocId: Deployment_Guide +#, fuzzy +msgid "Server state" +msgstr "Servery" + +#, python-format +msgid "Changed server state of \"%(value)s\"." +msgstr "" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." +msgstr "" + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"Each option needs to be added separately and no validation is done whether\n" +"the option is known by sudo or is in a valid format. Environment variables\n" +"also need to be set individually. For example env_keep=\"FOO BAR\" in " +"sudoers\n" +"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" +"+=BAR.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set multiple default Sudo options:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate' --" +"sudooption mail_badpass\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "" + +# auto translated by TM merge from project: firewalld, version: master, DocId: +# po/firewalld +#, fuzzy +msgid "Sudo Rules" +msgstr "Pravidla" + +msgid "Sudo Rule" +msgstr "" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +msgid "command" +msgstr "příkaz" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "commands" +msgstr "příkazy" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +msgid "group runAs" +msgstr "skupinu" + +msgid "runAs groups" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" msgstr "" msgid "Request must be a dict" @@ -24506,6 +24810,17 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + #, python-format msgid "" "\n" @@ -24525,31 +24840,6 @@ msgstr "" msgid "Topology does not allow server %(server)s to replicate with servers:" msgstr "" -msgid "Trusting forest" -msgstr "" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Non-Active Directory domain" -msgstr "" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - msgid "" "\n" "Classes to manage trust joins using DCE-RPC calls\n" @@ -24708,33 +24998,6 @@ msgstr "" msgid "must be at least 1" msgstr "" -#, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -msgid "Unable to initialize STARTTLS session\n" -msgstr "" - # auto translated by TM merge from project: selinux (policycoreutils), # version: master, DocId: policycoreutils #, fuzzy @@ -24768,3 +25031,30 @@ msgstr "" msgid "Bad or unsupported salt type.\n" msgstr "" + +#, c-format +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "" + +msgid "" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" +msgstr "" + +msgid "Unable to initialize STARTTLS session\n" +msgstr "" diff --git a/po/de.po b/po/de.po index 9ec4c058f..9ce1dcfb4 100644 --- a/po/de.po +++ b/po/de.po @@ -21,4152 +21,6 @@ msgstr "" "Plural-Forms: nplurals=2; plural=n != 1;\n" "X-Generator: Weblate 4.4.2\n" -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" -"\n" -" Auto-Mitgliedschaftsregel hinzufügen.\n" -" " - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" -"\n" -" Bedigungen zu einer Auto-Mitgliedschaftsregel hinzufügen.\n" -" " - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" -"\n" -" Auto-Mitgliedschaftsregel löschen.\n" -" " - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" -"\n" -" Informationen über Auto-Mitgliedschaftsregel anzeigen.\n" -" " - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" -"\n" -" Auto-Mitgliedschaftsregel bearbeiten. " - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" -"\n" -" Bedingungen von einer einer Auto-Mitglieschaftsregel entfernen. " - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" -"\n" -" Suche nach Auto-Mitgliedschaftsregeln.\n" -" " - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" -"\n" -"Regel für Auto-Mitgliedschaft\n" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" -"\n" -"Domain Name System (DNS)\n" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" -"\n" -"IPA-Server\n" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" -"\n" -"OTP-Tokens bearbeiten.\n" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" -"\n" -"YubiKey Tokens verwalten.\n" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" -"\n" -"OTP Tokens\n" - -msgid "" -"\n" -"Raise the IPA Domain Level.\n" -msgstr "" -"\n" -"IPA Domain Level erhöhen.\n" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" -"\n" -"YubiKey Tokens\n" - -msgid " ipa --help" -msgstr " ipa --help" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" -"Alternativ sind folgende Server in der Lage den Befehl auszuführen: " -"%(masters)s" - -#, python-brace-format -msgid "${count} item(s) added" -msgstr "${count} Einträge hinzugefügt" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "${count} Einträge gelöscht" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "${count} Einträge deaktiviert" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "${count} Einträge aktiviert" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "${count} Einträge gelöscht" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "${count} Option(en) entfernt" - -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "${count} Benutzer aktiviert" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "${count} user(s) wiederhergestellt" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "${entity} ${primary_key} Einstellungen" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "${entity} ${primary_key} aktualisiert" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "${entity} erfolgreich hinzugefügt" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "${primary_key} ist Mitglied von:" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "${primary_key} wird verwaltet von:" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "${primary_key} Mitglieder:" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "${product}, Version: ${version}" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "%(attr)s enthält nicht »%(value)s«" - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "%(attr)s: Ungültige Syntax." - -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "%(attr)s: Nur ein Wert erlaubt." - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "%(count)d ACI gefunden" -msgstr[1] "%(count)d ACIs gefunden" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "%(count)d HBAC-Regel gefunden" -msgstr[1] "%(count)d HBAC-Regeln gefunden" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "%(count)d HBAC-Dienstgruppe gefunden" -msgstr[1] "%(count)d HBAC-Dienstgruppen gefunden" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "%(count)d HBAC-Dienst gefunden" -msgstr[1] "%(count)d HBAC-Dienste gefunden" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "%(count)d OTP Token gefunden" -msgstr[1] "%(count)d OTP Tokens gefunden" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "%(count)d Automount-Ort gefunden" -msgstr[1] "%(count)d Automount-Orte gefunden" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "%(count)d passende Gruppe" -msgstr[1] "%(count)d passende Gruppen" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "%(count)d Host gefunden" -msgstr[1] "%(count)d Hosts gefunden" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "%(count)d Hostgruppe gefunden" -msgstr[1] "%(count)d Hostgruppen gefunden" - -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "%(count)d Plugin geladen" -msgstr[1] "%(count)d Plugins geladen" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "%(count)d Rolle gefunden" -msgstr[1] "%(count)d Rollen gefunden" - -#, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "%(count)d passender Dienst" -msgstr[1] "%(count)d passende Dienste" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "%(count)d passender Benutzer" -msgstr[1] "%(count)d passende Benutzer" - -#, python-format -msgid "%(count)d variables" -msgstr "%(count)d Variablen" - -#, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "%(cver)s Client ist inkompatibel mit %(sver)s Server auf '%(server)s'" - -#, python-format -msgid "%(desc)s: %(info)s" -msgstr "%(desc)s: %(info)s" - -#, python-format -msgid "%(exception)s" -msgstr "%(exception)s" - -#, python-format -msgid "%(filename)s: file not found" -msgstr "%(filename)s: Datei nicht gefunden" - -#, python-format -msgid "%(info)s" -msgstr "%(info)s" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" -"%(key)s kann nicht gelöscht werden, weil es von %(label)s %(dependent)s " -"benötigt wird." - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" -"%(key)s kann nicht gelöscht oder deaktiviert werden weil es das letzte " -"Mitglied von %(label)s %(container)s ist" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "%(label)s %(key)s kann nicht gelöscht/bearbeitet werden: %(reason)s" - -#, python-format -msgid "%(line)s" -msgstr "%(line)s" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "%(name)s Zertifikat ist ungültig" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "%(oname)s mit dem Namen »%(pkey)s« existiert bereits" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "%(operation)s wird für %(principal_type)s Principals nicht unterstützt" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "%(otype)s \"%(oname)s\" nicht gefunden" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "%(parent)s: %(oname)s nicht gefunden" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "%(pkey)s: %(oname)s nicht gefunden" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "%(port)s kein gültiger Port" - -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "LDAP Zeitüberschreitung für %(task)s , Task DN: '%(task_dn)s'" - -#, python-format -msgid "%s" -msgstr "%s" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "%s ist kein gültiges Attribut" - -#, python-format -msgid "%s to add" -msgstr "%s zum hinzufügen" - -#, python-format -msgid "%s to remove" -msgstr "%s zum entfernen" - -#, python-format -msgid "%s: user is already preserved" -msgstr "%s: Benutzer ist bereits aufbewahrt" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "'%(command)s' ist veraltet. %(additional_info)s" - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "»%(entry)s« verfügt nicht über ein Zertifikat." - -#, python-format -msgid "'%(name)s' is required" -msgstr "'%(name)s' wird benötigt" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "'%(option)s' Option ist veraltet. %(additional_info)s" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "»%(required)s« darf nicht leer sein, wenn »%(name)s« gesetzt ist." - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "»%s« ist ein erforderlicher Teil des DNS-Datensatzes" - -msgid "(deprecated)" -msgstr "(veraltet)" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "(siehe RFC %s für Details)" - -msgid "7 is not a valid revocation reason" -msgstr "7 ist kein gültiger Grund für einen Widerruf." - -msgid "A comma-separated list of fields to search in when searching for groups" -msgstr "" -"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach Gruppen " -"durchsucht werden" - -msgid "A comma-separated list of fields to search in when searching for users" -msgstr "" -"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach " -"Benutzern durchsucht werden" - -msgid "A description of this auto member rule" -msgstr "Beschreibung der Auto-Mitgliedschaftsregel" - -msgid "A description of this command" -msgstr "Eine Beschreibung dieses Befehls" - -msgid "A description of this host" -msgstr "Beschreibung des Hosts" - -msgid "A description of this host-group" -msgstr "Beschreibung der Hostgruppe" - -msgid "A description of this role-group" -msgstr "Beschreibung der Rollengruppe" - -msgid "A group may not be a member of itself" -msgstr "Eine Gruppe kann kein Mitglied von sich selbst sein" - -msgid "A group may not be added as a member of itself" -msgstr "Eine Gruppe kann nicht als Mitglied von sich selbst hinzugefügt werden" - -msgid "A list of ACI values" -msgstr "Liste von ACI-Werten" - -msgid "A list of LDAP entries" -msgstr "Eine Liste von LDAP-Einträgen" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "$-getrennte Liste von SELinux Benutzern erwartet" - -msgid "A managed group cannot have a password policy." -msgstr "Eine verwaltete Gruppe kann keine Passwort-Policy haben." - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" -"Ein Problem trat bei der Überprüfung auf, ob alle Mitglieder %(verb)s waren: " -"%(exc)s" - -msgid "A string searched in all relevant object attributes" -msgstr "" -"Eine Zeichenkette, nach der in allen relevanten Objektattributen gesucht wird" - -msgid "ACI" -msgstr "ACI" - -msgid "ACI name" -msgstr "ACI-Name" - -msgid "ACI prefix" -msgstr "ACI-Präfix" - -msgid "ACI prefix is required" -msgstr "ACI-Präfix ist erforderlich" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "ACI mit dem Namen »%s« nicht gefunden" - -msgid "ACIs" -msgstr "ACIs" - -msgid "ACL name" -msgstr "ACL Name" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" -"API Versionsnummer wurde nicht gesendet, Vorwärtskompatibiltät nicht " -"garantiert. Nehme API Version %(server_version)s für Server an." - -msgid "About" -msgstr "Über" - -msgid "Access Denied" -msgstr "Zugriff verweigert" - -msgid "Access Granted" -msgstr "Zugriff gewährt" - -#, python-format -msgid "Access granted: %s" -msgstr "Zugriff gewährt: %s" - -msgid "Access this host" -msgstr "Zugriff auf diesen Host" - -msgid "Access time" -msgstr "Zugriffszeit" - -msgid "Accessing" -msgstr "Greift zu" - -msgid "Account" -msgstr "Konto" - -msgid "Account Settings" -msgstr "Kontoeinstellungen" - -msgid "Account Status" -msgstr "Kontostatus" - -msgid "Account disabled" -msgstr "Konto ist deaktiviert" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "Konto deaktiviert: %(disabled)s" - -msgid "Actions" -msgstr "Aktionen" - -msgid "Activate" -msgstr "Aktivieren" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "Vorbereiteten Benutzer \"%(value)s\" aktivieren." - -msgid "Activate a stage user." -msgstr "Vorbereiteten Benutzer aktivieren." - -msgid "Active users" -msgstr "Aktive Benutzer" - -msgid "Active zone" -msgstr "Aktive Zone" - -msgid "Add" -msgstr "Hinzufügen" - -msgid "Add Many" -msgstr "Mehrere hinzufügen" - -msgid "Add a manager to the stage user entry" -msgstr "Manager zum vorbereiteten Benutzer hinzufügen" - -msgid "Add a manager to the user entry" -msgstr "Manager zum Benutzer hinzufügen" - -msgid "Add a new HBAC service group." -msgstr "Eine neue HBAC-Dienstgruppe hinzufügen." - -msgid "Add a new HBAC service." -msgstr "Einen neuen HBAC-Dienst hinzufügen." - -msgid "Add a new IPA new service." -msgstr "Einen neuen IPA-Dienst hinzufügen." - -msgid "Add a new OTP token." -msgstr "Neuen OTP-Token hinzufügen" - -msgid "Add a new group password policy." -msgstr "Neue Gruppen-Passwortregel hinzufügen." - -msgid "Add a new host." -msgstr "Neuen Host hinzufügen." - -msgid "Add a new hostgroup." -msgstr "Hostgruppe hinzufügen." - -msgid "Add a new role." -msgstr "Neue Rolle hinzufügen." - -msgid "Add a new stage user." -msgstr "Einen neuen vorbereiteten Benutzer hinzufügen." - -msgid "Add a new user." -msgstr "Einen neuen Benutzer hinzufügen." - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" -"Ein Attribut-Wert-Paar hinzufügen. Das Format ist Attribut=Wert.\n" -"Das Attribut muss Teil des Schemas sein." - -msgid "Add and Add Another" -msgstr "Hinzufügen und weitere hinzufügen" - -msgid "Add and Close" -msgstr "Hinzufügen und schließen" - -msgid "Add and Edit" -msgstr "Hinzufügen und bearbeiten" - -msgid "Add hosts that can manage this host." -msgstr "Hosts hinzufügen die diesen Host verwalten dürfen." - -msgid "Add hosts that can manage this service." -msgstr "Hosts hinzufügen, die diesen Dienst verwalten können." - -msgid "Add members to a group." -msgstr "Mitglieder zu einer Gruppe hinzufügen." - -msgid "Add members to a hostgroup." -msgstr "Mitglieder zur Hostgruppe hinzufügen." - -msgid "Add members to a role." -msgstr "Mitglieder zur Rolle hinzufügen." - -msgid "Add members to an HBAC service group." -msgstr "Mitglieder zur einer HBAC-Dienstgruppe hinzufügen." - -msgid "Add privileges to a role." -msgstr "Berechtigungen zur Rolle hinzufügen." - -msgid "Add services to an HBAC rule." -msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." - -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "Ziel-Hosts und Hostgruppen zu einer HBAC-Regel hinzufügen." - -msgid "Add the host to DNS with this IP address" -msgstr "Host mit dieser IP zum DNS hinzufügen" - -msgid "Add users and groups to an HBAC rule." -msgstr "Benutzer und Gruppen zu einer HBAC-Regel hinzufügen." - -msgid "Add users that can manage this token." -msgstr "Nutzer hinzufügen die diesen Token verwalten können" - -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "CA ACL \"%(value)s\" hinzugefügt" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "HBAC-Regel \"%(value)s\" hinzugefügt" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "HBAC Dienst \"%(value)s\" hinzugefügt" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "HBAC-Dienstgruppe »%(value)s« hinzugefügt" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "OTP token \"%(value)s\" hinzugefügt" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "Auto-Mitgliedschaftsregel \"%(value)s\" hinzugefügt" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "Automount Ort \"%(value)s\" hinzugefügt" - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "Bedingung(en) zu \"%(value)s\" hinzugefügt" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "Gruppe »%(value)s« hinzugefügt" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "Host \"%(value)s\" hinzugefügt" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "Hostgruppe \"%(value)s\" hinzugefügt" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "Rolle \"%(value)s\" hinzugefügt" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "Dienst »%(value)s« hinzugefügt" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "Vorbereiteten Benutzer »%(value)s« hinzugefügt" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "Benutzer »%(value)s« hinzugefügt" - -msgid "Additional instructions:" -msgstr "Zusätzliche Anweisungen:" - -msgid "Administrative account" -msgstr "Administratives Konto" - -msgid "Administrator e-mail address" -msgstr "E-Mail-Adresse des Administrators" - -msgid "Algorithm" -msgstr "Algorithmus" - -msgid "All commands should at least have a result" -msgstr "Alle Befehle sollten mindestens ein Ergebnis haben." - -msgid "Allow" -msgstr "Erlauben" - -msgid "Allow dynamic updates." -msgstr "Dynamische Aktualisierungen erlauben." - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" -"Benutzern, Gruppen, Hosts und Hostgruppen erlauben die Schlüsseltabelle zu " -"erstellen." - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this host." -msgstr "" -"Benutzern, Gruppen, Hosts und Hostgruppen erlauben die Schlüsseltabelle zu " -"erhalten." - -msgid "Already registered" -msgstr "Bereits registriert" - -msgid "Altitude" -msgstr "Höhe" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "Ein IPA Masterhost kann nicht deaktiviert oder gelöscht werden" - -#, python-brace-format -msgid "An error has occurred (${error})" -msgstr "Ein Fehler ist aufgetreten (${error})" - -msgid "Any Command" -msgstr "Jeder Befehl" - -msgid "Any Group" -msgstr "Jede Gruppe" - -msgid "Any Host" -msgstr "Jeder Host" - -msgid "Any Service" -msgstr "Jeder Dienst" - -msgid "Anyone" -msgstr "Jeder" - -msgid "Apply" -msgstr "Anwenden" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" -"Sind sie sicher, dass sie den Nutzer ${action} möchten?
Die Änderung " -"wird sofort aktiv." - -msgid "Are you sure you want to activate selected users?" -msgstr "SInd Sie sicher, dass Sie die ausgewählten Benutzer aktivieren wollen?" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "SInd Sie sicher, dass Sie ${object} löschen wollen?" - -msgid "Are you sure you want to delete selected entries?" -msgstr "Sind Sie sicher, dass Sie die ausgewählten Einträge löschen wollen?" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "SInd Sie sicher, dass Sie ${object} deaktivieren wollen?" - -msgid "Are you sure you want to disable selected entries?" -msgstr "" -"Sind Sie sicher, dass Sie die ausgewählten Einträge deaktivieren wollen?" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "SInd Sie sicher, dass Sie ${object} aktivieren wollen?" - -msgid "Are you sure you want to enable selected entries?" -msgstr "Sind Sie sicher, dass Sie die ausgewählten Einträge aktivieren wollen?" - -msgid "Are you sure you want to proceed with the action?" -msgstr "Sind Sie sicher, dass Sie mit dieser Aktion fortfahren wollen?" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "" -"Sind Sie sicher, dass sie die Auto-Mitgliedschaft neu erstellen wollen?" - -msgid "Are you sure you want to restore selected users?" -msgstr "" -"SInd Sie sicher, dass Sie die ausgewählten Benutzer wiederherstellen wollen?" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "SInd Sie sicher, dass Sie den Benutzer ${object} entsperren möchten?" - -msgid "As Whom" -msgstr "Als Wer" - -msgid "Assigned manager of the token (default: self)" -msgstr "Zugewiesener Token-Verwalter (Standard: selbst)" - -msgid "Assigned user of the token (default: self)" -msgstr "Zugewiesener Token-Benutzer (Standard: selbst)" - -msgid "Attribute" -msgstr "Attribut" - -msgid "Attribute Key" -msgstr "Attribut Schlüssel" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" -"Dieses Attribut wird per Regex gefiltert. Zum Beispiel FQDN für einen Host, " -"oder Manager für einen Benutzer" - -msgid "Attributes" -msgstr "Attribute" - -msgid "Attributes to which the permission applies" -msgstr "Attribute auf die die Berechtigung angewendet wird" - -msgid "Audit" -msgstr "Audit" - -msgid "Authentication" -msgstr "Authentifizierung" - -msgid "Auto Membership Rule" -msgstr "Regel für Auto-Mitgliedschaft" - -msgid "Auto Membership is not configured" -msgstr "Auto-Mitgliedschaft ist nicht konfiguriert" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "Auto-Mitgliedschaftsregel: %s nicht gefunden!" - -msgid "Automember" -msgstr "Auto-Mitgliedschaft" - -msgid "Automember Rule" -msgstr "Auto-Mitgliedschaftsregel" - -msgid "Automember rebuild membership task completed" -msgstr "Aufgabe für die Neuerstellung der Auto-Mitgliedschaft abgeschlossen" - -msgid "Automember rebuild membership task started" -msgstr "Aufgabe für die Neuerstellung der Auto-Mitgliedschaft gestartet" - -msgid "Automount" -msgstr "Automount" - -msgid "Automount Location" -msgstr "Automount-Ort" - -msgid "Automount Locations" -msgstr "Automount-Orte" - -msgid "Automount Map" -msgstr "Automount-Map" - -msgid "Automount Maps" -msgstr "Automount-Maps" - -msgid "Automount location name." -msgstr "Automount-Ort" - -msgid "Automount map name." -msgstr "Automount-Map Name." - -msgid "Automount master file." -msgstr "Automount-Masterdatei" - -msgid "Available" -msgstr "Verfügbar" - -msgid "Back" -msgstr "Zurück" - -msgid "Back to Top" -msgstr "Zurück nach oben" - -msgid "Bad format in credentials cache" -msgstr "Falsches Format im Anmeldedaten-Zwischenspeicher" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "Falscher Suchfilter %(info)s" - -msgid "Base-64 encoded server certificate" -msgstr "Base-64-kodiertes Serverzertifikat" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "Base64-Dekodierung fehlgeschlagen: %(reason)s" - -msgid "Bind DN" -msgstr "Bind-DN" - -msgid "CA ACL" -msgstr "CA ACL" - -msgid "CA ACLs" -msgstr "CA ACLs" - -msgid "CA is not configured" -msgstr "CA ist nicht konfiguriert" - -msgid "CSR" -msgstr "CSR" - -msgid "Cancel" -msgstr "Abbrechen" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" -"Kann den ausgewählten Befehl nicht ohne eine konfigurierte Samba 4 Instanz " -"auf dieser Maschine ausführen. Stellen Sie sicher, dass ipa-adtrust-install " -"auf dieser Maschine ausgeführt wurde." - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" -"Kann den ausgewählten Befehl nicht ohne Samba 4 Unterstützung ausführen. " -"Stellen Sie sicher, dass das server-trust-ad Paket von IPA installiert ist." - -msgid "Cannot resolve KDC for requested realm" -msgstr "KDC für angeforderten Realm konnte nicht aufgelöst werden." - -msgid "Car License" -msgstr "Kfz-Kennzeichen" - -msgid "Certificate" -msgstr "Zertifikat" - -msgid "Certificate Profile to use" -msgstr "Benutze Zertifikatsprofil" - -msgid "Certificate Type" -msgstr "Zertifikattyp" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "Formatfehler im Zertifikat: %(error)s" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "Zertifikat-Operation kann nicht abgeschlossen werden: %(error)s" - -msgid "Certificate/CRL" -msgstr "Zertifikat/CRL" - -msgid "Certificates" -msgstr "Zertifikate" - -msgid "Change current Domain Level." -msgstr "Aktuelles Domain Level ändern." - -msgid "Change password" -msgstr "Passwort ändern" - -msgid "Change to POSIX group" -msgstr "In POSIX-Gruppe umwandeln" - -msgid "Change to external group" -msgstr "In externe Gruppe umwandeln" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "Passwort für \"%(value)s\" geändert" - -msgid "Character classes" -msgstr "Zeichenklassen" - -msgid "Check the status of a certificate signing request." -msgstr "Den Status der Signaturanfrage des Zertifikats überprüfen." - -msgid "City" -msgstr "Ort" - -msgid "Class" -msgstr "Klasse" - -#, python-brace-format -msgid "Click to ${action}" -msgstr "Klicken um zu ${action}" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "Client ist nicht konfiguriert. Rufen Sie ipa-client-install auf." - -msgid "Client version. Used to determine if server will accept request." -msgstr "" -"Client-Version. Dadurch wird bestimmt, ob der Server die Anfrage akzeptiert." - -msgid "Clock interval" -msgstr "Zeitintervall" - -msgid "Clock offset" -msgstr "Zeit-Offset" - -msgid "Close" -msgstr "Schließen" - -msgid "Collapse All" -msgstr "Alle einklappen" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "Befehl '%(name)s' ist veraltet" - -msgid "Command category" -msgstr "Befehlskategorie" - -msgid "Command category the rule applies to" -msgstr "Befehlskategorie, auf die die Regel angewendet werden soll" - -msgid "Command name" -msgstr "Befehlsname" - -msgid "Command not implemented" -msgstr "Befehl nicht implementiert" - -msgid "Commands" -msgstr "Befehle" - -msgid "Conditions that could not be added" -msgstr "Bedingungen, die nicht hinzugefügt werden konnten" - -msgid "Conditions that could not be removed" -msgstr "Bedingungen, die nicht entfernt werden konnten" - -msgid "Configuration" -msgstr "Konfiguration" - -msgid "Configure your token" -msgstr "Token konfigurieren" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" -"Konfigurieren Sie ihren Token indem sie den QR Code unten scannen. Klicken " -"Sie auf den QR Code wenn Sie dies auf dem Gerät sehen welches Sie " -"konfigurieren möchten." - -msgid "Configured administrative server limit exceeded" -msgstr "Vorgegebene administrative Serverbeschränkung überschritten" - -msgid "Configured size limit exceeded" -msgstr "Vorgegebene Größenbeschränkung überschritten" - -msgid "Configured time limit exceeded" -msgstr "Vorgegebenes Zeitlimit überschritten" - -msgid "Confirmation" -msgstr "Bestätigung" - -msgid "Consecutive failures before lockout" -msgstr "Aufeinanderfolgende Falscheingaben bevor gesperrt wird" - -msgid "Contact Settings" -msgstr "Kontakteinstellungen" - -msgid "Continuous mode: Don't stop on errors." -msgstr "Fortlaufender Modus: Kein Abbruch bei Fehlern." - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "%(name)s konnte nicht interaktiv ermittelt werden" - -msgid "Counter" -msgstr "Zähler" - -msgid "Counter-based (HOTP)" -msgstr "Zählerbasiert (HOTP)" - -msgid "Create Stage user in from a delete user" -msgstr "Erstelle vorbereiteten Benutzer aus einem gelöschten Benutzer" - -msgid "Create a new CA ACL." -msgstr "Erstelle eine neue CA ACL." - -msgid "Create a new HBAC rule." -msgstr "Neue HBAC-Regel erstellen." - -msgid "Create a new automount location." -msgstr "Neuen Automount-Ort erstellen." - -msgid "Create a new group." -msgstr "Eine neue Gruppe erstellen." - -msgid "Create as a non-POSIX group" -msgstr "Als Nicht-POSIX-Gruppe erstellen" - -msgid "Create new Sudo Command." -msgstr "Neuen Sudo-Befehl erzeugen." - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "ACI erstellt \"%(value)s\"" - -msgid "Credentials cache permissions incorrect" -msgstr "Zugriffsrechte des Anmeldedaten-Zwischenspeichers sind inkorrekt." - -msgid "Current DNS record contents:\n" -msgstr "Derzeitiger Inhalt des DNS-Datensatzes:\n" - -msgid "Current Password" -msgstr "Aktuelles Passwort" - -msgid "Current domain level:" -msgstr "Aktuelles Domain Level:" - -msgid "Current password is required" -msgstr "Aktuelles Passwort ist erforderlich" - -msgid "DN of the started task" -msgstr "DN der gestarteten Aufgabe" - -msgid "DNS" -msgstr "DNS" - -msgid "DNS Zone" -msgstr "DNS-Zone" - -msgid "DNS Zones" -msgstr "DNS-Zonen" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "DNS Check fehlerhaft: Erwartet {%(expected)s} bekommen {%(got)s}" - -msgid "DNS class" -msgstr "DNS-Klasse" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" -"Die DNS-Forwarder Semantiken haben sich seit IPA 4.0 geändert.\n" -"Nutzen Sie stattdessen Forward Zones (dnsforwardzone-*).\n" -"Für weitere Details schlagen Sie bitte in der Dokumentation nach." - -msgid "DNS is not configured" -msgstr "DNS ist nicht konfiguriert" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" -"DNS Record(s) von Host %(host)s konnten nicht entfernt werden. (%(reason)s)" - -msgid "DNS records can be only updated one at a time" -msgstr "Es können nicht mehrere DNS-Datensätze aktualisiert werden." - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"DNS Server %(server)s unterstützt kein DNSSEC: %(error)s.\n" -"Wenn DNSSEC-Überprüfung auf den IPA Servern aktiviert ist bitte deaktivieren." - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"Der DNS server %(server)s unterstützt EDNS0 (RFC 6891) nicht: %(error)s.\n" -"Falls DNSSEC auf IPA Server(n) aktiviert ist, deaktivieren Sie diese." - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "DNS Server %(server)s: %(error)s." - -msgid "DNS zone" -msgstr "DNS-Zone" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "DNS Zone %(zone)s nicht gefunden" - -msgid "DNS zones" -msgstr "DNS-Zonen" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" -"DNSSEC Unterstützung ist experimentell.\n" -"%(additional_info)s" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" -"DNSSEC Überprüfung fehlgeschlagen: %(error)s.\n" -"Bitte überprüfen Sie die DNSSEC Konfigurationen oder deaktivieren die DNSSEC " -"Überprüfung auf allen IPA Servern." - -msgid "Data" -msgstr "Daten" - -msgid "Debugging output" -msgstr "Debugging-Ausgabe" - -msgid "Default (fallback) Group" -msgstr "Standard (Rückfall) Gruppe" - -msgid "Default PAC types" -msgstr "Standard PAC-Typen" - -msgid "Default SELinux user" -msgstr "Vorgegebener SELinux-Benutzer" - -msgid "Default SELinux user when no match is found in SELinux map rule" -msgstr "" -"Vorgegebener SELinux-Benutzer, sofern in den Zuweisungsregeln von SELinux " -"nichts anderes bestimmt ist" - -msgid "Default group for entries to land" -msgstr "Vorgegebene Gruppe für Einträge" - -msgid "Default group for new users" -msgstr "Vorgegebene Gruppe für neue Benutzer" - -msgid "Default group objectclasses" -msgstr "Standard objectclass für Gruppen" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "Standard objectclass für Gruppen (komma-separierte Liste)" - -msgid "Default host group" -msgstr "Standard Hostgruppe" - -msgid "Default location of home directories" -msgstr "Vorgegebener Ort für Home-Verzeichnisse" - -msgid "Default shell" -msgstr "Vorgabe-Shell" - -msgid "Default shell for new users" -msgstr "Vorgegebene Shell für neue Benutzer" - -msgid "Default user authentication types" -msgstr "Standard Authentifizierungsmethoden" - -msgid "Default user group" -msgstr "Standard Benutzergruppe" - -msgid "Default user objectclasses" -msgstr "Standard objectclass für Benutzer" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "Standard objectclass für Benutzer (komma-separierte Liste)" - -msgid "Default users group" -msgstr "Vorgegebene Gruppe des Benutzers" - -msgid "Delegation" -msgstr "Delegation" - -msgid "Delegation name" -msgstr "Delegationsname" - -msgid "Delegations" -msgstr "Delegationen" - -msgid "Delete" -msgstr "Löschen" - -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "Wert von %(name)s auf »%(value)s« löschen?" - -msgid "Delete Sudo Command." -msgstr "Sudo-Befehl löschen." - -msgid "Delete a CA ACL." -msgstr "CA ACL löschen." - -msgid "Delete a group password policy." -msgstr "Gruppen-Passwortregel löschen." - -msgid "Delete a host." -msgstr "Host löschen." - -msgid "Delete a hostgroup." -msgstr "Hostgruppe löschen." - -msgid "Delete a role." -msgstr "Rolle löschen." - -msgid "Delete a stage user." -msgstr "Einen vorbereiteten Benutzer löschen." - -msgid "Delete a user" -msgstr "Einen Benutzer löschen" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "Einen Benutzer löschen, Eintrag für zukünfigte Verwendung aufbewahren" - -msgid "Delete a user." -msgstr "Einen Benutzer löschen." - -msgid "Delete all associated records" -msgstr "Alle zugehörigen Datensätze löschen" - -msgid "Delete all?" -msgstr "Alles löschen?" - -msgid "Delete an HBAC rule." -msgstr "HBAC-Regel löschen" - -msgid "Delete an HBAC service group." -msgstr "HBAC-Dienstgruppe löschen" - -msgid "Delete an IPA service." -msgstr "Einen IPA-Dienst entfernen." - -msgid "Delete an OTP token." -msgstr "OTP Token löschen" - -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" -"Ein Attribut-Wert-Paar löschen. Diese Option wird zuletzt angewendet,\n" -"nach allen Optionen, die etwas festlegen oder hinzufügen." - -msgid "Delete an automount location." -msgstr "Automount-Ort löschen." - -msgid "Delete an existing HBAC service." -msgstr "Einen existierenden HBAC Dienst löschen." - -msgid "Delete group." -msgstr "Gruppe löschen." - -msgid "Delete mode" -msgstr "Lösch-Modus" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "ACI gelöscht \"%(value)s\"" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "CA ACL \"%(value)s\" gelöscht" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "HBAC-Regel \"%(value)s\" gelöscht" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "HBAC Dienst \"%(value)s\" gelöscht" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "HBAC-Dienstgruppe »%(value)s« gelöscht" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "OTP token \"%(value)s\" gelöscht" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "Auto-Mitgliedschaftsregel \"%(value)s\" gelöscht" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "Automount-Ort \"%(value)s\" gelöscht" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "Gruppe »%(value)s« gelöscht" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "Host \"%(value)s\" gelöscht" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "Hostgruppe \"%(value)s\" gelöscht" - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "Datensatz »%(value)s« gelöscht" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "Rolle \"%(value)s\" gelöscht" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "Dienst »%(value)s« gelöscht" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "Vorbereiteten Benutzer \"%(value)s\" gelöscht" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "Benutzer »%(value)s« gelöscht" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" -"Das Löschen einer verwalteten Gruppe ist unzulässig. Sie muss zuerst aus der " -"Verwaltung entfernt werden." - -msgid "Deny" -msgstr "Verweigern" - -msgid "Department Number" -msgstr "Abteilungsnummer" - -msgid "Deprecated options" -msgstr "Veraltete Optionen" - -msgid "Description" -msgstr "Beschreibung" - -msgid "Digest" -msgstr "Prüfsumme" - -msgid "Digest Type" -msgstr "Prüfsummentyp" - -msgid "Digits" -msgstr "Zeichen" - -msgid "Direct" -msgstr "Direkt" - -msgid "Direct Membership" -msgstr "Direkte Migliedschaft" - -msgid "Disable" -msgstr "Deaktivieren" - -msgid "Disable a Sudo Rule." -msgstr "Eine Sudo-Regel deaktivieren." - -msgid "Disable a user account." -msgstr "Ein Benutzerkonto deaktivieren." - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "" -"Den Kerberos-Schlüssel und das SSL-Zertifikat eines Dienstes deaktivieren." - -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "" -"Kerberos-Schlüssel, SSL-Zertifikat und alle Dienste des Hosts deaktivieren." - -msgid "Disable token" -msgstr "Token deaktivieren" - -msgid "Disabled" -msgstr "Deaktiviert" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "HBAC-Regel \"%(value)s\" deaktiviert" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "Sudo-Regel »%s« wurde deaktiviert." - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "Deaktivierte Domäne '%(domain)s' ist nicht zulässig" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "Host \"%(value)s\" deaktiviert" - -#, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "Dienst »%(value)s« deaktiviert" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "Benutzerkonto »%(value)s« wurde deaktiviert" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" -"Benutzern, Gruppen, Hosts und Hostgruppen verbieten die Schlüsseltabelle zu " -"erstellen." - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "" -"Benutzern, Gruppen, Hosts und Hostgruppen verbieten die Schlüsseltabelle zu " -"erhalten." - -msgid "Display DNS resource." -msgstr "DNS-Ressource anzeigen." - -msgid "Display Sudo Command." -msgstr "Sudo-Befehl anzeigen." - -msgid "Display Sudo Rule." -msgstr "Sudo-Regel anzeigen." - -msgid "Display an automount location." -msgstr "Automount-Ort anzeigen." - -msgid "Display effective policy for a specific user" -msgstr "Aktive Passwortregel für einen bestimmten Benutzer anzeigen" - -msgid "Display information about a host." -msgstr "Informationen über Host anzeigen." - -msgid "Display information about a hostgroup." -msgstr "Informationen über die Hostgruppe anzeigen." - -msgid "Display information about a named group." -msgstr "Informationen zu einer genannten Gruppe anzeigen." - -msgid "Display information about a role." -msgstr "Informationen über eine Rolle anzeigen." - -msgid "Display information about a stage user." -msgstr "Informationen zu einem vorbereiteten Benutzer anzeigen." - -msgid "Display information about a user." -msgstr "Informationen zu einem Benutzer anzeigen." - -msgid "Display information about an HBAC service group." -msgstr "Informationen über eine HBAC-Dienstgruppe anzeigen" - -msgid "Display information about an HBAC service." -msgstr "Informationen zu einem HBAC-Dienst anzeigen." - -msgid "Display information about an IPA service." -msgstr "Informationen zu einem IPA-Dienst anzeigen." - -msgid "Display information about an OTP token." -msgstr "Informationen über OTP Token anzeigen." - -msgid "Display information about password policy." -msgstr "Informationen über Passwortregel anzeigen." - -msgid "Display name" -msgstr "Angezeigter Name" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" -"Zugriffsrechte dieses Eintrags anzeigen (erfordert --all). In der " -"Handbuchseite zu ipa finden Sie weitere Details." - -msgid "Display the properties of an HBAC rule." -msgstr "Einstellungen der HBAC-Regel anzeigen." - -msgid "Display user record for current Kerberos principal" -msgstr "Benutzer-Datensatz für den aktuellen Kerberos-Principal anzeigen" - -msgid "Do not display QR code" -msgstr "Keinen QR Code zeigen" - -msgid "Domain" -msgstr "Domain" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" -"Die Domäne '%(domain)s' ist keine Root Domäne für den Forest '%(forest)s'" - -msgid "Domain Level" -msgstr "Domain Level" - -msgid "Domain Level cannot be lowered." -msgstr "Domain Level kann nicht gesenkt werden." - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" -"Domain Level kann nicht auf {0} erhöht werden, Server {1} unterstützt das " -"nicht." - -msgid "Domain enabled" -msgstr "Domäne aktiviert" - -msgid "Dynamic update" -msgstr "Dynamische Aktualisierung" - -msgid "Edit" -msgstr "Bearbeiten" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "${entity} bearbeiten" - -msgid "Email address" -msgstr "Email-Adresse" - -msgid "Employee Information" -msgstr "Mitarbeiterinformationen" - -msgid "Employee Number" -msgstr "Personalnummer" - -msgid "Employee Type" -msgstr "Personaltyp" - -msgid "Empty domain is not allowed" -msgstr "Eine leere Domäne ist nicht zulässig" - -msgid "Enable" -msgstr "Aktivieren" - -msgid "Enable a Sudo Rule." -msgstr "Eine Sudo-Regel aktivieren." - -msgid "Enable a user account." -msgstr "Ein Benutzerkonto aktivieren." - -msgid "Enable an HBAC rule." -msgstr "HBAC-Regel aktivieren." - -msgid "Enable migration mode" -msgstr "Migrationsmodus aktivieren" - -msgid "Enable token" -msgstr "Token aktivieren" - -msgid "Enabled" -msgstr "Aktiviert" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "HBAC-Regel \"%(value)s\" aktiviert" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "Sudo-Regel »%s« wurde aktiviert." - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "Benutzerkonto »%(value)s« wurde aktiviert" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "Geben Sie %(label)s zur Bestätigung nochmals ein: " - -msgid "Entry" -msgstr "Eintrag" - -msgid "Error" -msgstr "Fehler" - -msgid "Error changing account status" -msgstr "Fehler beim Ändern des Kontostatus" - -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "Fehler beim Holen der initialen Anmeldedaten: %s.\n" - -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "" -"Fehler beim Speichern der Anmeldedaten im Anmeldedaten-Zwischenspeicher: " -"%s.\n" - -msgid "Exceeded number of tries to forward a request." -msgstr "Anzahl der Versuche zur Weiterleitung der Anfrage überschritten" - -msgid "Exclusive" -msgstr "Exklusiv" - -msgid "Exclusive Regex" -msgstr "Ausschließende Regex" - -msgid "Expand All" -msgstr "Alle aufklappen" - -msgid "Expires On" -msgstr "Läuft ab am" - -msgid "Expression" -msgstr "Ausdruck" - -msgid "External" -msgstr "Extern" - -msgid "External User" -msgstr "Externer Benutzer" - -msgid "External host" -msgstr "Externer Host" - -msgid "External member" -msgstr "Externes Mitglied" - -msgid "External trust" -msgstr "Externe Vertrauensstellung" - -msgid "Extra hashes to generate in password plug-in" -msgstr "Im Passwort-Plugin zusätzlich zu erzeugende Prüfsummen" - -msgid "Failed RunAs" -msgstr "RunAs fehlgeschlagen" - -msgid "Failed RunAsGroup" -msgstr "RunAsGroup fehlgeschlagen" - -msgid "Failed hosts/hostgroups" -msgstr "Fehler bei Hosts/Hostgruppen" - -msgid "Failed logins" -msgstr "Fehlgeschlagene Logins" - -msgid "Failed members" -msgstr "Fehler bei Mitgliedern" - -msgid "Failed service/service groups" -msgstr "Fehler bei Diensten/Dienstgruppen" - -msgid "Failed to add" -msgstr "Hinzufügen fehlgeschlagen" - -msgid "Failed to create key!\n" -msgstr "Schlüssel konnte nicht erzeugt werden!\n" - -msgid "Failed to create random key!\n" -msgstr "Zufallsschlüssel konnte nicht erzeugt werden!\n" - -msgid "Failed to remove" -msgstr "Entfernen fehlgeschlagen" - -msgid "Failed users/groups" -msgstr "Fehlerhafte Benutzer/Gruppen" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "Fehler beim Dekodieren der Signaturanfrage für das Zertifikat: %s" - -msgid "Failure reset interval" -msgstr "Fehler Resetintervall" - -msgid "False" -msgstr "Falsch" - -msgid "Fax Number" -msgstr "Faxnummer" - -#, python-format -msgid "File %(file)s not found" -msgstr "Datei %(file)s nicht gefunden" - -msgid "File to store the certificate in." -msgstr "Datei, in der das Zertifikat gespeichert werden soll." - -msgid "Filter" -msgstr "Filter" - -msgid "Find" -msgstr "Suchen" - -msgid "Fingerprint" -msgstr "Fingerabdruck" - -msgid "Fingerprint (SHA1)" -msgstr "Fingerabdruck (SHA1)" - -msgid "Fingerprint Type" -msgstr "Fingerabdruck-Typ" - -msgid "First" -msgstr "Erste" - -msgid "First Code" -msgstr "Erster Code" - -msgid "First OTP" -msgstr "Erstes OTP" - -msgid "First date/time the token can be used" -msgstr "Ab diesem Datum kann der Token benutzt werden" - -msgid "First name" -msgstr "Vorname" - -msgid "Flags" -msgstr "Flags" - -msgid "Force Update" -msgstr "Update erzwingen" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" -"Der Forest '%(forest)s' besitzt bereits eine Vertrauensstellung zu Forest(s) " -"%(domains)s und kann daher keine Vertrauensstellung zu '%(conflict)s' " -"aufbauen" - -msgid "Forward to server instead of running locally" -msgstr "Zum Server weiterleiten, anstatt lokal auszuführen" - -#, python-format -msgid "Found '%(value)s'" -msgstr "»%(value)s« gefunden" - -msgid "Full name" -msgstr "Vollständiger Name" - -msgid "GECOS" -msgstr "GECOS" - -msgid "GID" -msgstr "Gruppen-ID" - -msgid "GID (use this option to set it manually)" -msgstr "Gruppen-ID (verwenden Sie diese Option, um die ID manuell anzugeben)" - -msgid "General" -msgstr "Allgemein" - -msgid "Generate a random user password" -msgstr "Ein zufälliges Benutzerpasswort erzeugen" - -msgid "Get" -msgstr "Abrufen" - -msgid "Granting privilege to roles" -msgstr "Gebe Berechtigung den Rollen" - -msgid "Group" -msgstr "Gruppe" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "Gruppe »%s« existiert nicht" - -msgid "Group ID Number" -msgstr "Gruppen-ID" - -msgid "Group Options" -msgstr "Gruppenoptionen" - -msgid "Group Settings" -msgstr "Gruppeneinstellungen" - -msgid "Group Type" -msgstr "Gruppentyp" - -msgid "Group description" -msgstr "Gruppenbeschreibung" - -msgid "Group name" -msgstr "Gruppenname" - -msgid "Group to override" -msgstr "Gruppe zum Überschreiben" - -msgid "Grouping Type" -msgstr "Gruppierungstyp" - -msgid "Grouping to which the rule applies" -msgstr "Gruppierung, auf die die Regel angewendet wird" - -msgid "Groups" -msgstr "Gruppen" - -msgid "Groups allowed to create keytab" -msgstr "Gruppen die Schlüsseltabelle erstellen dürfen" - -msgid "Groups allowed to retrieve keytab" -msgstr "Gruppen die Schlüsseltabelle abrufen dürfen" - -msgid "HBAC Rule" -msgstr "HBAC-Regel" - -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "HBAC Regel die Benutzer, Gruppen und Hostgruppen definiert" - -msgid "HBAC Rules" -msgstr "HBAC-Regeln" - -msgid "HBAC Service" -msgstr "HBAC-Dienst" - -msgid "HBAC Service Group" -msgstr "HBAC-Dienstgruppe" - -msgid "HBAC Service Groups" -msgstr "HBAC-Dienstgruppen" - -msgid "HBAC Services" -msgstr "HBAC-Dienste" - -msgid "HBAC Test" -msgstr "HBAC Test" - -msgid "HBAC rule" -msgstr "HBAC-Regel" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "HBAC-Regel %(rule)s nicht gefunden" - -msgid "HBAC rules" -msgstr "HBAC-Regeln" - -msgid "HBAC service" -msgstr "HBAC-Dienst" - -msgid "HBAC service description" -msgstr "Beschreibung des HBAC-Dienstes" - -msgid "HBAC service group" -msgstr "HBAC-Dienstgruppe" - -msgid "HBAC service group description" -msgstr "Beschreibung der HBAC-Dienstgruppe" - -msgid "HBAC service groups" -msgstr "HBAC-Dienstgruppen" - -msgid "HBAC services" -msgstr "HBAC-Dienste" - -msgid "HOTP Authentication Window" -msgstr "HOTP Authentifizierungsfenster" - -msgid "HOTP Synchronization Window" -msgstr "HOTP Sychnronisierungsfenster" - -msgid "HTTP Error" -msgstr "HTTP-Fehler" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "Hardwareplattform des Hosts (z.B. Lenovo T400)" - -msgid "Hide details" -msgstr "Details verbergen" - -msgid "History size" -msgstr "Historie" - -msgid "Home directory" -msgstr "Home-Verzeichnis" - -msgid "Home directory base" -msgstr "Basis für Home-Verzeichnisse" - -msgid "Horizontal Precision" -msgstr "Horizontale Genauigkeit" - -msgid "Host" -msgstr "Host" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "Host »%(host)s« nicht gefunden" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "Der Host '%(hostname)s' besitzt keinen zugehörigen DNS A/AAAA Record" - -msgid "Host Certificate" -msgstr "Host-Zertifikat" - -msgid "Host Group" -msgstr "Hostgruppe" - -msgid "Host Group Settings" -msgstr "Hostgruppen-Einstellungen" - -msgid "Host Groups" -msgstr "Host-Gruppen" - -msgid "Host Groups allowed to create keytab" -msgstr "Hostgruppen die Schlüsseltabelle erstellen dürfen" - -msgid "Host Groups allowed to retrieve keytab" -msgstr "Hostgruppen die Schlüsseltabelle abrufen dürfen" - -msgid "Host Name" -msgstr "Host-Name" - -msgid "Host Settings" -msgstr "Host Einstellungen" - -msgid "Host category" -msgstr "Host-Kategorie" - -msgid "Host category the ACL applies to" -msgstr "Hostkategorie auf die ACL angewendet wird" - -msgid "Host category the rule applies to" -msgstr "Host-Kategorie, auf welche die Regel angewendet werden soll" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "Hardwareplattform (z.B. \"Lenovo T61\")" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "Ort des Hosts (z.B. \"Baltimore, MD\")" - -msgid "Host name" -msgstr "Hostname" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "Betriebssystem und Version (z.B. \"Fedora 9\")" - -msgid "Host-group" -msgstr "Hostgruppen" - -msgid "Hostname" -msgstr "Hostname" - -msgid "Hostname of this server" -msgstr "Hostname dieses Servers" - -msgid "Hosts" -msgstr "Hosts" - -msgid "Hosts allowed to create keytab" -msgstr "Hosts die Schlüsseltabelle erstellen dürfen" - -msgid "Hosts allowed to retrieve keytab" -msgstr "Hosts die Schlüsseltabelle abrufen dürfen" - -msgid "IP Address" -msgstr "IP-Adresse" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "IP-Adresse %(ip)s ist bereits Domain %(domain)s zugewiesen." - -msgid "IPA Error" -msgstr "IPA-Fehler" - -msgid "IPA Server" -msgstr "IPA-Server" - -msgid "IPA Server to use" -msgstr "Zu verwendender IPA-Server" - -msgid "IPA Servers" -msgstr "IPA-Server" - -msgid "IPA master capable of PKINIT" -msgstr "IPA Master mit Fähigkeit für PKINIT " - -msgid "IPA master which can process PKINIT requests" -msgstr "IPA Master, der PKINIT Anfragen bearbeiten kann" - -msgid "IPA server hostname" -msgstr "IPA-Server Hostname" - -msgid "Identity" -msgstr "Identität" - -msgid "Identity Settings" -msgstr "Identitätseinstellungen" - -msgid "If the problem persists please contact the system administrator." -msgstr "" -"Bei dauerhaftem Problem wenden Sie sich bitte an den Systemadministrator." - -msgid "Include Disabled" -msgstr "Deaktivierte einschließen" - -msgid "Include Enabled" -msgstr "Aktivierte einschließen" - -msgid "Inclusive Regex" -msgstr "Einschließende Regex" - -msgid "Indirect" -msgstr "Indirekt" - -msgid "Indirect Member HBAC service" -msgstr "Indirekte Mitgli" - -msgid "Indirect Member HBAC service group" -msgstr "Indirekte Mitglieds-HBAC-Servicegruppe" - -msgid "Indirect Member groups" -msgstr "Indirekte Mitglieds-Gruppen" - -msgid "Indirect Member host-groups" -msgstr "Indirekte Mitglieds-Hostgruppen" - -msgid "Indirect Member hosts" -msgstr "Indirekte Mitglieds-Hosts" - -msgid "Indirect Member of roles" -msgstr "Indirektes Mitglied von Rollen" - -msgid "Indirect Member permissions" -msgstr "Indirekte Mitglieds-Berechtigungen" - -msgid "Indirect Member users" -msgstr "Indirekte Mitglieds-Benutzer" - -msgid "Indirect Membership" -msgstr "Indirekte Mitgliedschaft" - -msgid "Inherited from server configuration" -msgstr "Vererbt von Serverkonfiguration" - -msgid "Initial counter for the HOTP token" -msgstr "Startwert des HOTP-Zählers" - -msgid "Initials" -msgstr "Initialen" - -msgid "Input form contains invalid or missing values." -msgstr "Eingabeformular enthält ungültige oder fehlende Werte." - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "Unzureichender Zugriff: %(info)s" - -msgid "Internal Error" -msgstr "Interner Fehler" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "Ungültige JSON-RPC-Anfrage: %(error)s" - -msgid "Invalid credentials" -msgstr "Ungültige Zugangsdaten" - -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "Ungültiger Domänenname '%(domain)s': %(e)s" - -msgid "Invalid format. Should be name=value" -msgstr "Ungültiges Format. Sollte name=wert sein." - -msgid "Is zone active?" -msgstr "Ist die Zone aktiv?" - -msgid "Issue" -msgstr "Ausgeben" - -msgid "Issued By" -msgstr "Ausgegeben von" - -msgid "Issued On" -msgstr "Ausgegeben am" - -msgid "Issued To" -msgstr "Ausgegeben an" - -msgid "Issuer" -msgstr "Ausgabestelle" - -msgid "Job Title" -msgstr "Tätigkeit" - -msgid "Kerberos Key" -msgstr "Kerberos-Schlüssel" - -msgid "Kerberos Key Not Present" -msgstr "Kerberos-Schlüssel nicht vorhanden" - -msgid "Kerberos Ticket Policy" -msgstr "Kerberos-Ticket Richtlinien" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "Initialisierung des Kerberos-Kontexts fehlgschlagen\n" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Kerberos-Fehler: %(major)s/%(minor)s" - -msgid "Kerberos keys available" -msgstr "Kerberos-Schlüssel verfügbar" - -msgid "Kerberos principal" -msgstr "Kerberos-Principal" - -msgid "Kerberos principal expiration" -msgstr "Kerberos-Principal Ablauf" - -msgid "Kerberos principal name for this host" -msgstr "Kerberos-Principal für diesen Host" - -msgid "Key" -msgstr "Schlüssel" - -msgid "Keytab" -msgstr "Schlüsseltabelle" - -msgid "LDAP URI" -msgstr "LDAP-URI" - -msgid "LDAP password" -msgstr "LDAP-Passwort" - -msgid "LDAP password (if not using Kerberos)" -msgstr "LDAP-Passwort (falls Kerberos nicht verwendet wird)" - -msgid "LDAP schema" -msgstr "LDAP-Schema" - -msgid "LDAP timeout" -msgstr "LDAP Timeout" - -msgid "Last" -msgstr "Letzte" - -msgid "Last date/time the token can be used" -msgstr "Bis zu diesem Datum kann der Token benutzt werden" - -msgid "Last failed authentication" -msgstr "Letzte fehlgeschlagene Authentifizierung" - -msgid "Last name" -msgstr "Nachname" - -msgid "Last successful authentication" -msgstr "Letzte erfolgreiche Authentifizierung" - -msgid "Leading and trailing spaces are not allowed" -msgstr "Führende und angehängte Leerzeichen sind nicht erlaubt." - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "Gültiger LDAP filter (z.B. ou=Engineering)" - -msgid "Length of TOTP token code validity" -msgstr "Dauer die ein TOTP Code gültig ist " - -msgid "Level" -msgstr "Level" - -msgid "List of deletions that failed" -msgstr "Liste der fehlgeschlagenen Löschvorgänge" - -msgid "Lists of objects migrated; categorized by type." -msgstr "Liste der migrierten Objekte, nach Typ geordnet." - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "" -"Liste der Objekte, die nicht migriert werden konnten, nach Typ geordnet." - -msgid "Locality" -msgstr "Ort" - -msgid "Location" -msgstr "Ort" - -msgid "Location of the ACI" -msgstr "Ort der ACI" - -msgid "Lockout duration" -msgstr "Sperrdauer" - -msgid "Logged In As" -msgstr "Angemeldet als" - -msgid "Login shell" -msgstr "Anmeldeshell" - -msgid "MAC address" -msgstr "MAC-Adresse" - -msgid "MS-PAC" -msgstr "MS-PAC" - -msgid "Mailing Address" -msgstr "Anschrift" - -msgid "Manage password policy for specific group" -msgstr "Passwortregel für eine bestimmte Gruppe bearbeiten" - -msgid "Manager" -msgstr "Manager" - -msgid "Map" -msgstr "Karte" - -msgid "Mark the token as disabled (default: false)" -msgstr "Token als deaktiviert markieren (Standard: false)" - -msgid "Master file" -msgstr "Masterdatei" - -msgid "Matched" -msgstr "Gefunden" - -msgid "Matched rules" -msgstr "Zutreffende Regeln" - -msgid "Max failures" -msgstr "Maximale Fehler" - -msgid "Max lifetime (days)" -msgstr "Max Dauer (Tage)" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "Maximale Zeit in Sekunden für eine Suche (>0 oder -1 für unbegrenzt)" - -msgid "Maximum number of entries returned" -msgstr "Maximale Anzahl der zurückgegebenen Einträge" - -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "Maximale Anzahl an Ergebnissen für Suche (-1 ist unbegrenzt)" - -msgid "Maximum password lifetime (in days)" -msgstr "Maximale Passwortlebensdauer (in Tagen)" - -msgid "Maximum username length" -msgstr "Maximale Länge des Benutzernamens" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "Maximaler Wert ist ${value}" - -msgid "May not be empty" -msgstr "Darf nicht leer sein" - -msgid "Member HBAC service" -msgstr "Mitglieds-HBAC-Dienst" - -msgid "Member HBAC service groups" -msgstr "Mitglieds-HBAC-Servicegruppen" - -msgid "Member Host" -msgstr "Mitglieds-Host" - -msgid "Member groups" -msgstr "Mitglieds-Gruppen" - -msgid "Member host-groups" -msgstr "Mitglieds-Hostgruppen" - -msgid "Member hosts" -msgstr "Mitglieds-Hosts" - -msgid "Member of" -msgstr "Mitglied von" - -msgid "Member of a group" -msgstr "Mitglied einer Gruppe" - -msgid "Member of groups" -msgstr "Mitglied der Gruppen" - -msgid "Member of host-groups" -msgstr "Mitglied von Host-Gruppen" - -msgid "Member service groups" -msgstr "Mitglieds-Dienstgruppen" - -msgid "Member services" -msgstr "Mitglieds-Dienste" - -msgid "Member users" -msgstr "Mitglieds-Benutzer" - -msgid "Members that could not be added" -msgstr "Mitglieder, die nicht hinzugefügt werden konnten" - -msgid "Members that could not be removed" -msgstr "Mitglieder, die nicht entfernt werden konnten" - -msgid "Min length" -msgstr "Min Länge" - -msgid "Min lifetime (hours)" -msgstr "Min Dauer (Stunden)" - -msgid "Minimum length of password" -msgstr "Minimale Passwortlänge" - -msgid "Minimum number of character classes" -msgstr "Minimale Anzahl an Zeichenklassen" - -msgid "Minimum password lifetime (in hours)" -msgstr "Minimale Passwortlebensdauer (in Stunden)" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "Minimaler Wert ist ${value}" - -msgid "Misc. Information" -msgstr "Weitere Informationen" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "Fehlende oder ungültige HTTP-Referenz, %(referer)s" - -msgid "Missing values: " -msgstr "Fehlende Werte:" - -msgid "Mobile Telephone Number" -msgstr "Mobiltelefonnummer" - -msgid "Model" -msgstr "Modell" - -msgid "Modified" -msgstr "Geändert" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "ACI geändert \"%(value)s\"" - -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "CA ACL \"%(value)s\" geändert" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "HBAC-Regel \"%(value)s\" geändert" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "HBAC Dienst \"%(value)s\" geändert" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "HBAC-Dienstgruppe »%(value)s« geändert" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "OTP Token \"%(value)s\" geändert" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "Auto-Mitgliedschaftsregel \"%(value)s\" bearbeitet" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "Gruppe »%(value)s« geändert" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "Host \"%(value)s\" geändert" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "Hostgruppe \"%(value)s\" geändert" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "Rolle \"%(value)s\" geändert" - -#, python-format -msgid "Modified service \"%(value)s\"" -msgstr "Dienst »%(value)s« geändert" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "Vorbereiteten Benutzer »%(value)s« geändert" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "Benutzer »%(value)s« geändert" - -msgid "Modified: key not set" -msgstr "Geändert: Schlüssel nicht gesetzt" - -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "Wert von %(name)s auf »%(value)s« ändern?" - -msgid "Modify OTP configuration options." -msgstr "OTP Konfigurationsoptionen bearbeiten." - -msgid "Modify Sudo Command." -msgstr "Sudo-Befehl ändern." - -msgid "Modify a CA ACL." -msgstr "CA ACL ändern" - -msgid "Modify a OTP token." -msgstr "OTP Token bearbeiten" - -msgid "Modify a group password policy." -msgstr "Gruppen-Passwortregel bearbeiten." - -msgid "Modify a group." -msgstr "Eine Gruppe ändern." - -msgid "Modify a hostgroup." -msgstr "Hostgruppe ändern." - -msgid "Modify a role." -msgstr "Rolle ändern." - -msgid "Modify a stage user." -msgstr "Einen vorbereiteten Benutzer ändern." - -msgid "Modify a user." -msgstr "Einen Benutzer bearbeiten." - -msgid "Modify an HBAC rule." -msgstr "HBAC-Regel ändern" - -msgid "Modify an HBAC service group." -msgstr "HBAC-Dienstgruppe bearbeiten" - -msgid "Modify an HBAC service." -msgstr "HBAC Dienst ändern" - -msgid "Modify an existing IPA service." -msgstr "Einen existierenden IPA-Dienst bearbeiten." - -msgid "Modify configuration options." -msgstr "Konfigurationsoptionen bearbeiten." - -msgid "Modify information about a host." -msgstr "Hostinformationen ändern." - -msgid "Mount information" -msgstr "Einhänge-Informationen" - -msgid "Mount point" -msgstr "Einhängepunkt" - -msgid "Move deleted user into staged area" -msgstr "Gelöschten Benutzer in vorbereitete Benutzer verschieben" - -msgid "Must be an integer" -msgstr "Muss eine Ganzzahl sein" - -msgid "Name of command to export" -msgstr "Name des zu exportierenden Befehls" - -msgid "Name of host-group" -msgstr "Name der Hostgruppe" - -msgid "Name of method to export" -msgstr "Name des zu exportierenden Methode" - -msgid "Name of object to export" -msgstr "Name des zu exportierenden Objekts" - -msgid "Network Services" -msgstr "Netzwerkdienste" - -msgid "New ACI name" -msgstr "Neuer ACI-Name" - -msgid "New Certificate" -msgstr "Neues Zertifikat" - -msgid "New Password" -msgstr "Neues Passwort" - -msgid "New Principal Password" -msgstr "Neues Principal-Passwort" - -msgid "New Test" -msgstr "Neuer Test" - -msgid "New password is required" -msgstr "Neues Passwort wird benötigt" - -msgid "New: key not set" -msgstr "Neu: Schlüssel nicht gesetzt" - -msgid "New: key set" -msgstr "Neu: Schlüssel gesetzt" - -msgid "Next" -msgstr "Nächste" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" -"Keine DNS Server in der IPA Lokation %(location)s. Ohne DNS Servers arbeitet " -"die Lokation nicht wie erwartet." - -msgid "No Valid Certificate" -msgstr "Kein gültiges Zertifikat" - -msgid "No credentials cache found" -msgstr "Keine Anmeldeinformationen-Cache gefunden" - -msgid "No entries." -msgstr "Keine Einträge." - -msgid "No file to read" -msgstr "Keine Datei zum Lesen" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "KDC akzeptiert keine Schlüssel\n" - -msgid "No matching entries found" -msgstr "Keine passenden Einträge gefunden" - -msgid "No option to delete specific record provided." -msgstr "Keine Option zum Löschen des spezifischen Datensatzes angegeben." - -msgid "No option to modify specific record provided." -msgstr "Keine Option zum Ändern des spezifischen Datensatzes angegeben." - -msgid "No private group" -msgstr "Keine private Gruppe" - -msgid "No response" -msgstr "Keine Antwort" - -#, c-format -msgid "No values for %s" -msgstr "Keine Werte für %s" - -msgid "No wait" -msgstr "Keine Wartezeit" - -msgid "Non-existent or invalid rules" -msgstr "Nicht-existente oder ungültige Regeln" - -msgid "Not After" -msgstr "Nicht nach" - -msgid "Not Before" -msgstr "Nicht vor" - -msgid "Not a managed group" -msgstr "Keine verwaltete Gruppe" - -msgid "Not a valid IP address" -msgstr "Keine gültige IP-Adresse" - -msgid "Not a valid IPv4 address" -msgstr "Keine gültige IPv4-Adresse" - -msgid "Not a valid IPv6 address" -msgstr "Keine gültige IPv6-Adresse" - -msgid "Not allowed on non-leaf entry" -msgstr "Bei einem Nicht-Blatt-Eintrag nicht erlaubt" - -msgid "Not matched rules" -msgstr "Nicht zutreffende Regeln" - -msgid "Not registered yet" -msgstr "Noch nicht registriert" - -msgid "Number of conditions added" -msgstr "Anzahl der hinzugefügten Bedingungen" - -msgid "Number of conditions removed" -msgstr "Anzahl der entfernten Bedingungen" - -msgid "Number of days's notice of impending password expiration" -msgstr "Anzahl der Tage die vor einem Passwortablauf gewarnt wird" - -msgid "Number of digits each token code will have" -msgstr "Zeichenanzahl die jeder Token-Code haben wird" - -msgid "Number of entries returned" -msgstr "Anzahl der zurückgegebenen Einträge" - -msgid "Number of members added" -msgstr "Zahl der hinzugefügten Mitglieder" - -msgid "Number of members removed" -msgstr "Anzahl der entfernten Mitglieder" - -msgid "Number of plugins loaded" -msgstr "Anzahl der geladenen Plugins" - -msgid "Number of privileges added" -msgstr "Anzahl der hinzugefügten Berechtigungen" - -msgid "Number of privileges removed" -msgstr "Anzahl der entfernten Berechtigungen" - -msgid "OK" -msgstr "OK" - -msgid "OTP" -msgstr "OTP" - -msgid "OTP Configuration" -msgstr "OTP Konfiguration" - -msgid "OTP Token" -msgstr "OTP Token" - -msgid "OTP Token Settings" -msgstr "OTP Token Einstellungen" - -msgid "OTP Tokens" -msgstr "OTP Token" - -msgid "OTP configuration options" -msgstr "OTP-Konfigurationsoptionen" - -msgid "OTP set" -msgstr "OTP gesetzt" - -msgid "OTP token" -msgstr "OTP Token" - -msgid "OTP tokens" -msgstr "OTP Tokens" - -msgid "One Time Password" -msgstr "Einmalpasswort" - -msgid "One of group, permission or self is required" -msgstr "Eines von »group«, »permission« oder »self« wird benötigt" - -msgid "One time password commands" -msgstr "Einmalpasswort Befehle" - -msgid "Only one value is allowed" -msgstr "Nur ein Wert ist erlaubt" - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "Betriebssystem und Version des Hosts (z.B. Fedora 20)" - -msgid "Operating system" -msgstr "Betriebssystem" - -msgid "Option added" -msgstr "Optionen hinzugefügt" - -msgid "Options" -msgstr "Optionen" - -msgid "Order" -msgstr "Reihenfolge" - -msgid "Org. Unit" -msgstr "Org. Einheit" - -msgid "Organization" -msgstr "Organisation" - -msgid "Organizational Unit" -msgstr "Organisationseinheit" - -msgid "Other Record Types" -msgstr "Andere Datensatztypen" - -#, c-format -msgid "Out of Memory!\n" -msgstr "Nicht genügend Speicher!\n" - -msgid "Out of memory\n" -msgstr "Nicht genügend Speicher\n" - -#, c-format -msgid "Out of memory \n" -msgstr "Nicht genügend Speicher\n" - -#, c-format -msgid "Out of memory!" -msgstr "Nicht genügend Speicher!" - -msgid "Out of memory!?\n" -msgstr "Nicht genügend Speicher!?\n" - -msgid "Output filename" -msgstr "Name der Ausgabedatei" - -msgid "Output only on errors" -msgstr "Ausgabe nur bei Fehlern" - -msgid "Override inherited settings" -msgstr "Vererbte Einstellungen überschreiben" - -msgid "Owner" -msgstr "Eigentümer" - -msgid "PAD" -msgstr "PAD" - -msgid "PKINIT" -msgstr "PKINIT" - -msgid "POSIX" -msgstr "POSIX" - -msgid "Page" -msgstr "Seite" - -msgid "Pager Number" -msgstr "Pagernummer" - -msgid "Password" -msgstr "Passwort" - -msgid "Password Expiration Notification (days)" -msgstr "Benachrichtigung über den Passwortablauf (Tage)" - -msgid "Password Policies" -msgstr "Passwortregeln" - -msgid "Password Policy" -msgstr "Passwort-Regeln" - -msgid "Password change complete" -msgstr "Passwortänderung abgeschlossen" - -msgid "Password expiration" -msgstr "Passwortablauf" - -msgid "Password history size" -msgstr "Größe der Passworthistorie" - -msgid "Password plugin features" -msgstr "Passwort-Plugin-Funktionen" - -msgid "Password reset was not successful." -msgstr "Passwort konnte nicht zurückgesetzt werden" - -msgid "Passwords do not match" -msgstr "Passwörter stimmen nicht überein" - -msgid "Passwords do not match!" -msgstr "Passwörter stimmen nicht überein!" - -msgid "Passwords must match" -msgstr "Passwörter müssen übereinstimmen" - -msgid "Period after which failure count will be reset (seconds)" -msgstr "Nach dieser Zeit wird der Fehlerzähler zurückgesetzt" - -msgid "Period for which lockout is enforced (seconds)" -msgstr "Während dieser Zeit wird der Login gesperrt (Sekunden)" - -msgid "Permission" -msgstr "Berechtigung" - -msgid "Permission ACI grants access to" -msgstr "Berechtigungs-ACI erlaubt Zugriff auf" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "Zugriff verweigert: %(file)s" - -msgid "Permission name" -msgstr "Berechtigungsname" - -msgid "Permission value" -msgstr "Berechtigungswert" - -msgid "Permissions" -msgstr "Berechtigungen" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "Berechtigungen (read, write). Standard ist write" - -msgid "Platform" -msgstr "Plattform" - -msgid "Please try the following options:" -msgstr "Bitte versuchen Sie die folgenden Optionen:" - -msgid "Policy" -msgstr "Regeln" - -msgid "Port" -msgstr "Port" - -msgid "Positional arguments" -msgstr "Positionale Argumente" - -msgid "Preference" -msgstr "Bevorzugung" - -msgid "Preferred Language" -msgstr "Bevorzugte Sprache" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "" -"Präfix zur Unterscheidung der ACI-Typen (permission, delegation, " -"selfservice, none)" - -msgid "Preserved user" -msgstr "Aufbewahrter Benutzer" - -msgid "Preserved users" -msgstr "Aufbewahrte Benutzer" - -msgid "Prev" -msgstr "Vorherige" - -msgid "Primary key only" -msgstr "Nur primärer Schlüssel" - -msgid "Principal" -msgstr "Principal" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" -"Der Principal %(principal)s kann nicht authentifiziert werden: %(message)s" - -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "Principal für dieses Zertifikat (z.B. HTTP/test.example.com)" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "Principal ist nicht in der Form user@REALM: '%(principal)s'" - -msgid "Principal name" -msgstr "Principal-Name" - -msgid "Print debugging information" -msgstr "Ausgabe von Debug-Informationen" - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "" -"Gibt die Einträge so aus, wie sie auf dem Server gespeichert sind. Dies " -"wirkt sich nur auf das Ausgabeformat aus." - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "Die rohe XML-RPC-Ausgabe im GSSAPI-Modus anzeigen" - -msgid "Priority" -msgstr "Priorität" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "Priorität der Regel (höhere Zahl meint niedrigere Priorität)" - -msgid "Profile ID" -msgstr "Profil-ID" - -msgid "Profile category" -msgstr "Profilkategorie" - -msgid "Profile category the ACL applies to" -msgstr "Profilkategorie auf die ACL angewendet wird" - -msgid "Profiles" -msgstr "Profile" - -msgid "Prompt to set the user password" -msgstr "Zum Setzen des Passworts auffordern" - -msgid "Provisioning" -msgstr "Provisioning" - -msgid "Query current Domain Level." -msgstr "Aktuelles Domain Level abfragen." - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" -"Abfrage hat mehr Ergebnisse erzeugt als das konfigurierte Maximum. Zeige die " -"ersten ${counter} Ergebnisse." - -msgid "Quick Links" -msgstr "Schnell Links" - -msgid "Quiet mode. Only errors are displayed." -msgstr "Stiller Modus. Nur Fehler werden ausgegeben." - -msgid "RADIUS Servers" -msgstr "Radius Server" - -msgid "RADIUS proxy configuration" -msgstr "RADIUS-Proxy Konfiguration" - -msgid "RADIUS proxy username" -msgstr "RADIUS-Proxy Benutzername" - -msgid "Random password" -msgstr "Zufälliges Passwort" - -msgid "Realm name" -msgstr "Realm-Name" - -msgid "Reason" -msgstr "Grund" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "Grund für den Widerruf des Zertifikats (0-10)" - -msgid "Rebuild auto membership" -msgstr "Auto-Mitgliedschaft neu erstellen" - -msgid "Rebuild auto membership." -msgstr "Auto-Mitgliedschaft neu erstellen" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" -"Auto-Mitgliedschaft für alle Mitglieder einer Gruppierung neu erstellen" - -msgid "Rebuild membership for specified hosts" -msgstr "Auto-Mitgliedschaft für ausgewählte Hosts neu erstellen" - -msgid "Rebuild membership for specified users" -msgstr "Auto-Mitgliedschaft für ausgewählte Benutzer neu erstellen" - -msgid "Record name" -msgstr "Datensatzname" - -msgid "Record not found." -msgstr "Datensatz nicht gefunden." - -msgid "Record type" -msgstr "Datensatztyp" - -msgid "Records" -msgstr "Datensätze" - -msgid "Redirection" -msgstr "Umleitung" - -msgid "Refresh" -msgstr "Neu laden" - -msgid "Refresh the page." -msgstr "Seite neu laden." - -msgid "Regular Expression" -msgstr "Regulärer Ausdruck" - -msgid "Reload the browser." -msgstr "Browser neu laden." - -msgid "Remove a manager to the user entry" -msgstr "Manager vom Benutzer entfernen" - -msgid "Remove all principals in this realm" -msgstr "Alle Principals in diesem Realm entfernen" - -msgid "Remove entries from DNS" -msgstr "DNS Einträge löschen" - -msgid "Remove hosts that can manage this host." -msgstr "Hosts entfernen die diesen Host verwalten dürfen." - -msgid "Remove hosts that can manage this service." -msgstr "Hosts entfernen, die diesen Dienst verwalten können." - -msgid "Remove members from a group." -msgstr "Mitglieder aus einer Gruppe entfernen." - -msgid "Remove members from a hostgroup." -msgstr "Mitglieder von Hostgruppe entfernen." - -msgid "Remove members from a role." -msgstr "Mitglieder von Rolle entfernen." - -msgid "Remove members from an HBAC service group." -msgstr "Mitglieder von einer HBAC-Dienstgruppe entfernen." - -msgid "Remove privileges from a role." -msgstr "Berechtigungen von Rolle entfernen." - -msgid "Remove service and service groups from an HBAC rule." -msgstr "Dienste von einer HBAC-Gruppe entfernen." - -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "Ziel-Hosts und Hostgruppen von einer HBAC-Regel entfernen." - -msgid "Remove users and groups from an HBAC rule." -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -msgid "Remove users that can manage this token." -msgstr "Nutzer entfernen die diesen Token verwalten können" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "Bedingung(en) von \"%(value)s\" entfernt" - -#, c-format -msgid "Removing principal %s\n" -msgstr "Principal %s wird entfernt\n" - -msgid "Rename" -msgstr "Umbenennen" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "ACI umbenannt zu \"%(value)s\"" - -msgid "Replacement" -msgstr "Ersetzung" - -msgid "Replication configuration" -msgstr "Replikationseinstellungen" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "Anfrage mit Status %(status)s fehlgeschlagen: %(reason)s" - -msgid "Request id" -msgstr "Anfrage-ID" - -msgid "Request status" -msgstr "Anfragestatus" - -msgid "Reset" -msgstr "Zurücksetzen" - -msgid "Reset OTP" -msgstr "OTP zurücksetzen" - -msgid "Reset Password" -msgstr "Passwort zurücksetzen" - -msgid "Reset your password." -msgstr "Passwort zurücksetzen." - -msgid "Restore" -msgstr "Wiederherstellen" - -msgid "Result of simulation" -msgstr "Ergebnis der Simulation" - -msgid "Results are truncated, try a more specific search" -msgstr "" -"Ergebnisse wurden abgeschnitten, versuchen Sie eine spezifischere Suche." - -msgid "Retrieve an existing certificate." -msgstr "Ein existierendes Zertifikat holen." - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "" -"Ermittelt alle Attribute des Servers und gibt diese aus. Dies wirkt sich auf " -"die Befehlsausgabe aus." - -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "Abruf der Zertifikatkette fehlgeschlagen: %s" - -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "Abfrage des CA-Status fehlgeschlagen: %s" - -msgid "Retry" -msgstr "Erneut versuchen" - -msgid "Return to the main page and retry the operation" -msgstr "Zur Hauptseite zurückkehren und Vorgang wiederholen" - -msgid "Revert" -msgstr "Rückgängig" - -msgid "Revocation reason" -msgstr "Grund des Widerrufs" - -msgid "Revoke" -msgstr "Widerrufen" - -msgid "Revoke a certificate." -msgstr "Ein Zertifikat widerrufen." - -msgid "Revoked" -msgstr "Widerrufen" - -msgid "Rights" -msgstr "Rechte" - -msgid "Role" -msgstr "Rolle" - -msgid "Role name" -msgstr "Rollenname" - -msgid "Roles" -msgstr "Rollen" - -msgid "Rule name" -msgstr "Regelname" - -msgid "Rule status" -msgstr "Regelstatus" - -msgid "Rule type" -msgstr "Regeltyp" - -msgid "Rule type (allow)" -msgstr "Regeltyp (erlauben)" - -msgid "Rules" -msgstr "Regeln" - -msgid "Run Commands" -msgstr "Befehle ausführen" - -msgid "Run Test" -msgstr "Test Starten" - -msgid "SELinux Options" -msgstr "SELinux-Optionen" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "SELinux Benutzer '%(user)s' ist ungültig: %(error)s" - -msgid "SHA1 Fingerprint" -msgstr "SHA1-Fingerabdruck" - -msgid "SID" -msgstr "SID" - -msgid "SSH public key" -msgstr "Öffentlicher SSH Schlüssel" - -msgid "SSH public key fingerprint" -msgstr "Fingerabdruck des öffentlichen SSH-Schlüssels" - -msgid "SSH public key:" -msgstr "Öffentliche SSH Schlüssel" - -msgid "SSH public keys" -msgstr "Öffentlicher SSH Schlüssel" - -#, python-format -msgid "Same as --%s" -msgstr "Das gleiche wie --%s" - -msgid "Save" -msgstr "Speichern" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "Schema ist aktuell (FP '%(fingerprint)s', TTL %(ttl)s s)" - -msgid "Search" -msgstr "Suchen" - -msgid "Search Options" -msgstr "Suchoptionen" - -msgid "Search for DNS resources." -msgstr "Nach DNS-Ressourcen suchen." - -msgid "Search for HBAC rules." -msgstr "Nach HBAC-Regeln suchen." - -msgid "Search for HBAC services." -msgstr "Nach HBAC-Diensten suchen." - -msgid "Search for IPA services." -msgstr "Nach IPA-Diensten suchen." - -msgid "Search for OTP token." -msgstr "OTP Token suchen." - -msgid "Search for Sudo Commands." -msgstr "Nach Sudo-Befehlen suchen." - -msgid "Search for Sudo Rule." -msgstr "Nach Sudo-Regel suchen." - -msgid "Search for an HBAC service group." -msgstr "Suche nach HBAC Dienstgruppe" - -msgid "Search for an automount location." -msgstr "Automount-Ort suchen." - -msgid "Search for group password policies." -msgstr "Suche nach Gruppen-Passwortregeln" - -msgid "Search for groups." -msgstr "Nach Gruppen suchen." - -msgid "Search for hostgroups." -msgstr "Nach Hostgruppen suchen." - -msgid "Search for hosts." -msgstr "Nach Hosts suchen." - -msgid "Search for roles." -msgstr "Nach Rollen suchen." - -msgid "Search for stage users." -msgstr "Nach vorbereiteten Benutzern suchen." - -msgid "Search for users." -msgstr "Nach Benutzern suchen." - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "Das Suchergebnis wurde gekürzt: %(reason)s" - -msgid "Search size limit" -msgstr "Größenlimit für Suche" - -msgid "Search time limit" -msgstr "Zeitlimit für Suche" - -msgid "Second Code" -msgstr "Zweiter Code" - -msgid "Second OTP" -msgstr "Zweites OTP" - -msgid "Segment details" -msgstr "Segment Details" - -msgid "Select All" -msgstr "Alle auswählen" - -msgid "Select entries to be removed." -msgstr "Einträge zum löschen auswählen." - -msgid "Self" -msgstr "Selbst" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" -"Semantik von %(label)s wurde geändert. %(current_behavior)s\n" -"%(hint)s" - -msgid "Serial" -msgstr "Seriennummer" - -msgid "Serial Number" -msgstr "Seriennummer" - -msgid "Serial Number (hex)" -msgstr "Seriennummer (hex)" - -msgid "Serial number" -msgstr "Seriennummer" - -msgid "Serial number (hex)" -msgstr "Seriennummer (hex)" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" -"Seriennummer in Dezimalschreibweise oder (bei Präfix 0x) in " -"Hexadezimalschreibweise" - -msgid "Server" -msgstr "Server" - -msgid "Server Name" -msgstr "Servername" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "Der Server hat keine Informationen über die Domäne '%(domain)s'" - -msgid "Server name" -msgstr "Servername" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "Entfernen des Servers abgebrochen: %(reason)s." - -msgid "Service" -msgstr "Dienst" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "Service '%(service)s' in Kerberos-Datenbank nicht gefunden" - -msgid "Service Groups" -msgstr "Dienstgruppen" - -msgid "Service Settings" -msgstr "Diensteinstellungen" - -msgid "Service category" -msgstr "Dienstkategorie" - -msgid "Service category the ACL applies to" -msgstr "Dienstkategorie auf die ACL angewendet wird" - -msgid "Service group name" -msgstr "Dienstgruppenname" - -msgid "Service name" -msgstr "Dienstname" - -msgid "Service principal" -msgstr "Dienst-Principal" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "Dienst-Principal für dieses Zertifikat (z.B. HTTP/test.example.com)" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" -"Principal des Dienstes folgt nicht der Form »Dienst/voll ausgeschriebener " -"Hostname«: %(reason)s" - -msgid "Services" -msgstr "Dienste" - -msgid "Session error" -msgstr "Sitzungsfehler" - -msgid "Set" -msgstr "Setzen" - -msgid "Set OTP" -msgstr "OTP setzen" - -msgid "Set SSH key" -msgstr "SSH Schlüssel speichern" - -msgid "Set a user's password." -msgstr "Passwort für einen Benutzer setzen." - -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" -"Ein Attribut für ein Attribut-Wert-Paar setzen. Das Format ist " -"Attribut=Wert.\n" -"Bei Attributen mit mehreren Werten ersetzt der Befehl die bereits " -"vorhandenen Werte." - -msgid "Settings" -msgstr "Einstellungen" - -msgid "Show QR code" -msgstr "QR Code zeigen" - -msgid "Show Results" -msgstr "Ergebnisse anzeigen" - -msgid "Show all loaded plugins." -msgstr "Alle geladenen Plugins anzeigen." - -msgid "Show configuration uri" -msgstr "Konfigurations-URL zeigen" - -msgid "Show details" -msgstr "Details anzeigen" - -msgid "Show environment variables." -msgstr "Umgebungsvariablen anzeigen." - -msgid "Show the current OTP configuration." -msgstr "Aktuelle OTP Konfiguration anzeigen" - -msgid "Show the current configuration." -msgstr "Die aktuelle Konfiguration anzeigen." - -msgid "Show/Set key" -msgstr "Zeige/Setze Schlüssel" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "Zeige ${start} bis ${end} von ${total} Einträgen." - -msgid "Simulate use of Host-based access controls" -msgstr "HBAC Nutzung simulieren" - -msgid "Size" -msgstr "Größe" - -msgid "Size Limit" -msgstr "Größenbeschränkung" - -msgid "Some entries were not deleted" -msgstr "Einige Einträge wurden nicht gelöscht" - -msgid "Specified Commands and Groups" -msgstr "Spezifische Befehle und Gruppen" - -msgid "Specified Groups" -msgstr "Spezifische Gruppe" - -msgid "Specified Hosts and Groups" -msgstr "Spezifische Hosts und Gruppen" - -msgid "Specified Services and Groups" -msgstr "Spezifische Dienste und Gruppen" - -msgid "Specified Users and Groups" -msgstr "Spezifische Benutzer und Gruppen" - -msgid "Stage" -msgstr "Vorbereiten" - -msgid "Stage User" -msgstr "Vorbereiteter Benutzer" - -msgid "Stage Users" -msgstr "Vorbereitete Benutzer" - -#, python-format -msgid "Stage user %s activated" -msgstr "Vorbereiteten Benutzer %s aktiviert" - -msgid "Stage users" -msgstr "Vorbereitete Benutzer" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "Vorbereitetes Benutzerkonto \"%(value)s\"" - -msgid "State/Province" -msgstr "Staat/Bundesland" - -msgid "Status" -msgstr "Status" - -msgid "Street address" -msgstr "Straße" - -msgid "Structured" -msgstr "Strukturiert" - -msgid "Subject" -msgstr "Betreff" - -msgid "Submit a certificate signing request." -msgstr "Eine Signaturanfrage (CSR) senden." - -msgid "Subtree" -msgstr "Subtree" - -msgid "Subtree to apply ACI to" -msgstr "Subtree auf den ACI angewendet wird" - -msgid "Subtype" -msgstr "Untertyp" - -msgid "Success" -msgstr "Erfolgreich" - -msgid "Sudo" -msgstr "Sudo" - -msgid "Sudo Command" -msgstr "Sudo-Befehl" - -msgid "Sudo Command Group" -msgstr "Sudo-Befehlsgruppe" - -msgid "Sudo Command Groups" -msgstr "Sudo-Befehlsgruppen" - -msgid "Sudo Commands" -msgstr "Sudo-Befehle" - -msgid "Sudo Option" -msgstr "Sudo-Option" - -msgid "Sudo Rule" -msgstr "Sudo-Regel" - -msgid "Sudo Rules" -msgstr "Sudo-Regeln" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "Unterstützte Verschlüsselungstypen:\n" - -msgid "Sync OTP Token" -msgstr "OTP Token synchronisieren" - -msgid "Synchronize an OTP token." -msgstr "OTP Token synchronisieren." - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "Syntaxfehler: %(error)s" - -msgid "TOTP Synchronization Window" -msgstr "TOTP Sychnronisierungsfenster" - -msgid "TOTP authentication Window" -msgstr "TOTP Authentifizierungsfenster" - -msgid "TOTP token / IPA server time difference" -msgstr "Differenz zwischen Token und Serverzeit" - -msgid "Target" -msgstr "Ziel" - -msgid "Target group" -msgstr "Ziel-Gruppe" - -msgid "Target host" -msgstr "Ziel-Host" - -msgid "Target your own entry (self)" -msgstr "Auf eigenen Eintrag anwenden (self)" - -msgid "Task DN" -msgstr "Aufgaben DN" - -#, python-format -msgid "Task DN = '%s'" -msgstr "Aufgaben DN = '%s'" - -msgid "Telephone Number" -msgstr "Telefonnummer" - -msgid "Test the ACI syntax but don't write anything" -msgstr "ACI-Syntax testen, aber nicht schreiben" - -msgid "Text Data" -msgstr "Textdaten" - -msgid "The IPA realm" -msgstr "Der IPA-Realm" - -msgid "The default users group cannot be removed" -msgstr "Die vorgegebene Benutzergruppe kann nicht entfernt werden" - -msgid "The group doesn't exist" -msgstr "Die Gruppe existiert nicht" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "" -"Der Wert von »primary_key« des Eintrags, z.B. »jdoe« für einen Benutzer" - -msgid "The principal for this request doesn't exist." -msgstr "Der Principal für diese Anfrage existiert nicht" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "Der Realm des Principals passt nicht zum Realm dieses IPA-Servers." - -msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" -msgstr "" -"Das auf dem LDAP-Server verwendete Schema. Zulässige Werte sind RFC2307 und " -"RFC2307bis. Der Vorgabewert ist RFC2307bis." - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" -"Die Suchkriterien waren nicht spezifisch genug. 1 wurde erwartet, aber " -"%(found)d gefunden." - -msgid "The topic or command name." -msgstr "Das Thema oder der Befehlsname" - -msgid "The username, password or token codes are not correct" -msgstr "Benutzername, Passwort oder Einmalpasswort waren falsch." - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" -"Dieser Befehl erfordert die Existenz der \"editors\" Gruppe, diese wurde " -"jedoch nicht gefunden." - -msgid "This command requires root access" -msgstr "Dieser Befehl erfordert Root-Zugriff" - -msgid "This entry already exists" -msgstr "Dieser Eintrag existiert bereits" - -msgid "This entry cannot be enabled or disabled" -msgstr "Dieser Eintrag kann nicht aktiviert oder deaktiviert werden" - -msgid "This entry is already a member" -msgstr "Dieser Eintrag ist bereits ein Mitglied" - -msgid "This entry is already disabled" -msgstr "Dieser Eintrag ist bereits deaktiviert" - -msgid "This entry is already enabled" -msgstr "Dieser Eintrag ist bereits aktiviert" - -msgid "This entry is not a member" -msgstr "Dieser Eintrag ist kein Mitglied" - -msgid "This group already allows external members" -msgstr "Diese Gruppe erlaubt bereits externe Mitglieder" - -msgid "This group cannot be posix because it is external" -msgstr "Diese Gruppe kann nicht POSIX sein, weil sie extern ist" - -msgid "This is already a posix group" -msgstr "Dies ist bereits eine POSIX-Gruppe" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" -"Dies ist bereits eine POSIX-Gruppe, sie kann nicht zu einer externen " -"konvertiert werden" - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" -"Diese Seite hat nicht gespeicherte Änderungen. Bitte Speichern oder " -"Rückgängig machen" - -msgid "Ticket expired" -msgstr "Ticket abgelaufen" - -msgid "Time Limit" -msgstr "Zeitbegrenzung" - -msgid "Time limit of search in seconds" -msgstr "Zeitbegrenzung für den Suchvorgang in Sekunden" - -msgid "Time now" -msgstr "Aktuelle Zeit" - -msgid "Time to live" -msgstr "Lebensdauer" - -msgid "Time-based (TOTP)" -msgstr "Zeitbasiert (TOTP)" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" -"Zum Aufbau einer Vertrauensstellung mit einem Active Directory müssen " -"Domänenname und Realm des IPA Servers übereinstimmen" - -msgid "To get command help, use:" -msgstr "Um Hilfe zu Befehlen zu bekommen benutzen sie:" - -msgid "Token ID" -msgstr "Token ID" - -msgid "Token description (informational only)" -msgstr "Token Beschriebung (nur informativ)" - -msgid "Token hash algorithm" -msgstr "Token Hash-Algorithmus" - -msgid "Token model (informational only)" -msgstr "Token-Modell (nur informativ)" - -msgid "Token secret (Base32; default: random)" -msgstr "Token-Geheimis (Base32; Standard: zufällig)" - -msgid "Token serial (informational only)" -msgstr "Token-Seriennummer (nur informativ)" - -msgid "Token synchronization failed" -msgstr "Token-Synchronisierung fehlgeschlagen" - -msgid "Token vendor name (informational only)" -msgstr "Token-Hersteller (nur informativ)" - -msgid "Token was synchronized" -msgstr "Token wurde synchronisiert" - -msgid "Topic commands:" -msgstr "Thema-Befehle:" - -msgid "Topic or Command" -msgstr "Thema oder Befehl" - -msgid "Topology" -msgstr "Topologie" - -msgid "True" -msgstr "Wahr" - -msgid "True if not all results were returned" -msgstr "»True«, falls nicht alle Ergebnisse ausgegeben wurden" - -msgid "True means the operation was successful" -msgstr "»True« bedeutet, dass die Operation erfolgreich abgeschlossen wurde." - -msgid "Trust" -msgstr "Vertrauensstellung" - -msgid "Trust Settings" -msgstr "Vertrauenseinstellungen" - -msgid "Two factor authentication (password + OTP)" -msgstr "Zwei-Faktor-Authentifizierung (Passwort + OTP)" - -msgid "Type" -msgstr "Typ" - -msgid "Type of the token" -msgstr "Token-Typ" - -msgid "Types of supported user authentication" -msgstr "Unterstützte Authentifizierungsmethoden" - -msgid "UID" -msgstr "UID" - -msgid "UPN suffixes" -msgstr "UPN Suffixe" - -msgid "URI" -msgstr "URI" - -msgid "URL" -msgstr "URL" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" -"Die private Gruppe konnte nicht erstellt werden. Eine Gruppe »%(group)s« " -"existiert bereits." - -#, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "" -"Anmeldedaten-Zwischenspeicher für Kerberos konnte nicht erzeugt werden\n" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "ldap-Bibliothek konnte nicht initialisiert werden!\n" - -msgid "Undelete a delete user account." -msgstr "Gelöschten Benutzer wiederherstellen" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "Benutzerkonto \"%(value)s\" wiederhergestellt" - -msgid "Undo" -msgstr "Rückgängig" - -msgid "Undo All" -msgstr "Alle Rückgängig" - -msgid "Unique ID" -msgstr "Eindeutige ID" - -msgid "Unknown" -msgstr "Unbekannt" - -msgid "Unknown Error" -msgstr "Unbekannter Fehler" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "Unbekannte Option: %(option)s" - -msgid "Unlock" -msgstr "Entsperren" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "Konto »%(value)s« wurde entsperrt" - -msgid "Unrevoked" -msgstr "Nicht widerrufen" - -msgid "Unsaved Changes" -msgstr "Ungespeicherte Änderungen" - -msgid "Unselect All" -msgstr "Alle abwählen" - -msgid "Unspecified" -msgstr "Nicht angegeben" - -msgid "Update" -msgstr "Speichern" - -msgid "Update DNS entries" -msgstr "DNS Einträge aktualisieren" - -msgid "User" -msgstr "Benutzer" - -msgid "User Group" -msgstr "Benutzergruppe" - -msgid "User Groups" -msgstr "Benutzergruppen" - -msgid "User ID" -msgstr "Benutzer-ID" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" -"Benutzer-ID (wird durch das System zugewiesen, falls diese nicht angegeben " -"wird)" - -msgid "User Options" -msgstr "Benutzeroptionen" - -msgid "User authentication types" -msgstr "Authentifizierungsmethoden" - -msgid "User categories" -msgstr "Benutzerkategorien" - -msgid "User category" -msgstr "Benutzerkategorie" - -msgid "User category the ACL applies to" -msgstr "Benutzerkategorie auf die ACL angewendet wird" - -msgid "User category the rule applies to" -msgstr "Benutzerkategorie, auf welche die Regel angewendet werden soll" - -msgid "User group" -msgstr "Benutzer-Gruppe" - -msgid "User group ACI grants access to" -msgstr "Benutzergruppen-ACI erlaubt Zugriff auf" - -msgid "User login" -msgstr "Anmeldename" - -msgid "User name" -msgstr "Benutzername" - -msgid "User password" -msgstr "Benutzerpasswort" - -msgid "User search fields" -msgstr "Benutzer Suchfelder" - -msgid "User to override" -msgstr "Benutzer zum Überschreiben" - -msgid "User-friendly description of action performed" -msgstr "Benutzerfreundliche Beschreibung der ausgeführten Aktion" - -msgid "Username" -msgstr "Benutzername" - -msgid "Users" -msgstr "Benutzer" - -msgid "Users allowed to create keytab" -msgstr "Benutzer die Schlüsseltabelle erstellen dürfen" - -msgid "Users allowed to retrieve keytab" -msgstr "Benutzer die Schlüsseltabelle abrufen dürfen" - -msgid "Validation error" -msgstr "Überprüfungsfehler" - -msgid "Validity" -msgstr "Gültigkeit" - -msgid "Validity end" -msgstr "Gültig bis" - -msgid "Validity start" -msgstr "Gültig ab" - -msgid "Vendor" -msgstr "Hersteller" - -msgid "Verify Password" -msgstr "Passwort verifizieren" - -msgid "Verify Principal Password" -msgstr "Principal-Passwort bestätigen" - -msgid "Vertical Precision" -msgstr "Vertikale Genauigkeit" - -msgid "Via Service" -msgstr "Mit Dienst" - -msgid "View" -msgstr "Ansicht" - -msgid "Warning" -msgstr "Warnung" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "Warnung: Typ konnte nicht umgewandelt werden (#%d)\n" - -msgid "Weight" -msgstr "Gewicht" - -msgid "Who" -msgstr "Wer" - -msgid "Working" -msgstr "Arbeite" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" -"Sie können FreeOTP als " -"Softwaretoken einsetzen." - -msgid "You must enroll a host in order to create a host service" -msgstr "" -"Sie müssen einen Host registrieren, bevor Sie einen Dienst für diesen Host " -"anlegen können." - -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "Ihr Passwort läuft in ${days} Tagen ab." - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" -"Die Vertrauensstellung zu %(domain)s ist beschädigt. Bitte erneuern Sie sie " -"durch erneuten Aufruf von 'ipa trust-add'." - -msgid "ZIP" -msgstr "Postleitzahl" - -msgid "Zone name" -msgstr "Zonenname" - -msgid "Zone name (FQDN)" -msgstr "Zonenname (FQDN)" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "Zonen-Datensatz »%s« kann nicht gelöscht werden" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "Aktiver Benutzer mit Name \"%(user)s\" existiert bereits" - -msgid "an internal error has occurred" -msgstr "Ein interner Fehler ist aufgetreten" - -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "In interner Fehler ist auf dem Server '%(server)s' aufgetreten." - -msgid "any of the configured servers" -msgstr "einer der konfigurierten Server" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "Der Namensraum '%(name)s' existiert in der API nicht" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "Mindestens eine der Optionen: type, users, hosts muss gesetzt sein" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" -"mindestens eines von »type«, »filter«, »subtree«, »targetgroup«, »attrs« " -"oder »memberof« wird benötigt" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "Attribut \"%(attribute)s\" ist nicht erlaubt" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "Attribut \"%s\" ist nicht erlaubt" - -msgid "attribute is not configurable" -msgstr "Attribut ist nicht konfigurierbar" - -msgid "automatically add the principal if it doesn't exist" -msgstr "Den Principal automatisch hinzufügen, falls dieser nicht existiert" - -msgid "automount location" -msgstr "Automount-Ort" - -msgid "automount locations" -msgstr "Automount-Orte" - -msgid "automount map" -msgstr "Automount-Map" - -msgid "automount maps" -msgstr "Automount-Maps" - -msgid "bind password" -msgstr "Bind-Passwort" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "darf höchstens %(len)d Zeichen lang sein" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "darf höchstens %(maxlength)d Bytes groß sein" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "darf höchstens %(maxlength)d Zeichen lang sein" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "darf höchstens %(maxvalue)d sein" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "darf höchstens %(maxvalue)s sein" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "Kann nicht zu '%(uri)s' verbinden: %(error)s" - -msgid "cannot delete global password policy" -msgstr "Die Globale Passwortregel kann nicht gelöscht werden" - #, c-format msgid "cannot open configuration file %s\n" msgstr "Konfigurationsdatei %s konnte nicht geöffnet werden\n" @@ -4175,456 +29,423 @@ msgstr "Konfigurationsdatei %s konnte nicht geöffnet werden\n" msgid "cannot stat() configuration file %s\n" msgstr "Aufruf von »stat« für Konfigurationsdatei %s nicht möglich\n" -msgid "change collided with another change" -msgstr "Änderung kollidiert mit einer anderen Änderung" - -msgid "change to a POSIX group" -msgstr "in eine POSIC-Gruppe ändern" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "Befehl '%(name)s' nimmt maximal %(count)d Argument" -msgstr[1] "Befehl '%(name)s' nimmt maximal %(count)d Argumente" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "Befehl '%(name)s' nimmt keine Argumente" - -msgid "commands for controlling sudo configuration" -msgstr "Befehle zum Steuern der sudo-Konfiguration" - -msgid "configuration options" -msgstr "Konfigurationsoptionen" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "Container-Eintrag (%(container)s) nicht gefunden" - -msgid "delegation" -msgstr "Delegation" - -msgid "delegations" -msgstr "Delegationen" - -msgid "delete" -msgstr "löschen" - -msgid "description" -msgstr "Beschreibung" - -msgid "did not receive Kerberos credentials" -msgstr "Kerberos-Anmeldedaten wurden nicht empfangen" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "Jedes ACL-Element muss mit einem Semikolon enden" - -msgid "empty filter" -msgstr "Filter ist leer" - -msgid "entries" -msgstr "Einträge" - -msgid "entry" -msgstr "Eintrag" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "" -"Fehler beim Zusammenstellen der Daten für den XML-RPC-Transport: %(error)s" - -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "Fehler auf Server '%(server)s': %(error)s" - -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "Ausführen von ipa-getkeytab fehgeschlagen, errno %d\n" - -msgid "filename" -msgstr "Dateiname" - -msgid "filter and memberof are mutually exclusive" -msgstr "»filter« und »memberof« schließen sich gegenseitig aus" - -msgid "force host name even if not in DNS" -msgstr "Hostname erzwingen auch wenn nicht im DNS" - -#, c-format -msgid "fork() failed\n" -msgstr "fork() fehlgeschlagen\n" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "Format muss als »%(format)s« %(rfcs)s angegeben werden" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" -"Die Forward Zone \"%(fwzone)s\" ist nicht aktiv, da eine ordnungsgemäße NS " -"Delegation in der autoritativen Zone \"%(authzone)s\" nicht vorhanden ist. " -"Bitte fügen Sie den NS Record \"%(ns_rec)s\" zur übergeordneten Zone " -"\"%(authzone)s\" hinzu." - -msgid "givenname is required" -msgstr "givenname wird benötigt" - -msgid "group" -msgstr "Gruppe" - -msgid "group, permission and self are mutually exclusive" -msgstr "»group«, »permission« und »self« schließen sich gegenseitig aus" - -msgid "groups" -msgstr "Gruppen" - -msgid "host" -msgstr "host" - -msgid "host group" -msgstr "Hostgruppe" - -msgid "host groups" -msgstr "Hostgruppen" - -msgid "hostname" -msgstr "Hostname" - -msgid "hosts" -msgstr "hosts" - -msgid "hosts cannot be set when type is 'group'" -msgstr "hosts kann nicht gesetzt sein wenn Typ 'group' ist" - -msgid "incorrect type" -msgstr "inkorrekter Typ" - -#, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "Ungültig '%(name)s': %(error)s" - -#, python-format -msgid "invalid DN (%s)" -msgstr "ungültiger DN (%s)" - -msgid "invalid IP address format" -msgstr "Ungültiges IP-Adressformat" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" -"Ungültige IP-Adressversion (ist %(value)d, muss %(required_value)d) sein!" - -msgid "invalid IP network format" -msgstr "Ungültiges IP-Netzwerkformat" - -msgid "invalid SSH public key" -msgstr "Ungültiger öffentlicher SSH-Schlüssel" - -msgid "invalid address format" -msgstr "Ungültiges Adressformat" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "Ungültiger Domainname: %s" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "Ungültiges E-Mail-Format: %(email)s" - -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "ipa-getkeytab hat falsche Zugriffsrechte?\n" - -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "ipa-getkeytab nicht gefunden\n" - -msgid "limits exceeded for this query" -msgstr "Begrenzung wurde für diese Abfrage überschritten." - -#, python-format -msgid "manager %(manager)s not found" -msgstr "Manager %(manager)s nicht gefunden" - -#, python-format -msgid "member %s" -msgstr "Mitglied %s" - -msgid "missing base_id" -msgstr "fehlende base_id" - -msgid "modifying primary key is not allowed" -msgstr "Ändern des primären Schlüssels ist nicht erlaubt." - -#, python-format -msgid "must be '%(value)s'" -msgstr "muss '%(value)s' sein" - -msgid "must be DNS name" -msgstr "muss ein DNS-Name sein" - -msgid "must be TRUE or FALSE" -msgstr "muss TRUE oder FALSE sein" - -msgid "must be True or False" -msgstr "muss »True« oder »False« sein" - -msgid "must be Unicode text" -msgstr "muss Unicode-Text sein" - -msgid "must be a decimal number" -msgstr "muss eine Dezimalzahl sein" - -msgid "must be absolute" -msgstr "muss absolut sein" - -msgid "must be an integer" -msgstr "muss eine Ganzzahl sein" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "muss mindestens %(minlength)d Bytes groß sein" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "muss mindestens %(minlength)d Zeichen lang sein" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "muss mindestens %(minvalue)d sein" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "muss mindestens %(minvalue)s sein" - -msgid "must be binary data" -msgstr "muss im Binärformat sein" - -msgid "must be datetime value" -msgstr "muss ein datetime-Wert sein" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "muss genau %(length)d Bytes groß sein" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "muss genau %(length)d Zeichen lang sein" - -#, python-format -msgid "must be one of %(values)s" -msgstr "muss eines von %(values)s sein" - -msgid "must be relative" -msgstr "muss relativ sein" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "muss dem Muster »%(pattern)s« entsprechen" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "kein Befehl oder Hilfethema '%(topic)s'" - -msgid "no modifications to be performed" -msgstr "Keine anzuwendenden Änderungen" - -msgid "not allowed to modify group entries" -msgstr "Es ist nicht erlaubt, Gruppeneinträge zu ändern." - -msgid "not allowed to modify user entries" -msgstr "Es ist nicht erlaubt, Benutzereinträge zu ändern." - -msgid "not fully qualified" -msgstr "nicht voll ausgeschrieben" - -msgid "number of passwords" -msgstr "Anzahl der Passwörter" - -#, python-format -msgid "objectclass %s not found" -msgstr "Objektklasse %s nicht gefunden" - -msgid "only \"ad\" is supported" -msgstr "nur \"ad\" ist unterstützt" - #, c-format msgid "out of memory\n" msgstr "Nicht genügend Speicher\n" -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "Überlappende Argumente und Optionen: %(names)s" - -msgid "password" -msgstr "Passwort" - -msgid "password policies" -msgstr "Passwortregeln" - -msgid "password policy" -msgstr "Passwortregel" - -msgid "permission" -msgstr "Berechtigung" - -msgid "permissions" -msgstr "Berechtigungen" - -msgid "preserve" -msgstr "aufbewahren" - -msgid "preserve and no-preserve cannot be both set" -msgstr "preserve und no-preserve kann nicht gleichzeitig gesetzt sein" - -#, c-format -msgid "principal not found\n" -msgstr "Principal nicht gefunden\n" - -msgid "priority cannot be set on global policy" -msgstr "Priorität der globalen Regel kann nicht gesetzt werden" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" -"Profilkategorie kann nicht auf 'Alle' gesetzt werden wenn es erlaubte " -"Profile gibt" - #, c-format msgid "read error\n" msgstr "Lesefehler\n" +#, fuzzy, c-format +msgid "Unable to parse principal name\n" +msgstr "" +"Anmeldedaten-Zwischenspeicher für Kerberos konnte nicht erzeugt werden\n" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "Principal %s wird entfernt\n" + +#, fuzzy, c-format +msgid "Failed to open keytab\n" +msgstr "Schlüssel konnte nicht erzeugt werden!\n" + +#, c-format +msgid "principal not found\n" +msgstr "Principal nicht gefunden\n" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, fuzzy, c-format +msgid "Unable to remove entry\n" +msgstr "Entfernen fehlgeschlagen" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, fuzzy, c-format +msgid "Unable to parse principal\n" +msgstr "Kerberos-Principal" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + #, c-format msgid "realm not found\n" msgstr "Realm nicht gefunden\n" -#, python-format -msgid "request failed with HTTP status %d" -msgstr "Anfrage fehlgeschlagen, HTTP-Status: %d" +msgid "Print debugging information" +msgstr "Ausgabe von Debug-Informationen" + +msgid "Debugging output" +msgstr "Debugging-Ausgabe" msgid "" -"retrieve and print all attributes from the server. Affects command output." +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" msgstr "" -"Ermittelt alle Attribute des Servers und gibt diese aus. Dies wirkt sich auf " -"die Befehlsausgabe aus." -msgid "role" -msgstr "Rolle" +#, fuzzy +msgid "Kerberos Service Principal Name" +msgstr "Kerberos-Principal" -msgid "roles" -msgstr "Rollen" - -msgid "search for private groups" -msgstr "nach privaten Gruppen suchen" - -msgid "seconds" -msgstr "Sekunden" - -msgid "server" -msgstr "Server" - -msgid "servers" -msgstr "Server" - -msgid "service" -msgstr "Dienst" - -msgid "services" -msgstr "Dienste" - -msgid "sn is required" -msgstr "sn wird benötigt" - -msgid "stage user" -msgstr "Vorbereiteter Benutzer" - -msgid "stage users" -msgstr "Vorbereitete Benutzer" - -msgid "sudo command" -msgstr "Sudo-Befehl" - -msgid "sudo command group" -msgstr "Sudo-Befehlsgruppe" - -msgid "sudo command groups" -msgstr "Sudo-Befehlsgruppen" - -msgid "sudo commands" -msgstr "Sudo-Befehle" - -msgid "sudo rule" -msgstr "Sudo-Regel" - -msgid "sudo rules" -msgstr "Sudo-Regeln" - -msgid "the entry was deleted while being modified" -msgstr "Der Eintrag wurde während der Änderung entfernt." - -msgid "this option has been deprecated." -msgstr "Diese Option ist veraltet." - -msgid "this option is deprecated" -msgstr "diese Option ist veraltet" - -msgid "too many '@' characters" -msgstr "Zu viele »@«-Zeichen" - -msgid "trust" -msgstr "Vertrauensstellung" - -msgid "trust type" -msgstr "Vertrauensstellungstyp" - -msgid "trusts" -msgstr "Vertrauensstellungen" - -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "Typ des IPA-Objekts (user, group, host, hostgroup, service, netgroup)" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgid "The keytab file to remove the principcal(s) from" msgstr "" -"»type«, »filter«, »subtree« und »targetgroup« schließen sich gegenseitig aus." -#, python-format -msgid "unknown command '%(name)s'" -msgstr "Unbekannter Befehl '%(name)s'" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "Unbekannter Fehler %(code)d von %(server)s: %(error)s" - -msgid "unsupported trust type" -msgstr "nicht unterstützte Vetrauensstellung" - -msgid "user" -msgstr "Benutzer" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "Benutzer \"%s\" ist bereits aktiv" - -msgid "user category cannot be set to 'all' while there are allowed users" +msgid "Keytab File Name" msgstr "" -"Benutzerkategorie kann nicht auf 'Alle' gesetzt werden wenn es erlaubte " -"Benutzer gibt" -msgid "users" -msgstr "Benutzer" +msgid "Remove all principals in this realm" +msgstr "Alle Principals in diesem Realm entfernen" -msgid "users and hosts cannot both be set" -msgstr "Benutzer und Host können nicht gleichzeitig gesetzt sein." +msgid "Realm name" +msgstr "Realm-Name" -msgid "users cannot be set when type is 'hostgroup'" -msgstr "users kann nicht gesetzt sein wenn Typ 'hostgroup' ist" +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "Initialisierung des Kerberos-Kontexts fehlgschlagen\n" -msgid "Maximum password life must be greater than minimum." -msgstr "Maximale Lebensdauer muss größer als das Minimum sein." +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + +#, fuzzy, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "Initialisierung des Kerberos-Kontexts fehlgschlagen\n" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "KDC akzeptiert keine Schlüssel\n" + +#, c-format +msgid "Out of memory \n" +msgstr "Nicht genügend Speicher\n" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "ldap-Bibliothek konnte nicht initialisiert werden!\n" + +msgid "Simple bind failed\n" +msgstr "" + +msgid "SASL Bind failed\n" +msgstr "" + +#, fuzzy, c-format +msgid "Operation failed: %s\n" +msgstr "Konfigurationsdatei %s konnte nicht geöffnet werden\n" + +#, fuzzy, c-format +msgid "Failed to get result: %s\n" +msgstr "Schlüssel konnte nicht erzeugt werden!\n" + +#, c-format +msgid "Timeout exceeded." +msgstr "" + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "" + +#, fuzzy, c-format +msgid "Failed to parse result: %s\n" +msgstr "Schlüssel konnte nicht erzeugt werden!\n" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "" + +#, c-format +msgid "Missing reply control!\n" +msgstr "" + +#, c-format +msgid "Out of Memory!\n" +msgstr "Nicht genügend Speicher!\n" + +#, fuzzy, c-format +msgid "Failed to create control!\n" +msgstr "Schlüssel konnte nicht erzeugt werden!\n" + +#, fuzzy, c-format +msgid "Failed to bind to server!\n" +msgstr "Schlüssel konnte nicht erzeugt werden!\n" + +#, fuzzy, c-format +msgid "Failed to get keytab!\n" +msgstr "Schlüssel konnte nicht erzeugt werden!\n" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "" + +#, fuzzy, c-format +msgid "Failed to retrieve any keys" +msgstr "Zufallsschlüssel konnte nicht erzeugt werden!\n" + +#, fuzzy +msgid "Failed to decode control reply!\n" +msgstr "Schlüssel konnte nicht erzeugt werden!\n" + +#, fuzzy, c-format +msgid "Passwords do not match!\n" +msgstr "Passwörter stimmen nicht überein!" + +#, fuzzy, c-format +msgid "Failed to open config file %s\n" +msgstr "Konfigurationsdatei %s konnte nicht geöffnet werden\n" + +#, fuzzy, c-format +msgid "Failed to parse config file %s\n" +msgstr "Konfigurationsdatei %s konnte nicht geöffnet werden\n" + +#, fuzzy +msgid "Failed to resolve symlink to keytab.\n" +msgstr "Zufallsschlüssel konnte nicht erzeugt werden!\n" + +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" + +msgid "Print as little as possible" +msgstr "" + +msgid "Output only on errors" +msgstr "Ausgabe nur bei Fehlern" + +msgid "Output debug info" +msgstr "" + +msgid "Contact this specific KDC Server" +msgstr "" + +msgid "Server Name" +msgstr "Servername" + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" + +msgid "Encryption types to request" +msgstr "" + +#, fuzzy +msgid "Comma separated encryption types list" +msgstr "Unterstützte Verschlüsselungstypen:\n" + +msgid "Show the list of permitted encryption types and exit" +msgstr "" + +#, fuzzy +msgid "Permitted Encryption Types" +msgstr "Unterstützte Verschlüsselungstypen:\n" + +msgid "Asks for a non-random password to use for the principal" +msgstr "" + +#, fuzzy +msgid "LDAP DN" +msgstr "LDAP-URI" + +#, fuzzy +msgid "DN to bind as if not using kerberos" +msgstr "LDAP-Passwort (falls Kerberos nicht verwendet wird)" + +msgid "LDAP password" +msgstr "LDAP-Passwort" + +#, fuzzy +msgid "password to use if not using kerberos" +msgstr "LDAP-Passwort (falls Kerberos nicht verwendet wird)" + +#, fuzzy +msgid "Prompt for LDAP password" +msgstr "LDAP-Passwort" + +#, fuzzy +msgid "Path to the IPA CA certificate" +msgstr "Datei, in der das Zertifikat gespeichert werden soll." + +#, fuzzy +msgid "IPA CA certificate" +msgstr "Zertifikat" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" + +msgid "url" +msgstr "" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" + +msgid "GSSAPI|EXTERNAL" +msgstr "" + +msgid "Retrieve current keys without changing them" +msgstr "" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "Unterstützte Verschlüsselungstypen:\n" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "Warnung: Typ konnte nicht umgewandelt werden (#%d)\n" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +#, fuzzy +msgid "Enter LDAP password" +msgstr "LDAP-Passwort" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "" + +#, c-format +msgid "DNS discovery for domain %s\n" +msgstr "" + +#, c-format +msgid "Discovered server %s\n" +msgstr "" + +#, c-format +msgid "Using discovered server %s\n" +msgstr "" + +#, c-format +msgid "DNS Discovery failed\n" +msgstr "" + +#, c-format +msgid "Using server from config %s\n" +msgstr "" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "" + +#, c-format +msgid "Using provided server %s\n" +msgstr "" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "" + +msgid "New Principal Password" +msgstr "Neues Principal-Passwort" + +msgid "Verify Principal Password" +msgstr "Principal-Passwort bestätigen" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" + +#, fuzzy, c-format +msgid "Invalid Service Principal Name\n" +msgstr "Dienst-Principal" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" + +#, fuzzy, c-format +msgid "Failed to open Keytab\n" +msgstr "Schlüssel konnte nicht erzeugt werden!\n" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" + +#, fuzzy, c-format +msgid "Failed to create key material\n" +msgstr "Schlüssel konnte nicht erzeugt werden!\n" + +#, fuzzy, c-format +msgid "Failed to get keytab\n" +msgstr "Schlüssel konnte nicht erzeugt werden!\n" + +#, fuzzy, c-format +msgid "Failed to add key to the keytab\n" +msgstr "Schlüssel konnte nicht erzeugt werden!\n" + +#, fuzzy, c-format +msgid "Failed to close the keytab\n" +msgstr "Schlüssel konnte nicht erzeugt werden!\n" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "" #, fuzzy, c-format msgid "Out of memory!\n" @@ -4643,16 +464,21 @@ msgid "access() on %1$s failed: errno = %2$d\n" msgstr "" #, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "" +msgid "Out of memory!" +msgstr "Nicht genügend Speicher!" -msgid "SASL Bind failed\n" +#, c-format +msgid "Unable to enable SSL in LDAP\n" msgstr "" #, c-format msgid "Search for %1$s on rootdse failed with error %2$d\n" msgstr "" +#, c-format +msgid "No values for %s" +msgstr "Keine Werte für %s" + #, c-format msgid "Search for IPA namingContext failed with error %d\n" msgstr "" @@ -4776,6 +602,22 @@ msgid "" "provided.\n" msgstr "" +#, c-format +msgid "fork() failed\n" +msgstr "fork() fehlgeschlagen\n" + +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "ipa-getkeytab nicht gefunden\n" + +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "ipa-getkeytab hat falsche Zugriffsrechte?\n" + +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "Ausführen von ipa-getkeytab fehgeschlagen, errno %d\n" + #, c-format msgid "child exited with %d\n" msgstr "" @@ -4792,15 +634,54 @@ msgstr "Fehler beim Holen der initialen Anmeldedaten: %s.\n" msgid "Error parsing \"%1$s\": %2$s.\n" msgstr "" +#, c-format +msgid "Error obtaining initial credentials: %s.\n" +msgstr "Fehler beim Holen der initialen Anmeldedaten: %s.\n" + +#, c-format +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "" +"Anmeldedaten-Zwischenspeicher für Kerberos konnte nicht erzeugt werden\n" + +#, c-format +msgid "Error storing creds in credential cache: %s.\n" +msgstr "" +"Fehler beim Speichern der Anmeldedaten im Anmeldedaten-Zwischenspeicher: " +"%s.\n" + +msgid "Print the raw XML-RPC output in GSSAPI mode" +msgstr "Die rohe XML-RPC-Ausgabe im GSSAPI-Modus anzeigen" + +msgid "Quiet mode. Only errors are displayed." +msgstr "Stiller Modus. Nur Fehler werden ausgegeben." + msgid "Unenroll this host from IPA server" msgstr "" +msgid "Hostname of this server" +msgstr "Hostname dieses Servers" + +msgid "hostname" +msgstr "Hostname" + +msgid "IPA Server to use" +msgstr "Zu verwendender IPA-Server" + msgid "Specifies where to store keytab information." msgstr "" +msgid "filename" +msgstr "Dateiname" + msgid "Force the host join. Rejoin even if already joined." msgstr "" +msgid "LDAP password (if not using Kerberos)" +msgstr "LDAP-Passwort (falls Kerberos nicht verwendet wird)" + +msgid "password" +msgstr "Passwort" + #, fuzzy msgid "LDAP basedn" msgstr "LDAP-Passwort" @@ -4820,323 +701,31 @@ msgstr "" msgid "The hostname must not be: %s\n" msgstr "" -#, fuzzy, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "Initialisierung des Kerberos-Kontexts fehlgschlagen\n" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "" - -msgid "Simple bind failed\n" -msgstr "" - -#, fuzzy, c-format -msgid "Operation failed: %s\n" -msgstr "Konfigurationsdatei %s konnte nicht geöffnet werden\n" - -#, fuzzy, c-format -msgid "Failed to get result: %s\n" -msgstr "Schlüssel konnte nicht erzeugt werden!\n" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to parse result: %s\n" -msgstr "Schlüssel konnte nicht erzeugt werden!\n" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to create control!\n" -msgstr "Schlüssel konnte nicht erzeugt werden!\n" - -#, fuzzy, c-format -msgid "Failed to bind to server!\n" -msgstr "Schlüssel konnte nicht erzeugt werden!\n" - -#, fuzzy, c-format -msgid "Failed to get keytab!\n" -msgstr "Schlüssel konnte nicht erzeugt werden!\n" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to retrieve any keys" -msgstr "Zufallsschlüssel konnte nicht erzeugt werden!\n" - -#, fuzzy -msgid "Failed to decode control reply!\n" -msgstr "Schlüssel konnte nicht erzeugt werden!\n" - -#, fuzzy, c-format -msgid "Passwords do not match!\n" -msgstr "Passwörter stimmen nicht überein!" - -#, fuzzy, c-format -msgid "Failed to open config file %s\n" -msgstr "Konfigurationsdatei %s konnte nicht geöffnet werden\n" - -#, fuzzy, c-format -msgid "Failed to parse config file %s\n" -msgstr "Konfigurationsdatei %s konnte nicht geöffnet werden\n" - -#, fuzzy -msgid "Failed to resolve symlink to keytab.\n" -msgstr "Zufallsschlüssel konnte nicht erzeugt werden!\n" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -#, fuzzy -msgid "Kerberos Service Principal Name" -msgstr "Kerberos-Principal" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Encryption types to request" -msgstr "" - -#, fuzzy -msgid "Comma separated encryption types list" -msgstr "Unterstützte Verschlüsselungstypen:\n" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -#, fuzzy -msgid "Permitted Encryption Types" -msgstr "Unterstützte Verschlüsselungstypen:\n" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -#, fuzzy -msgid "LDAP DN" -msgstr "LDAP-URI" - -#, fuzzy -msgid "DN to bind as if not using kerberos" -msgstr "LDAP-Passwort (falls Kerberos nicht verwendet wird)" - -#, fuzzy -msgid "password to use if not using kerberos" -msgstr "LDAP-Passwort (falls Kerberos nicht verwendet wird)" - -#, fuzzy -msgid "Prompt for LDAP password" -msgstr "LDAP-Passwort" - -#, fuzzy -msgid "Path to the IPA CA certificate" -msgstr "Datei, in der das Zertifikat gespeichert werden soll." - -#, fuzzy -msgid "IPA CA certificate" -msgstr "Zertifikat" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -#, fuzzy -msgid "Enter LDAP password" -msgstr "LDAP-Passwort" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, fuzzy, c-format -msgid "Invalid Service Principal Name\n" -msgstr "Dienst-Principal" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to open Keytab\n" -msgstr "Schlüssel konnte nicht erzeugt werden!\n" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to create key material\n" -msgstr "Schlüssel konnte nicht erzeugt werden!\n" - -#, fuzzy, c-format -msgid "Failed to get keytab\n" -msgstr "Schlüssel konnte nicht erzeugt werden!\n" - -#, fuzzy, c-format -msgid "Failed to add key to the keytab\n" -msgstr "Schlüssel konnte nicht erzeugt werden!\n" - -#, fuzzy, c-format -msgid "Failed to close the keytab\n" -msgstr "Schlüssel konnte nicht erzeugt werden!\n" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#, fuzzy, c-format -msgid "Unable to parse principal name\n" -msgstr "" -"Anmeldedaten-Zwischenspeicher für Kerberos konnte nicht erzeugt werden\n" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to open keytab\n" -msgstr "Schlüssel konnte nicht erzeugt werden!\n" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, fuzzy, c-format -msgid "Unable to remove entry\n" -msgstr "Entfernen fehlgeschlagen" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, fuzzy, c-format -msgid "Unable to parse principal\n" -msgstr "Kerberos-Principal" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" +msgid "Failed members" +msgstr "Fehler bei Mitgliedern" #, fuzzy msgid "Failed source hosts/hostgroups" msgstr "Fehler bei Hosts/Hostgruppen" +msgid "Failed hosts/hostgroups" +msgstr "Fehler bei Hosts/Hostgruppen" + +msgid "Failed users/groups" +msgstr "Fehlerhafte Benutzer/Gruppen" + +msgid "Failed service/service groups" +msgstr "Fehler bei Diensten/Dienstgruppen" + +msgid "Failed to remove" +msgstr "Entfernen fehlgeschlagen" + +msgid "Failed RunAs" +msgstr "RunAs fehlgeschlagen" + +msgid "Failed RunAsGroup" +msgstr "RunAsGroup fehlgeschlagen" + #, fuzzy msgid "Failed profiles" msgstr "Fehlgeschlagene Logins" @@ -5169,16 +758,29 @@ msgstr "Hinzufügen fehlgeschlagen" msgid "Failed owners" msgstr "Fehlgeschlagene Logins" +msgid "Failed to add" +msgstr "Hinzufügen fehlgeschlagen" + msgid "maps not connected to /etc/auto.master:" msgstr "" msgid "Import automount files for a specific location." msgstr "" +msgid "Master file" +msgstr "Masterdatei" + +msgid "Automount master file." +msgstr "Automount-Masterdatei" + msgid "" "Continuous operation mode. Errors are reported but the process continues." msgstr "" +#, python-format +msgid "File %(file)s not found" +msgstr "Datei %(file)s nicht gefunden" + #, fuzzy, python-format msgid "key %(key)s already exists" msgstr "Dieser Eintrag existiert bereits" @@ -5222,6 +824,26 @@ msgstr "" msgid "Skipped %(key)s" msgstr "" +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +msgid "Unrevoked" +msgstr "Nicht widerrufen" + +msgid "Error" +msgstr "Fehler" + +#, fuzzy +msgid "Input filename" +msgstr "Name der Ausgabedatei" + +#, fuzzy +msgid "File to load the certificate from." +msgstr "Datei, in der das Zertifikat gespeichert werden soll." + +msgid "cannot specify both raw certificate and file" +msgstr "" + #, fuzzy msgid "Input file" msgstr "Name der Ausgabedatei" @@ -5230,11 +852,72 @@ msgstr "Name der Ausgabedatei" msgid "File to load the certificate from" msgstr "Datei, in der das Zertifikat gespeichert werden soll." -msgid "cannot specify both raw certificate and file" +#, python-format +msgid "Profile configuration stored in file '%(file)s'" +msgstr "" + +msgid "Split DNS record to parts" +msgstr "" + +msgid "Please choose a type of DNS resource record to be added" msgstr "" #, python-format -msgid "Profile configuration stored in file '%(file)s'" +msgid "The most common types for this type of zone are: %s\n" +msgstr "" + +msgid "DNS resource record type" +msgstr "" + +#, python-format +msgid "Invalid or unsupported type. Allowed values are: %s" +msgstr "" + +msgid "No option to modify specific record provided." +msgstr "Keine Option zum Ändern des spezifischen Datensatzes angegeben." + +msgid "Current DNS record contents:\n" +msgstr "Derzeitiger Inhalt des DNS-Datensatzes:\n" + +#, python-format +msgid "Modify %(name)s '%(value)s'?" +msgstr "Wert von %(name)s auf »%(value)s« ändern?" + +#, python-format +msgid "" +"%(count)d %(type)s record skipped. Only one value per DNS record type can be " +"modified at one time." +msgid_plural "" +"%(count)d %(type)s records skipped. Only one value per DNS record type can " +"be modified at one time." +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Neither --del-all nor options to delete a specific record provided.\n" +"Command help may be consulted for all supported record types." +msgstr "" + +msgid "No option to delete specific record provided." +msgstr "Keine Option zum Löschen des spezifischen Datensatzes angegeben." + +msgid "Delete all?" +msgstr "Alles löschen?" + +#, python-format +msgid "Delete %(name)s '%(value)s'?" +msgstr "Wert von %(name)s auf »%(value)s« löschen?" + +msgid "Server will check DNS forwarder(s)." +msgstr "" + +msgid "This may take some time, please wait ..." +msgstr "" + +msgid "DNS forwarder" +msgstr "" + +msgid "file to store DNS records in nsupdate format" msgstr "" #, python-format @@ -5258,9 +941,51 @@ msgid "" "can use their Kerberos accounts." msgstr "" +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "OTP Token synchronisieren." + +msgid "User ID" +msgstr "Benutzer-ID" + +msgid "Password" +msgstr "Passwort" + +msgid "First Code" +msgstr "Erster Code" + +msgid "Second Code" +msgstr "Zweiter Code" + +msgid "Token ID" +msgstr "Token ID" + msgid "python-yubico is not installed." msgstr "" +msgid "" +"\n" +"YubiKey Tokens\n" +msgstr "" +"\n" +"YubiKey Tokens\n" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" +"\n" +"YubiKey Tokens verwalten.\n" + msgid "" "\n" "This code is an extension to the otptoken plugin and provides support for\n" @@ -5295,14 +1020,6 @@ msgstr "" msgid "Removing %(servers)s from replication topology, please wait..." msgstr "" -#, fuzzy, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "Bedingung(en) zu \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "Bedingung(en) von \"%(value)s\" entfernt" - #, python-format msgid "Replication topology of suffix \"%(suffix)s\" is in order." msgstr "" @@ -5329,49 +1046,14 @@ msgstr "Maximale Anzahl der zurückgegebenen Einträge" msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" msgstr "" -msgid "Split DNS record to parts" -msgstr "" +msgid "Delete a user, keeping the entry available for future use" +msgstr "Einen Benutzer löschen, Eintrag für zukünfigte Verwendung aufbewahren" -msgid "Please choose a type of DNS resource record to be added" -msgstr "" +msgid "Delete a user" +msgstr "Einen Benutzer löschen" -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "" - -msgid "DNS resource record type" -msgstr "" - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "" - -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" - -msgid "Server will check DNS forwarder(s)." -msgstr "" - -msgid "This may take some time, please wait ..." -msgstr "" - -msgid "DNS forwarder" -msgstr "" - -msgid "file to store DNS records in nsupdate format" -msgstr "" +msgid "preserve and no-preserve cannot be both set" +msgstr "preserve und no-preserve kann nicht gleichzeitig gesetzt sein" #, fuzzy, python-format msgid "Cannot read file '%(filename)s': %(exc)s" @@ -5381,6 +1063,9 @@ msgstr "Ungültig '%(name)s': %(error)s" msgid "Cannot decode file '%(filename)s': %(exc)s" msgstr "Kann nicht zu '%(uri)s' verbinden: %(error)s" +msgid "Invalid credentials" +msgstr "Ungültige Zugangsdaten" + #, fuzzy msgid "Create a new vault." msgstr "Eine neue Gruppe erstellen." @@ -5420,6 +1105,9 @@ msgstr "" msgid "Modify a vault." msgstr "Rolle ändern." +msgid "Change password" +msgstr "Passwort ändern" + #, fuzzy msgid "Old vault password" msgstr "Bind-Passwort" @@ -5489,6 +1177,9 @@ msgstr "Schlüssel konnte nicht erzeugt werden!\n" msgid "File containing the vault private key" msgstr "" +msgid "Data" +msgstr "Daten" + msgid "Private key specified multiple times" msgstr "" @@ -5496,26 +1187,21 @@ msgstr "" msgid "Missing vault private key" msgstr "Fehlende Werte:" -msgid "Write certificate (chain if --chain used) to file" -msgstr "" +#, python-format +msgid "Enabled Sudo Rule \"%s\"" +msgstr "Sudo-Regel »%s« wurde aktiviert." -#, fuzzy -msgid "Input filename" -msgstr "Name der Ausgabedatei" +#, python-format +msgid "Disabled Sudo Rule \"%s\"" +msgstr "Sudo-Regel »%s« wurde deaktiviert." -#, fuzzy -msgid "File to load the certificate from." -msgstr "Datei, in der das Zertifikat gespeichert werden soll." +#, fuzzy, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" +msgstr "Bedingung(en) zu \"%(value)s\" hinzugefügt" -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" +#, fuzzy, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" +msgstr "Bedingung(en) von \"%(value)s\" entfernt" msgid "" "\n" @@ -5638,14 +1324,68 @@ msgid "" "targetattr REPLACES the current attributes, it does not add to them.\n" msgstr "" +msgid "ACI name" +msgstr "ACI-Name" + +msgid "Permission" +msgstr "Berechtigung" + +msgid "Permission ACI grants access to" +msgstr "Berechtigungs-ACI erlaubt Zugriff auf" + +msgid "User group" +msgstr "Benutzer-Gruppe" + +msgid "User group ACI grants access to" +msgstr "Benutzergruppen-ACI erlaubt Zugriff auf" + +msgid "Permissions" +msgstr "Berechtigungen" + #, fuzzy msgid "Permissions to grant(read, write, add, delete, all)" msgstr "Berechtigungen (read, write). Standard ist write" +msgid "Attributes to which the permission applies" +msgstr "Attribute auf die die Berechtigung angewendet wird" + +msgid "Attributes" +msgstr "Attribute" + +msgid "Type" +msgstr "Typ" + +msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" +msgstr "Typ des IPA-Objekts (user, group, host, hostgroup, service, netgroup)" + +msgid "Member of" +msgstr "Mitglied von" + +msgid "Member of a group" +msgstr "Mitglied einer Gruppe" + +msgid "Filter" +msgstr "Filter" + +msgid "Legal LDAP filter (e.g. ou=Engineering)" +msgstr "Gültiger LDAP filter (z.B. ou=Engineering)" + +msgid "Subtree" +msgstr "Subtree" + +msgid "Subtree to apply ACI to" +msgstr "Subtree auf den ACI angewendet wird" + +msgid "Target group" +msgstr "Ziel-Gruppe" + #, fuzzy msgid "Group to apply ACI to" msgstr "Subtree auf den ACI angewendet wird" +msgid "Target your own entry (self)" +msgstr "Auf eigenen Eintrag anwenden (self)" + #, fuzzy msgid "Apply ACI to your own entry (self)" msgstr "Auf eigenen Eintrag anwenden (self)" @@ -5654,10 +1394,44 @@ msgstr "Auf eigenen Eintrag anwenden (self)" msgid "Create new ACI." msgstr "Erstelle eine neue CA ACL." +msgid "ACI prefix" +msgstr "ACI-Präfix" + +msgid "" +"Prefix used to distinguish ACI types (permission, delegation, selfservice, " +"none)" +msgstr "" +"Präfix zur Unterscheidung der ACI-Typen (permission, delegation, " +"selfservice, none)" + +msgid "Test the ACI syntax but don't write anything" +msgstr "ACI-Syntax testen, aber nicht schreiben" + +msgid "" +"Retrieve and print all attributes from the server. Affects command output." +msgstr "" +"Ermittelt alle Attribute des Servers und gibt diese aus. Dies wirkt sich auf " +"die Befehlsausgabe aus." + +msgid "Print entries as stored on the server. Only affects output format." +msgstr "" +"Gibt die Einträge so aus, wie sie auf dem Server gespeichert sind. Dies " +"wirkt sich nur auf das Ausgabeformat aus." + +msgid "User-friendly description of action performed" +msgstr "Benutzerfreundliche Beschreibung der ausgeführten Aktion" + +msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" +msgstr "" +"Der Wert von »primary_key« des Eintrags, z.B. »jdoe« für einen Benutzer" + #, fuzzy msgid "Delete ACI." msgstr "CA ACL löschen." +msgid "True means the operation was successful" +msgstr "»True« bedeutet, dass die Operation erfolgreich abgeschlossen wurde." + msgid "" "\n" "Search for ACIs.\n" @@ -5680,9 +1454,22 @@ msgid "" " " msgstr "" +msgid "A string searched in all relevant object attributes" +msgstr "" +"Eine Zeichenkette, nach der in allen relevanten Objektattributen gesucht wird" + +msgid "Primary key only" +msgstr "Nur primärer Schlüssel" + msgid "Results should contain primary key attribute only (\"name\")" msgstr "" +msgid "Number of entries returned" +msgstr "Anzahl der zurückgegebenen Einträge" + +msgid "True if not all results were returned" +msgstr "»True«, falls nicht alle Ergebnisse ausgegeben wurden" + #, fuzzy msgid "Modify ACI." msgstr "CA ACL ändern" @@ -5691,9 +1478,295 @@ msgstr "CA ACL ändern" msgid "Rename an ACI." msgstr "Umbenennen" +msgid "New ACI name" +msgstr "Neuer ACI-Name" + msgid "Display a single ACI given an ACI name." msgstr "" +msgid "Location of the ACI" +msgstr "Ort der ACI" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Description" +msgstr "Beschreibung" + +msgid "A description of this auto member rule" +msgstr "Beschreibung der Auto-Mitgliedschaftsregel" + +msgid "Default (fallback) Group" +msgstr "Standard (Rückfall) Gruppe" + +msgid "Default group for entries to land" +msgstr "Vorgegebene Gruppe für Einträge" + +#, fuzzy +msgid "Add an automember rule." +msgstr "" +"\n" +" Auto-Mitgliedschaftsregel hinzufügen.\n" +" " + +msgid "Automember Rule" +msgstr "Auto-Mitgliedschaftsregel" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" +"Ein Attribut für ein Attribut-Wert-Paar setzen. Das Format ist " +"Attribut=Wert.\n" +"Bei Attributen mit mehreren Werten ersetzt der Befehl die bereits " +"vorhandenen Werte." + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" +"Ein Attribut-Wert-Paar hinzufügen. Das Format ist Attribut=Wert.\n" +"Das Attribut muss Teil des Schemas sein." + +msgid "Grouping Type" +msgstr "Gruppierungstyp" + +msgid "Grouping to which the rule applies" +msgstr "Gruppierung, auf die die Regel angewendet wird" + +#, fuzzy +msgid "Add conditions to an automember rule." +msgstr "" +"\n" +" Bedigungen zu einer Auto-Mitgliedschaftsregel hinzufügen.\n" +" " + +msgid "Inclusive Regex" +msgstr "Einschließende Regex" + +msgid "Exclusive Regex" +msgstr "Ausschließende Regex" + +msgid "Attribute Key" +msgstr "Attribut Schlüssel" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" +"Dieses Attribut wird per Regex gefiltert. Zum Beispiel FQDN für einen Host, " +"oder Manager für einen Benutzer" + +msgid "Conditions that could not be added" +msgstr "Bedingungen, die nicht hinzugefügt werden konnten" + +msgid "Number of conditions added" +msgstr "Anzahl der hinzugefügten Bedingungen" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +#, fuzzy +msgid "Default (fallback) group for entries to land" +msgstr "Vorgegebene Gruppe für Einträge" + +#, fuzzy +msgid "Display information about the default (fallback) automember groups." +msgstr "Informationen zu einer genannten Gruppe anzeigen." + +#, fuzzy +msgid "Delete an automember rule." +msgstr "" +"\n" +" Auto-Mitgliedschaftsregel löschen.\n" +" " + +msgid "List of deletions that failed" +msgstr "Liste der fehlgeschlagenen Löschvorgänge" + +#, fuzzy +msgid "Search for automember rules." +msgstr "" +"\n" +" Suche nach Auto-Mitgliedschaftsregeln.\n" +" " + +#, fuzzy +msgid "Modify an automember rule." +msgstr "" +"\n" +" Auto-Mitgliedschaftsregel bearbeiten. " + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" +"Ein Attribut-Wert-Paar löschen. Diese Option wird zuletzt angewendet,\n" +"nach allen Optionen, die etwas festlegen oder hinzufügen." + +msgid "Rights" +msgstr "Rechte" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" +"Zugriffsrechte dieses Eintrags anzeigen (erfordert --all). In der " +"Handbuchseite zu ipa finden Sie weitere Details." + +msgid "Rebuild auto membership." +msgstr "Auto-Mitgliedschaft neu erstellen" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" +"Auto-Mitgliedschaft für alle Mitglieder einer Gruppierung neu erstellen" + +msgid "Users" +msgstr "Benutzer" + +msgid "Rebuild membership for specified users" +msgstr "Auto-Mitgliedschaft für ausgewählte Benutzer neu erstellen" + +msgid "Hosts" +msgstr "Hosts" + +msgid "Rebuild membership for specified hosts" +msgstr "Auto-Mitgliedschaft für ausgewählte Hosts neu erstellen" + +msgid "No wait" +msgstr "Keine Wartezeit" + +#, fuzzy +msgid "Don't wait for rebuilding membership" +msgstr "" +"Sind Sie sicher, dass sie die Auto-Mitgliedschaft neu erstellen wollen?" + +#, fuzzy +msgid "Remove conditions from an automember rule." +msgstr "" +"\n" +" Bedingungen von einer einer Auto-Mitglieschaftsregel entfernen. " + +msgid "Conditions that could not be removed" +msgstr "Bedingungen, die nicht entfernt werden konnten" + +msgid "Number of conditions removed" +msgstr "Anzahl der entfernten Bedingungen" + +#, fuzzy +msgid "Display information about an automember rule." +msgstr "" +"\n" +" Informationen über Auto-Mitgliedschaftsregel anzeigen.\n" +" " + msgid "" "\n" "Automount\n" @@ -5801,10 +1874,31 @@ msgid "" " ipa automountkey-del baltimore auto.share --key=man\n" msgstr "" +msgid "Key" +msgstr "Schlüssel" + #, fuzzy msgid "Automount key name." msgstr "Automount-Map Name." +msgid "Mount information" +msgstr "Einhänge-Informationen" + +msgid "description" +msgstr "Beschreibung" + +msgid "Location" +msgstr "Ort" + +msgid "Automount location name." +msgstr "Automount-Ort" + +msgid "Map" +msgstr "Karte" + +msgid "Automount map name." +msgstr "Automount-Map Name." + #, fuzzy msgid "Create a new automount key." msgstr "Neuen Automount-Ort erstellen." @@ -5813,10 +1907,25 @@ msgstr "Neuen Automount-Ort erstellen." msgid "Delete an automount key." msgstr "Automount-Ort löschen." +msgid "Continuous mode: Don't stop on errors." +msgstr "Fortlaufender Modus: Kein Abbruch bei Fehlern." + #, fuzzy msgid "Search for an automount key." msgstr "Automount-Ort suchen." +msgid "Time Limit" +msgstr "Zeitbegrenzung" + +msgid "Time limit of search in seconds" +msgstr "Zeitbegrenzung für den Suchvorgang in Sekunden" + +msgid "Size Limit" +msgstr "Größenbeschränkung" + +msgid "Maximum number of entries returned" +msgstr "Maximale Anzahl der zurückgegebenen Einträge" + #, fuzzy msgid "Modify an automount key." msgstr "OTP Token bearbeiten" @@ -5825,6 +1934,9 @@ msgstr "OTP Token bearbeiten" msgid "New mount information" msgstr "Einhänge-Informationen" +msgid "Rename" +msgstr "Umbenennen" + #, fuzzy msgid "Rename the automount key object" msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" @@ -5833,9 +1945,21 @@ msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" msgid "Display an automount key." msgstr "Automount-Ort anzeigen." +msgid "Create a new automount location." +msgstr "Neuen Automount-Ort erstellen." + +msgid "Delete an automount location." +msgstr "Automount-Ort löschen." + +msgid "Search for an automount location." +msgstr "Automount-Ort suchen." + msgid "Results should contain primary key attribute only (\"location\")" msgstr "" +msgid "Display an automount location." +msgstr "Automount-Ort anzeigen." + #, fuzzy msgid "Generate automount files for a specific location." msgstr "Automount-Ort löschen." @@ -5848,6 +1972,9 @@ msgstr "Neuen Automount-Ort erstellen." msgid "Create a new indirect mount point." msgstr "Neuen Automount-Ort erstellen." +msgid "Mount point" +msgstr "Einhängepunkt" + #, fuzzy msgid "Parent map" msgstr "Automount-Map" @@ -5909,6 +2036,191 @@ msgstr "" msgid "Nested Methods to execute" msgstr "Name des zu exportierenden Methode" +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +#, fuzzy +msgid "Search for existing certificates." +msgstr "Ein existierendes Zertifikat holen." + +msgid "Match cn attribute in subject" +msgstr "" + +msgid "Reason" +msgstr "Grund" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "Grund für den Widerruf des Zertifikats (0-10)" + +#, fuzzy +msgid "minimum serial number" +msgstr "Seriennummer" + +#, fuzzy +msgid "maximum serial number" +msgstr "Seriennummer" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +#, fuzzy +msgid "Maximum number of certs returned" +msgstr "Maximale Anzahl der zurückgegebenen Einträge" + +#, fuzzy +msgid "Take a revoked certificate off hold." +msgstr "Ein Zertifikat widerrufen." + +msgid "Serial number" +msgstr "Seriennummer" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" +"Seriennummer in Dezimalschreibweise oder (bei Präfix 0x) in " +"Hexadezimalschreibweise" + +msgid "Submit a certificate signing request." +msgstr "Eine Signaturanfrage (CSR) senden." + +msgid "CSR" +msgstr "CSR" + +msgid "Principal" +msgstr "Principal" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "Dienst-Principal für dieses Zertifikat (z.B. HTTP/test.example.com)" + +msgid "automatically add the principal if it doesn't exist" +msgstr "Den Principal automatisch hinzufügen, falls dieser nicht existiert" + +msgid "Dictionary mapping variable name to value" +msgstr "" + +msgid "Revoke a certificate." +msgstr "Ein Zertifikat widerrufen." + +msgid "Retrieve an existing certificate." +msgstr "Ein existierendes Zertifikat holen." + +msgid "Output filename" +msgstr "Name der Ausgabedatei" + +msgid "File to store the certificate in." +msgstr "Datei, in der das Zertifikat gespeichert werden soll." + +msgid "Check the status of a certificate signing request." +msgstr "Den Status der Signaturanfrage des Zertifikats überprüfen." + +msgid "Request id" +msgstr "Anfrage-ID" + msgid "" "\n" "Server configuration\n" @@ -5958,13 +2270,63 @@ msgid "" "s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" msgstr "" +msgid "Maximum username length" +msgstr "Maximale Länge des Benutzernamens" + +msgid "Home directory base" +msgstr "Basis für Home-Verzeichnisse" + +msgid "Default location of home directories" +msgstr "Vorgegebener Ort für Home-Verzeichnisse" + +msgid "Default shell" +msgstr "Vorgabe-Shell" + +msgid "Default shell for new users" +msgstr "Vorgegebene Shell für neue Benutzer" + +msgid "Default users group" +msgstr "Vorgegebene Gruppe des Benutzers" + +msgid "Default group for new users" +msgstr "Vorgegebene Gruppe für neue Benutzer" + msgid "Default e-mail domain" msgstr "" +msgid "Search time limit" +msgstr "Zeitlimit für Suche" + +msgid "" +"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" +msgstr "Maximale Zeit in Sekunden für eine Suche (>0 oder -1 für unbegrenzt)" + +msgid "Search size limit" +msgstr "Größenlimit für Suche" + +msgid "Maximum number of records to search (-1 is unlimited)" +msgstr "Maximale Anzahl an Ergebnissen für Suche (-1 ist unbegrenzt)" + +msgid "User search fields" +msgstr "Benutzer Suchfelder" + +msgid "A comma-separated list of fields to search in when searching for users" +msgstr "" +"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach " +"Benutzern durchsucht werden" + #, fuzzy msgid "Group search fields" msgstr "Benutzer Suchfelder" +msgid "A comma-separated list of fields to search in when searching for groups" +msgstr "" +"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach Gruppen " +"durchsucht werden" + +msgid "Enable migration mode" +msgstr "Migrationsmodus aktivieren" + #, fuzzy msgid "Certificate Subject base" msgstr "Benutze Zertifikatsprofil" @@ -5972,6 +2334,30 @@ msgstr "Benutze Zertifikatsprofil" msgid "Base for certificate subjects (OU=Test,O=Example)" msgstr "" +msgid "Default group objectclasses" +msgstr "Standard objectclass für Gruppen" + +msgid "Default group objectclasses (comma-separated list)" +msgstr "Standard objectclass für Gruppen (komma-separierte Liste)" + +msgid "Default user objectclasses" +msgstr "Standard objectclass für Benutzer" + +msgid "Default user objectclasses (comma-separated list)" +msgstr "Standard objectclass für Benutzer (komma-separierte Liste)" + +msgid "Password Expiration Notification (days)" +msgstr "Benachrichtigung über den Passwortablauf (Tage)" + +msgid "Number of days's notice of impending password expiration" +msgstr "Anzahl der Tage die vor einem Passwortablauf gewarnt wird" + +msgid "Password plugin features" +msgstr "Passwort-Plugin-Funktionen" + +msgid "Extra hashes to generate in password plug-in" +msgstr "Im Passwort-Plugin zusätzlich zu erzeugende Prüfsummen" + msgid "SELinux user map order" msgstr "" @@ -5979,13 +2365,33 @@ msgstr "" msgid "Order in increasing priority of SELinux users, delimited by $" msgstr "$-getrennte Liste von SELinux Benutzern erwartet" +msgid "Default SELinux user" +msgstr "Vorgegebener SELinux-Benutzer" + +msgid "Default SELinux user when no match is found in SELinux map rule" +msgstr "" +"Vorgegebener SELinux-Benutzer, sofern in den Zuweisungsregeln von SELinux " +"nichts anderes bestimmt ist" + +msgid "Default PAC types" +msgstr "Standard PAC-Typen" + msgid "Default types of PAC supported for services" msgstr "" +msgid "Default user authentication types" +msgstr "Standard Authentifizierungsmethoden" + #, fuzzy msgid "Default types of supported user authentication" msgstr "Unterstützte Authentifizierungsmethoden" +msgid "Modify configuration options." +msgstr "Konfigurationsoptionen bearbeiten." + +msgid "Show the current configuration." +msgstr "Die aktuelle Konfiguration anzeigen." + msgid "" "\n" "Group to Group Delegation\n" @@ -6015,6 +2421,12 @@ msgid "" " ipa delegation-del \"managers edit employees' street\"\n" msgstr "" +msgid "Delegation name" +msgstr "Delegationsname" + +msgid "Permissions to grant (read, write). Default is write." +msgstr "Berechtigungen (read, write). Standard ist write" + #, fuzzy msgid "Attributes to which the delegation applies" msgstr "Attribute auf die die Berechtigung angewendet wird" @@ -6325,12 +2737,24 @@ msgstr "" msgid "Zone refresh interval" msgstr "Fehler Resetintervall" +msgid "Zone name" +msgstr "Zonenname" + +msgid "Zone name (FQDN)" +msgstr "Zonenname (FQDN)" + msgid "Reverse zone IP network" msgstr "" msgid "IP network to create reverse zone name from" msgstr "" +msgid "Active zone" +msgstr "Aktive Zone" + +msgid "Is zone active?" +msgstr "Ist die Zone aktiv?" + msgid "Zone forwarders" msgstr "" @@ -6345,6 +2769,18 @@ msgid "" "forwarders are disregarded." msgstr "" +msgid "Record name" +msgstr "Datensatzname" + +msgid "Time to live" +msgstr "Lebensdauer" + +msgid "Records" +msgstr "Datensätze" + +msgid "Record type" +msgstr "Datensatztyp" + #, fuzzy msgid "Record data" msgstr "Datensatzname" @@ -6361,6 +2797,9 @@ msgstr "Datensätze" msgid "A IP Address" msgstr "IP-Adresse" +msgid "IP Address" +msgstr "IP-Adresse" + msgid "A Create reverse" msgstr "" @@ -6403,10 +2842,16 @@ msgstr "" msgid "AFSDB Subtype" msgstr "Untertyp" +msgid "Subtype" +msgstr "Untertyp" + #, fuzzy msgid "AFSDB Hostname" msgstr "Hostname" +msgid "Hostname" +msgstr "Hostname" + msgid "APL record" msgstr "" @@ -6426,6 +2871,9 @@ msgstr "Datensätze" msgid "CERT Certificate Type" msgstr "Zertifikattyp" +msgid "Certificate Type" +msgstr "Zertifikattyp" + msgid "CERT Key Tag" msgstr "" @@ -6436,10 +2884,16 @@ msgstr "" msgid "CERT Algorithm" msgstr "Algorithmus" +msgid "Algorithm" +msgstr "Algorithmus" + #, fuzzy msgid "CERT Certificate/CRL" msgstr "Zertifikat/CRL" +msgid "Certificate/CRL" +msgstr "Zertifikat/CRL" + msgid "CNAME record" msgstr "" @@ -6477,10 +2931,16 @@ msgstr "Algorithmus" msgid "DLV Digest Type" msgstr "Prüfsummentyp" +msgid "Digest Type" +msgstr "Prüfsummentyp" + #, fuzzy msgid "DLV Digest" msgstr "Prüfsumme" +msgid "Digest" +msgstr "Prüfsumme" + msgid "DNAME record" msgstr "" @@ -6491,6 +2951,9 @@ msgstr "" msgid "DNAME Target" msgstr "Ziel" +msgid "Target" +msgstr "Ziel" + msgid "DNSKEY record" msgstr "" @@ -6623,18 +3086,30 @@ msgstr "" msgid "LOC Altitude" msgstr "Höhe" +msgid "Altitude" +msgstr "Höhe" + #, fuzzy msgid "LOC Size" msgstr "Größe" +msgid "Size" +msgstr "Größe" + #, fuzzy msgid "LOC Horizontal Precision" msgstr "Horizontale Genauigkeit" +msgid "Horizontal Precision" +msgstr "Horizontale Genauigkeit" + #, fuzzy msgid "LOC Vertical Precision" msgstr "Vertikale Genauigkeit" +msgid "Vertical Precision" +msgstr "Vertikale Genauigkeit" + #, fuzzy msgid "MX record" msgstr "Datensätze" @@ -6664,26 +3139,44 @@ msgstr "" msgid "NAPTR Order" msgstr "Reihenfolge" +msgid "Order" +msgstr "Reihenfolge" + #, fuzzy msgid "NAPTR Preference" msgstr "Bevorzugung" +msgid "Preference" +msgstr "Bevorzugung" + #, fuzzy msgid "NAPTR Flags" msgstr "Flags" +msgid "Flags" +msgstr "Flags" + #, fuzzy msgid "NAPTR Service" msgstr "Jeder Dienst" +msgid "Service" +msgstr "Dienst" + #, fuzzy msgid "NAPTR Regular Expression" msgstr "Regulärer Ausdruck" +msgid "Regular Expression" +msgstr "Regulärer Ausdruck" + #, fuzzy msgid "NAPTR Replacement" msgstr "Ersetzung" +msgid "Replacement" +msgstr "Ersetzung" + #, fuzzy msgid "NS record" msgstr "Datensätze" @@ -6765,14 +3258,23 @@ msgstr "Datensätze" msgid "SRV Priority" msgstr "Priorität" +msgid "Priority" +msgstr "Priorität" + #, fuzzy msgid "SRV Weight" msgstr "Gewicht" +msgid "Weight" +msgstr "Gewicht" + #, fuzzy msgid "SRV Port" msgstr "Port" +msgid "Port" +msgstr "Port" + #, fuzzy msgid "SRV Target" msgstr "Ziel" @@ -6796,10 +3298,16 @@ msgstr "Algorithmus" msgid "SSHFP Fingerprint Type" msgstr "Fingerabdruck-Typ" +msgid "Fingerprint Type" +msgstr "Fingerabdruck-Typ" + #, fuzzy msgid "SSHFP Fingerprint" msgstr "SHA1-Fingerabdruck" +msgid "Fingerprint" +msgstr "Fingerabdruck" + #, fuzzy msgid "TA record" msgstr "Datensätze" @@ -6869,12 +3377,18 @@ msgstr "Datensätze" msgid "TXT Text Data" msgstr "Textdaten" +msgid "Text Data" +msgstr "Textdaten" + msgid "Authoritative nameserver" msgstr "" msgid "Authoritative nameserver domain name" msgstr "" +msgid "Administrator e-mail address" +msgstr "E-Mail-Adresse des Administrators" + #, fuzzy msgid "SOA serial" msgstr "Seriennummer" @@ -6914,6 +3428,12 @@ msgstr "" msgid "BIND update policy" msgstr "" +msgid "Dynamic update" +msgstr "Dynamische Aktualisierung" + +msgid "Allow dynamic updates." +msgstr "Dynamische Aktualisierungen erlauben." + #, fuzzy msgid "Allow query" msgstr "Erlauben" @@ -6971,6 +3491,9 @@ msgstr "Neuen Sudo-Befehl erzeugen." msgid "Add a permission for per-forward zone access delegation." msgstr "" +msgid "Permission value" +msgstr "Berechtigungswert" + #, fuzzy msgid "Delete DNS forward zone." msgstr "Rolle löschen." @@ -7006,6 +3529,9 @@ msgstr "" msgid "force NS record creation even if its hostname is not in DNS" msgstr "Hostname erzwingen auch wenn nicht im DNS" +msgid "Structured" +msgstr "Strukturiert" + msgid "Parse all raw DNS records and return them in a structured way" msgstr "" @@ -7013,10 +3539,16 @@ msgstr "" msgid "Delete DNS resource record." msgstr "Alle zugehörigen Datensätze löschen" +msgid "Delete all associated records" +msgstr "Alle zugehörigen Datensätze löschen" + #, fuzzy msgid "Delete DNS record entry." msgstr "Derzeitiger Inhalt des DNS-Datensatzes:\n" +msgid "Search for DNS resources." +msgstr "Nach DNS-Ressourcen suchen." + #, fuzzy msgid "Modify a DNS resource record." msgstr "DNS-Ressource anzeigen." @@ -7024,6 +3556,9 @@ msgstr "DNS-Ressource anzeigen." msgid "Rename the DNS resource record object" msgstr "" +msgid "Display DNS resource." +msgstr "DNS-Ressource anzeigen." + msgid "Create new DNS zone (SOA record)." msgstr "" @@ -7069,6 +3604,333 @@ msgstr "" msgid "Display information about a DNS zone (SOA record)." msgstr "Informationen zu einer genannten Gruppe anzeigen." +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "Group name" +msgstr "Gruppenname" + +msgid "Group description" +msgstr "Gruppenbeschreibung" + +msgid "GID" +msgstr "Gruppen-ID" + +msgid "GID (use this option to set it manually)" +msgstr "Gruppen-ID (verwenden Sie diese Option, um die ID manuell anzugeben)" + +msgid "Member users" +msgstr "Mitglieds-Benutzer" + +msgid "Member groups" +msgstr "Mitglieds-Gruppen" + +msgid "Member of groups" +msgstr "Mitglied der Gruppen" + +msgid "Roles" +msgstr "Rollen" + +#, fuzzy +msgid "Member of netgroups" +msgstr "Mitglied der Gruppen" + +#, fuzzy +msgid "Member of Sudo rule" +msgstr "Mitglied einer Gruppe" + +#, fuzzy +msgid "Member of HBAC rule" +msgstr "Mitglieds-HBAC-Dienst" + +msgid "Indirect Member users" +msgstr "Indirekte Mitglieds-Benutzer" + +msgid "Indirect Member groups" +msgstr "Indirekte Mitglieds-Gruppen" + +#, fuzzy +msgid "Indirect Member of group" +msgstr "Indirekte Mitglieds-Gruppen" + +#, fuzzy +msgid "Indirect Member of netgroup" +msgstr "Indirekte Mitglieds-Gruppen" + +#, fuzzy +msgid "Indirect Member of role" +msgstr "Indirektes Mitglied von Rollen" + +#, fuzzy +msgid "Indirect Member of Sudo rule" +msgstr "Indirektes Mitglied von Rollen" + +#, fuzzy +msgid "Indirect Member of HBAC rule" +msgstr "Indirektes Mitglied von Rollen" + +msgid "Create a new group." +msgstr "Eine neue Gruppe erstellen." + +msgid "Create as a non-POSIX group" +msgstr "Als Nicht-POSIX-Gruppe erstellen" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +msgid "Add members to a group." +msgstr "Mitglieder zu einer Gruppe hinzufügen." + +msgid "External member" +msgstr "Externes Mitglied" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +#, fuzzy +msgid "member user" +msgstr "Mitglieds-Benutzer" + +#, fuzzy +msgid "users to add" +msgstr "%s zum hinzufügen" + +#, fuzzy +msgid "member group" +msgstr "Mitglieds-Gruppen" + +#, fuzzy +msgid "groups to add" +msgstr "%s zum hinzufügen" + +msgid "Members that could not be added" +msgstr "Mitglieder, die nicht hinzugefügt werden konnten" + +msgid "Number of members added" +msgstr "Zahl der hinzugefügten Mitglieder" + +msgid "Delete group." +msgstr "Gruppe löschen." + +#, fuzzy +msgid "Detach a managed group from a user." +msgstr "Keine verwaltete Gruppe" + +msgid "Search for groups." +msgstr "Nach Gruppen suchen." + +msgid "search for private groups" +msgstr "nach privaten Gruppen suchen" + +#, fuzzy +msgid "search for POSIX groups" +msgstr "Nach Gruppen suchen." + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +#, fuzzy +msgid "search for non-POSIX groups" +msgstr "Nach Gruppen suchen." + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "user" +msgstr "Benutzer" + +#, fuzzy +msgid "Search for groups with these member users." +msgstr "Nach vorbereiteten Benutzern suchen." + +#, fuzzy +msgid "Search for groups without these member users." +msgstr "Nach vorbereiteten Benutzern suchen." + +msgid "group" +msgstr "Gruppe" + +#, fuzzy +msgid "Search for groups with these member groups." +msgstr "Nach Hostgruppen suchen." + +#, fuzzy +msgid "Search for groups without these member groups." +msgstr "Nach Hostgruppen suchen." + +#, fuzzy +msgid "Search for groups with these member of groups." +msgstr "Nach Hostgruppen suchen." + +msgid "Search for groups without these member of groups." +msgstr "" + +#, fuzzy +msgid "netgroup" +msgstr "Gruppe" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "Rolle" + +#, fuzzy +msgid "Search for groups with these member of roles." +msgstr "Suche nach Gruppen-Passwortregeln" + +#, fuzzy +msgid "Search for groups without these member of roles." +msgstr "Suche nach Gruppen-Passwortregeln" + +msgid "HBAC rule" +msgstr "HBAC-Regel" + +#, fuzzy +msgid "Search for groups with these member of HBAC rules." +msgstr "Nach HBAC-Regeln suchen." + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "Sudo-Regel" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +msgid "Modify a group." +msgstr "Eine Gruppe ändern." + +msgid "change to a POSIX group" +msgstr "in eine POSIC-Gruppe ändern" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +#, fuzzy +msgid "Rename the group object" +msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" + +msgid "Remove members from a group." +msgstr "Mitglieder aus einer Gruppe entfernen." + +#, fuzzy +msgid "users to remove" +msgstr "%s zum entfernen" + +#, fuzzy +msgid "groups to remove" +msgstr "%s zum entfernen" + +msgid "Members that could not be removed" +msgstr "Mitglieder, die nicht entfernt werden konnten" + +msgid "Number of members removed" +msgstr "Anzahl der entfernten Mitglieder" + +msgid "Display information about a named group." +msgstr "Informationen zu einer genannten Gruppe anzeigen." + msgid "" "\n" "Host-based access control\n" @@ -7119,12 +3981,57 @@ msgid "" " ipa hbacrule-del allow_server\n" msgstr "" +msgid "Rule name" +msgstr "Regelname" + +msgid "Rule type" +msgstr "Regeltyp" + +msgid "Rule type (allow)" +msgstr "Regeltyp (erlauben)" + +msgid "User category" +msgstr "Benutzerkategorie" + +msgid "User category the rule applies to" +msgstr "Benutzerkategorie, auf welche die Regel angewendet werden soll" + +msgid "Host category" +msgstr "Host-Kategorie" + +msgid "Host category the rule applies to" +msgstr "Host-Kategorie, auf welche die Regel angewendet werden soll" + +msgid "Service category" +msgstr "Dienstkategorie" + #, fuzzy msgid "Service category the rule applies to" msgstr "Dienstkategorie auf die ACL angewendet wird" -msgid "Suppress processing of membership attributes." -msgstr "" +msgid "Enabled" +msgstr "Aktiviert" + +msgid "User Groups" +msgstr "Benutzergruppen" + +msgid "Host Groups" +msgstr "Host-Gruppen" + +msgid "Services" +msgstr "Dienste" + +msgid "Service Groups" +msgstr "Dienstgruppen" + +msgid "External host" +msgstr "Externer Host" + +msgid "Create a new HBAC rule." +msgstr "Neue HBAC-Regel erstellen." + +msgid "Add target hosts and hostgroups to an HBAC rule." +msgstr "Ziel-Hosts und Hostgruppen zu einer HBAC-Regel hinzufügen." #, fuzzy msgid "member host" @@ -7142,6 +4049,9 @@ msgstr "Mitglieds-Hostgruppen" msgid "host groups to add" msgstr "Hostgruppen" +msgid "Add services to an HBAC rule." +msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." + #, fuzzy msgid "member HBAC service" msgstr "Mitglieds-HBAC-Dienst" @@ -7158,26 +4068,28 @@ msgstr "Mitglieds-HBAC-Servicegruppen" msgid "HBAC service groups to add" msgstr "HBAC-Dienstgruppen" -#, fuzzy -msgid "member user" -msgstr "Mitglieds-Benutzer" +msgid "Add users and groups to an HBAC rule." +msgstr "Benutzer und Gruppen zu einer HBAC-Regel hinzufügen." -#, fuzzy -msgid "users to add" -msgstr "%s zum hinzufügen" - -#, fuzzy -msgid "member group" -msgstr "Mitglieds-Gruppen" - -#, fuzzy -msgid "groups to add" -msgstr "%s zum hinzufügen" +msgid "Delete an HBAC rule." +msgstr "HBAC-Regel löschen" #, fuzzy msgid "Disable an HBAC rule." msgstr "HBAC-Regel aktivieren." +msgid "Enable an HBAC rule." +msgstr "HBAC-Regel aktivieren." + +msgid "Search for HBAC rules." +msgstr "Nach HBAC-Regeln suchen." + +msgid "Modify an HBAC rule." +msgstr "HBAC-Regel ändern" + +msgid "Remove target hosts and hostgroups from an HBAC rule." +msgstr "Ziel-Hosts und Hostgruppen von einer HBAC-Regel entfernen." + #, fuzzy msgid "hosts to remove" msgstr "%s zum entfernen" @@ -7186,6 +4098,9 @@ msgstr "%s zum entfernen" msgid "host groups to remove" msgstr "Hostgruppen" +msgid "Remove service and service groups from an HBAC rule." +msgstr "Dienste von einer HBAC-Gruppe entfernen." + #, fuzzy msgid "HBAC services to remove" msgstr "HBAC-Dienstgruppe" @@ -7194,13 +4109,11 @@ msgstr "HBAC-Dienstgruppe" msgid "HBAC service groups to remove" msgstr "HBAC-Dienstgruppen" -#, fuzzy -msgid "users to remove" -msgstr "%s zum entfernen" +msgid "Remove users and groups from an HBAC rule." +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." -#, fuzzy -msgid "groups to remove" -msgstr "%s zum entfernen" +msgid "Display the properties of an HBAC rule." +msgstr "Einstellungen der HBAC-Regel anzeigen." msgid "" "\n" @@ -7225,13 +4138,37 @@ msgid "" " ipa hbacsvc-del tftp\n" msgstr "" +msgid "Service name" +msgstr "Dienstname" + +msgid "HBAC service" +msgstr "HBAC-Dienst" + +msgid "HBAC service description" +msgstr "Beschreibung des HBAC-Dienstes" + #, fuzzy msgid "Member of HBAC service groups" msgstr "Mitglieds-HBAC-Servicegruppen" +msgid "Add a new HBAC service." +msgstr "Einen neuen HBAC-Dienst hinzufügen." + +msgid "Delete an existing HBAC service." +msgstr "Einen existierenden HBAC Dienst löschen." + +msgid "Search for HBAC services." +msgstr "Nach HBAC-Diensten suchen." + msgid "Results should contain primary key attribute only (\"service\")" msgstr "" +msgid "Modify an HBAC service." +msgstr "HBAC Dienst ändern" + +msgid "Display information about an HBAC service." +msgstr "Informationen zu einem HBAC-Dienst anzeigen." + msgid "" "\n" "HBAC Service Groups\n" @@ -7254,6 +4191,273 @@ msgid "" " ipa hbacsvcgroup-del login\n" msgstr "" +msgid "Service group name" +msgstr "Dienstgruppenname" + +msgid "HBAC service group description" +msgstr "Beschreibung der HBAC-Dienstgruppe" + +msgid "Member HBAC service" +msgstr "Mitglieds-HBAC-Dienst" + +msgid "Add a new HBAC service group." +msgstr "Eine neue HBAC-Dienstgruppe hinzufügen." + +msgid "Add members to an HBAC service group." +msgstr "Mitglieder zur einer HBAC-Dienstgruppe hinzufügen." + +msgid "Delete an HBAC service group." +msgstr "HBAC-Dienstgruppe löschen" + +msgid "Search for an HBAC service group." +msgstr "Suche nach HBAC Dienstgruppe" + +msgid "Modify an HBAC service group." +msgstr "HBAC-Dienstgruppe bearbeiten" + +msgid "Remove members from an HBAC service group." +msgstr "Mitglieder von einer HBAC-Dienstgruppe entfernen." + +msgid "Display information about an HBAC service group." +msgstr "Informationen über eine HBAC-Dienstgruppe anzeigen" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "HBAC Nutzung simulieren" + +msgid "User name" +msgstr "Benutzername" + +msgid "Target host" +msgstr "Ziel-Host" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +#, fuzzy +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "Maximale Anzahl an Ergebnissen für Suche (-1 ist unbegrenzt)" + +msgid "Warning" +msgstr "Warnung" + +msgid "Matched rules" +msgstr "Zutreffende Regeln" + +msgid "Not matched rules" +msgstr "Nicht zutreffende Regeln" + +msgid "Non-existent or invalid rules" +msgstr "Nicht-existente oder ungültige Regeln" + +msgid "Result of simulation" +msgstr "Ergebnis der Simulation" + msgid "" "\n" "Hosts/Machines\n" @@ -7318,19 +4522,67 @@ msgid "" " ipa host-allow-create-keytab test2 --users=tuser1\n" msgstr "" +msgid "Host name" +msgstr "Hostname" + +msgid "A description of this host" +msgstr "Beschreibung des Hosts" + +msgid "Locality" +msgstr "Ort" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "Ort des Hosts (z.B. \"Baltimore, MD\")" + #, fuzzy msgid "Host location (e.g. \"Lab 2\")" msgstr "Ort des Hosts (z.B. \"Baltimore, MD\")" +msgid "Platform" +msgstr "Plattform" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "Hardwareplattform (z.B. \"Lenovo T61\")" + +msgid "Operating system" +msgstr "Betriebssystem" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "Betriebssystem und Version (z.B. \"Fedora 9\")" + +msgid "User password" +msgstr "Benutzerpasswort" + msgid "Password used in bulk enrollment" msgstr "" msgid "Generate a random password to be used in bulk enrollment" msgstr "" +msgid "Random password" +msgstr "Zufälliges Passwort" + +msgid "Certificate" +msgstr "Zertifikat" + +msgid "Base-64 encoded server certificate" +msgstr "Base-64-kodiertes Serverzertifikat" + +msgid "Principal name" +msgstr "Principal-Name" + +msgid "MAC address" +msgstr "MAC-Adresse" + msgid "Hardware MAC address(es) on this host" msgstr "" +msgid "SSH public key" +msgstr "Öffentlicher SSH Schlüssel" + +msgid "Class" +msgstr "Klasse" + msgid "" "Host category (semantics placed on this attribute are for local " "interpretation)" @@ -7353,37 +4605,15 @@ msgstr "Delegation" msgid "Client credentials may be delegated to the service" msgstr "" -#, fuzzy -msgid "Member of netgroups" -msgstr "Mitglied der Gruppen" - -#, fuzzy -msgid "Member of Sudo rule" -msgstr "Mitglied einer Gruppe" - -#, fuzzy -msgid "Member of HBAC rule" -msgstr "Mitglieds-HBAC-Dienst" - -#, fuzzy -msgid "Indirect Member of netgroup" -msgstr "Indirekte Mitglieds-Gruppen" +msgid "Member of host-groups" +msgstr "Mitglied von Host-Gruppen" #, fuzzy msgid "Indirect Member of host-group" msgstr "Indirekte Mitglieds-Hostgruppen" -#, fuzzy -msgid "Indirect Member of role" -msgstr "Indirektes Mitglied von Rollen" - -#, fuzzy -msgid "Indirect Member of Sudo rule" -msgstr "Indirektes Mitglied von Rollen" - -#, fuzzy -msgid "Indirect Member of HBAC rule" -msgstr "Indirektes Mitglied von Rollen" +msgid "Keytab" +msgstr "Schlüsseltabelle" #, fuzzy msgid "Managed by" @@ -7393,12 +4623,89 @@ msgstr "Manager" msgid "Managing" msgstr "Manager" +msgid "Users allowed to retrieve keytab" +msgstr "Benutzer die Schlüsseltabelle abrufen dürfen" + +msgid "Groups allowed to retrieve keytab" +msgstr "Gruppen die Schlüsseltabelle abrufen dürfen" + +msgid "Hosts allowed to retrieve keytab" +msgstr "Hosts die Schlüsseltabelle abrufen dürfen" + +msgid "Host Groups allowed to retrieve keytab" +msgstr "Hostgruppen die Schlüsseltabelle abrufen dürfen" + +msgid "Users allowed to create keytab" +msgstr "Benutzer die Schlüsseltabelle erstellen dürfen" + +msgid "Groups allowed to create keytab" +msgstr "Gruppen die Schlüsseltabelle erstellen dürfen" + +msgid "Hosts allowed to create keytab" +msgstr "Hosts die Schlüsseltabelle erstellen dürfen" + +msgid "Host Groups allowed to create keytab" +msgstr "Hostgruppen die Schlüsseltabelle erstellen dürfen" + +msgid "Add a new host." +msgstr "Neuen Host hinzufügen." + +msgid "force host name even if not in DNS" +msgstr "Hostname erzwingen auch wenn nicht im DNS" + msgid "skip reverse DNS detection" msgstr "" +msgid "Add the host to DNS with this IP address" +msgstr "Host mit dieser IP zum DNS hinzufügen" + +msgid "Add hosts that can manage this host." +msgstr "Hosts hinzufügen die diesen Host verwalten dürfen." + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" +"Benutzern, Gruppen, Hosts und Hostgruppen erlauben die Schlüsseltabelle zu " +"erstellen." + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this host." +msgstr "" +"Benutzern, Gruppen, Hosts und Hostgruppen erlauben die Schlüsseltabelle zu " +"erhalten." + +msgid "Delete a host." +msgstr "Host löschen." + +msgid "Remove entries from DNS" +msgstr "DNS Einträge löschen" + +msgid "Disable the Kerberos key, SSL certificate and all services of a host." +msgstr "" +"Kerberos-Schlüssel, SSL-Zertifikat und alle Dienste des Hosts deaktivieren." + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" +"Benutzern, Gruppen, Hosts und Hostgruppen verbieten die Schlüsseltabelle zu " +"erstellen." + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"host." +msgstr "" +"Benutzern, Gruppen, Hosts und Hostgruppen verbieten die Schlüsseltabelle zu " +"erhalten." + +msgid "Search for hosts." +msgstr "Nach Hosts suchen." + msgid "Results should contain primary key attribute only (\"hostname\")" msgstr "" +msgid "host group" +msgstr "Hostgruppe" + #, fuzzy msgid "Search for hosts with these member of host groups." msgstr "Nach Hostgruppen suchen." @@ -7406,10 +4713,6 @@ msgstr "Nach Hostgruppen suchen." msgid "Search for hosts without these member of host groups." msgstr "" -#, fuzzy -msgid "netgroup" -msgstr "Gruppe" - #, fuzzy msgid "Search for hosts with these member of netgroups." msgstr "Nach Hostgruppen suchen." @@ -7444,6 +4747,9 @@ msgstr "Nach vorbereiteten Benutzern suchen." msgid "Search for hosts without these enrolled by users." msgstr "" +msgid "host" +msgstr "host" + #, fuzzy msgid "Search for hosts with these managed by hosts." msgstr "Hosts entfernen die diesen Host verwalten dürfen." @@ -7460,6 +4766,21 @@ msgstr "Hosts entfernen die diesen Host verwalten dürfen." msgid "Search for hosts without these managing hosts." msgstr "Hosts entfernen die diesen Host verwalten dürfen." +msgid "Modify information about a host." +msgstr "Hostinformationen ändern." + +msgid "Kerberos principal name for this host" +msgstr "Kerberos-Principal für diesen Host" + +msgid "Update DNS entries" +msgstr "DNS Einträge aktualisieren" + +msgid "Remove hosts that can manage this host." +msgstr "Hosts entfernen die diesen Host verwalten dürfen." + +msgid "Display information about a host." +msgstr "Informationen über Host anzeigen." + #, fuzzy msgid "file to store certificate in" msgstr "Datei, in der das Zertifikat gespeichert werden soll." @@ -7495,6 +4816,39 @@ msgid "" " ipa hostgroup-del baltimore\n" msgstr "" +msgid "Host-group" +msgstr "Hostgruppen" + +msgid "Name of host-group" +msgstr "Name der Hostgruppe" + +msgid "A description of this host-group" +msgstr "Beschreibung der Hostgruppe" + +msgid "Member hosts" +msgstr "Mitglieds-Hosts" + +msgid "Member host-groups" +msgstr "Mitglieds-Hostgruppen" + +msgid "Indirect Member hosts" +msgstr "Indirekte Mitglieds-Hosts" + +msgid "Indirect Member host-groups" +msgstr "Indirekte Mitglieds-Hostgruppen" + +msgid "Add a new hostgroup." +msgstr "Hostgruppe hinzufügen." + +msgid "Add members to a hostgroup." +msgstr "Mitglieder zur Hostgruppe hinzufügen." + +msgid "Delete a hostgroup." +msgstr "Hostgruppe löschen." + +msgid "Search for hostgroups." +msgstr "Nach Hostgruppen suchen." + msgid "Results should contain primary key attribute only (\"hostgroup-name\")" msgstr "" @@ -7536,6 +4890,248 @@ msgstr "" msgid "Search for host groups without these member of sudo rules." msgstr "" +msgid "Modify a hostgroup." +msgstr "Hostgruppe ändern." + +msgid "Remove members from a hostgroup." +msgstr "Mitglieder von Hostgruppe entfernen." + +msgid "Display information about a hostgroup." +msgstr "Informationen über die Hostgruppe anzeigen." + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +#, fuzzy +msgid "Range name" +msgstr "Umbenennen" + +msgid "First Posix ID of the range" +msgstr "" + +#, fuzzy +msgid "Number of IDs in the range" +msgstr "Anzahl der zurückgegebenen Einträge" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +#, fuzzy +msgid "Name of the trusted domain" +msgstr "DN der gestarteten Aufgabe" + +#, fuzzy +msgid "Range type" +msgstr "Regeltyp" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +#, fuzzy +msgid "Delete an ID range." +msgstr "Einen IPA-Dienst entfernen." + +#, fuzzy +msgid "Search for ranges." +msgstr "Nach Rollen suchen." + +#, fuzzy +msgid "Modify ID range." +msgstr "Rolle ändern." + +#, fuzzy +msgid "Display information about a range." +msgstr "Informationen über eine Rolle anzeigen." + msgid "" "\n" "ID Views\n" @@ -7553,10 +5149,28 @@ msgstr "" msgid "Anchor to override" msgstr "Benutzer zum Überschreiben" +msgid "Group ID Number" +msgstr "Gruppen-ID" + +msgid "User login" +msgstr "Anmeldename" + +msgid "UID" +msgstr "UID" + #, fuzzy msgid "User ID Number" msgstr "Gruppen-ID" +msgid "GECOS" +msgstr "GECOS" + +msgid "Home directory" +msgstr "Home-Verzeichnis" + +msgid "Login shell" +msgstr "Anmeldeshell" + msgid "ID View Name" msgstr "" @@ -7619,6 +5233,9 @@ msgid "" "hostgroups. If any other ID View is applied to the host, it is overriden." msgstr "" +msgid "hosts" +msgstr "hosts" + #, fuzzy msgid "Hosts to apply the ID View to" msgstr "Hostkategorie auf die ACL angewendet wird" @@ -7701,6 +5318,15 @@ msgstr "" msgid "Export plugin meta-data for the webUI." msgstr "" +msgid "Name of object to export" +msgstr "Name des zu exportierenden Objekts" + +msgid "Name of method to export" +msgstr "Name des zu exportierenden Methode" + +msgid "Name of command to export" +msgstr "Name des zu exportierenden Befehls" + msgid "Dict of JSON encoded IPA Objects" msgstr "" @@ -7721,6 +5347,15 @@ msgstr "" msgid "The hostname to register as" msgstr "" +msgid "The IPA realm" +msgstr "Der IPA-Realm" + +msgid "Hardware platform of the host (e.g. Lenovo T61)" +msgstr "Hardwareplattform des Hosts (z.B. Lenovo T400)" + +msgid "Operating System and version of the host (e.g. Fedora 9)" +msgstr "Betriebssystem und Version des Hosts (z.B. Fedora 20)" + msgid "" "\n" "Kerberos ticket policy\n" @@ -7886,9 +5521,18 @@ msgstr "" msgid "Migrate users and groups from DS to IPA." msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." +msgid "LDAP URI" +msgstr "LDAP-URI" + msgid "LDAP URI of DS server to migrate from" msgstr "" +msgid "bind password" +msgstr "Bind-Passwort" + +msgid "Bind DN" +msgstr "Bind-DN" + #, fuzzy msgid "User container" msgstr "Benutzername" @@ -7951,6 +5595,16 @@ msgid "" "GID and report as success" msgstr "" +msgid "LDAP schema" +msgstr "LDAP-Schema" + +msgid "" +"The schema used on the LDAP server. Supported values are RFC2307 and " +"RFC2307bis. The default is RFC2307bis" +msgstr "" +"Das auf dem LDAP-Server verwendete Schema. Zulässige Werte sind RFC2307 und " +"RFC2307bis. Der Vorgabewert ist RFC2307bis." + msgid "Continue" msgstr "" @@ -7983,6 +5637,13 @@ msgstr "" msgid "users to exclude from migration" msgstr "" +msgid "Lists of objects migrated; categorized by type." +msgstr "Liste der migrierten Objekte, nach Typ geordnet." + +msgid "Lists of objects that could not be migrated; categorized by type." +msgstr "" +"Liste der Objekte, die nicht migriert werden konnten, nach Typ geordnet." + #, fuzzy msgid "False if migration mode was disabled." msgstr "Migrationsmodus aktivieren" @@ -7995,8 +5656,17 @@ msgid "" "Misc plug-ins\n" msgstr "" -msgid "Dictionary mapping variable name to value" +msgid "Show environment variables." +msgstr "Umgebungsvariablen anzeigen." + +msgid "Forward to server instead of running locally" +msgstr "Zum Server weiterleiten, anstatt lokal auszuführen" + +msgid "" +"retrieve and print all attributes from the server. Affects command output." msgstr "" +"Ermittelt alle Attribute des Servers und gibt diese aus. Dies wirkt sich auf " +"die Befehlsausgabe aus." msgid "Total number of variables env (>= count)" msgstr "" @@ -8005,9 +5675,15 @@ msgstr "" msgid "Number of variables returned (<= total)" msgstr "Anzahl der zurückgegebenen Einträge" +msgid "Show all loaded plugins." +msgstr "Alle geladenen Plugins anzeigen." + msgid "Dictionary mapping plugin names to bases" msgstr "" +msgid "Number of plugins loaded" +msgstr "Anzahl der geladenen Plugins" + msgid "" "\n" "Netgroups\n" @@ -8065,6 +5741,9 @@ msgstr "Mitglieds-Benutzer" msgid "Member Group" msgstr "Mitglieds-Gruppen" +msgid "Member Host" +msgstr "Mitglieds-Host" + #, fuzzy msgid "Member Hostgroup" msgstr "Mitglieds-Hostgruppen" @@ -8179,22 +5858,183 @@ msgid "" " ipa hotpconfig-mod --hotp-sync-window=50\n" msgstr "" +msgid "TOTP authentication Window" +msgstr "TOTP Authentifizierungsfenster" + #, fuzzy msgid "TOTP authentication time variance (seconds)" msgstr "TOTP Authentifizierungsfenster" +msgid "TOTP Synchronization Window" +msgstr "TOTP Sychnronisierungsfenster" + #, fuzzy msgid "TOTP synchronization time variance (seconds)" msgstr "TOTP Sychnronisierungsfenster" +msgid "HOTP Authentication Window" +msgstr "HOTP Authentifizierungsfenster" + #, fuzzy msgid "HOTP authentication skip-ahead" msgstr "TOTP Authentifizierungsfenster" +msgid "HOTP Synchronization Window" +msgstr "HOTP Sychnronisierungsfenster" + #, fuzzy msgid "HOTP synchronization skip-ahead" msgstr "HOTP Sychnronisierungsfenster" +msgid "Modify OTP configuration options." +msgstr "OTP Konfigurationsoptionen bearbeiten." + +msgid "Show the current OTP configuration." +msgstr "Aktuelle OTP Konfiguration anzeigen" + +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "Eindeutige ID" + +msgid "Type of the token" +msgstr "Token-Typ" + +msgid "Token description (informational only)" +msgstr "Token Beschriebung (nur informativ)" + +msgid "Owner" +msgstr "Eigentümer" + +msgid "Assigned user of the token (default: self)" +msgstr "Zugewiesener Token-Benutzer (Standard: selbst)" + +msgid "Manager" +msgstr "Manager" + +msgid "Assigned manager of the token (default: self)" +msgstr "Zugewiesener Token-Verwalter (Standard: selbst)" + +msgid "Disabled" +msgstr "Deaktiviert" + +msgid "Mark the token as disabled (default: false)" +msgstr "Token als deaktiviert markieren (Standard: false)" + +msgid "Validity start" +msgstr "Gültig ab" + +msgid "First date/time the token can be used" +msgstr "Ab diesem Datum kann der Token benutzt werden" + +msgid "Validity end" +msgstr "Gültig bis" + +msgid "Last date/time the token can be used" +msgstr "Bis zu diesem Datum kann der Token benutzt werden" + +msgid "Vendor" +msgstr "Hersteller" + +msgid "Token vendor name (informational only)" +msgstr "Token-Hersteller (nur informativ)" + +msgid "Model" +msgstr "Modell" + +msgid "Token model (informational only)" +msgstr "Token-Modell (nur informativ)" + +msgid "Serial" +msgstr "Seriennummer" + +msgid "Token serial (informational only)" +msgstr "Token-Seriennummer (nur informativ)" + +msgid "Token secret (Base32; default: random)" +msgstr "Token-Geheimis (Base32; Standard: zufällig)" + +msgid "Token hash algorithm" +msgstr "Token Hash-Algorithmus" + +msgid "Digits" +msgstr "Zeichen" + +msgid "Number of digits each token code will have" +msgstr "Zeichenanzahl die jeder Token-Code haben wird" + +msgid "Clock offset" +msgstr "Zeit-Offset" + +msgid "TOTP token / IPA server time difference" +msgstr "Differenz zwischen Token und Serverzeit" + +msgid "Clock interval" +msgstr "Zeitintervall" + +msgid "Length of TOTP token code validity" +msgstr "Dauer die ein TOTP Code gültig ist " + +msgid "Counter" +msgstr "Zähler" + +msgid "Initial counter for the HOTP token" +msgstr "Startwert des HOTP-Zählers" + +msgid "Add a new OTP token." +msgstr "Neuen OTP-Token hinzufügen" + +msgid "(deprecated)" +msgstr "(veraltet)" + +msgid "Do not display QR code" +msgstr "Keinen QR Code zeigen" + +msgid "Add users that can manage this token." +msgstr "Nutzer hinzufügen die diesen Token verwalten können" + +msgid "Delete an OTP token." +msgstr "OTP Token löschen" + +msgid "Search for OTP token." +msgstr "OTP Token suchen." + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +msgid "Modify a OTP token." +msgstr "OTP Token bearbeiten" + +#, fuzzy +msgid "Rename the OTP token object" +msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" + +msgid "Display information about an OTP token." +msgstr "Informationen über OTP Token anzeigen." + msgid "" "\n" "YubiKey Tokens\n" @@ -8230,6 +6070,21 @@ msgid "" " ipa passwd tuser1\n" msgstr "" +msgid "Set a user's password." +msgstr "Passwort für einen Benutzer setzen." + +msgid "New Password" +msgstr "Neues Passwort" + +msgid "Current Password" +msgstr "Aktuelles Passwort" + +msgid "OTP" +msgstr "OTP" + +msgid "One Time Password" +msgstr "Einmalpasswort" + msgid "" "\n" "Permissions\n" @@ -8301,6 +6156,9 @@ msgid "" "\"Manage Group Members\"\n" msgstr "" +msgid "Permission name" +msgstr "Berechtigungsname" + msgid "Granted rights" msgstr "" @@ -8393,6 +6251,9 @@ msgstr "" msgid "Granted to Privilege" msgstr "" +msgid "Indirect Member of roles" +msgstr "Indirektes Mitglied von Rollen" + #, fuzzy msgid "Add a new permission." msgstr "Neue Rolle hinzufügen." @@ -8533,6 +6394,9 @@ msgstr "Principal-Name" msgid "Privilege description" msgstr "Beschreibung des HBAC-Dienstes" +msgid "Granting privilege to roles" +msgstr "Gebe Berechtigung den Rollen" + #, fuzzy msgid "Add a new privilege." msgstr "Neue Rolle hinzufügen." @@ -8553,6 +6417,12 @@ msgstr "%s zum hinzufügen" msgid "Add permissions to a privilege." msgstr "Berechtigungen zur Rolle hinzufügen." +msgid "permission" +msgstr "Berechtigung" + +msgid "permissions" +msgstr "Berechtigungen" + #, fuzzy msgid "Number of permissions added" msgstr "Anzahl der hinzugefügten Bedingungen" @@ -8638,12 +6508,90 @@ msgid "" " ipa pwpolicy-mod --minclasses=2 localadmins\n" msgstr "" +msgid "Group" +msgstr "Gruppe" + +msgid "Manage password policy for specific group" +msgstr "Passwortregel für eine bestimmte Gruppe bearbeiten" + +msgid "Max lifetime (days)" +msgstr "Max Dauer (Tage)" + +msgid "Maximum password lifetime (in days)" +msgstr "Maximale Passwortlebensdauer (in Tagen)" + +msgid "Min lifetime (hours)" +msgstr "Min Dauer (Stunden)" + +msgid "Minimum password lifetime (in hours)" +msgstr "Minimale Passwortlebensdauer (in Stunden)" + +msgid "History size" +msgstr "Historie" + +msgid "Password history size" +msgstr "Größe der Passworthistorie" + +msgid "Character classes" +msgstr "Zeichenklassen" + +msgid "Minimum number of character classes" +msgstr "Minimale Anzahl an Zeichenklassen" + +msgid "Min length" +msgstr "Min Länge" + +msgid "Minimum length of password" +msgstr "Minimale Passwortlänge" + +msgid "Priority of the policy (higher number means lower priority" +msgstr "Priorität der Regel (höhere Zahl meint niedrigere Priorität)" + +msgid "Max failures" +msgstr "Maximale Fehler" + +msgid "Consecutive failures before lockout" +msgstr "Aufeinanderfolgende Falscheingaben bevor gesperrt wird" + +msgid "Failure reset interval" +msgstr "Fehler Resetintervall" + +msgid "Period after which failure count will be reset (seconds)" +msgstr "Nach dieser Zeit wird der Fehlerzähler zurückgesetzt" + +msgid "Lockout duration" +msgstr "Sperrdauer" + +msgid "Period for which lockout is enforced (seconds)" +msgstr "Während dieser Zeit wird der Login gesperrt (Sekunden)" + msgid "Results should contain primary key attribute only (\"cn\")" msgstr "" +msgid "Add a new group password policy." +msgstr "Neue Gruppen-Passwortregel hinzufügen." + +msgid "Delete a group password policy." +msgstr "Gruppen-Passwortregel löschen." + +msgid "Search for group password policies." +msgstr "Suche nach Gruppen-Passwortregeln" + msgid "Results should contain primary key attribute only (\"group\")" msgstr "" +msgid "Modify a group password policy." +msgstr "Gruppen-Passwortregel bearbeiten." + +msgid "Display information about password policy." +msgstr "Informationen über Passwortregel anzeigen." + +msgid "User" +msgstr "Benutzer" + +msgid "Display effective policy for a specific user" +msgstr "Aktive Passwortregel für einen bestimmten Benutzer anzeigen" + msgid "" "\n" "RADIUS Proxy Servers\n" @@ -8680,6 +6628,9 @@ msgstr "RADIUS-Proxy Benutzername" msgid "A description of this RADIUS proxy server" msgstr "Beschreibung des Hosts" +msgid "Server" +msgstr "Server" + msgid "The hostname or IP (with or without port)" msgstr "" @@ -8756,6 +6707,9 @@ msgid "" " ipa realmdomains-mod --del-domain=olddomain.com\n" msgstr "" +msgid "Domain" +msgstr "Domain" + #, fuzzy msgid "Add domain" msgstr "Mehrere hinzufügen" @@ -8813,9 +6767,24 @@ msgid "" " add users, reset passwords or add a user to the default IPA user group.\n" msgstr "" +msgid "Role name" +msgstr "Rollenname" + +msgid "A description of this role-group" +msgstr "Beschreibung der Rollengruppe" + msgid "Privileges" msgstr "" +msgid "Member services" +msgstr "Mitglieds-Dienste" + +msgid "Add a new role." +msgstr "Neue Rolle hinzufügen." + +msgid "Add members to a role." +msgstr "Mitglieder zur Rolle hinzufügen." + #, fuzzy msgid "member service" msgstr "Mitglieds-Dienste" @@ -8824,20 +6793,47 @@ msgstr "Mitglieds-Dienste" msgid "services to add" msgstr "Dienste" +msgid "Add privileges to a role." +msgstr "Berechtigungen zur Rolle hinzufügen." + msgid "privilege" msgstr "" msgid "privileges" msgstr "" +msgid "Number of privileges added" +msgstr "Anzahl der hinzugefügten Berechtigungen" + +msgid "Delete a role." +msgstr "Rolle löschen." + +msgid "Search for roles." +msgstr "Nach Rollen suchen." + +msgid "Modify a role." +msgstr "Rolle ändern." + #, fuzzy msgid "Rename the role object" msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" +msgid "Remove members from a role." +msgstr "Mitglieder von Rolle entfernen." + #, fuzzy msgid "services to remove" msgstr "%s zum entfernen" +msgid "Remove privileges from a role." +msgstr "Berechtigungen von Rolle entfernen." + +msgid "Number of privileges removed" +msgstr "Anzahl der entfernten Berechtigungen" + +msgid "Display information about a role." +msgstr "Informationen über eine Rolle anzeigen." + msgid "" "\n" "Self-service Permissions\n" @@ -8952,6 +6948,12 @@ msgstr "" msgid "SELinux User" msgstr "Vorgegebener SELinux-Benutzer" +msgid "HBAC Rule" +msgstr "HBAC-Regel" + +msgid "HBAC Rule that defines the users, groups and hostgroups" +msgstr "HBAC Regel die Benutzer, Gruppen und Hostgruppen definiert" + #, fuzzy msgid "Create a new SELinux User Map." msgstr "Eine neue Gruppe erstellen." @@ -9060,6 +7062,9 @@ msgid "" "httpd.keytab\n" msgstr "" +msgid "Service principal" +msgstr "Dienst-Principal" + #, fuzzy msgid "PAC type" msgstr "Standard PAC-Typen" @@ -9069,10 +7074,16 @@ msgid "" "support for this service, e.g. this might be necessary for NFS services." msgstr "" +msgid "Add a new IPA new service." +msgstr "Einen neuen IPA-Dienst hinzufügen." + #, fuzzy msgid "force principal name even if not in DNS" msgstr "Hostname erzwingen auch wenn nicht im DNS" +msgid "Add hosts that can manage this service." +msgstr "Hosts hinzufügen, die diesen Dienst verwalten können." + #, fuzzy msgid "" "Allow users, groups, hosts or host groups to create a keytab of this service." @@ -9088,6 +7099,13 @@ msgstr "" "Benutzern, Gruppen, Hosts und Hostgruppen erlauben die Schlüsseltabelle zu " "erhalten." +msgid "Delete an IPA service." +msgstr "Einen IPA-Dienst entfernen." + +msgid "Disable the Kerberos key and SSL certificate of a service." +msgstr "" +"Den Kerberos-Schlüssel und das SSL-Zertifikat eines Dienstes deaktivieren." + #, fuzzy msgid "" "Disallow users, groups, hosts or host groups to create a keytab of this " @@ -9104,6 +7122,9 @@ msgstr "" "Benutzern, Gruppen, Hosts und Hostgruppen verbieten die Schlüsseltabelle zu " "erhalten." +msgid "Search for IPA services." +msgstr "Nach IPA-Diensten suchen." + msgid "Results should contain primary key attribute only (\"principal\")" msgstr "" @@ -9113,6 +7134,15 @@ msgstr "" msgid "Search for services without these managed by hosts." msgstr "" +msgid "Modify an existing IPA service." +msgstr "Einen existierenden IPA-Dienst bearbeiten." + +msgid "Remove hosts that can manage this service." +msgstr "Hosts entfernen, die diesen Dienst verwalten können." + +msgid "Display information about an IPA service." +msgstr "Informationen zu einem IPA-Dienst anzeigen." + msgid "" "\n" "Session Support for IPA\n" @@ -9726,9 +7756,33 @@ msgid "" " ipa sudocmd-del /usr/bin/less\n" msgstr "" +msgid "Sudo Command" +msgstr "Sudo-Befehl" + +msgid "A description of this command" +msgstr "Eine Beschreibung dieses Befehls" + +msgid "Sudo Command Groups" +msgstr "Sudo-Befehlsgruppen" + +msgid "Create new Sudo Command." +msgstr "Neuen Sudo-Befehl erzeugen." + +msgid "Delete Sudo Command." +msgstr "Sudo-Befehl löschen." + +msgid "Search for Sudo Commands." +msgstr "Nach Sudo-Befehlen suchen." + msgid "Results should contain primary key attribute only (\"command\")" msgstr "" +msgid "Modify Sudo Command." +msgstr "Sudo-Befehl ändern." + +msgid "Display Sudo Command." +msgstr "Sudo-Befehl anzeigen." + msgid "" "\n" "Groups of Sudo Commands\n" @@ -9754,6 +7808,12 @@ msgid "" " ipa group-show localadmins\n" msgstr "" +msgid "Sudo Command Group" +msgstr "Sudo-Befehlsgruppe" + +msgid "Commands" +msgstr "Befehle" + #, fuzzy msgid "Member Sudo commands" msgstr "Sudo-Befehle" @@ -9804,855 +7864,242 @@ msgstr "Sudo-Befehl anzeigen." msgid "" "\n" -"Users\n" +"Sudo Rules\n" "\n" -"Manage user entries. All users are POSIX users.\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" "\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" "\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" "\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" "\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" "\n" "EXAMPLES:\n" "\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" "\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" "\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" "\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" "\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" "\n" -" Delete a user:\n" -" ipa user-del tuser1\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" msgstr "" -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" +msgid "Command category" +msgstr "Befehlskategorie" + +msgid "Command category the rule applies to" +msgstr "Befehlskategorie, auf die die Regel angewendet werden soll" + +#, fuzzy +msgid "RunAs User category" +msgstr "Benutzerkategorie" + +#, fuzzy +msgid "RunAs User category the rule applies to" +msgstr "Benutzerkategorie, auf welche die Regel angewendet werden soll" + +#, fuzzy +msgid "RunAs Group category" +msgstr "Benutzerkategorie" + +#, fuzzy +msgid "RunAs Group category the rule applies to" +msgstr "Benutzerkategorie, auf welche die Regel angewendet werden soll" + +#, fuzzy +msgid "Sudo order" +msgstr "Sudo-Befehl" + +msgid "integer to order the Sudo rules" +msgstr "" + +msgid "External User" +msgstr "Externer Benutzer" + +msgid "External User the rule applies to (sudorule-find only)" msgstr "" #, fuzzy -msgid "Indirect Member of group" -msgstr "Indirekte Mitglieds-Gruppen" +msgid "Host Masks" +msgstr "Hosts" #, fuzzy -msgid "Don't create user private group" -msgstr "nach privaten Gruppen suchen" +msgid "Sudo Allow Commands" +msgstr "Sudo-Befehle" -msgid "Results should contain primary key attribute only (\"login\")" +#, fuzzy +msgid "Sudo Deny Commands" +msgstr "Sudo-Befehle" + +#, fuzzy +msgid "Sudo Allow Command Groups" +msgstr "Sudo-Befehlsgruppen" + +#, fuzzy +msgid "Sudo Deny Command Groups" +msgstr "Sudo-Befehlsgruppen" + +#, fuzzy +msgid "RunAs Users" +msgstr "Benutzer" + +#, fuzzy +msgid "Run as a user" +msgstr "Vorbereiteter Benutzer" + +msgid "Groups of RunAs Users" +msgstr "" + +msgid "Run as any user within a specified group" msgstr "" #, fuzzy -msgid "Search for users with these member of groups." -msgstr "nach privaten Gruppen suchen" +msgid "RunAs External User" +msgstr "Externer Benutzer" -#, fuzzy -msgid "Search for users without these member of groups." -msgstr "Nach Hostgruppen suchen." - -#, fuzzy -msgid "Search for users with these member of netgroups." -msgstr "Nach Hostgruppen suchen." - -#, fuzzy -msgid "Search for users without these member of netgroups." -msgstr "Nach Hostgruppen suchen." - -#, fuzzy -msgid "Search for users with these member of roles." -msgstr "" -"\n" -" Suche nach Auto-Mitgliedschaftsregeln.\n" -" " - -#, fuzzy -msgid "Search for users without these member of roles." -msgstr "" -"\n" -" Suche nach Auto-Mitgliedschaftsregeln.\n" -" " - -#, fuzzy -msgid "Search for users with these member of HBAC rules." -msgstr "Nach HBAC-Regeln suchen." - -#, fuzzy -msgid "Search for users without these member of HBAC rules." -msgstr "" -"\n" -" Suche nach Auto-Mitgliedschaftsregeln.\n" -" " - -msgid "Search for users with these member of sudo rules." +msgid "External User the commands can run as (sudorule-find only)" msgstr "" #, fuzzy -msgid "Search for users without these member of sudo rules." -msgstr "" -"\n" -" Suche nach Auto-Mitgliedschaftsregeln.\n" -" " +msgid "External Groups of RunAs Users" +msgstr "Externer Benutzer" -#, fuzzy -msgid "Rename the user object" -msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" +msgid "External Groups of users that the command can run as" msgstr "" #, fuzzy -msgid "Add an automember rule." -msgstr "" -"\n" -" Auto-Mitgliedschaftsregel hinzufügen.\n" -" " +msgid "RunAs Groups" +msgstr "Host-Gruppen" -#, fuzzy -msgid "Add conditions to an automember rule." -msgstr "" -"\n" -" Bedigungen zu einer Auto-Mitgliedschaftsregel hinzufügen.\n" -" " - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." +msgid "Run with the gid of a specified POSIX group" msgstr "" #, fuzzy -msgid "Default (fallback) group for entries to land" -msgstr "Vorgegebene Gruppe für Einträge" +msgid "RunAs External Group" +msgstr "Externe Vertrauensstellung" -#, fuzzy -msgid "Display information about the default (fallback) automember groups." -msgstr "Informationen zu einer genannten Gruppe anzeigen." - -#, fuzzy -msgid "Delete an automember rule." -msgstr "" -"\n" -" Auto-Mitgliedschaftsregel löschen.\n" -" " - -#, fuzzy -msgid "Search for automember rules." -msgstr "" -"\n" -" Suche nach Auto-Mitgliedschaftsregeln.\n" -" " - -#, fuzzy -msgid "Modify an automember rule." -msgstr "" -"\n" -" Auto-Mitgliedschaftsregel bearbeiten. " - -#, fuzzy -msgid "Don't wait for rebuilding membership" -msgstr "" -"Sind Sie sicher, dass sie die Auto-Mitgliedschaft neu erstellen wollen?" - -#, fuzzy -msgid "Remove conditions from an automember rule." -msgstr "" -"\n" -" Bedingungen von einer einer Auto-Mitglieschaftsregel entfernen. " - -#, fuzzy -msgid "Display information about an automember rule." -msgstr "" -"\n" -" Informationen über Auto-Mitgliedschaftsregel anzeigen.\n" -" " - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" +msgid "External Group the commands can run as (sudorule-find only)" msgstr "" -msgid "Checks if any of the servers has the CA service enabled." +msgid "Sudo Option" +msgstr "Sudo-Option" + +#, fuzzy +msgid "Create new Sudo Rule." +msgstr "Neuen Sudo-Befehl erzeugen." + +msgid "Add commands and sudo command groups affected by Sudo Rule." msgstr "" #, fuzzy -msgid "Search for existing certificates." -msgstr "Ein existierendes Zertifikat holen." +msgid "member sudo command group" +msgstr "Sudo-Befehlsgruppe" -msgid "Match cn attribute in subject" +#, fuzzy +msgid "sudo command groups to add" +msgstr "Sudo-Befehlsgruppen" + +#, fuzzy +msgid "Add hosts and hostgroups affected by Sudo Rule." +msgstr "Ziel-Hosts und Hostgruppen zu einer HBAC-Regel hinzufügen." + +msgid "host masks of allowed hosts" +msgstr "" + +msgid "Add an option to the Sudo Rule." +msgstr "" + +msgid "Add group for Sudo to execute as." msgstr "" #, fuzzy -msgid "minimum serial number" -msgstr "Seriennummer" +msgid "Add users and groups for Sudo to execute as." +msgstr "Benutzer und Gruppen zu einer HBAC-Regel hinzufügen." #, fuzzy -msgid "maximum serial number" -msgstr "Seriennummer" +msgid "Add users and groups affected by Sudo Rule." +msgstr "Benutzer und Gruppen zu einer HBAC-Regel hinzufügen." -msgid "match the common name exactly" -msgstr "" +#, fuzzy +msgid "Delete Sudo Rule." +msgstr "Eine Sudo-Regel deaktivieren." -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" +msgid "Disable a Sudo Rule." +msgstr "Eine Sudo-Regel deaktivieren." -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" +msgid "Enable a Sudo Rule." +msgstr "Eine Sudo-Regel aktivieren." -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" +msgid "Search for Sudo Rule." +msgstr "Nach Sudo-Regel suchen." -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" +msgid "Results should contain primary key attribute only (\"sudorule-name\")" msgstr "" #, fuzzy -msgid "Maximum number of certs returned" -msgstr "Maximale Anzahl der zurückgegebenen Einträge" +msgid "Modify Sudo Rule." +msgstr "Sudo-Regel anzeigen." -#, fuzzy -msgid "Take a revoked certificate off hold." -msgstr "Ein Zertifikat widerrufen." - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgid "Remove commands and sudo command groups affected by Sudo Rule." msgstr "" #, fuzzy -msgid "Detach a managed group from a user." -msgstr "Keine verwaltete Gruppe" +msgid "sudo command groups to remove" +msgstr "Sudo-Befehlsgruppen" #, fuzzy -msgid "search for POSIX groups" -msgstr "Nach Gruppen suchen." +msgid "Remove hosts and hostgroups affected by Sudo Rule." +msgstr "Ziel-Hosts und Hostgruppen von einer HBAC-Regel entfernen." -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" +#, fuzzy +msgid "Remove an option from Sudo Rule." +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +msgid "Remove group for Sudo to execute as." msgstr "" #, fuzzy -msgid "search for non-POSIX groups" -msgstr "Nach Gruppen suchen." - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" +msgid "Remove users and groups for Sudo to execute as." +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." #, fuzzy -msgid "Search for groups with these member users." -msgstr "Nach vorbereiteten Benutzern suchen." +msgid "Remove users and groups affected by Sudo Rule." +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." -#, fuzzy -msgid "Search for groups without these member users." -msgstr "Nach vorbereiteten Benutzern suchen." - -#, fuzzy -msgid "Search for groups with these member groups." -msgstr "Nach Hostgruppen suchen." - -#, fuzzy -msgid "Search for groups without these member groups." -msgstr "Nach Hostgruppen suchen." - -#, fuzzy -msgid "Search for groups with these member of groups." -msgstr "Nach Hostgruppen suchen." - -msgid "Search for groups without these member of groups." -msgstr "" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -#, fuzzy -msgid "Search for groups with these member of roles." -msgstr "Suche nach Gruppen-Passwortregeln" - -#, fuzzy -msgid "Search for groups without these member of roles." -msgstr "Suche nach Gruppen-Passwortregeln" - -#, fuzzy -msgid "Search for groups with these member of HBAC rules." -msgstr "Nach HBAC-Regeln suchen." - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -#, fuzzy -msgid "Rename the group object" -msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -#, fuzzy -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "Maximale Anzahl an Ergebnissen für Suche (-1 ist unbegrenzt)" +msgid "Display Sudo Rule." +msgstr "Sudo-Regel anzeigen." msgid "" "\n" @@ -10836,10 +8283,6 @@ msgstr "" msgid "Size of the ID range reserved for the trusted domain" msgstr "" -#, fuzzy -msgid "Range type" -msgstr "Regeltyp" - msgid "" "Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" msgstr "" @@ -10906,6 +8349,565 @@ msgstr "" msgid "Modify trustdomain of the trust" msgstr "" +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "Vorname" + +msgid "Last name" +msgstr "Nachname" + +msgid "Full name" +msgstr "Vollständiger Name" + +msgid "Display name" +msgstr "Angezeigter Name" + +msgid "Initials" +msgstr "Initialen" + +msgid "Kerberos principal" +msgstr "Kerberos-Principal" + +msgid "Kerberos principal expiration" +msgstr "Kerberos-Principal Ablauf" + +msgid "Email address" +msgstr "Email-Adresse" + +msgid "Prompt to set the user password" +msgstr "Zum Setzen des Passworts auffordern" + +msgid "Generate a random user password" +msgstr "Ein zufälliges Benutzerpasswort erzeugen" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" +"Benutzer-ID (wird durch das System zugewiesen, falls diese nicht angegeben " +"wird)" + +msgid "Street address" +msgstr "Straße" + +msgid "City" +msgstr "Ort" + +msgid "State/Province" +msgstr "Staat/Bundesland" + +msgid "ZIP" +msgstr "Postleitzahl" + +msgid "Telephone Number" +msgstr "Telefonnummer" + +msgid "Mobile Telephone Number" +msgstr "Mobiltelefonnummer" + +msgid "Pager Number" +msgstr "Pagernummer" + +msgid "Fax Number" +msgstr "Faxnummer" + +msgid "Org. Unit" +msgstr "Org. Einheit" + +msgid "Job Title" +msgstr "Tätigkeit" + +msgid "Car License" +msgstr "Kfz-Kennzeichen" + +msgid "Account disabled" +msgstr "Konto ist deaktiviert" + +msgid "User authentication types" +msgstr "Authentifizierungsmethoden" + +msgid "Types of supported user authentication" +msgstr "Unterstützte Authentifizierungsmethoden" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "RADIUS proxy configuration" +msgstr "RADIUS-Proxy Konfiguration" + +msgid "RADIUS proxy username" +msgstr "RADIUS-Proxy Benutzername" + +msgid "Department Number" +msgstr "Abteilungsnummer" + +msgid "Employee Number" +msgstr "Personalnummer" + +msgid "Employee Type" +msgstr "Personaltyp" + +msgid "Preferred Language" +msgstr "Bevorzugte Sprache" + +msgid "Kerberos keys available" +msgstr "Kerberos-Schlüssel verfügbar" + +msgid "Add a new user." +msgstr "Einen neuen Benutzer hinzufügen." + +#, fuzzy +msgid "Don't create user private group" +msgstr "nach privaten Gruppen suchen" + +msgid "Delete a user." +msgstr "Einen Benutzer löschen." + +msgid "Disable a user account." +msgstr "Ein Benutzerkonto deaktivieren." + +msgid "Enable a user account." +msgstr "Ein Benutzerkonto aktivieren." + +msgid "Search for users." +msgstr "Nach Benutzern suchen." + +msgid "Self" +msgstr "Selbst" + +msgid "Display user record for current Kerberos principal" +msgstr "Benutzer-Datensatz für den aktuellen Kerberos-Principal anzeigen" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +#, fuzzy +msgid "Search for users with these member of groups." +msgstr "nach privaten Gruppen suchen" + +#, fuzzy +msgid "Search for users without these member of groups." +msgstr "Nach Hostgruppen suchen." + +#, fuzzy +msgid "Search for users with these member of netgroups." +msgstr "Nach Hostgruppen suchen." + +#, fuzzy +msgid "Search for users without these member of netgroups." +msgstr "Nach Hostgruppen suchen." + +#, fuzzy +msgid "Search for users with these member of roles." +msgstr "" +"\n" +" Suche nach Auto-Mitgliedschaftsregeln.\n" +" " + +#, fuzzy +msgid "Search for users without these member of roles." +msgstr "" +"\n" +" Suche nach Auto-Mitgliedschaftsregeln.\n" +" " + +#, fuzzy +msgid "Search for users with these member of HBAC rules." +msgstr "Nach HBAC-Regeln suchen." + +#, fuzzy +msgid "Search for users without these member of HBAC rules." +msgstr "" +"\n" +" Suche nach Auto-Mitgliedschaftsregeln.\n" +" " + +msgid "Search for users with these member of sudo rules." +msgstr "" + +#, fuzzy +msgid "Search for users without these member of sudo rules." +msgstr "" +"\n" +" Suche nach Auto-Mitgliedschaftsregeln.\n" +" " + +msgid "Modify a user." +msgstr "Einen Benutzer bearbeiten." + +#, fuzzy +msgid "Rename the user object" +msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" + +msgid "Display information about a user." +msgstr "Informationen zu einem Benutzer anzeigen." + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + +#, fuzzy +msgid "Time limit of search in seconds (0 is unlimited)" +msgstr "Zeitbegrenzung für den Suchvorgang in Sekunden" + +#, fuzzy +msgid "Maximum number of entries returned (0 is unlimited)" +msgstr "Maximale Anzahl der zurückgegebenen Einträge" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which principals are\n" +"permitted to have certificates issued using a given certificate\n" +"profile.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile:\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "ACL name" +msgstr "ACL Name" + +msgid "Profile category" +msgstr "Profilkategorie" + +msgid "Profile category the ACL applies to" +msgstr "Profilkategorie auf die ACL angewendet wird" + +msgid "User category the ACL applies to" +msgstr "Benutzerkategorie auf die ACL angewendet wird" + +msgid "Host category the ACL applies to" +msgstr "Hostkategorie auf die ACL angewendet wird" + +msgid "Service category the ACL applies to" +msgstr "Dienstkategorie auf die ACL angewendet wird" + +msgid "Profiles" +msgstr "Profile" + +msgid "Create a new CA ACL." +msgstr "Erstelle eine neue CA ACL." + +#, fuzzy +msgid "Add target hosts and hostgroups to a CA ACL." +msgstr "Ziel-Hosts und Hostgruppen zu einer HBAC-Regel hinzufügen." + +#, fuzzy +msgid "Add profiles to a CA ACL." +msgstr "Berechtigungen zur Rolle hinzufügen." + +#, fuzzy +msgid "member Certificate Profile" +msgstr "Benutze Zertifikatsprofil" + +#, fuzzy +msgid "Certificate Profiles to add" +msgstr "Benutze Zertifikatsprofil" + +#, fuzzy +msgid "Add services to a CA ACL." +msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." + +#, fuzzy +msgid "Add users and groups to a CA ACL." +msgstr "Benutzer und Gruppen zu einer HBAC-Regel hinzufügen." + +msgid "Delete a CA ACL." +msgstr "CA ACL löschen." + +#, fuzzy +msgid "Disable a CA ACL." +msgstr "CA ACL löschen." + +#, fuzzy +msgid "Enable a CA ACL." +msgstr "CA ACL löschen." + +#, fuzzy +msgid "Search for CA ACLs." +msgstr "Nach HBAC-Regeln suchen." + +msgid "Modify a CA ACL." +msgstr "CA ACL ändern" + +#, fuzzy +msgid "Remove target hosts and hostgroups from a CA ACL." +msgstr "Ziel-Hosts und Hostgruppen von einer HBAC-Regel entfernen." + +#, fuzzy +msgid "Remove profiles from a CA ACL." +msgstr "Berechtigungen von Rolle entfernen." + +#, fuzzy +msgid "Certificate Profiles to remove" +msgstr "Benutze Zertifikatsprofil" + +#, fuzzy +msgid "Remove services from a CA ACL." +msgstr "Berechtigungen von Rolle entfernen." + +#, fuzzy +msgid "Remove users and groups from a CA ACL." +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +#, fuzzy +msgid "Display the properties of a CA ACL." +msgstr "Einstellungen der HBAC-Regel anzeigen." + +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "Principal für dieses Zertifikat (z.B. HTTP/test.example.com)" + +msgid "Profile ID" +msgstr "Profil-ID" + +msgid "Certificate Profile to use" +msgstr "Benutze Zertifikatsprofil" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +#, fuzzy +msgid "Profile description" +msgstr "Gruppenbeschreibung" + +#, fuzzy +msgid "Brief description of this profile" +msgstr "Beschreibung der Rollengruppe" + +#, fuzzy +msgid "Store issued certificates" +msgstr "Kein gültiges Zertifikat" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +#, fuzzy +msgid "Delete a Certificate Profile." +msgstr "Benutze Zertifikatsprofil" + +#, fuzzy +msgid "Search for Certificate Profiles." +msgstr "Nach Rollen suchen." + +#, fuzzy +msgid "Import a Certificate Profile." +msgstr "Benutze Zertifikatsprofil" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +#, fuzzy +msgid "Modify Certificate Profile configuration." +msgstr "Benutze Zertifikatsprofil" + +#, fuzzy +msgid "File containing profile configuration" +msgstr "Replikationseinstellungen" + +#, fuzzy +msgid "Display the properties of a Certificate Profile." +msgstr "Einstellungen der HBAC-Regel anzeigen." + +#, fuzzy +msgid "Write profile configuration to file" +msgstr "Konfigurationsdatei %s konnte nicht geöffnet werden\n" + +#, fuzzy +msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" +msgstr "Maximale Zeit in Sekunden für eine Suche (>0 oder -1 für unbegrenzt)" + +#, fuzzy +msgid "Maximum number of records to search (-1 or 0 is unlimited)" +msgstr "Maximale Anzahl an Ergebnissen für Suche (-1 ist unbegrenzt)" + +msgid "" +"\n" +"Raise the IPA Domain Level.\n" +msgstr "" +"\n" +"IPA Domain Level erhöhen.\n" + +msgid "Query current Domain Level." +msgstr "Aktuelles Domain Level abfragen." + +msgid "Current domain level:" +msgstr "Aktuelles Domain Level:" + +msgid "Change current Domain Level." +msgstr "Aktuelles Domain Level ändern." + +msgid "Domain Level" +msgstr "Domain Level" + +msgid "Add certificates to host entry" +msgstr "" + +#, fuzzy +msgid "Remove certificates from host entry" +msgstr "Mitglieder von Hostgruppe entfernen." + msgid "" "\n" "ID ranges\n" @@ -11037,6 +9039,7 @@ msgid "" "user. RIDs are unique in a domain, 32bit values and are used for users and\n" "groups.\n" "\n" +"=======\n" "WARNING:\n" "\n" "DNA plugin in 389-ds will allocate IDs based on the ranges configured for " @@ -11051,33 +9054,7 @@ msgid "" "IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " "be\n" "modified to match the new range.\n" -msgstr "" - -#, fuzzy -msgid "Range name" -msgstr "Umbenennen" - -msgid "First Posix ID of the range" -msgstr "" - -#, fuzzy -msgid "Number of IDs in the range" -msgstr "Anzahl der zurückgegebenen Einträge" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -#, fuzzy -msgid "Name of the trusted domain" -msgstr "DN der gestarteten Aufgabe" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +"=======\n" msgstr "" msgid "" @@ -11101,405 +9078,48 @@ msgid "" "\n" " must be given to add a new range for a trusted AD domain.\n" "\n" -" WARNING:\n" +"=======\n" +"WARNING:\n" "\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " "based\n" -" on the local ranges set via this family of commands.\n" +"on the local ranges set via this family of commands.\n" "\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" " " msgstr "" -#, fuzzy -msgid "Delete an ID range." -msgstr "Einen IPA-Dienst entfernen." - -#, fuzzy -msgid "Search for ranges." -msgstr "Nach Rollen suchen." - -#, fuzzy -msgid "Modify ID range." -msgstr "Rolle ändern." - -#, fuzzy -msgid "Display information about a range." -msgstr "Informationen über eine Rolle anzeigen." - msgid "" "\n" -"OTP Tokens\n" +"Modify ID range.\n" "\n" -"Manage OTP tokens.\n" +"=======\n" +"WARNING:\n" "\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" "\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " msgstr "" -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -#, fuzzy -msgid "Rename the OTP token object" -msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -#, fuzzy -msgid "RunAs User category" -msgstr "Benutzerkategorie" - -#, fuzzy -msgid "RunAs User category the rule applies to" -msgstr "Benutzerkategorie, auf welche die Regel angewendet werden soll" - -#, fuzzy -msgid "RunAs Group category" -msgstr "Benutzerkategorie" - -#, fuzzy -msgid "RunAs Group category the rule applies to" -msgstr "Benutzerkategorie, auf welche die Regel angewendet werden soll" - -#, fuzzy -msgid "Sudo order" -msgstr "Sudo-Befehl" - -msgid "integer to order the Sudo rules" -msgstr "" - -msgid "External User the rule applies to (sudorule-find only)" -msgstr "" - -#, fuzzy -msgid "Host Masks" -msgstr "Hosts" - -#, fuzzy -msgid "Sudo Allow Commands" -msgstr "Sudo-Befehle" - -#, fuzzy -msgid "Sudo Deny Commands" -msgstr "Sudo-Befehle" - -#, fuzzy -msgid "Sudo Allow Command Groups" -msgstr "Sudo-Befehlsgruppen" - -#, fuzzy -msgid "Sudo Deny Command Groups" -msgstr "Sudo-Befehlsgruppen" - -#, fuzzy -msgid "RunAs Users" -msgstr "Benutzer" - -#, fuzzy -msgid "Run as a user" -msgstr "Vorbereiteter Benutzer" - -msgid "Groups of RunAs Users" -msgstr "" - -msgid "Run as any user within a specified group" -msgstr "" - -#, fuzzy -msgid "RunAs External User" -msgstr "Externer Benutzer" - -msgid "External User the commands can run as (sudorule-find only)" -msgstr "" - -#, fuzzy -msgid "External Groups of RunAs Users" -msgstr "Externer Benutzer" - -msgid "External Groups of users that the command can run as" -msgstr "" - -#, fuzzy -msgid "RunAs Groups" -msgstr "Host-Gruppen" - -msgid "Run with the gid of a specified POSIX group" -msgstr "" - -#, fuzzy -msgid "RunAs External Group" -msgstr "Externe Vertrauensstellung" - -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "" - -#, fuzzy -msgid "Create new Sudo Rule." -msgstr "Neuen Sudo-Befehl erzeugen." - -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "" - -#, fuzzy -msgid "member sudo command group" -msgstr "Sudo-Befehlsgruppe" - -#, fuzzy -msgid "sudo command groups to add" -msgstr "Sudo-Befehlsgruppen" - -#, fuzzy -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "Ziel-Hosts und Hostgruppen zu einer HBAC-Regel hinzufügen." - -msgid "host masks of allowed hosts" -msgstr "" - -msgid "Add an option to the Sudo Rule." -msgstr "" - -msgid "Add group for Sudo to execute as." -msgstr "" - -#, fuzzy -msgid "Add users and groups for Sudo to execute as." -msgstr "Benutzer und Gruppen zu einer HBAC-Regel hinzufügen." - -#, fuzzy -msgid "Add users and groups affected by Sudo Rule." -msgstr "Benutzer und Gruppen zu einer HBAC-Regel hinzufügen." - -#, fuzzy -msgid "Delete Sudo Rule." -msgstr "Eine Sudo-Regel deaktivieren." - -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "" - -#, fuzzy -msgid "Modify Sudo Rule." -msgstr "Sudo-Regel anzeigen." - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "" - -#, fuzzy -msgid "sudo command groups to remove" -msgstr "Sudo-Befehlsgruppen" - -#, fuzzy -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "Ziel-Hosts und Hostgruppen von einer HBAC-Regel entfernen." - -#, fuzzy -msgid "Remove an option from Sudo Rule." -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -msgid "Remove group for Sudo to execute as." -msgstr "" - -#, fuzzy -msgid "Remove users and groups for Sudo to execute as." -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -#, fuzzy -msgid "Remove users and groups affected by Sudo Rule." -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -#, fuzzy -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "Zeitbegrenzung für den Suchvorgang in Sekunden" - -#, fuzzy -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "Maximale Anzahl der zurückgegebenen Einträge" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which principals are\n" -"permitted to have certificates issued using a given certificate\n" -"profile.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -#, fuzzy -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "Ziel-Hosts und Hostgruppen zu einer HBAC-Regel hinzufügen." - -#, fuzzy -msgid "Add profiles to a CA ACL." -msgstr "Berechtigungen zur Rolle hinzufügen." - -#, fuzzy -msgid "member Certificate Profile" -msgstr "Benutze Zertifikatsprofil" - -#, fuzzy -msgid "Certificate Profiles to add" -msgstr "Benutze Zertifikatsprofil" - -#, fuzzy -msgid "Add services to a CA ACL." -msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." - -#, fuzzy -msgid "Add users and groups to a CA ACL." -msgstr "Benutzer und Gruppen zu einer HBAC-Regel hinzufügen." - -#, fuzzy -msgid "Disable a CA ACL." -msgstr "CA ACL löschen." - -#, fuzzy -msgid "Enable a CA ACL." -msgstr "CA ACL löschen." - -#, fuzzy -msgid "Search for CA ACLs." -msgstr "Nach HBAC-Regeln suchen." - -#, fuzzy -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "Ziel-Hosts und Hostgruppen von einer HBAC-Regel entfernen." - -#, fuzzy -msgid "Remove profiles from a CA ACL." -msgstr "Berechtigungen von Rolle entfernen." - -#, fuzzy -msgid "Certificate Profiles to remove" -msgstr "Benutze Zertifikatsprofil" - -#, fuzzy -msgid "Remove services from a CA ACL." -msgstr "Berechtigungen von Rolle entfernen." - -#, fuzzy -msgid "Remove users and groups from a CA ACL." -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -#, fuzzy -msgid "Display the properties of a CA ACL." -msgstr "Einstellungen der HBAC-Regel anzeigen." - -#, fuzzy -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "Maximale Zeit in Sekunden für eine Suche (>0 oder -1 für unbegrenzt)" - -#, fuzzy -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "Maximale Anzahl an Ergebnissen für Suche (-1 ist unbegrenzt)" - -msgid "Add certificates to host entry" -msgstr "" - -#, fuzzy -msgid "Remove certificates from host entry" -msgstr "Mitglieder von Hostgruppe entfernen." - msgid "Fallback to AD DC LDAP" msgstr "" @@ -11529,6 +9149,9 @@ msgid "" "to onelevel" msgstr "" +msgid "Remove users that can manage this token." +msgstr "Nutzer entfernen die diesen Token verwalten können" + #, fuzzy msgid "Target DN subtree" msgstr "Ziel-Host" @@ -11561,6 +9184,12 @@ msgid "" " ipa server-show ipa.example.com\n" msgstr "" +msgid "Server name" +msgstr "Servername" + +msgid "IPA server hostname" +msgstr "IPA-Server Hostname" + msgid "Managed suffix" msgstr "" @@ -11791,6 +9420,21 @@ msgid "" " ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" msgstr "" +msgid "Activate a stage user." +msgstr "Vorbereiteten Benutzer aktivieren." + +msgid "Add a new stage user." +msgstr "Einen neuen vorbereiteten Benutzer hinzufügen." + +msgid "Create Stage user in from a delete user" +msgstr "Erstelle vorbereiteten Benutzer aus einem gelöschten Benutzer" + +msgid "Delete a stage user." +msgstr "Einen vorbereiteten Benutzer löschen." + +msgid "Search for stage users." +msgstr "Nach vorbereiteten Benutzern suchen." + #, fuzzy msgid "Search for stage users with these member of groups." msgstr "Nach vorbereiteten Benutzern suchen." @@ -11824,10 +9468,16 @@ msgstr "" msgid "Search for stage users without these member of sudo rules." msgstr "" +msgid "Modify a stage user." +msgstr "Einen vorbereiteten Benutzer ändern." + #, fuzzy msgid "Rename the stage user object" msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" +msgid "Display information about a stage user." +msgstr "Informationen zu einem vorbereiteten Benutzer anzeigen." + msgid "" "\n" "Topology\n" @@ -11978,6 +9628,16 @@ msgid "" " " msgstr "" +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + +msgid "Preserved user" +msgstr "Aufbewahrter Benutzer" + #, fuzzy msgid "Add one or more certificates to the user entry" msgstr "Manager zum Benutzer hinzufügen" @@ -11986,6 +9646,12 @@ msgstr "Manager zum Benutzer hinzufügen" msgid "Remove one or more certificates to the user entry" msgstr "Manager vom Benutzer entfernen" +msgid "Move deleted user into staged area" +msgstr "Gelöschten Benutzer in vorbereitete Benutzer verschieben" + +msgid "Undelete a delete user account." +msgstr "Gelöschten Benutzer wiederherstellen" + msgid "" "\n" "Vaults\n" @@ -12295,330 +9961,6 @@ msgstr "Mitglieder von Rolle entfernen." msgid "Display information about a vault container." msgstr "Informationen zu einem Benutzer anzeigen." -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -#, fuzzy -msgid "Profile description" -msgstr "Gruppenbeschreibung" - -#, fuzzy -msgid "Brief description of this profile" -msgstr "Beschreibung der Rollengruppe" - -#, fuzzy -msgid "Store issued certificates" -msgstr "Kein gültiges Zertifikat" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -#, fuzzy -msgid "Delete a Certificate Profile." -msgstr "Benutze Zertifikatsprofil" - -#, fuzzy -msgid "Search for Certificate Profiles." -msgstr "Nach Rollen suchen." - -#, fuzzy -msgid "Import a Certificate Profile." -msgstr "Benutze Zertifikatsprofil" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -#, fuzzy -msgid "Modify Certificate Profile configuration." -msgstr "Benutze Zertifikatsprofil" - -#, fuzzy -msgid "File containing profile configuration" -msgstr "Replikationseinstellungen" - -#, fuzzy -msgid "Display the properties of a Certificate Profile." -msgstr "Einstellungen der HBAC-Regel anzeigen." - -#, fuzzy -msgid "Write profile configuration to file" -msgstr "Konfigurationsdatei %s konnte nicht geöffnet werden\n" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - msgid "Resolve a host name in DNS. (Deprecated)" msgstr "" @@ -12949,6 +10291,9 @@ msgstr "Nach vorbereiteten Benutzern suchen." msgid "Search for servers without these managed suffixes." msgstr "" +msgid "Add a manager to the stage user entry" +msgstr "Manager zum vorbereiteten Benutzer hinzufügen" + #, fuzzy msgid "Remove a manager to the stage user entry" msgstr "Manager vom Benutzer entfernen" @@ -13025,6 +10370,12 @@ msgstr "" msgid "Search for topology suffixes." msgstr "Nach Rollen suchen." +msgid "Add a manager to the user entry" +msgstr "Manager zum Benutzer hinzufügen" + +msgid "Remove a manager to the user entry" +msgstr "Manager vom Benutzer entfernen" + msgid "" "\n" "Directory Server Access Control Instructions (ACIs)\n" @@ -13557,6 +10908,9 @@ msgstr "" msgid "An interval between regular polls of the name server for new DNS zones" msgstr "" +msgid "DNS class" +msgstr "DNS-Klasse" + msgid "Comma-separated list of raw A records" msgstr "" @@ -13862,6 +11216,9 @@ msgstr "" msgid "Register to the entitlement system." msgstr "" +msgid "Username" +msgstr "Benutzername" + #, fuzzy msgid "Enrollment UUID (not implemented)" msgstr "Befehl nicht implementiert" @@ -14335,6 +11692,192 @@ msgid "" " ipa hostgroup-del baltimore\n" msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + #, fuzzy msgid "" "Comma-separated list of objectclasses used to search for user entries in DS" @@ -14677,199 +12220,6 @@ msgstr "" msgid "comma-separated list of sudo commands to remove" msgstr "" -msgid "Active directory domain administrator's password" -msgstr "" - -#, fuzzy -msgid "GECOS field" -msgstr "GECOS" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - msgid "" "\n" "Sudo Rules\n" @@ -14914,16 +12264,804 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" +msgid "Active directory domain administrator's password" +msgstr "" + +#, fuzzy +msgid "GECOS field" +msgstr "GECOS" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "Geben Sie %(label)s zur Bestätigung nochmals ein: " + +msgid "Passwords do not match!" +msgstr "Passwörter stimmen nicht überein!" + +msgid "No matching entries found" +msgstr "Keine passenden Einträge gefunden" + +msgid "Topic or Command" +msgstr "Thema oder Befehl" + +msgid "The topic or command name." +msgstr "Das Thema oder der Befehlsname" + +msgid "Topic commands:" +msgstr "Thema-Befehle:" + +msgid "To get command help, use:" +msgstr "Um Hilfe zu Befehlen zu bekommen benutzen sie:" + +msgid " ipa --help" +msgstr " ipa --help" + +msgid "Command name" +msgstr "Befehlsname" + +msgid "Positional arguments" +msgstr "Positionale Argumente" + +#, python-format +msgid "Same as --%s" +msgstr "Das gleiche wie --%s" + +msgid "Deprecated options" +msgstr "Veraltete Optionen" + +msgid "No file to read" +msgstr "Keine Datei zum Lesen" + +#, python-format +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +msgstr "%(cver)s Client ist inkompatibel mit %(sver)s Server auf '%(server)s'" + +#, python-format +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "Unbekannter Fehler %(code)d von %(server)s: %(error)s" + +msgid "an internal error has occurred" +msgstr "Ein interner Fehler ist aufgetreten" + +#, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "In interner Fehler ist auf dem Server '%(server)s' aufgetreten." + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "Unbekannter Befehl '%(name)s'" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "Fehler auf Server '%(server)s': %(error)s" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "Kann nicht zu '%(uri)s' verbinden: %(error)s" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "Ungültige JSON-RPC-Anfrage: %(error)s" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "" +"Fehler beim Zusammenstellen der Daten für den XML-RPC-Transport: %(error)s" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "Fehlende oder ungültige HTTP-Referenz, %(referer)s" + +#, python-format +msgid "" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +msgstr "" + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Kerberos-Fehler: %(major)s/%(minor)s" + +msgid "did not receive Kerberos credentials" +msgstr "Kerberos-Anmeldedaten wurden nicht empfangen" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "Service '%(service)s' in Kerberos-Datenbank nicht gefunden" + +msgid "No credentials cache found" +msgstr "Keine Anmeldeinformationen-Cache gefunden" + +msgid "Ticket expired" +msgstr "Ticket abgelaufen" + +msgid "Credentials cache permissions incorrect" +msgstr "Zugriffsrechte des Anmeldedaten-Zwischenspeichers sind inkorrekt." + +msgid "Bad format in credentials cache" +msgstr "Falsches Format im Anmeldedaten-Zwischenspeicher" + +msgid "Cannot resolve KDC for requested realm" +msgstr "KDC für angeforderten Realm konnte nicht aufgelöst werden." + +msgid "Session error" +msgstr "Sitzungsfehler" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "" +"Der Principal %(principal)s kann nicht authentifiziert werden: %(message)s" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "Unzureichender Zugriff: %(info)s" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "Befehl '%(name)s' nimmt keine Argumente" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "Befehl '%(name)s' nimmt maximal %(count)d Argument" +msgstr[1] "Befehl '%(name)s' nimmt maximal %(count)d Argumente" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "Überlappende Argumente und Optionen: %(names)s" + +#, python-format +msgid "'%(name)s' is required" +msgstr "'%(name)s' wird benötigt" + +#, python-format +msgid "invalid '%(name)s': %(error)s" +msgstr "Ungültig '%(name)s': %(error)s" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "Der Namensraum '%(name)s' existiert in der API nicht" + +msgid "Passwords do not match" +msgstr "Passwörter stimmen nicht überein" + +msgid "Command not implemented" +msgstr "Befehl nicht implementiert" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "Client ist nicht konfiguriert. Rufen Sie ipa-client-install auf." + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "%(name)s konnte nicht interaktiv ermittelt werden" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "Befehl '%(name)s' ist veraltet" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "" +"Die Domäne '%(domain)s' ist keine Root Domäne für den Forest '%(forest)s'" + +#, python-format +msgid "%(reason)s" +msgstr "%(reason)s" + +msgid "This entry already exists" +msgstr "Dieser Eintrag existiert bereits" + +msgid "You must enroll a host in order to create a host service" +msgstr "" +"Sie müssen einen Host registrieren, bevor Sie einen Dienst für diesen Host " +"anlegen können." + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" +"Principal des Dienstes folgt nicht der Form »Dienst/voll ausgeschriebener " +"Hostname«: %(reason)s" + +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "Der Realm des Principals passt nicht zum Realm dieses IPA-Servers." + +msgid "This command requires root access" +msgstr "Dieser Befehl erfordert Root-Zugriff" + +msgid "This is already a posix group" +msgstr "Dies ist bereits eine POSIX-Gruppe" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "Principal ist nicht in der Form user@REALM: '%(principal)s'" + +msgid "This entry is already enabled" +msgstr "Dieser Eintrag ist bereits aktiviert" + +msgid "This entry is already disabled" +msgstr "Dieser Eintrag ist bereits deaktiviert" + +msgid "This entry cannot be enabled or disabled" +msgstr "Dieser Eintrag kann nicht aktiviert oder deaktiviert werden" + +msgid "This entry is not a member" +msgstr "Dieser Eintrag ist kein Mitglied" + +msgid "A group may not be a member of itself" +msgstr "Eine Gruppe kann kein Mitglied von sich selbst sein" + +msgid "This entry is already a member" +msgstr "Dieser Eintrag ist bereits ein Mitglied" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "Base64-Dekodierung fehlgeschlagen: %(reason)s" + +msgid "A group may not be added as a member of itself" +msgstr "Eine Gruppe kann nicht als Mitglied von sich selbst hinzugefügt werden" + +msgid "The default users group cannot be removed" +msgstr "Die vorgegebene Benutzergruppe kann nicht entfernt werden" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" +"Das Löschen einer verwalteten Gruppe ist unzulässig. Sie muss zuerst aus der " +"Verwaltung entfernt werden." + +msgid "A managed group cannot have a password policy." +msgstr "Eine verwaltete Gruppe kann keine Passwort-Policy haben." + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "»%(entry)s« verfügt nicht über ein Zertifikat." + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "" +"Die private Gruppe konnte nicht erstellt werden. Eine Gruppe »%(group)s« " +"existiert bereits." + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "" +"Ein Problem trat bei der Überprüfung auf, ob alle Mitglieder %(verb)s waren: " +"%(exc)s" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "%(attr)s enthält nicht »%(value)s«" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" +"Die Suchkriterien waren nicht spezifisch genug. 1 wurde erwartet, aber " +"%(found)d gefunden." + +msgid "This group already allows external members" +msgstr "Diese Gruppe erlaubt bereits externe Mitglieder" + +msgid "This group cannot be posix because it is external" +msgstr "Diese Gruppe kann nicht POSIX sein, weil sie extern ist" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" +"Dies ist bereits eine POSIX-Gruppe, sie kann nicht zu einer externen " +"konvertiert werden" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "Entfernen des Servers abgebrochen: %(reason)s." + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "%(operation)s wird für %(principal_type)s Principals nicht unterstützt" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "Anfrage mit Status %(status)s fehlgeschlagen: %(reason)s" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" + +#, fuzzy, python-format +msgid "'%(attr)s' already contains one or more values" +msgstr "%(attr)s enthält nicht »%(value)s«" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "kein Befehl oder Hilfethema '%(topic)s'" + +msgid "change collided with another change" +msgstr "Änderung kollidiert mit einer anderen Änderung" + +msgid "no modifications to be performed" +msgstr "Keine anzuwendenden Änderungen" + +#, python-format +msgid "%(desc)s: %(info)s" +msgstr "%(desc)s: %(info)s" + +msgid "limits exceeded for this query" +msgstr "Begrenzung wurde für diese Abfrage überschritten." + +#, python-format +msgid "%(info)s" +msgstr "%(info)s" + +msgid "modifying primary key is not allowed" +msgstr "Ändern des primären Schlüssels ist nicht erlaubt." + +#, python-format +msgid "%(attr)s: Only one value allowed." +msgstr "%(attr)s: Nur ein Wert erlaubt." + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "%(attr)s: Ungültige Syntax." + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "Falscher Suchfilter %(info)s" + +msgid "Not allowed on non-leaf entry" +msgstr "Bei einem Nicht-Blatt-Eintrag nicht erlaubt" + +msgid "LDAP timeout" +msgstr "LDAP Timeout" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "LDAP Zeitüberschreitung für %(task)s , Task DN: '%(task_dn)s'" + +msgid "Configured time limit exceeded" +msgstr "Vorgegebenes Zeitlimit überschritten" + +msgid "Configured size limit exceeded" +msgstr "Vorgegebene Größenbeschränkung überschritten" + +msgid "Configured administrative server limit exceeded" +msgstr "Vorgegebene administrative Serverbeschränkung überschritten" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "Zertifikat-Operation kann nicht abgeschlossen werden: %(error)s" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "Formatfehler im Zertifikat: %(error)s" + +msgid "Already registered" +msgstr "Bereits registriert" + +msgid "Not registered yet" +msgstr "Noch nicht registriert" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" +"%(key)s kann nicht gelöscht werden, weil es von %(label)s %(dependent)s " +"benötigt wird." + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" +"%(key)s kann nicht gelöscht oder deaktiviert werden weil es das letzte " +"Mitglied von %(label)s %(container)s ist" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "%(label)s %(key)s kann nicht gelöscht/bearbeitet werden: %(reason)s" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "%(name)s Zertifikat ist ungültig" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "Schema ist aktuell (FP '%(fingerprint)s', TTL %(ttl)s s)" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "Der Host '%(hostname)s' besitzt keinen zugehörigen DNS A/AAAA Record" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "DNS Check fehlerhaft: Erwartet {%(expected)s} bekommen {%(got)s}" + +#, python-format +msgid "%(exception)s" +msgstr "%(exception)s" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" +"Der Forest '%(forest)s' besitzt bereits eine Vertrauensstellung zu Forest(s) " +"%(domains)s und kann daher keine Vertrauensstellung zu '%(conflict)s' " +"aufbauen" + +msgid "Results are truncated, try a more specific search" +msgstr "" +"Ergebnisse wurden abgeschnitten, versuchen Sie eine spezifischere Suche." + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "Unbekannte Option: %(option)s" + +msgid "Client version. Used to determine if server will accept request." +msgstr "" +"Client-Version. Dadurch wird bestimmt, ob der Server die Anfrage akzeptiert." + +msgid "Additional instructions:" +msgstr "Zusätzliche Anweisungen:" + +#, python-format +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" +"API Versionsnummer wurde nicht gesendet, Vorwärtskompatibiltät nicht " +"garantiert. Nehme API Version %(server_version)s für Server an." + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" +"Die DNS-Forwarder Semantiken haben sich seit IPA 4.0 geändert.\n" +"Nutzen Sie stattdessen Forward Zones (dnsforwardzone-*).\n" +"Für weitere Details schlagen Sie bitte in der Dokumentation nach." + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" +"DNSSEC Unterstützung ist experimentell.\n" +"%(additional_info)s" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "'%(option)s' Option ist veraltet. %(additional_info)s" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" +"Semantik von %(label)s wurde geändert. %(current_behavior)s\n" +"%(hint)s" + +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "DNS Server %(server)s: %(error)s." + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"DNS Server %(server)s unterstützt kein DNSSEC: %(error)s.\n" +"Wenn DNSSEC-Überprüfung auf den IPA Servern aktiviert ist bitte deaktivieren." + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" +"Die Forward Zone \"%(fwzone)s\" ist nicht aktiv, da eine ordnungsgemäße NS " +"Delegation in der autoritativen Zone \"%(authzone)s\" nicht vorhanden ist. " +"Bitte fügen Sie den NS Record \"%(ns_rec)s\" zur übergeordneten Zone " +"\"%(authzone)s\" hinzu." + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"Der DNS server %(server)s unterstützt EDNS0 (RFC 6891) nicht: %(error)s.\n" +"Falls DNSSEC auf IPA Server(n) aktiviert ist, deaktivieren Sie diese." + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" +"DNSSEC Überprüfung fehlgeschlagen: %(error)s.\n" +"Bitte überprüfen Sie die DNSSEC Konfigurationen oder deaktivieren die DNSSEC " +"Überprüfung auf allen IPA Servern." + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "'%(command)s' ist veraltet. %(additional_info)s" + +#, python-format +msgid "%(line)s" +msgstr "%(line)s" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "Das Suchergebnis wurde gekürzt: %(reason)s" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" +"Die Vertrauensstellung zu %(domain)s ist beschädigt. Bitte erneuern Sie sie " +"durch erneuten Aufruf von 'ipa trust-add'." + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" +"DNS Record(s) von Host %(host)s konnten nicht entfernt werden. (%(reason)s)" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" +"Keine DNS Server in der IPA Lokation %(location)s. Ohne DNS Servers arbeitet " +"die Lokation nicht wie erwartet." + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "" + +#, python-format +msgid "%(count)d variables" +msgstr "%(count)d Variablen" + +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "%(count)d Plugin geladen" +msgstr[1] "%(count)d Plugins geladen" + msgid "A dictionary representing an LDAP entry" msgstr "" +msgid "A list of LDAP entries" +msgstr "Eine Liste von LDAP-Einträgen" + +msgid "All commands should at least have a result" +msgstr "Alle Befehle sollten mindestens ein Ergebnis haben." + +msgid "incorrect type" +msgstr "inkorrekter Typ" + +msgid "Only one value is allowed" +msgstr "Nur ein Wert ist erlaubt" + +msgid "this option is deprecated" +msgstr "diese Option ist veraltet" + +msgid "must be True or False" +msgstr "muss »True« oder »False« sein" + +msgid "must be an integer" +msgstr "muss eine Ganzzahl sein" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "muss mindestens %(minvalue)d sein" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "darf höchstens %(maxvalue)d sein" + +msgid "must be a decimal number" +msgstr "muss eine Dezimalzahl sein" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "muss mindestens %(minvalue)s sein" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "darf höchstens %(maxvalue)s sein" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "muss dem Muster »%(pattern)s« entsprechen" + +msgid "must be binary data" +msgstr "muss im Binärformat sein" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "muss mindestens %(minlength)d Bytes groß sein" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "darf höchstens %(maxlength)d Bytes groß sein" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "muss genau %(length)d Bytes groß sein" + +#, fuzzy +msgid "must be a certificate" +msgstr "Ein Zertifikat widerrufen." + +#, fuzzy +msgid "must be a certificate signing request" +msgstr "Eine Signaturanfrage (CSR) senden." + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "Fehler beim Dekodieren der Signaturanfrage für das Zertifikat: %s" + +msgid "must be Unicode text" +msgstr "muss Unicode-Text sein" + +msgid "Leading and trailing spaces are not allowed" +msgstr "Führende und angehängte Leerzeichen sind nicht erlaubt." + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "muss mindestens %(minlength)d Zeichen lang sein" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "darf höchstens %(maxlength)d Zeichen lang sein" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "muss genau %(length)d Zeichen lang sein" + +#, fuzzy, python-format +msgid "The character %(char)r is not allowed." +msgstr "Attribut \"%(attribute)s\" ist nicht erlaubt" + +#, python-format +msgid "must be '%(value)s'" +msgstr "muss '%(value)s' sein" + +#, python-format +msgid "must be one of %(values)s" +msgstr "muss eines von %(values)s sein" + +msgid "must be datetime value" +msgstr "muss ein datetime-Wert sein" + +msgid "does not match any of accepted formats: " +msgstr "" + +#, fuzzy +msgid "incomplete time value" +msgstr "muss ein datetime-Wert sein" + +msgid "must be DNS name" +msgstr "muss ein DNS-Name sein" + +msgid "must be absolute" +msgstr "muss absolut sein" + +msgid "must be relative" +msgstr "muss relativ sein" + +#, fuzzy +msgid "must be dictionary" +msgstr "muss im Binärformat sein" + +#, fuzzy +msgid "must be Kerberos principal" +msgstr "Kerberos-Principal" + +#, fuzzy, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "Wert von %(name)s auf »%(value)s« ändern?" + +#, fuzzy +msgid "Service principal is required" +msgstr "Dienst-Principal" + +#, python-format +msgid "%(filename)s: file not found" +msgstr "%(filename)s: Datei nicht gefunden" + #, python-brace-format msgid "Unable to parse option {item}" msgstr "" +msgid "any of the configured servers" +msgstr "einer der konfigurierten Server" + +msgid "Exceeded number of tries to forward a request." +msgstr "Anzahl der Versuche zur Weiterleitung der Anfrage überschritten" + msgid "Filename is empty" msgstr "" +#, python-format +msgid "Permission denied: %(file)s" +msgstr "Zugriff verweigert: %(file)s" + msgid "empty DNS label" msgstr "" @@ -14939,6 +13077,9 @@ msgstr "" msgid "single label {}s are not supported" msgstr "" +msgid "too many '@' characters" +msgstr "Zu viele »@«-Zeichen" + #, fuzzy msgid "cannot be longer that {} characters" msgstr "darf höchstens %(maxlength)d Zeichen lang sein" @@ -14946,6 +13087,12 @@ msgstr "darf höchstens %(maxlength)d Zeichen lang sein" msgid "hostname contains empty label (consecutive dots)" msgstr "" +msgid "not fully qualified" +msgstr "nicht voll ausgeschrieben" + +msgid "invalid SSH public key" +msgstr "Ungültiger öffentlicher SSH-Schlüssel" + #, fuzzy msgid "options are not allowed" msgstr "Eine leere Domäne ist nicht zulässig" @@ -14990,6 +13137,22 @@ msgstr "Ungültiger Domainname: %s" msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" msgstr "Ungültiger Domänenname '%(domain)s': %(e)s" +#, python-format +msgid "invalid domain-name: %s" +msgstr "Ungültiger Domainname: %s" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" +"Ungültige IP-Adressversion (ist %(value)d, muss %(required_value)d) sein!" + +msgid "invalid IP address format" +msgstr "Ungültiges IP-Adressformat" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "%(port)s kein gültiger Port" + msgid "" "at least one value equal to the canonical principal name must be present" msgstr "" @@ -14998,782 +13161,785 @@ msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" #, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" +msgid "Retrieving CA cert chain failed: %s" +msgstr "Abruf der Zertifikatkette fehlgeschlagen: %s" #, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" +msgid "request failed with HTTP status %d" +msgstr "Anfrage fehlgeschlagen, HTTP-Status: %d" #, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" - -#, fuzzy, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "%(attr)s enthält nicht »%(value)s«" - -#, python-format -msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" -msgstr "" - -#, fuzzy -msgid "must be a certificate" -msgstr "Ein Zertifikat widerrufen." - -#, fuzzy -msgid "must be a certificate signing request" -msgstr "Eine Signaturanfrage (CSR) senden." - -#, fuzzy, python-format -msgid "The character %(char)r is not allowed." -msgstr "Attribut \"%(attribute)s\" ist nicht erlaubt" - -msgid "does not match any of accepted formats: " -msgstr "" - -#, fuzzy -msgid "incomplete time value" -msgstr "muss ein datetime-Wert sein" - -#, fuzzy -msgid "must be dictionary" -msgstr "muss im Binärformat sein" - -#, fuzzy -msgid "must be Kerberos principal" -msgstr "Kerberos-Principal" - -#, fuzzy, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "Wert von %(name)s auf »%(value)s« ändern?" - -#, fuzzy -msgid "Service principal is required" -msgstr "Dienst-Principal" +msgid "Retrieving CA status failed: %s" +msgstr "Abfrage des CA-Status fehlgeschlagen: %s" #, fuzzy, python-format msgid "Retrieving CA status failed with status %d" msgstr "Abfrage des CA-Status fehlgeschlagen: %s" +#, python-format +msgid "objectclass %s not found" +msgstr "Objektklasse %s nicht gefunden" + +#, fuzzy +msgid "Trusting forest" +msgstr "Vertrauenseinstellungen" + +msgid "Trusted forest" +msgstr "" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +msgid "Unknown" +msgstr "Unbekannt" + +msgid "Non-Active Directory domain" +msgstr "" + +msgid "Active Directory domain" +msgstr "" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "" +msgid "Failed to authenticate to CA REST API" +msgstr "" + #, fuzzy, python-format msgid "Replication agreement for %(hostname)s not found" msgstr "%(parent)s: %(oname)s nicht gefunden" -msgid "Failed to authenticate to CA REST API" +msgid "A list of ACI values" +msgstr "Liste von ACI-Werten" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" +"»type«, »filter«, »subtree« und »targetgroup« schließen sich gegenseitig aus." + +msgid "ACI prefix is required" +msgstr "ACI-Präfix ist erforderlich" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" +"mindestens eines von »type«, »filter«, »subtree«, »targetgroup«, »attrs« " +"oder »memberof« wird benötigt" + +msgid "filter and memberof are mutually exclusive" +msgstr "»filter« und »memberof« schließen sich gegenseitig aus" + +msgid "group, permission and self are mutually exclusive" +msgstr "»group«, »permission« und »self« schließen sich gegenseitig aus" + +msgid "One of group, permission or self is required" +msgstr "Eines von »group«, »permission« oder »self« wird benötigt" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "Gruppe »%s« existiert nicht" + +msgid "empty filter" +msgstr "Filter ist leer" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "Syntaxfehler: %(error)s" + +#, python-format +msgid "invalid DN (%s)" +msgstr "ungültiger DN (%s)" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "ACI mit dem Namen »%s« nicht gefunden" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "ACIs" + +msgid "ACI" +msgstr "ACI" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "ACI erstellt \"%(value)s\"" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "ACI gelöscht \"%(value)s\"" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "ACI geändert \"%(value)s\"" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "%(count)d ACI gefunden" +msgstr[1] "%(count)d ACIs gefunden" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "ACI umbenannt zu \"%(value)s\"" + +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" +"\n" +"Regel für Auto-Mitgliedschaft\n" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" msgstr "" #, fuzzy msgid "" "\n" -"IPA server roles\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" msgstr "" "\n" -"IPA-Server\n" +" Auto-Mitgliedschaftsregel bearbeiten. " msgid "" "\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" msgstr "" msgid "" "\n" -"The status of a role is either enabled, configured, or absent.\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" msgstr "" msgid "" "\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" msgstr "" msgid "" "\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" msgstr "" msgid "" "\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" msgstr "" msgid "" "\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" msgstr "" #, fuzzy -msgid "server role" -msgstr "Server" +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" +"Auto-Mitgliedschaft für alle Mitglieder einer Gruppierung neu erstellen" #, fuzzy -msgid "server roles" -msgstr "Server" +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" +"Auto-Mitgliedschaft für alle Mitglieder einer Gruppierung neu erstellen" -#, fuzzy -msgid "IPA Server Roles" -msgstr "IPA-Server" - -#, fuzzy -msgid "IPA Server Role" -msgstr "Zu verwendender IPA-Server" - -#, fuzzy -msgid "IPA server role name" -msgstr "IPA-Server Hostname" - -#, fuzzy -msgid "Role status" -msgstr "Regelstatus" - -msgid "Status of the role" +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" msgstr "" -msgid "Show role status on a server" +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" msgstr "" -msgid "Find a server role on a server(s)" +msgid "Auto Membership Rule" +msgstr "Regel für Auto-Mitgliedschaft" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "%(otype)s \"%(oname)s\" nicht gefunden" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "%s ist kein gültiges Attribut" + +msgid "" +"\n" +" Add an automember rule.\n" +" " msgstr "" +"\n" +" Auto-Mitgliedschaftsregel hinzufügen.\n" +" " + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "Auto-Mitgliedschaftsregel \"%(value)s\" hinzugefügt" + +msgid "Auto Membership is not configured" +msgstr "Auto-Mitgliedschaft ist nicht konfiguriert" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" +"\n" +" Bedigungen zu einer Auto-Mitgliedschaftsregel hinzufügen.\n" +" " + +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "Bedingung(en) zu \"%(value)s\" hinzugefügt" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "Auto-Mitgliedschaftsregel: %s nicht gefunden!" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" +"\n" +" Bedingungen von einer einer Auto-Mitglieschaftsregel entfernen. " + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "Bedingung(en) von \"%(value)s\" entfernt" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" +"\n" +" Auto-Mitgliedschaftsregel bearbeiten. " + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "Auto-Mitgliedschaftsregel \"%(value)s\" bearbeitet" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" +"\n" +" Auto-Mitgliedschaftsregel löschen.\n" +" " + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "Auto-Mitgliedschaftsregel \"%(value)s\" gelöscht" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" +"\n" +" Suche nach Auto-Mitgliedschaftsregeln.\n" +" " #, fuzzy, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" msgstr[0] "%(count)d Rolle gefunden" msgstr[1] "%(count)d Rollen gefunden" -msgid "Include IPA master entries" -msgstr "" - -#, fuzzy -msgid "IPA role name" -msgstr "Rollenname" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -#, fuzzy -msgid "Delete Class of Service entry" -msgstr "Einen IPA-Dienst entfernen." - -#, fuzzy -msgid "Modify Class of Service entry" -msgstr "HBAC-Dienstgruppe bearbeiten" - -msgid "Display Class of Service entry" -msgstr "" - -#, fuzzy -msgid "Search for Class of Service entry" -msgstr "Suche nach HBAC Dienstgruppe" - -msgid "Max repeat" -msgstr "" - -#, fuzzy -msgid "Maximum number of same consecutive characters" -msgstr "Maximale Anzahl der zurückgegebenen Einträge" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -#, fuzzy -msgid "User check" -msgstr "Benutzername" - -msgid "Check if the password contains the username" -msgstr "" - msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" +"\n" +" Display information about an automember rule.\n" +" " msgstr "" +"\n" +" Informationen über Auto-Mitgliedschaftsregel anzeigen.\n" +" " msgid "" "\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -#, fuzzy -msgid "Realm domains" -msgstr "Realm-Name" - -#, fuzzy -msgid "Realm Domains" -msgstr "Domain" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" +" Set default (fallback) group for all unmatched entries.\n" " " msgstr "" #, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" +msgid "Set default (fallback) group for automember \"%(value)s\"" msgstr "" +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, fuzzy, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "Bedingung(en) von \"%(value)s\" entfernt" + +#, fuzzy +msgid "No default (fallback) group set" +msgstr "Standard (Rückfall) Gruppe" + +#, fuzzy +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" +"\n" +" Informationen über Auto-Mitgliedschaftsregel anzeigen.\n" +" " + +msgid "Task DN" +msgstr "Aufgaben DN" + +msgid "DN of the started task" +msgstr "DN der gestarteten Aufgabe" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "Mindestens eine der Optionen: type, users, hosts muss gesetzt sein" + +msgid "users and hosts cannot both be set" +msgstr "Benutzer und Host können nicht gleichzeitig gesetzt sein." + +msgid "hosts cannot be set when type is 'group'" +msgstr "hosts kann nicht gesetzt sein wenn Typ 'group' ist" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "users kann nicht gesetzt sein wenn Typ 'hostgroup' ist" + +msgid "Automember rebuild membership task started" +msgstr "Aufgabe für die Neuerstellung der Auto-Mitgliedschaft gestartet" + +msgid "Automember rebuild membership task completed" +msgstr "Aufgabe für die Neuerstellung der Auto-Mitgliedschaft abgeschlossen" + #, python-format -msgid "The following domains do not belong to this realm: %(domains)s" +msgid "Task DN = '%s'" +msgstr "Aufgaben DN = '%s'" + +msgid "Automember" +msgstr "Auto-Mitgliedschaft" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +#, fuzzy +msgid "Remove orphan automember rules" +msgstr "" +"\n" +" Bedingungen von einer einer Auto-Mitglieschaftsregel entfernen. " + +msgid "automount location" +msgstr "Automount-Ort" + +msgid "automount locations" +msgstr "Automount-Orte" + +msgid "Automount Locations" +msgstr "Automount-Orte" + +msgid "Automount Location" +msgstr "Automount-Ort" + +#, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "Automount Ort \"%(value)s\" hinzugefügt" + +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "Automount-Ort \"%(value)s\" gelöscht" + +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "%(count)d Automount-Ort gefunden" +msgstr[1] "%(count)d Automount-Orte gefunden" + +msgid "automount map" +msgstr "Automount-Map" + +msgid "automount maps" +msgstr "Automount-Maps" + +msgid "Automount Maps" +msgstr "Automount-Maps" + +msgid "Automount Map" +msgstr "Automount-Map" + +#, fuzzy, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "Automount Ort \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "Automount-Ort \"%(value)s\" gelöscht" + +#, fuzzy, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "Gruppe »%(value)s« geändert" + +#, fuzzy, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "%(count)d Automount-Ort gefunden" +msgstr[1] "%(count)d Automount-Orte gefunden" + +#, fuzzy +msgid "Automount key object." +msgstr "Automount-Ort" + +#, fuzzy +msgid "automount key" +msgstr "Automount-Map" + +#, fuzzy +msgid "automount keys" +msgstr "Automount-Maps" + +#, fuzzy +msgid "Automount Keys" +msgstr "Automount-Maps" + +#, fuzzy +msgid "Automount Key" +msgstr "Automount" + +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" + +#, fuzzy, python-format +msgid "key named %(key)s already exists" +msgstr "%(oname)s mit dem Namen »%(pkey)s« existiert bereits" + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" msgstr "" #, python-format msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." +"More than one entry with key %(key)s found, use --info to select specific " +"entry." msgstr "" -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." +#, fuzzy, python-format +msgid "Added automount key \"%(value)s\"" +msgstr "Automount Ort \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +msgid "Added automount indirect map \"%(value)s\"" +msgstr "Automount Ort \"%(value)s\" hinzugefügt" + +msgid "mount point is relative to parent map, cannot begin with /" msgstr "" -msgid "IPA server domain cannot be omitted" -msgstr "" +#, fuzzy, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "Automount-Ort \"%(value)s\" gelöscht" + +#, fuzzy, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "Auto-Mitgliedschaftsregel \"%(value)s\" bearbeitet" + +#, fuzzy, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "%(count)d Automount-Ort gefunden" +msgstr[1] "%(count)d Automount-Orte gefunden" + +msgid "Member service groups" +msgstr "Mitglieds-Dienstgruppen" + +msgid "Member HBAC service groups" +msgstr "Mitglieds-HBAC-Servicegruppen" #, fuzzy -msgid "IPA server domain cannot be deleted" -msgstr "Zonen-Datensatz »%s« kann nicht gelöscht werden" +msgid "Member ID user overrides" +msgstr "Mitglieds-Dienste" #, fuzzy -msgid "" -"\n" -"API Schema\n" -msgstr "LDAP-Schema" +msgid "Indirect Member ID user overrides" +msgstr "Indirekte Mitglieds-Benutzer" -msgid "" -"\n" -"Provides API introspection capabilities.\n" +msgid "Indirect Member permissions" +msgstr "Indirekte Mitglieds-Berechtigungen" + +msgid "Indirect Member HBAC service" +msgstr "Indirekte Mitgli" + +msgid "Indirect Member HBAC service group" +msgstr "Indirekte Mitglieds-HBAC-Servicegruppe" + +msgid "Invalid format. Should be name=value" +msgstr "Ungültiges Format. Sollte name=wert sein." + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "Ein IPA Masterhost kann nicht deaktiviert oder gelöscht werden" + +msgid "entry" +msgstr "Eintrag" + +msgid "entries" +msgstr "Einträge" + +msgid "Entry" +msgstr "Eintrag" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "Container-Eintrag (%(container)s) nicht gefunden" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "%(parent)s: %(oname)s nicht gefunden" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "%(pkey)s: %(oname)s nicht gefunden" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "%(oname)s mit dem Namen »%(pkey)s« existiert bereits" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "Attribut \"%(attribute)s\" ist nicht erlaubt" + +#, fuzzy, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "Attribut \"%s\" ist nicht erlaubt" + +msgid "attribute is not configurable" +msgstr "Attribut ist nicht konfigurierbar" + +msgid "No such attribute on this entry" msgstr "" -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" +msgid "the entry was deleted while being modified" +msgstr "Der Eintrag wurde während der Änderung entfernt." -#, fuzzy -msgid "Name" -msgstr "Host-Name" +#, python-format +msgid "%s" +msgstr "%s" -#, fuzzy -msgid "Documentation" -msgstr "Authentifizierung" +#, python-format +msgid "member %s" +msgstr "Mitglied %s" -msgid "Exclude from" -msgstr "" +#, python-format +msgid "%s to add" +msgstr "%s zum hinzufügen" -#, fuzzy -msgid "Include in" -msgstr "Aktivierte einschließen" +#, python-format +msgid "%s to remove" +msgstr "%s zum entfernen" #, python-format msgid "Results should contain primary key attribute only (\"%s\")" msgstr "" -msgid "Help topic" -msgstr "" - -#, fuzzy -msgid "Version" -msgstr "Berechtigung" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -msgid "Method name" -msgstr "Datensatzname" - -#, fuzzy -msgid "Display information about a command." -msgstr "Informationen über Host anzeigen." - -#, fuzzy -msgid "Search for commands." -msgstr "Nach Sudo-Befehlen suchen." - -#, fuzzy -msgid "Return command defaults" -msgstr "Befehle ausführen" - -#, fuzzy -msgid "Display information about a class." -msgstr "Informationen über Host anzeigen." - -#, fuzzy -msgid "Search for classes." -msgstr "Nach Rollen suchen." - -#, fuzzy -msgid "Display information about a help topic." -msgstr "Informationen über Host anzeigen." - -#, fuzzy -msgid "Search for help topics." -msgstr "Nach Hostgruppen suchen." - -#, fuzzy -msgid "Required" -msgstr "Anfrage-ID" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -msgid "CLI name" -msgstr "ACI-Name" - -#, fuzzy -msgid "Confirm (password)" -msgstr "Passwort ändern" - -#, fuzzy -msgid "Default" -msgstr "Vorgabe-Shell" - -#, fuzzy -msgid "Default from" -msgstr "Standard Hostgruppe" - -msgid "Label" -msgstr "" - -#, fuzzy -msgid "Convert on server" -msgstr "Hostname dieses Servers" - -#, fuzzy -msgid "Option group" -msgstr "Hostgruppe" - -msgid "Sensitive" -msgstr "" - -#, fuzzy -msgid "Positional argument" -msgstr "Positionale Argumente" - -#, fuzzy, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "%(parent)s: %(oname)s nicht gefunden" - -#, fuzzy -msgid "Display information about a command parameter." -msgstr "Informationen zu einer genannten Gruppe anzeigen." - -#, fuzzy -msgid "Search command parameters." -msgstr "Nach vorbereiteten Benutzern suchen." - -#, fuzzy, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "%(parent)s: %(oname)s nicht gefunden" - -#, fuzzy -msgid "Display information about a command output." -msgstr "Informationen zu einer genannten Gruppe anzeigen." - -#, fuzzy -msgid "Search for command outputs." -msgstr "Nach Sudo-Befehlen suchen." - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - +#, python-format msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." msgstr "" -msgid "Allowed to Impersonate" -msgstr "" - -#, fuzzy -msgid "Member principals" -msgstr "Kerberos-Principal" - #, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, fuzzy -msgid "Remove member from a named service delegation." -msgstr "Mitglieder von einer HBAC-Dienstgruppe entfernen." - -#, fuzzy -msgid "service delegation rule" -msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." - -#, fuzzy -msgid "service delegation rules" -msgstr "Delegationen" - -#, fuzzy -msgid "Service delegation rules" -msgstr "Diensteinstellungen" - -#, fuzzy -msgid "Service delegation rule" -msgstr "Diensteinstellungen" - -#, fuzzy, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "Dienst »%(value)s« hinzugefügt" - -#, fuzzy, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "Dienst »%(value)s« gelöscht" - -msgid "privileged service delegation rule" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "%(count)d passender Dienst" -msgstr[1] "%(count)d passende Dienste" - -#, fuzzy -msgid "service delegation target" -msgstr "Delegationsname" - -#, fuzzy -msgid "service delegation targets" -msgstr "Diensteinstellungen" - -#, fuzzy -msgid "Service delegation targets" -msgstr "Diensteinstellungen" - -#, fuzzy -msgid "Service delegation target" -msgstr "Diensteinstellungen" - -#, fuzzy, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "Dienst »%(value)s« hinzugefügt" - -#, fuzzy, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "Dienst »%(value)s« gelöscht" - -msgid "privileged service delegation target" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "%(count)d passender Dienst" -msgstr[1] "%(count)d passende Dienste" - msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, fuzzy, python-format +msgid "added attribute value to entry %(value)s" +msgstr "Automount Ort \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "Bedingung(en) von \"%(value)s\" entfernt" + +msgid "one or more values to remove" msgstr "" msgid "" "\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" msgstr "" +msgid "must be TRUE or FALSE" +msgstr "muss TRUE oder FALSE sein" + msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -#, fuzzy -msgid "Malformed principal" -msgstr "Dienst-Principal" - -msgid "{} is required by the IPA master" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." msgstr "" #, fuzzy @@ -15781,255 +13947,568 @@ msgid "Principal alias" msgstr "Principal-Name" #, fuzzy -msgid "Service principal alias" -msgstr "Dienst-Principal" +msgid "User password expiration" +msgstr "Passwortablauf" + +msgid "SSH public key fingerprint" +msgstr "Fingerabdruck des öffentlichen SSH-Schlüssels" #, fuzzy -msgid "Base-64 encoded service certificate" +msgid "Base-64 encoded user certificate" msgstr "Base-64-kodiertes Serverzertifikat" #, fuzzy -msgid "Fingerprint (SHA256)" -msgstr "Fingerabdruck (SHA1)" +msgid "Certificate mapping data" +msgstr "Zertifikattyp" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" #, fuzzy -msgid "Authentication Indicators" -msgstr "Authentifizierung" +msgid "SMB Home Directory" +msgstr "Home-Verzeichnis" + +#, fuzzy +msgid "SMB Home Directory Drive" +msgstr "Basis für Home-Verzeichnisse" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "Ungültiges E-Mail-Format: %(email)s" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "Manager %(manager)s nicht gefunden" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "darf höchstens %(len)d Zeichen lang sein" + +msgid "Issuer" +msgstr "Ausgabestelle" + +#, fuzzy +msgid "Issuer of the certificate" +msgstr "Datei, in der das Zertifikat gespeichert werden soll." + +msgid "Subject" +msgstr "Betreff" + +#, fuzzy +msgid "Subject of the certificate" +msgstr "Datei, in der das Zertifikat gespeichert werden soll." + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +#, fuzzy +msgid "Add one or more certificate mappings to the user entry." +msgstr "Manager vom Benutzer entfernen" + +#, fuzzy, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "Vorbereiteten Benutzer \"%(value)s\" aktivieren." + +#, fuzzy +msgid "Remove one or more certificate mappings from the user entry." +msgstr "Manager vom Benutzer entfernen" + +#, fuzzy, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "Bedingung(en) von \"%(value)s\" entfernt" msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" msgstr "" -msgid "NONE value cannot be combined with other PAC types" +msgid "Make multiple ipa calls via one remote procedure call" msgstr "" -#, fuzzy -msgid "Add a new IPA service." -msgstr "Einen neuen IPA-Dienst hinzufügen." - -#, fuzzy -msgid "force principal name even if host not in DNS" -msgstr "Hostname erzwingen auch wenn nicht im DNS" - -msgid "Skip host check" +msgid "must contain a tuple (list, dict)" msgstr "" msgid "" -"force service to be created even when host object does not exist to manage it" +"\n" +"Manage Certificate Authorities\n" +msgstr "" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +#, fuzzy +msgid "Certificate Authority" +msgstr "Zertifikattyp" + +#, fuzzy +msgid "Certificate Authorities" +msgstr "Zertifikate" + +#, fuzzy +msgid "Name" +msgstr "Host-Name" + +msgid "Name for referencing the CA" +msgstr "" + +#, fuzzy +msgid "Description of the purpose of the CA" +msgstr "Beschreibung des Hosts" + +msgid "Authority ID" +msgstr "" + +msgid "Dogtag Authority ID" +msgstr "" + +#, fuzzy +msgid "Subject DN" +msgstr "Betreff" + +msgid "Subject Distinguished Name" +msgstr "" + +#, fuzzy +msgid "Issuer DN" +msgstr "Ausgabestelle" + +msgid "Issuer Distinguished Name" +msgstr "" + +#, fuzzy +msgid "Base-64 encoded certificate." +msgstr "Base-64-kodiertes Serverzertifikat" + +#, fuzzy +msgid "Certificate chain" +msgstr "Zertifikat" + +msgid "X.509 certificate chain" +msgstr "" + +#, fuzzy +msgid "Search for CAs." +msgstr "Nach Hosts suchen." + +#, fuzzy, python-format +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "%(count)d ACI gefunden" +msgstr[1] "%(count)d ACIs gefunden" + +msgid "Include certificate chain in output" +msgstr "" + +#, fuzzy +msgid "Display the properties of a CA." +msgstr "Einstellungen der HBAC-Regel anzeigen." + +#, fuzzy +msgid "Create a CA." +msgstr "Erstelle eine neue CA ACL." + +#, fuzzy, python-format +msgid "Created CA \"%(value)s\"" +msgstr "ACI erstellt \"%(value)s\"" + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." msgstr "" #, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "" - -#, fuzzy -msgid "Add a new SMB service." -msgstr "Einen neuen HBAC-Dienst hinzufügen." - -#, fuzzy -msgid "SMB service NetBIOS name" -msgstr "Dienstname" - -#, fuzzy, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "HBAC-Dienstgruppe »%(value)s« hinzugefügt" - -#, fuzzy, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "HBAC-Dienstgruppe »%(value)s« geändert" - -msgid "Add new principal alias to a service" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "HBAC-Dienstgruppe »%(value)s« hinzugefügt" - -#, fuzzy -msgid "Remove principal alias from a service" -msgstr "Berechtigungen von Rolle entfernen." - -#, fuzzy, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "Dienst »%(value)s« gelöscht" - -#, fuzzy -msgid "" -"\n" -"Sudo Rules\n" -msgstr "Sudo-Regeln" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgid "Unrecognized attributes: %(attrs)s" msgstr "" #, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgid "Subject DN is already used by CA '%s'" +msgstr "" + +msgid "Delete a CA (must be disabled first)." msgstr "" #, fuzzy, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "Rolle \"%(value)s\" hinzugefügt" +msgid "Deleted CA \"%(value)s\"" +msgstr "ACI gelöscht \"%(value)s\"" + +msgid "Insufficient privilege to delete a CA." +msgstr "" + +msgid "CA" +msgstr "" + +#, fuzzy +msgid "IPA CA cannot be deleted" +msgstr "Zonen-Datensatz »%s« kann nicht gelöscht werden" + +#, fuzzy +msgid "Must be disabled first" +msgstr "Muss eine Ganzzahl sein" + +#, fuzzy +msgid "Modify CA configuration." +msgstr "Konfigurationsoptionen bearbeiten." #, fuzzy, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "Rolle \"%(value)s\" gelöscht" +msgid "Modified CA \"%(value)s\"" +msgstr "ACI geändert \"%(value)s\"" + +msgid "Insufficient privilege to modify a CA." +msgstr "" + +#, fuzzy +msgid "Disable a CA." +msgstr "Deaktivieren" #, fuzzy, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "Rolle \"%(value)s\" geändert" +msgid "Disabled CA \"%(value)s\"" +msgstr "Host \"%(value)s\" deaktiviert" + +#, fuzzy +msgid "IPA CA cannot be disabled" +msgstr "Konto ist deaktiviert" + +#, fuzzy +msgid "Enable a CA." +msgstr "HBAC-Regel aktivieren." #, fuzzy, python-format +msgid "Enabled CA \"%(value)s\"" +msgstr "HBAC-Regel \"%(value)s\" aktiviert" + msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "CA ACL" + +msgid "CA ACLs" +msgstr "CA ACLs" + +#, fuzzy +msgid "CA category" +msgstr "Host-Kategorie" + +#, fuzzy +msgid "CA category the ACL applies to" +msgstr "Hostkategorie auf die ACL angewendet wird" + +#, fuzzy +msgid "CAs" +msgstr "CA ACLs" + +#, python-format +msgid "Added CA ACL \"%(value)s\"" +msgstr "CA ACL \"%(value)s\" hinzugefügt" + +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "CA ACL \"%(value)s\" gelöscht" + +msgid "default CA ACL can be only disabled" +msgstr "" + +#, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "CA ACL \"%(value)s\" geändert" + +#, fuzzy +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" +"Benutzerkategorie kann nicht auf 'Alle' gesetzt werden wenn es erlaubte " +"Benutzer gibt" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" +"Profilkategorie kann nicht auf 'Alle' gesetzt werden wenn es erlaubte " +"Profile gibt" + +msgid "user category cannot be set to 'all' while there are allowed users" msgstr "" "Benutzerkategorie kann nicht auf 'Alle' gesetzt werden wenn es erlaubte " "Benutzer gibt" #, fuzzy -msgid "command" -msgstr "Befehle" +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" +"Benutzerkategorie kann nicht auf 'Alle' gesetzt werden wenn es erlaubte " +"Benutzer gibt" #, fuzzy -msgid "commands" -msgstr "Befehle" - -#, fuzzy -msgid "runAs user" -msgstr "Vorbereiteter Benutzer" - -#, fuzzy -msgid "runAs users" -msgstr "Vorbereitete Benutzer" - -#, fuzzy -msgid "group runAs" -msgstr "Gruppen" - -#, fuzzy -msgid "runAs groups" -msgstr "Hostgruppen" +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" +"Benutzerkategorie kann nicht auf 'Alle' gesetzt werden wenn es erlaubte " +"Benutzer gibt" #, fuzzy, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "%(count)d Rolle gefunden" -msgstr[1] "%(count)d Rollen gefunden" +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "%(count)d ACI gefunden" +msgstr[1] "%(count)d ACIs gefunden" -msgid "commands cannot be added when command category='all'" +#, fuzzy, python-format +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "CA ACL \"%(value)s\" gelöscht" + +#, fuzzy, python-format +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "CA ACL \"%(value)s\" gelöscht" + +#, python-format +msgid "%i user or group added." msgstr "" +#, fuzzy, python-format +msgid "%i users or groups added." +msgstr "Nach Gruppen suchen." + #, fuzzy msgid "users cannot be added when user category='all'" msgstr "users kann nicht gesetzt sein wenn Typ 'hostgroup' ist" +#, fuzzy, python-format +msgid "%i user or group removed." +msgstr "Anzahl der entfernten Mitglieder" + +#, fuzzy, python-format +msgid "%i users or groups removed." +msgstr "Anzahl der entfernten Mitglieder" + +#, fuzzy, python-format +msgid "%i host or hostgroup added." +msgstr "%(count)d Hostgruppe gefunden" + +#, fuzzy, python-format +msgid "%i hosts or hostgroups added." +msgstr "Fehler bei Hosts/Hostgruppen" + #, fuzzy msgid "hosts cannot be added when host category='all'" msgstr "hosts kann nicht gesetzt sein wenn Typ 'group' ist" +#, fuzzy, python-format +msgid "%i host or hostgroup removed." +msgstr "%(count)d Hostgruppe gefunden" + +#, fuzzy, python-format +msgid "%i hosts or hostgroups removed." +msgstr "Fehler bei Hosts/Hostgruppen" + +#, fuzzy, python-format +msgid "%i service added." +msgstr "Dienstname" + +#, fuzzy, python-format +msgid "%i services added." +msgstr "Dienste" + #, fuzzy -msgid "users cannot be added when runAs user or runAs group category='all'" +msgid "services cannot be added when service category='all'" msgstr "users kann nicht gesetzt sein wenn Typ 'hostgroup' ist" #, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" +msgid "%i service removed." +msgstr "" + +#, fuzzy, python-format +msgid "%i services removed." +msgstr "Einträge zum löschen auswählen." + +#, python-format +msgid "%i profile added." msgstr "" #, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, fuzzy, python-format +msgid "%i profile removed." +msgstr "%s zum entfernen" + +#, fuzzy, python-format +msgid "%i profiles removed." +msgstr "Anzahl der entfernten Berechtigungen" + +#, fuzzy +msgid "Add CAs to a CA ACL." +msgstr "CA ACL löschen." + +#, python-format +msgid "%i CA added." msgstr "" #, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgid "%i CAs added." msgstr "" +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +#, fuzzy +msgid "Remove CAs from a CA ACL." +msgstr "Mitglieder von Rolle entfernen." + +#, fuzzy, python-format +msgid "%i CA removed." +msgstr "%s zum entfernen" + +#, fuzzy, python-format +msgid "%i CAs removed." +msgstr "%s zum entfernen" + #, fuzzy msgid "pyhbac is not installed." msgstr "Eine leere Domäne ist nicht zulässig" @@ -16226,6 +14705,9 @@ msgid "" "\n" msgstr "" +msgid "CA is not configured" +msgstr "CA ist nicht konfiguriert" + #, python-format msgid "" "Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " @@ -16245,17 +14727,6 @@ msgstr "" msgid "Name of issuing CA" msgstr "" -#, fuzzy -msgid "Base-64 encoded certificate." -msgstr "Base-64-kodiertes Serverzertifikat" - -#, fuzzy -msgid "Certificate chain" -msgstr "Zertifikat" - -msgid "X.509 certificate chain" -msgstr "" - #, fuzzy msgid "Subject email address" msgstr "Email-Adresse" @@ -16299,12 +14770,24 @@ msgstr "Kerberos-Principal" msgid "Subject Other Name" msgstr "Servername" -#, fuzzy -msgid "Issuer DN" -msgstr "Ausgabestelle" +msgid "Not Before" +msgstr "Nicht vor" -msgid "Include certificate chain in output" -msgstr "" +msgid "Not After" +msgstr "Nicht nach" + +msgid "Fingerprint (SHA1)" +msgstr "Fingerabdruck (SHA1)" + +#, fuzzy +msgid "Fingerprint (SHA256)" +msgstr "Fingerabdruck (SHA1)" + +msgid "Serial number (hex)" +msgstr "Seriennummer (hex)" + +msgid "Request status" +msgstr "Anfragestatus" #, fuzzy msgid "" @@ -16380,6 +14863,9 @@ msgstr "" msgid "'add' option" msgstr "Sudo-Option" +msgid "The principal for this request doesn't exist." +msgstr "Der Principal für diese Anfrage existiert nicht" + #, python-format msgid "IP address in subjectAltName (%s) unreachable from DNS names" msgstr "" @@ -16392,6 +14878,15 @@ msgstr "" msgid "PTR record for SAN IP (%s) does not match A/AAAA records" msgstr "" +msgid "Status" +msgstr "Status" + +msgid "Revoked" +msgstr "Widerrufen" + +msgid "Revocation reason" +msgstr "Grund des Widerrufs" + #, fuzzy msgid "" "Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " @@ -16407,6 +14902,13 @@ msgid "" "Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" msgstr "" +msgid "7 is not a valid revocation reason" +msgstr "7 ist kein gültiger Grund für einen Widerruf." + +#, fuzzy +msgid "Status of the certificate" +msgstr "Datei, in der das Zertifikat gespeichert werden soll." + msgid "Results should contain primary key attribute only (\"certificate\")" msgstr "" @@ -16649,9 +15151,116 @@ msgid_plural "%(count)s users matched" msgstr[0] "%(count)d passender Benutzer" msgstr[1] "%(count)d passende Benutzer" +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + #, fuzzy -msgid "Base-64 encoded user certificate" -msgstr "Base-64-kodiertes Serverzertifikat" +msgid "invalid Profile ID" +msgstr "Profil-ID" + +#, fuzzy +msgid "Certificate Profile" +msgstr "Benutze Zertifikatsprofil" + +#, fuzzy +msgid "Certificate Profiles" +msgstr "Benutze Zertifikatsprofil" + +#, fuzzy +msgid "Profile configuration" +msgstr "OTP Konfiguration" + +#, fuzzy, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "%(count)d Rolle gefunden" +msgstr[1] "%(count)d Rollen gefunden" + +#, fuzzy, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "Rolle \"%(value)s\" gelöscht" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "Rolle \"%(value)s\" gelöscht" + +#, fuzzy, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "Zonen-Datensatz »%s« kann nicht gelöscht werden" + +#, fuzzy, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "Rolle \"%(value)s\" geändert" + +#, fuzzy +msgid "Certificate profiles cannot be renamed" +msgstr "Benutze Zertifikatsprofil" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" msgid "" "\n" @@ -16715,10 +15324,19 @@ msgstr "" msgid "must be at least 10" msgstr "muss mindestens %(minvalue)d sein" +msgid "configuration options" +msgstr "Konfigurationsoptionen" + +msgid "Configuration" +msgstr "Konfiguration" + #, fuzzy msgid "Maximum hostname length" msgstr "Maximale Länge des Benutzernamens" +msgid "Enable adding subids to new users" +msgstr "" + #, fuzzy msgid "IPA masters" msgstr "" @@ -16734,6 +15352,12 @@ msgstr "" msgid "List of all hidden IPA masters" msgstr "" +msgid "IPA master capable of PKINIT" +msgstr "IPA Master mit Fähigkeit für PKINIT " + +msgid "IPA master which can process PKINIT requests" +msgstr "IPA Master, der PKINIT Anfragen bearbeiten kann" + #, fuzzy msgid "IPA CA servers" msgstr "" @@ -16803,5078 +15427,95 @@ msgstr "" msgid "DNSec key master" msgstr "Neu: Schlüssel gesetzt" +#, fuzzy +msgid "Setup SID configuration" +msgstr "Konfiguration" + +msgid "New users and groups automatically get a SID assigned" +msgstr "" + +#, fuzzy +msgid "Add SIDs" +msgstr "Neuen Host hinzufügen." + +msgid "Add SIDs for existing users and groups" +msgstr "" + +#, fuzzy +msgid "NetBIOS name of the IPA domain" +msgstr "DN der gestarteten Aufgabe" + +msgid "Empty domain is not allowed" +msgstr "Eine leere Domäne ist nicht zulässig" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "Ungültiger Domänenname '%(domain)s': %(e)s" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "Der Server hat keine Informationen über die Domäne '%(domain)s'" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "Deaktivierte Domäne '%(domain)s' ist nicht zulässig" + +#, fuzzy +msgid "not allowed to enable SID generation" +msgstr "Es ist nicht erlaubt, Gruppeneinträge zu ändern." + +msgid "" +"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " +"allowed. Empty string is not allowed." +msgstr "" + +#, fuzzy +#| msgid "Failed to add" +msgid "Failed to call DBus" +msgstr "Hinzufügen fehlgeschlagen" + +msgid "Configuration of SID failed. See details in the error log" +msgstr "" + +msgid "The group doesn't exist" +msgstr "Die Gruppe existiert nicht" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "Attribut \"%s\" ist nicht erlaubt" + +msgid "May not be empty" +msgstr "Darf nicht leer sein" + #, fuzzy, python-format msgid "%(obj)s default attribute %(attr)s would not be allowed!" msgstr "Attribut \"%(attribute)s\" ist nicht erlaubt" +msgid "A list of SELinux users delimited by $ expected" +msgstr "$-getrennte Liste von SELinux Benutzern erwartet" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "SELinux Benutzer '%(user)s' ist ungültig: %(error)s" + msgid "SELinux user map default user not in order list" msgstr "" -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -#, fuzzy, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "Gruppe »%(value)s« hinzugefügt" - -#, fuzzy, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "Gruppe »%(value)s« gelöscht" - -#, fuzzy, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "Gruppe »%(value)s« geändert" - -#, fuzzy, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "%(count)d passende Gruppe" -msgstr[1] "%(count)d passende Gruppen" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - #, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" +msgid "You cannot specify %s without the --enable-sid option" msgstr "" -#, fuzzy -msgid "hostgroup" -msgstr "Hostgruppe" - -#, fuzzy -msgid "privileged hostgroup" -msgstr "Hostgruppe löschen." - -#, fuzzy -msgid "Add users that can manage members of this hostgroup." -msgstr "Nutzer hinzufügen die diesen Token verwalten können" - -#, fuzzy -msgid "Remove users that can manage members of this hostgroup." -msgstr "Nutzer entfernen die diesen Token verwalten können" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "The OTP if the user has a token configured" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Permissions\n" -msgstr "Berechtigungen" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Managed permissions\n" -msgstr "Berechtigungen" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -#, fuzzy -msgid "must be enclosed in parentheses" -msgstr "muss eine Ganzzahl sein" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, fuzzy, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "%s ist kein gültiges Attribut" - -#, fuzzy, python-format -msgid "Deprecated; use %s" -msgstr "Veraltete Optionen" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, fuzzy, python-format -msgid "Entry %s not found" -msgstr "Objektklasse %s nicht gefunden" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, fuzzy, python-format -msgid "%s: group not found" -msgstr "Realm nicht gefunden\n" - -#, fuzzy -msgid "target and targetgroup are mutually exclusive" -msgstr "" -"»type«, »filter«, »subtree« und »targetgroup« schließen sich gegenseitig aus." - -#, fuzzy -msgid "subtree and type are mutually exclusive" -msgstr "»filter« und »memberof« schließen sich gegenseitig aus" - -#, fuzzy -msgid "Bad search filter" -msgstr "Falscher Suchfilter %(info)s" - -#, fuzzy, python-format -msgid "Entry %s does not exist" -msgstr "Gruppe »%s« existiert nicht" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, fuzzy, python-format -msgid "Added permission \"%(value)s\"" -msgstr "Rolle \"%(value)s\" hinzugefügt" - -#, fuzzy -msgid "attrs and included attributes are mutually exclusive" -msgstr "»filter« und »memberof« schließen sich gegenseitig aus" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "Rolle \"%(value)s\" gelöscht" - -#, fuzzy -msgid "cannot delete managed permissions" -msgstr "Indirekte Mitglieds-Berechtigungen" - -#, fuzzy, python-format -msgid "ACI of permission %s was not found" -msgstr "ACI mit dem Namen »%s« nicht gefunden" - -#, fuzzy, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "Rolle \"%(value)s\" geändert" - -#, fuzzy -msgid "cannot rename managed permissions" -msgstr "Indirekte Mitglieds-Berechtigungen" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -#, fuzzy -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "»filter« und »memberof« schließen sich gegenseitig aus" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "%(count)d Rolle gefunden" -msgstr[1] "%(count)d Rollen gefunden" - -#, fuzzy, python-brace-format -msgid "{role}: role not found" -msgstr "Realm nicht gefunden\n" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -msgid "Internationalization messages" -msgstr "" - -msgid "Your session has expired. Please log in again." -msgstr "" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "" - -msgid "Remove" -msgstr "" - -#, fuzzy -msgid "Authentication indicators" -msgstr "HOTP Authentifizierungsfenster" - -#, fuzzy -msgid "Authentication indicator" -msgstr "HOTP Authentifizierungsfenster" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -#, fuzzy -msgid "Add Custom Authentication Indicator" -msgstr "HOTP Authentifizierungsfenster" - -#, fuzzy -msgid "RADIUS" -msgstr "Radius Server" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -msgid "Disable per-user override" -msgstr "" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "Clear" -msgstr "" - -#, fuzzy -msgid "Clear all fields on the page." -msgstr "Seite neu laden." - -msgid "Download" -msgstr "" - -msgid "Download certificate as PEM formatted file." -msgstr "" - -msgid "Hide" -msgstr "" - -#, fuzzy -msgid "Match" -msgstr "Gefunden" - -msgid "Match users according to certificate." -msgstr "" - -msgid "Migrate" -msgstr "" - -msgid "Reload current settings from the server." -msgstr "" - -msgid "Remove hold" -msgstr "" - -#, fuzzy -msgid "Reset Password and Log in" -msgstr "Passwort zurücksetzen" - -msgid "Show" -msgstr "" - -#, fuzzy -msgid "Customization" -msgstr "Bestätigung" - -msgid "Pagination Size" -msgstr "" - -#, fuzzy -msgid "Record Settings" -msgstr "Host Einstellungen" - -#, fuzzy -msgid "Add custom value" -msgstr "Host \"%(value)s\" hinzugefügt" - -#, fuzzy -msgid "Some operations failed." -msgstr "Token-Synchronisierung fehlgeschlagen" - -#, fuzzy -msgid "Operations Error" -msgstr "Überprüfungsfehler" - -msgid "Custom value" -msgstr "" - -msgid "Prospective" -msgstr "" - -#, fuzzy -msgid "Result" -msgstr "Ergebnisse anzeigen" - -#, fuzzy, python-brace-format -msgid "${primary_key} member managers:" -msgstr "${primary_key} Mitglieder:" - -#, fuzzy, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" -"Benutzern, Gruppen, Hosts und Hostgruppen erlauben die Schlüsseltabelle zu " -"erstellen." - -#, fuzzy, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" -"Benutzern, Gruppen, Hosts und Hostgruppen erlauben die Schlüsseltabelle zu " -"erhalten." - -#, fuzzy, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "" -"Benutzern, Gruppen, Hosts und Hostgruppen erlauben die Schlüsseltabelle zu " -"erstellen." - -#, fuzzy, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" -"Benutzern, Gruppen, Hosts und Hostgruppen erlauben die Schlüsseltabelle zu " -"erhalten." - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Allowed to create keytab" -msgstr "Hosts die Schlüsseltabelle erstellen dürfen" - -#, fuzzy -msgid "Allowed to retrieve keytab" -msgstr "Hosts die Schlüsseltabelle abrufen dürfen" - -#, fuzzy, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" -"Benutzern, Gruppen, Hosts und Hostgruppen verbieten die Schlüsseltabelle zu " -"erstellen." - -#, fuzzy, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" -"Benutzern, Gruppen, Hosts und Hostgruppen verbieten die Schlüsseltabelle zu " -"erhalten." - -#, fuzzy, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" -"Benutzern, Gruppen, Hosts und Hostgruppen verbieten die Schlüsseltabelle zu " -"erstellen." - -#, fuzzy, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" -"Benutzern, Gruppen, Hosts und Hostgruppen verbieten die Schlüsseltabelle zu " -"erhalten." - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "Benutzer die Schlüsseltabelle abrufen dürfen" - -#, fuzzy -msgid "Add Kerberos Principal Alias" -msgstr "Kerberos-Principal" - -#, fuzzy -msgid "New kerberos principal alias" -msgstr "Kerberos-Principal" - -msgid "Remove Kerberos Alias" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "" - -#, fuzzy -msgid "Authenticating" -msgstr "Authentifizierung" - -msgid "Authentication with personal certificate failed" -msgstr "" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" - -msgid "Continue to next page" -msgstr "" - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" - -msgid "Login failed due to an unknown reason" -msgstr "" - -msgid "Authentication with Kerberos failed" -msgstr "" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -msgid "Loading" -msgstr "" - -#, fuzzy -msgid "Kerberos Principal you entered is expired" -msgstr "Kerberos-Principal Ablauf" - -msgid "Loading data" -msgstr "" - -msgid "Log in" -msgstr "" - -#, fuzzy -msgid "Log In Using Certificate" -msgstr "Host-Zertifikat" - -msgid "Log in using personal certificate" -msgstr "" - -msgid "Log out" -msgstr "" - -msgid "Log out error" -msgstr "" - -msgid "Password or Password+One-Time Password" -msgstr "" - -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "" - -#, fuzzy -msgid "Synchronizing" -msgstr "HOTP Sychnronisierungsfenster" - -msgid "The user account you entered is locked" -msgstr "" - -#, fuzzy -msgid "Migrating" -msgstr "Konfiguration" - -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -#, fuzzy -msgid "Password migration was not successful" -msgstr "Passwort konnte nicht zurückgesetzt werden" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -#, fuzzy -msgid "The password or username you entered is incorrect" -msgstr "Benutzername, Passwort oder Einmalpasswort waren falsch." - -#, fuzzy -msgid "Password migration was successful" -msgstr "Passwort konnte nicht zurückgesetzt werden" - -#, fuzzy -msgid "Add delegation" +msgid "delegation" msgstr "Delegation" -#, fuzzy -msgid "Remove delegations" +msgid "delegations" msgstr "Delegationen" -#, fuzzy -msgid "Add permission" -msgstr "Berechtigung" +msgid "Delegations" +msgstr "Delegationen" -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove permissions" -msgstr "Berechtigungen" - -#, fuzzy, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "Berechtigungen von Rolle entfernen." - -#, fuzzy -msgid "Add privilege" -msgstr "Berechtigungen zur Rolle hinzufügen." - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove privileges" -msgstr "Berechtigungen von Rolle entfernen." - -#, fuzzy, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "Berechtigungen von Rolle entfernen." - -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Role Settings" -msgstr "Host Einstellungen" - -#, fuzzy -msgid "Add role" -msgstr "Neue Rolle hinzufügen." - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "" - -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -msgid "Remove roles" -msgstr "" - -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "Berechtigungen von Rolle entfernen." - -#, fuzzy, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "Mitglieder von Rolle entfernen." - -#, fuzzy -msgid "Add self service permission" -msgstr "Beschreibung des HBAC-Dienstes" - -msgid "Remove self service permissions" -msgstr "" - -#, fuzzy -msgid "Add rule" -msgstr "HBAC-Regel" - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Are you sure you want to change default group?" -msgstr "SInd Sie sicher, dass Sie die ausgewählten Benutzer aktivieren wollen?" - -#, fuzzy -msgid "Host group rule" -msgstr "Hostgruppe" - -#, fuzzy -msgid "Host group rules" -msgstr "Hostgruppen" - -#, fuzzy -msgid "Inclusive" -msgstr "Exklusiv" - -#, fuzzy -msgid "Remove auto membership rules" -msgstr "Regel für Auto-Mitgliedschaft" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "User group rule" -msgstr "Benutzer-Gruppe" - -#, fuzzy -msgid "User group rules" -msgstr "Benutzer-Gruppe" - -#, fuzzy -msgid "Add automount key" -msgstr "Automount" - -#, fuzzy -msgid "Remove automount keys" -msgstr "Automount-Maps" - -#, fuzzy -msgid "Add automount location" -msgstr "Automount-Ort" - -#, fuzzy -msgid "Automount Location Settings" -msgstr "Automount-Orte" - -#, fuzzy -msgid "Remove automount locations" -msgstr "Automount-Orte" - -#, fuzzy -msgid "Add automount map" -msgstr "Automount-Map" - -#, fuzzy -msgid "Map Type" -msgstr "Gruppentyp" - -#, fuzzy -msgid "Remove automount maps" -msgstr "Automount-Maps" - -msgid "Add certificate authority" -msgstr "" - -#, fuzzy -msgid "Remove certificate authorities" -msgstr "Ein Zertifikat widerrufen." - -#, fuzzy -msgid "Add CA ACL" -msgstr "CA ACL" - -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "Benutzer und Gruppen zu einer HBAC-Regel hinzufügen." - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "All" -msgstr "Erlauben" - -msgid "Any CA" -msgstr "" - -#, fuzzy -msgid "Any Profile" -msgstr "Profile" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" - -#, fuzzy -msgid "Remove CA ACLs" -msgstr "CA ACLs" - -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -#, fuzzy, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Specified CAs" -msgstr "Spezifische Gruppe" - -#, fuzzy -msgid "Specified Profiles" -msgstr "Spezifische Gruppe" - -#, fuzzy -msgid "Permitted to have certificates issued" -msgstr "Datei, in der das Zertifikat gespeichert werden soll." - -#, fuzzy -msgid "Remove certificate profiles" -msgstr "Benutze Zertifikatsprofil" - -msgid "AA Compromise" -msgstr "" - -#, fuzzy -msgid "Add principal" -msgstr "Principal" - -msgid "Affiliation Changed" -msgstr "" - -msgid "CA" -msgstr "" - -msgid "CA Compromise" -msgstr "" - -#, fuzzy -msgid "Certificate Hold" -msgstr "Zertifikat" - -#, fuzzy -msgid "Cessation of Operation" -msgstr "Replikationseinstellungen" - -#, fuzzy -msgid "Common Name" -msgstr "Befehlsname" - -msgid "the certificate with serial number " -msgstr "" - -#, fuzzy -msgid "Issued on from" -msgstr "Ausgegeben am" - -#, fuzzy -msgid "Issued on to" -msgstr "Ausgegeben am" - -#, fuzzy -msgid "Maximum serial number" -msgstr "Seriennummer" - -#, fuzzy -msgid "Minimum serial number" -msgstr "Seriennummer" - -#, fuzzy -msgid "Revoked on from" -msgstr "Widerrufen" - -#, fuzzy -msgid "Revoked on to" -msgstr "Widerrufen" - -#, fuzzy -msgid "Valid not after from" -msgstr "Überprüfungsfehler" - -#, fuzzy -msgid "Valid not after to" -msgstr "Gültig ab" - -msgid "Valid not before from" -msgstr "" - -msgid "Valid not before to" -msgstr "" - -#, fuzzy -msgid "Fingerprints" -msgstr "Fingerabdruck" - -#, fuzzy -msgid "Get Certificate" -msgstr "Neues Zertifikat" - -#, fuzzy -msgid "Certificate Hold Removed" -msgstr "Benutze Zertifikatsprofil" - -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Issue new certificate" -msgstr "Neues Zertifikat" - -msgid "Key Compromise" -msgstr "" - -msgid "Certificate in base64 or PEM format" -msgstr "" - -msgid "Note" -msgstr "" - -#, fuzzy, python-brace-format -msgid "${count} certificate(s) present" -msgstr "${count} Einträge gelöscht" - -msgid "Privilege Withdrawn" -msgstr "" - -msgid "Reason for Revocation" -msgstr "" - -#, fuzzy -msgid "Remove certificate hold" -msgstr "Ein Zertifikat widerrufen." - -#, fuzzy -msgid "Do you want to remove the certificate hold?" -msgstr "Datei, in der das Zertifikat gespeichert werden soll." - -#, fuzzy -msgid "Remove from CRL" -msgstr "DNS Einträge löschen" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" - -#, fuzzy -msgid "Certificate requested" -msgstr "Zertifikate" - -#, fuzzy -msgid "Revoke certificate" -msgstr "Ein Zertifikat widerrufen." - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" - -#, fuzzy -msgid "Certificate Revoked" -msgstr "Zertifikattyp" - -msgid "REVOKED" -msgstr "" - -#, fuzzy -msgid "SHA256 Fingerprint" -msgstr "SHA1-Fingerabdruck" - -msgid "Superseded" -msgstr "" - -#, fuzzy -msgid "Valid Certificate Present" -msgstr "Kein gültiges Zertifikat" - -#, fuzzy -msgid "Valid from" -msgstr "Überprüfungsfehler" - -#, fuzzy -msgid "Valid to" -msgstr "Gültigkeit" - -#, fuzzy, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "${entity} ${primary_key} aktualisiert" - -#, fuzzy -msgid "View Certificate" -msgstr "Neues Zertifikat" - -#, fuzzy -msgid "Certificate Data" -msgstr "Zertifikat" - -#, fuzzy -msgid "Certificate For Match" -msgstr "Zertifikat" - -#, fuzzy -msgid "Certificate Mapping Match" -msgstr "Zertifikattyp" - -#, fuzzy -msgid "Matched Users" -msgstr "Zutreffende Regeln" - -#, fuzzy -msgid "User Login" -msgstr "Anmeldename" - -msgid "Add certificate identity mapping rule" -msgstr "" - -msgid "Add certificate mapping data" -msgstr "" - -#, fuzzy -msgid "Certificate mapping data" -msgstr "Zertifikattyp" - -#, fuzzy -msgid "Configuration string" -msgstr "Konfiguration" - -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "" - -#, fuzzy -msgid "Remove certificate mapping data" -msgstr "Ein Zertifikat widerrufen." - -msgid "Issuer and subject" -msgstr "" - -#, fuzzy -msgid "Remove certificate identity mapping rules" -msgstr "Eine Signaturanfrage (CSR) senden." - -#, fuzzy -msgid "Server Options" -msgstr "Suchoptionen" - -#, fuzzy -msgid "Service Options" -msgstr "Suchoptionen" - -msgid "Forward first" -msgstr "" - -#, fuzzy -msgid "Forwarding disabled" -msgstr "Konto ist deaktiviert" - -msgid "Forward only" -msgstr "" - -#, fuzzy -msgid "Update System DNS Records" -msgstr "DNS Einträge aktualisieren" - -msgid "Do you want to update system DNS records?" -msgstr "" - -msgid "System DNS records updated" -msgstr "" - -msgid "Add DNS forward zone" -msgstr "" - -msgid "Remove DNS forward zones" -msgstr "" - -msgid "Add DNS resource record" -msgstr "" - -msgid "DNS record was deleted because it contained no data." -msgstr "" - -msgid "Address not valid, can't redirect" -msgstr "" - -#, fuzzy -msgid "Create dns record" -msgstr "Eine neue Gruppe erstellen." - -msgid "Creating record." -msgstr "" - -#, fuzzy -msgid "Record creation failed." -msgstr "Token-Synchronisierung fehlgeschlagen" - -msgid "Checking if record exists." -msgstr "" - -#, fuzzy -msgid "Redirection to PTR record" -msgstr "Umleitung" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "" - -#, fuzzy -msgid "Target reverse zone not found." -msgstr "%(parent)s: %(oname)s nicht gefunden" - -#, fuzzy -msgid "Fetching DNS zones." -msgstr "DNS-Zonen" - -msgid "An error occurred while fetching dns zones." -msgstr "" - -msgid "You will be redirected to DNS Zone." -msgstr "" - -#, fuzzy -msgid "Remove DNS resource records" -msgstr "Nach DNS-Ressourcen suchen." - -#, fuzzy -msgid "Standard Record Types" -msgstr "Andere Datensatztypen" - -msgid "Records for DNS Zone" -msgstr "" - -#, fuzzy -msgid "Record Type" -msgstr "Datensatztyp" - -#, fuzzy -msgid "Add DNS zone" -msgstr "DNS-Zone" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "SInd Sie sicher, dass Sie ${object} deaktivieren wollen?" - -#, fuzzy -msgid "DNS Zone Settings" -msgstr "DNS-Zonen" - -#, fuzzy -msgid "Remove DNS zones" -msgstr "DNS-Zonen" - -#, fuzzy -msgid "Remove Permission" -msgstr "Berechtigung" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "SInd Sie sicher, dass Sie ${object} löschen wollen?" - -msgid "Skip DNS check" -msgstr "" - -msgid "Skip overlap check" -msgstr "" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" - -msgid "Authoritative nameserver change" -msgstr "" - -#, fuzzy -msgid "Set Domain Level" -msgstr "Domain Level" - -#, fuzzy -msgid "Add user group" -msgstr "Benutzer-Gruppe" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "Benutzer und Gruppen zu einer HBAC-Regel hinzufügen." - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Group categories" -msgstr "Benutzerkategorien" - -#, fuzzy -msgid "Non-POSIX" -msgstr "POSIX" - -#, fuzzy -msgid "Remove user groups" -msgstr "Mitglieds-Dienstgruppen" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -#, fuzzy, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -#, fuzzy, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -#, fuzzy, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "Dienste von einer HBAC-Gruppe entfernen." - -#, fuzzy, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "Mitglieder aus einer Gruppe entfernen." - -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Add HBAC rule" -msgstr "HBAC-Regel" - -#, fuzzy, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "Benutzer und Gruppen zu einer HBAC-Regel hinzufügen." - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." - -#, fuzzy, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." - -#, fuzzy -msgid "Remove HBAC rules" -msgstr "HBAC-Regeln" - -#, fuzzy, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -#, fuzzy, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "Dienste von einer HBAC-Gruppe entfernen." - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -#, fuzzy -msgid "Add HBAC service" -msgstr "HBAC-Dienst" - -#, fuzzy, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "Mitglieder zur einer HBAC-Dienstgruppe hinzufügen." - -#, fuzzy -msgid "Remove HBAC services" -msgstr "Mitglieds-HBAC-Dienst" - -#, fuzzy, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "Mitglieder von einer HBAC-Dienstgruppe entfernen." - -#, fuzzy -msgid "Add HBAC service group" -msgstr "HBAC-Dienstgruppe" - -#, fuzzy, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "Mitglieder zur einer HBAC-Dienstgruppe hinzufügen." - -#, fuzzy -msgid "Remove HBAC service groups" -msgstr "Mitglieds-HBAC-Servicegruppen" - -#, fuzzy, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "Mitglieder von einer HBAC-Dienstgruppe entfernen." - -#, fuzzy, python-brace-format -msgid "Specify external ${entity}" -msgstr "${entity} bearbeiten" - -#, fuzzy -msgid "Unmatched" -msgstr "Gefunden" - -#, fuzzy -msgid "Add host" -msgstr "Neuen Host hinzufügen." - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -msgid "Delete Key, Unprovision" -msgstr "" - -msgid "Enrolled" -msgstr "" - -msgid "Enrollment" -msgstr "" - -msgid "Fully Qualified Host Name" -msgstr "" - -#, fuzzy -msgid "Generate OTP" -msgstr "OTP zurücksetzen" - -#, fuzzy -msgid "Generated OTP" -msgstr "OTP zurücksetzen" - -#, fuzzy -msgid "Kerberos Key Present, Host Provisioned" -msgstr "Kerberos-Schlüssel nicht vorhanden" - -#, fuzzy -msgid "One-Time Password" -msgstr "Einmalpasswort" - -#, fuzzy -msgid "One-Time Password Not Present" -msgstr "Einmalpasswort" - -#, fuzzy -msgid "One-Time Password Present" -msgstr "Einmalpasswort" - -#, fuzzy -msgid "Reset One-Time Password" -msgstr "Einmalpasswort" - -#, fuzzy -msgid "Set One-Time Password" -msgstr "Einmalpasswort" - -#, fuzzy -msgid "Remove hosts" -msgstr "Mitglieds-Hosts" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "Mitglieder von Hostgruppe entfernen." - -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "Berechtigungen von Rolle entfernen." - -#, fuzzy, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "" - -#, fuzzy -msgid "Unprovision" -msgstr "Provisioning" - -#, fuzzy -msgid "Are you sure you want to unprovision this host?" -msgstr "Sind Sie sicher, dass Sie mit dieser Aktion fortfahren wollen?" - -#, fuzzy -msgid "Unprovisioning host" -msgstr "Provisioning" - -msgid "Host unprovisioned" -msgstr "" - -#, fuzzy -msgid "Add host group" -msgstr "Hostgruppe" - -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove host groups" -msgstr "Mitglieds-Hostgruppen" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" - -msgid "Enter trusted user login." -msgstr "" - -#, fuzzy -msgid "Profile" -msgstr "Profile" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" - -#, fuzzy -msgid "Enter trusted group name." -msgstr "Dienstgruppenname" - -msgid "Add ID view" -msgstr "" - -#, fuzzy -msgid "Add group ID override" -msgstr "Gruppe zum Überschreiben" - -#, fuzzy -msgid "Add user ID override" -msgstr "Benutzer zum Überschreiben" - -#, fuzzy, python-brace-format -msgid "${primary_key} applies to:" -msgstr "${primary_key} Mitglieder:" - -msgid "Applied to hosts" -msgstr "" - -#, fuzzy -msgid "Apply to host groups" -msgstr "Hostgruppen" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" - -msgid "Apply to hosts" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#, fuzzy, python-brace-format -msgid "${primary_key} overrides:" -msgstr "${primary_key} Mitglieder:" - -msgid "Remove ID views" -msgstr "" - -#, fuzzy -msgid "Remove user ID overrides" -msgstr "Benutzer zum Überschreiben" - -#, fuzzy -msgid "Remove group ID overrides" -msgstr "Gruppe zum Überschreiben" - -#, fuzzy -msgid "Un-apply from host groups" -msgstr "Nach Hostgruppen suchen." - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" - -#, fuzzy -msgid "Un-apply" -msgstr "Anwenden" - -msgid "Un-apply from hosts" -msgstr "" - -msgid "Un-apply ID Views from hosts" -msgstr "" - -#, fuzzy -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "Sind Sie sicher, dass Sie die ausgewählten Einträge aktivieren wollen?" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" - -#, fuzzy -msgid "Add netgroup" -msgstr "Hostgruppe hinzufügen." - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Netgroup Settings" -msgstr "Gruppeneinstellungen" - -#, fuzzy -msgid "Netgroups" -msgstr "Gruppen" - -#, fuzzy -msgid "Remove netgroups" -msgstr "Mitglieds-Gruppen" - -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Add OTP token" -msgstr "OTP Token" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove OTP tokens" -msgstr "OTP Tokens" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Add Custom Attribute" -msgstr "Attribut" - -#, fuzzy -msgid "Permission settings" -msgstr "Berechtigungen" - -#, fuzzy -msgid "Attribute breakdown" -msgstr "Attribut Schlüssel" - -#, fuzzy -msgid "Privilege Settings" -msgstr "Diensteinstellungen" - -#, fuzzy -msgid "Public key:" -msgstr "Öffentliche SSH Schlüssel" - -#, fuzzy -msgid "Set public key" -msgstr "Öffentlicher SSH Schlüssel" - -#, fuzzy -msgid "Add password policy" -msgstr "Passwortregel" - -#, fuzzy -msgid "Remove password policies" -msgstr "Passwortregeln" - -#, fuzzy -msgid "Add ID range" -msgstr "Mehrere hinzufügen" - -#, fuzzy -msgid "Range Settings" -msgstr "Einstellungen" - -msgid "Base ID" -msgstr "" - -msgid "Primary RID base" -msgstr "" - -msgid "Range size" -msgstr "" - -#, fuzzy -msgid "Domain SID" -msgstr "Domain" - -msgid "Secondary RID base" -msgstr "" - -msgid "Remove ID ranges" -msgstr "" - -msgid "Active Directory domain" -msgstr "" - -msgid "Active Directory domain with POSIX attributes" -msgstr "" - -msgid "Detect" -msgstr "" - -#, fuzzy -msgid "Local domain" -msgstr "Ort" - -#, fuzzy -msgid "IPA trust" -msgstr "Vertrauensstellung" - -msgid "Active Directory winsync" -msgstr "" - -#, fuzzy -msgid "Add RADIUS server" -msgstr "Radius Server" - -#, fuzzy -msgid "RADIUS Proxy Server Settings" -msgstr "Radius Server" - -#, fuzzy -msgid "Remove RADIUS servers" -msgstr "Radius Server" - -msgid "Check DNS" -msgstr "" - -msgid "Do you also want to perform DNS check?" -msgstr "" - -#, fuzzy -msgid "Add SELinux user map" -msgstr "Vorgegebener SELinux-Benutzer" - -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "" - -msgid "Remove selinux user maps" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Server Roles" -msgstr "Servername" - -#, fuzzy -msgid "Server Role" -msgstr "Servername" - -msgid "Warning: Consider service replication" -msgstr "" - -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" - -#, fuzzy -msgid "Delete Server" -msgstr "Einen Benutzer löschen" - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" - -#, fuzzy -msgid "Add service" -msgstr "HBAC-Dienst" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -#, fuzzy -msgid "Service Certificate" -msgstr "Neues Zertifikat" - -#, fuzzy -msgid "Remove services" -msgstr "Mitglieds-Dienste" - -#, fuzzy, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "Berechtigungen von Rolle entfernen." - -#, fuzzy, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "Hosts entfernen, die diesen Dienst verwalten können." - -#, fuzzy -msgid "Are you sure you want to unprovision this service?" -msgstr "" -"SInd Sie sicher, dass Sie die ausgewählten Benutzer wiederherstellen wollen?" - -#, fuzzy -msgid "Unprovisioning service" -msgstr "Provisioning" - -#, fuzzy -msgid "Service unprovisioned" -msgstr "Dienst-Principal" - -#, fuzzy -msgid "Kerberos Key Present, Service Provisioned" -msgstr "Kerberos-Schlüssel nicht vorhanden" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "SInd Sie sicher, dass Sie ${object} deaktivieren wollen?" - -#, fuzzy -msgid "Add stage user" -msgstr "Vorbereiteter Benutzer" - -#, fuzzy -msgid "Remove preserved users" -msgstr "Aufbewahrte Benutzer" - -#, fuzzy -msgid "Remove stage users" -msgstr "Vorbereitete Benutzer" - -#, fuzzy -msgid "Are you sure you want to stage selected users?" -msgstr "" -"SInd Sie sicher, dass Sie die ausgewählten Benutzer wiederherstellen wollen?" - -#, fuzzy, python-brace-format -msgid "${count} users(s) staged" -msgstr "${count} user(s) wiederhergestellt" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "SInd Sie sicher, dass Sie ${object} deaktivieren wollen?" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "SInd Sie sicher, dass Sie ${object} löschen wollen?" - -#, fuzzy -msgid "Add sudo command" -msgstr "Sudo-Befehl" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "" - -#, fuzzy -msgid "Remove sudo commands" -msgstr "Sudo-Befehle" - -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "" - -#, fuzzy -msgid "Add sudo command group" -msgstr "Sudo-Befehlsgruppe" - -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove sudo command groups" -msgstr "Sudo-Befehlsgruppen" - -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Add sudo rule" -msgstr "Sudo-Regel" - -#, fuzzy -msgid "Add sudo option" -msgstr "Sudo-Option" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove sudo rules" -msgstr "Sudo-Regeln" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove sudo options" -msgstr "Sudo-Option" - -#, fuzzy -msgid "Autogenerated" -msgstr "Auto-Mitgliedschaft" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" - -msgid "Add IPA location" -msgstr "" - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove IPA locations" -msgstr "Automount-Orte" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -msgid "Add topology segment" -msgstr "" - -msgid "Remove topology segments" -msgstr "" - -#, fuzzy -msgid "Add trust" -msgstr "Vertrauensstellung" - -msgid "SID blocklists" -msgstr "" - -msgid "Establish using" -msgstr "" - -msgid "Fetch domains" -msgstr "" - -#, fuzzy -msgid "Pre-shared password" -msgstr "Passwort ändern" - -#, fuzzy -msgid "Remove trusts" -msgstr "Vertrauensstellungen" - -msgid "Remove domains" -msgstr "" - -#, fuzzy -msgid "Trust direction" -msgstr "Umleitung" - -#, fuzzy -msgid "Trust status" -msgstr "Anfragestatus" - -#, fuzzy -msgid "Trust type" -msgstr "Vertrauensstellungstyp" - -#, fuzzy -msgid "Alternative UPN suffixes" -msgstr "UPN Suffixe" - -#, fuzzy -msgid "User attributes for SMB services" -msgstr "Nach HBAC-Diensten suchen." - -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -msgid "Path to a user home directory, in UNC format" -msgstr "" - -#, fuzzy -msgid "Drive to mount a home directory" -msgstr "Vorgegebener Ort für Home-Verzeichnisse" - -#, fuzzy -msgid "Add user" -msgstr "Einen neuen Benutzer hinzufügen." - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -#, fuzzy -msgid "Remove users" -msgstr "Mitglieds-Benutzer" - -#, fuzzy, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "Mitglieder aus einer Gruppe entfernen." - -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "Berechtigungen von Rolle entfernen." - -#, fuzzy, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "" - -msgid "Add vault" -msgstr "" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -msgid "Asymmetric" -msgstr "" - -msgid "Vaults Config" -msgstr "" - -#, fuzzy -msgid "Members" -msgstr "Mitglieds-Host" - -msgid "My User Vaults" -msgstr "" - -#, fuzzy -msgid "Owners" -msgstr "Eigentümer" - -msgid "Remove vaults" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Service Vaults" -msgstr "Dienste" - -msgid "Shared" -msgstr "" - -msgid "Shared Vaults" -msgstr "" - -msgid "Standard" -msgstr "" - -msgid "Symmetric" -msgstr "" - -#, fuzzy -msgid "Vault Type" -msgstr "Gruppentyp" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -#, fuzzy -msgid "User Vaults" -msgstr "Benutzergruppen" - -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" - -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" - -#, fuzzy -msgid "Your password has expired. Please enter a new password." -msgstr "Ihr Passwort läuft in ${days} Tagen ab." - -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" - -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" - -#, fuzzy -msgid "Host-Based Access Control" -msgstr "HBAC Nutzung simulieren" - -msgid "Role-Based Access Control" -msgstr "" - -#, fuzzy -msgid "Trusts" -msgstr "Vertrauensstellung" - -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" - -msgid "API Browser" -msgstr "" - -msgid "Undo this change." -msgstr "" - -#, fuzzy -msgid "Undo all changes in this field." -msgstr "Alle Principals in diesem Realm entfernen" - -msgid "Text does not match field pattern" -msgstr "" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" - -#, fuzzy -msgid "Must be a decimal number" -msgstr "muss eine Dezimalzahl sein" - -#, fuzzy -msgid "Format error" -msgstr "Lesefehler\n" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "" - -#, fuzzy -msgid "Parse error" -msgstr "Lesefehler\n" - -#, fuzzy -msgid "Must be a positive number" -msgstr "Muss eine Ganzzahl sein" - -#, fuzzy, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "%(port)s kein gültiger Port" - -#, fuzzy -msgid "Required field" -msgstr "Anfrage-ID" - -#, fuzzy -msgid "Unsupported value" -msgstr "nicht unterstützte Vetrauensstellung" - -#, fuzzy -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "Radius Server" - -#, fuzzy -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "Radius Server" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -#, fuzzy -msgid "invalid attribute name" -msgstr "%s ist kein gültiges Attribut" - -#, fuzzy -msgid "invalid port number" -msgstr "Seriennummer" - -#, fuzzy -msgid "RADIUS proxy server" -msgstr "RADIUS-Proxy Benutzername" - -#, fuzzy -msgid "RADIUS proxy servers" -msgstr "RADIUS-Proxy Benutzername" - -#, fuzzy -msgid "RADIUS Server" -msgstr "Radius Server" - -#, fuzzy, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "HBAC Dienst \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "HBAC Dienst \"%(value)s\" gelöscht" - -#, fuzzy, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "HBAC Dienst \"%(value)s\" geändert" - -#, fuzzy, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "%(count)d HBAC-Dienst gefunden" -msgstr[1] "%(count)d HBAC-Dienste gefunden" - -#, fuzzy, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" -"Domain Level kann nicht auf {0} erhöht werden, Server {1} unterstützt das " -"nicht." - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -#, fuzzy -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" -"Kann den ausgewählten Befehl nicht ohne Samba 4 Unterstützung ausführen. " -"Stellen Sie sicher, dass das server-trust-ad Paket von IPA installiert ist." - -#, fuzzy -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" -"Kann den ausgewählten Befehl nicht ohne eine konfigurierte Samba 4 Instanz " -"auf dieser Maschine ausführen. Stellen Sie sicher, dass ipa-adtrust-install " -"auf dieser Maschine ausgeführt wurde." - -#, fuzzy -msgid "kerberos ticket policy settings" -msgstr "Kerberos-Ticket Richtlinien" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -#, fuzzy -msgid "RADIUS max renew" -msgstr "RADIUS-Proxy Benutzername" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -#, fuzzy -msgid "" -"\n" -"IPA locations\n" -msgstr "Aktionen" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -#, fuzzy -msgid "location" -msgstr "Ort" - -#, fuzzy -msgid "locations" -msgstr "Ort" - -#, fuzzy -msgid "IPA Locations" -msgstr "Ort" - -#, fuzzy -msgid "IPA Location" -msgstr "Ort" - -#, fuzzy -msgid "Location name" -msgstr "Ort" - -#, fuzzy -msgid "IPA location name" -msgstr "Automount-Ort" - -#, fuzzy -msgid "IPA Location description" -msgstr "Gruppenbeschreibung" - -#, fuzzy -msgid "Servers" -msgstr "Server" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -#, fuzzy -msgid "Add a new IPA location." -msgstr "Neuen OTP-Token hinzufügen" - -#, fuzzy, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "Automount Ort \"%(value)s\" hinzugefügt" - -#, fuzzy -msgid "Delete an IPA location." -msgstr "Automount-Ort löschen." - -#, fuzzy, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "Automount-Ort \"%(value)s\" gelöscht" - -#, fuzzy -msgid "Modify information about an IPA location." -msgstr "Hostinformationen ändern." - -#, fuzzy, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "OTP Token \"%(value)s\" geändert" - -#, fuzzy -msgid "Search for IPA locations." -msgstr "OTP Token suchen." - -#, fuzzy, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "%(count)d Automount-Ort gefunden" -msgstr[1] "%(count)d Automount-Orte gefunden" - -#, fuzzy -msgid "Display information about an IPA location." -msgstr "Informationen über OTP Token anzeigen." - -#, fuzzy -msgid "Servers in location" -msgstr "Servername" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -#, fuzzy -msgid "segments" -msgstr "Segment Details" - -#, fuzzy -msgid "Topology Segments" -msgstr "Topologie" - -#, fuzzy -msgid "Topology Segment" -msgstr "Topologie" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "%(count)d Host gefunden" -msgstr[1] "%(count)d Hosts gefunden" - -#, fuzzy, python-format -msgid "Added segment \"%(value)s\"" -msgstr "Host \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "Host \"%(value)s\" gelöscht" - -#, fuzzy, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "Host \"%(value)s\" geändert" - -#, fuzzy, python-format -msgid "%(value)s" -msgstr "»%(value)s« gefunden" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, fuzzy -msgid "suffixes" -msgstr "UPN Suffixe" - -#, fuzzy -msgid "Topology suffixes" -msgstr "Topologie" - -#, fuzzy -msgid "Topology suffix" -msgstr "Topologie" - -#, fuzzy, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "%(count)d Host gefunden" -msgstr[1] "%(count)d Hosts gefunden" - -#, fuzzy, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "Host \"%(value)s\" gelöscht" - -#, fuzzy, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "Host \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "Host \"%(value)s\" geändert" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -#, fuzzy, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "CA ACL \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "ACI gelöscht \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "ACI geändert \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "%(count)d ACI gefunden" -msgstr[1] "%(count)d ACIs gefunden" - -#, fuzzy -msgid "self service permission" -msgstr "Beschreibung des HBAC-Dienstes" - -#, fuzzy -msgid "self service permissions" -msgstr "Berechtigungen" - -#, fuzzy -msgid "Self Service Permissions" -msgstr "Berechtigungen" - -#, fuzzy -msgid "Self Service Permission" -msgstr "Berechtigung" - -#, fuzzy, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "Dienst »%(value)s« hinzugefügt" - -#, fuzzy, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "Dienst »%(value)s« gelöscht" - -#, fuzzy, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "Dienst »%(value)s« geändert" - -#, fuzzy, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "%(count)d passender Dienst" -msgstr[1] "%(count)d passende Dienste" - -msgid "ACI object." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -#, fuzzy -msgid "gid cannot be set for external group" -msgstr "In externe Gruppe umwandeln" - -#, fuzzy -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "Attribut \"%s\" ist nicht erlaubt" - -#, fuzzy -msgid "privileged group" -msgstr "Keine private Gruppe" - -#, fuzzy -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" -"Kann den ausgewählten Befehl nicht ohne eine konfigurierte Samba 4 Instanz " -"auf dieser Maschine ausführen. Stellen Sie sicher, dass ipa-adtrust-install " -"auf dieser Maschine ausgeführt wurde." - -#, fuzzy, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "Vorbereiteten Benutzer \"%(value)s\" gelöscht" - -#, fuzzy -msgid "Add users that can manage members of this group." -msgstr "Nutzer hinzufügen die diesen Token verwalten können" - -#, fuzzy -msgid "Remove users that can manage members of this group." -msgstr "Nutzer entfernen die diesen Token verwalten können" - -#, fuzzy, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "Automount Ort \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "Automount-Ort \"%(value)s\" gelöscht" - -#, fuzzy, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "Gruppe »%(value)s« geändert" - -#, fuzzy, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "%(count)d Automount-Ort gefunden" -msgstr[1] "%(count)d Automount-Orte gefunden" - -#, fuzzy -msgid "Automount key object." -msgstr "Automount-Ort" - -#, fuzzy -msgid "automount key" -msgstr "Automount-Map" - -#, fuzzy -msgid "automount keys" -msgstr "Automount-Maps" - -#, fuzzy -msgid "Automount Keys" -msgstr "Automount-Maps" - -#, fuzzy -msgid "Automount Key" -msgstr "Automount" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, fuzzy, python-format -msgid "key named %(key)s already exists" -msgstr "%(oname)s mit dem Namen »%(pkey)s« existiert bereits" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, fuzzy, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "Automount Ort \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "Automount Ort \"%(value)s\" hinzugefügt" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "Automount-Ort \"%(value)s\" gelöscht" - -#, fuzzy, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "Auto-Mitgliedschaftsregel \"%(value)s\" bearbeitet" - -#, fuzzy, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "%(count)d Automount-Ort gefunden" -msgstr[1] "%(count)d Automount-Orte gefunden" - -#, fuzzy -msgid "ID View" -msgstr "Ansicht" - -msgid "system ID View" -msgstr "" - -#, fuzzy -msgid "ID Views" -msgstr "Ansicht" - -#, fuzzy -msgid "User object overrides" -msgstr "Benutzer zum Überschreiben" - -#, fuzzy -msgid "Group object overrides" -msgstr "Gruppe zum Überschreiben" - -#, fuzzy -msgid "Hosts the view applies to" -msgstr "Host-Kategorie, auf welche die Regel angewendet werden soll" - -#, fuzzy, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "Rolle \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "ACI gelöscht \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "ACI geändert \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "%(count)d ACI gefunden" -msgstr[1] "%(count)d ACIs gefunden" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -#, fuzzy -msgid "not found" -msgstr "Realm nicht gefunden\n" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, fuzzy, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "Bedingungen, die nicht entfernt werden konnten" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -#, fuzzy -msgid "Add a new ID override." -msgstr "Einen neuen HBAC-Dienst hinzufügen." - -#, fuzzy, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "Dienst »%(value)s« hinzugefügt" - -#, fuzzy -msgid "Delete an ID override." -msgstr "Einen IPA-Dienst entfernen." - -#, fuzzy, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "Dienst »%(value)s« gelöscht" - -#, fuzzy -msgid "Modify an ID override." -msgstr "HBAC Dienst ändern" - -#, fuzzy, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "Dienst »%(value)s« geändert" - -#, fuzzy -msgid "ID override" -msgstr "Benutzer zum Überschreiben" - -#, fuzzy -msgid "ID overrides cannot be renamed" -msgstr "Zonen-Datensatz »%s« kann nicht gelöscht werden" - -#, fuzzy -msgid "Search for an ID override." -msgstr "Nach IPA-Diensten suchen." - -#, fuzzy, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "%(count)d passender Dienst" -msgstr[1] "%(count)d passende Dienste" - -#, fuzzy -msgid "Display information about an ID override." -msgstr "Informationen zu einem IPA-Dienst anzeigen." - -#, fuzzy -msgid "User ID override" -msgstr "Benutzer zum Überschreiben" - -#, fuzzy -msgid "User ID overrides" -msgstr "Benutzer zum Überschreiben" - -#, fuzzy -msgid "Group ID override" -msgstr "Gruppe zum Überschreiben" - -#, fuzzy -msgid "Group ID overrides" -msgstr "Gruppe zum Überschreiben" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "Vorbereiteten Benutzer »%(value)s« hinzugefügt" - -#, fuzzy -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "Manager vom Benutzer entfernen" - -#, fuzzy, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "Bedingung(en) von \"%(value)s\" entfernt" - -#, fuzzy, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "Dienst »%(value)s« hinzugefügt" - -#, fuzzy, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "Dienst »%(value)s« gelöscht" - -#, fuzzy, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "Dienst »%(value)s« geändert" - -#, fuzzy, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "%(count)d passender Dienst" -msgstr[1] "%(count)d passende Dienste" - -#, fuzzy, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "Gruppe »%(value)s« hinzugefügt" - -#, fuzzy, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "Gruppe »%(value)s« gelöscht" - -#, fuzzy, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "Gruppe »%(value)s« geändert" - -#, fuzzy, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "%(count)d passende Gruppe" -msgstr[1] "%(count)d passende Gruppen" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, fuzzy, python-format -msgid "%(user)s is not a POSIX user" -msgstr "%(port)s kein gültiger Port" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -#, fuzzy -msgid "Invalid LDAP URI." -msgstr "LDAP-URI" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -#, fuzzy -msgid "Default group for new users not found" -msgstr "Vorgegebene Gruppe für neue Benutzer" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -#, fuzzy -msgid "CA category" -msgstr "Host-Kategorie" - -#, fuzzy -msgid "CA category the ACL applies to" -msgstr "Hostkategorie auf die ACL angewendet wird" - -#, fuzzy -msgid "CAs" -msgstr "CA ACLs" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, fuzzy -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" -"Benutzerkategorie kann nicht auf 'Alle' gesetzt werden wenn es erlaubte " -"Benutzer gibt" - -#, fuzzy -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" -"Benutzerkategorie kann nicht auf 'Alle' gesetzt werden wenn es erlaubte " -"Benutzer gibt" - -#, fuzzy -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" -"Benutzerkategorie kann nicht auf 'Alle' gesetzt werden wenn es erlaubte " -"Benutzer gibt" - -#, fuzzy, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "%(count)d ACI gefunden" -msgstr[1] "%(count)d ACIs gefunden" - -#, fuzzy, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "CA ACL \"%(value)s\" gelöscht" - -#, fuzzy, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "CA ACL \"%(value)s\" gelöscht" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, fuzzy, python-format -msgid "%i users or groups added." -msgstr "Nach Gruppen suchen." - -#, fuzzy, python-format -msgid "%i user or group removed." -msgstr "Anzahl der entfernten Mitglieder" - -#, fuzzy, python-format -msgid "%i users or groups removed." -msgstr "Anzahl der entfernten Mitglieder" - -#, fuzzy, python-format -msgid "%i host or hostgroup added." -msgstr "%(count)d Hostgruppe gefunden" - -#, fuzzy, python-format -msgid "%i hosts or hostgroups added." -msgstr "Fehler bei Hosts/Hostgruppen" - -#, fuzzy, python-format -msgid "%i host or hostgroup removed." -msgstr "%(count)d Hostgruppe gefunden" - -#, fuzzy, python-format -msgid "%i hosts or hostgroups removed." -msgstr "Fehler bei Hosts/Hostgruppen" - -#, fuzzy, python-format -msgid "%i service added." -msgstr "Dienstname" - -#, fuzzy, python-format -msgid "%i services added." -msgstr "Dienste" - -#, fuzzy -msgid "services cannot be added when service category='all'" -msgstr "users kann nicht gesetzt sein wenn Typ 'hostgroup' ist" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, fuzzy, python-format -msgid "%i services removed." -msgstr "Einträge zum löschen auswählen." - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, fuzzy, python-format -msgid "%i profile removed." -msgstr "%s zum entfernen" - -#, fuzzy, python-format -msgid "%i profiles removed." -msgstr "Anzahl der entfernten Berechtigungen" - -#, fuzzy -msgid "Add CAs to a CA ACL." -msgstr "CA ACL löschen." - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -#, fuzzy -msgid "Remove CAs from a CA ACL." -msgstr "Mitglieder von Rolle entfernen." - -#, fuzzy, python-format -msgid "%i CA removed." -msgstr "%s zum entfernen" - -#, fuzzy, python-format -msgid "%i CAs removed." -msgstr "%s zum entfernen" - -msgid "operation not defined" -msgstr "" - -#, fuzzy, python-format -msgid "not allowed to perform operation: %s" -msgstr "Es ist nicht erlaubt, Gruppeneinträge zu ändern." - -msgid "No such virtual command" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -#, fuzzy, python-brace-format -msgid "invalid SID: {SID}" -msgstr "ungültiger DN (%s)" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, fuzzy, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "Auto-Mitgliedschaftsregel \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "Automount-Ort \"%(value)s\" gelöscht" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "Host \"%(value)s\" gelöscht" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "%(count)d Host gefunden" -msgstr[1] "%(count)d Hosts gefunden" - -#, fuzzy -msgid "trust configuration" -msgstr "Konfiguration" - -#, fuzzy -msgid "Global Trust Configuration" -msgstr "OTP Konfiguration" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -#, fuzzy, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "ACI geändert \"%(value)s\"" - -msgid "sidgen_was_run" -msgstr "" - -msgid "trust domain" -msgstr "" - -#, fuzzy -msgid "trust domains" -msgstr "Vertrauensstellungen" - -#, fuzzy -msgid "Trusted domains" -msgstr "Vertrauenseinstellungen" - -msgid "Trusted domain" -msgstr "" - -#, fuzzy, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "Der Server hat keine Informationen über die Domäne '%(domain)s'" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -#, fuzzy, python-format -msgid "must be \"%s\"" -msgstr "muss '%(value)s' sein" - -#, fuzzy -msgid "not allowed to remotely add agent" -msgstr "Es ist nicht erlaubt, Benutzereinträge zu ändern." - -#, fuzzy, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "Benutzerkonto »%(value)s« wurde aktiviert" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, fuzzy, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "Host \"%(value)s\" deaktiviert" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"DNS server configuration\n" -msgstr "RADIUS-Proxy Konfiguration" - -#, fuzzy -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "Vererbt von Serverkonfiguration" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -#, fuzzy -msgid "DNS server" -msgstr "Server" - -#, fuzzy -msgid "DNS servers" -msgstr "Server" - -#, fuzzy -msgid "DNS Servers" -msgstr "Radius Server" - -#, fuzzy -msgid "DNS Server" -msgstr "Radius Server" - -#, fuzzy -msgid "DNS Server name" -msgstr "Servername" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -#, fuzzy -msgid "Modify DNS server configuration" -msgstr "Vererbt von Serverkonfiguration" - -#, fuzzy, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "Dienst »%(value)s« geändert" - -#, fuzzy -msgid "Search for DNS servers." -msgstr "Nach DNS-Ressourcen suchen." - -#, fuzzy, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "%(count)d passender Dienst" -msgstr[1] "%(count)d passende Dienste" - -#, fuzzy -msgid "IPA DNS Server is not installed" -msgstr "Zu verwendender IPA-Server" - -#, fuzzy -msgid "Display configuration of a DNS server." -msgstr "Informationen zu einem IPA-Dienst anzeigen." - -#, fuzzy -msgid "Add a new DNS server." -msgstr "Einen neuen Benutzer hinzufügen." - -#, fuzzy, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "Dienst »%(value)s« hinzugefügt" - -#, fuzzy -msgid "Delete a DNS server" -msgstr "Einen Benutzer löschen" - -#, fuzzy, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "Dienst »%(value)s« gelöscht" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" -"Kerberos-Schlüssel, SSL-Zertifikat und alle Dienste des Hosts deaktivieren." - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -#, fuzzy -msgid "Base-64 encoded host certificate" -msgstr "Base-64-kodiertes Serverzertifikat" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, fuzzy -msgid "Password cannot be set on enrolled host." -msgstr "Priorität der globalen Regel kann nicht gesetzt werden" - -msgid "cn is immutable" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "Host \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "Bedingung(en) von \"%(value)s\" entfernt" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "Host \"%(value)s\" hinzugefügt" - -#, fuzzy -msgid "Remove principal alias from a host entry" -msgstr "Berechtigungen von Rolle entfernen." - -#, fuzzy, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "Bedingung(en) von \"%(value)s\" entfernt" - -#, fuzzy -msgid "Host-based access control commands" -msgstr "HBAC Nutzung simulieren" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" +msgid "Delegation" +msgstr "Delegation" #, fuzzy, python-format msgid "Added delegation \"%(value)s\"" @@ -21894,1833 +15535,12 @@ msgid_plural "%(count)d delegations matched" msgstr[0] "%(count)d Rolle gefunden" msgstr[1] "%(count)d Rollen gefunden" -#, python-format msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, fuzzy, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "Rolle \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "Rolle \"%(value)s\" gelöscht" - -#, fuzzy, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "Rolle \"%(value)s\" geändert" - -#, fuzzy, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "%(count)d Rolle gefunden" -msgstr[1] "%(count)d Rollen gefunden" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -#, fuzzy -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" -"Kann den ausgewählten Befehl nicht ohne Samba 4 Unterstützung ausführen. " -"Stellen Sie sicher, dass das server-trust-ad Paket von IPA installiert ist." - -#, fuzzy -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" -"Kann den ausgewählten Befehl nicht ohne eine konfigurierte Samba 4 Instanz " -"auf dieser Maschine ausführen. Stellen Sie sicher, dass ipa-adtrust-install " -"auf dieser Maschine ausgeführt wurde." - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "Rolle \"%(value)s\" hinzugefügt" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "Rolle \"%(value)s\" gelöscht" - -#, fuzzy, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "%(count)d Rolle gefunden" -msgstr[1] "%(count)d Rollen gefunden" - -#, fuzzy -msgid "" -"Modify ID range.\n" -"\n" -msgstr "Rolle ändern." - -#, fuzzy, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "Rolle \"%(value)s\" geändert" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, fuzzy -msgid "netgroups" -msgstr "Gruppen" - -#, fuzzy -msgid "Netgroup" -msgstr "Gruppe" - -#, fuzzy, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "Gruppe »%(value)s« hinzugefügt" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "Gruppe »%(value)s« gelöscht" - -#, fuzzy, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "Gruppe »%(value)s« geändert" - -#, fuzzy, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "%(count)d passende Gruppe" -msgstr[1] "%(count)d passende Gruppen" - -#, fuzzy -msgid "Default group for new users is not POSIX" -msgstr "Vorgegebene Gruppe für neue Benutzer" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, fuzzy, python-format -msgid "%(host)s failed" -msgstr "fork() fehlgeschlagen\n" - -#, fuzzy, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "Vorbereiteten Benutzer »%(value)s« hinzugefügt" - -#, fuzzy, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "Bedingung(en) von \"%(value)s\" entfernt" - -#, fuzzy -msgid "Add one or more certificate mappings to the user entry." -msgstr "Manager vom Benutzer entfernen" - -#, fuzzy -msgid "Remove one or more certificate mappings from the user entry." -msgstr "Manager vom Benutzer entfernen" - -#, fuzzy -msgid "Add new principal alias to the user entry" -msgstr "Manager zum Benutzer hinzufügen" - -#, fuzzy, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "Vorbereiteten Benutzer »%(value)s« hinzugefügt" - -#, fuzzy -msgid "Remove principal alias from the user entry" -msgstr "Manager vom Benutzer entfernen" - -#, fuzzy, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "Bedingung(en) von \"%(value)s\" entfernt" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" "\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +"Domain Name System (DNS)\n" msgstr "" - -msgid "pkinit" -msgstr "" - -#, fuzzy -msgid "PKINIT status" -msgstr "PKINIT" - -#, fuzzy -msgid "Whether PKINIT is enabled or disabled" -msgstr "Dieser Eintrag kann nicht aktiviert oder deaktiviert werden" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "%(count)d passender Dienst" -msgstr[1] "%(count)d passende Dienste" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" -"\n" -" Auto-Mitgliedschaftsregel bearbeiten. " - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" -"Auto-Mitgliedschaft für alle Mitglieder einer Gruppierung neu erstellen" - -#, fuzzy -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" -"Auto-Mitgliedschaft für alle Mitglieder einer Gruppierung neu erstellen" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "%(count)d Rolle gefunden" -msgstr[1] "%(count)d Rollen gefunden" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "Bedingung(en) von \"%(value)s\" entfernt" - -#, fuzzy -msgid "No default (fallback) group set" -msgstr "Standard (Rückfall) Gruppe" - -#, fuzzy -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" -"\n" -" Informationen über Auto-Mitgliedschaftsregel anzeigen.\n" -" " - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -#, fuzzy -msgid "Remove orphan automember rules" -msgstr "" -"\n" -" Bedingungen von einer einer Auto-Mitglieschaftsregel entfernen. " - -#, fuzzy -msgid "HBAC rule and local members cannot both be set" -msgstr "Benutzer und Host können nicht gleichzeitig gesetzt sein." - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -#, fuzzy -msgid "SELinux User Maps" -msgstr "SELinux-Optionen" - -#, fuzzy -msgid "SELinux User Map" -msgstr "Vorgegebener SELinux-Benutzer" - -#, fuzzy, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "Benutzer »%(value)s« hinzugefügt" - -#, fuzzy, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "Benutzer »%(value)s« gelöscht" - -#, fuzzy, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "Benutzer »%(value)s« geändert" - -#, fuzzy, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "%(count)d passender Benutzer" -msgstr[1] "%(count)d passende Benutzer" - -#, fuzzy, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "Benutzerkonto »%(value)s« wurde aktiviert" - -#, fuzzy, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "Benutzerkonto »%(value)s« wurde deaktiviert" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" -"\n" -"OTP-Tokens bearbeiten.\n" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" "\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -msgid "Vault Container" -msgstr "" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -#, fuzzy -msgid "Host is not supported" -msgstr "nur \"ad\" ist unterstützt" - -msgid "KRA service is not enabled" -msgstr "" - -#, fuzzy -msgid "Deleted vault container" -msgstr "Automount-Ort löschen." - -#, fuzzy, python-format -msgid "owner %s" -msgstr "Eigentümer" - -#, fuzzy -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" -"\n" -" Auto-Mitgliedschaftsregel hinzufügen.\n" -" " - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, fuzzy, python-format -msgid "Added vault \"%(value)s\"" -msgstr "Host \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "Host \"%(value)s\" gelöscht" - -#, fuzzy, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "%(count)d Host gefunden" -msgstr[1] "%(count)d Hosts gefunden" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, fuzzy, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "Host \"%(value)s\" geändert" - -#, fuzzy -msgid "Vault configuration" -msgstr "Konfiguration" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -#, fuzzy, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "Vorbereiteten Benutzer \"%(value)s\" aktivieren." - -msgid "Retrieve data from a vault." -msgstr "" - -#, fuzzy, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "Bedingung(en) von \"%(value)s\" entfernt" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -#, fuzzy -msgid "Member ID user overrides" -msgstr "Mitglieds-Dienste" - -#, fuzzy -msgid "Indirect Member ID user overrides" -msgstr "Indirekte Mitglieds-Benutzer" - -#, fuzzy, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "Attribut \"%s\" ist nicht erlaubt" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, fuzzy, python-format -msgid "added attribute value to entry %(value)s" -msgstr "Automount Ort \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "Bedingung(en) von \"%(value)s\" entfernt" - -msgid "one or more values to remove" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "Informationen zu einem IPA-Dienst anzeigen." - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -#, fuzzy -msgid "Server location" -msgstr "Dienstkategorie" - -#, fuzzy -msgid "Service weight" -msgstr "Diensteinstellungen" - -#, fuzzy -msgid "Weight for server services" -msgstr "Nach IPA-Diensten suchen." - -#, fuzzy -msgid "Service relative weight" -msgstr "Diensteinstellungen" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -#, fuzzy -msgid "Enabled server roles" -msgstr "Dienst »%(value)s« deaktiviert" - -msgid "List of enabled roles" -msgstr "" - -#, fuzzy -msgid "Modify information about an IPA server." -msgstr "Informationen zu einem IPA-Dienst anzeigen." - -#, fuzzy, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "Dienst »%(value)s« geändert" - -#, fuzzy, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "%(count)d passender Dienst" -msgstr[1] "%(count)d passende Dienste" - -#, fuzzy, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "Dienst »%(value)s« gelöscht" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, fuzzy, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "Fehler auf Server '%(server)s': %(error)s" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -#, fuzzy -msgid "Server has already been deleted" -msgstr "Dieser Eintrag ist bereits aktiviert" - -msgid "Agreements deleted" -msgstr "" - -#, fuzzy -msgid "Following segments were not deleted:" -msgstr "Einige Einträge wurden nicht gelöscht" - -#, fuzzy -msgid "not allowed to perform server connection check" -msgstr "Es ist nicht erlaubt, Benutzereinträge zu ändern." - -msgid "Set enabled/hidden state of a server." -msgstr "" - -#, fuzzy -msgid "State" -msgstr "Status" - -#, fuzzy -msgid "Server state" -msgstr "Servername" - -#, fuzzy, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "Passwort für \"%(value)s\" geändert" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "" - -msgid "" -"\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" - -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" - -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" - -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" - -msgid "" -"\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" -msgstr "" - -msgid "" -"\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" -msgstr "" - -msgid "" -"\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" - -#, fuzzy -msgid "Certificate Authority" -msgstr "Zertifikattyp" - -#, fuzzy -msgid "Certificate Authorities" -msgstr "Zertifikate" - -msgid "Name for referencing the CA" -msgstr "" - -#, fuzzy -msgid "Description of the purpose of the CA" -msgstr "Beschreibung des Hosts" - -msgid "Authority ID" -msgstr "" - -msgid "Dogtag Authority ID" -msgstr "" - -#, fuzzy -msgid "Subject DN" -msgstr "Betreff" - -msgid "Subject Distinguished Name" -msgstr "" - -msgid "Issuer Distinguished Name" -msgstr "" - -#, fuzzy -msgid "Search for CAs." -msgstr "Nach Hosts suchen." - -#, fuzzy, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "%(count)d ACI gefunden" -msgstr[1] "%(count)d ACIs gefunden" - -#, fuzzy -msgid "Display the properties of a CA." -msgstr "Einstellungen der HBAC-Regel anzeigen." - -#, fuzzy -msgid "Create a CA." -msgstr "Erstelle eine neue CA ACL." - -#, fuzzy, python-format -msgid "Created CA \"%(value)s\"" -msgstr "ACI erstellt \"%(value)s\"" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "" - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "ACI gelöscht \"%(value)s\"" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -#, fuzzy -msgid "IPA CA cannot be deleted" -msgstr "Zonen-Datensatz »%s« kann nicht gelöscht werden" - -#, fuzzy -msgid "Must be disabled first" -msgstr "Muss eine Ganzzahl sein" - -#, fuzzy -msgid "Modify CA configuration." -msgstr "Konfigurationsoptionen bearbeiten." - -#, fuzzy, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "ACI geändert \"%(value)s\"" - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -#, fuzzy -msgid "Disable a CA." -msgstr "Deaktivieren" - -#, fuzzy, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "Host \"%(value)s\" deaktiviert" - -#, fuzzy -msgid "IPA CA cannot be disabled" -msgstr "Konto ist deaktiviert" - -#, fuzzy -msgid "Enable a CA." -msgstr "HBAC-Regel aktivieren." - -#, fuzzy, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "HBAC-Regel \"%(value)s\" aktiviert" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, fuzzy -msgid "Add one or more certificates to the stageuser entry" -msgstr "Manager zum vorbereiteten Benutzer hinzufügen" - -#, fuzzy, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "Vorbereiteten Benutzer \"%(value)s\" aktivieren." - -#, fuzzy -msgid "Remove one or more certificates to the stageuser entry" -msgstr "Manager vom Benutzer entfernen" - -#, fuzzy, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "Vorbereiteten Benutzer \"%(value)s\" aktivieren." - -#, fuzzy -msgid "Add new principal alias to the stageuser entry" -msgstr "Manager zum vorbereiteten Benutzer hinzufügen" - -#, fuzzy, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "Vorbereiteten Benutzer »%(value)s« hinzugefügt" - -#, fuzzy -msgid "Remove principal alias from the stageuser entry" -msgstr "Manager vom Benutzer entfernen" - -#, fuzzy, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "Vorbereiteten Benutzer »%(value)s« geändert" - -#, fuzzy -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "Manager zum vorbereiteten Benutzer hinzufügen" - -#, fuzzy -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "Manager vom Benutzer entfernen" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -#, fuzzy -msgid "User password expiration" -msgstr "Passwortablauf" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -#, fuzzy -msgid "SMB Home Directory" -msgstr "Home-Verzeichnis" - -#, fuzzy -msgid "SMB Home Directory Drive" -msgstr "Basis für Home-Verzeichnisse" - -#, fuzzy -msgid "Issuer of the certificate" -msgstr "Datei, in der das Zertifikat gespeichert werden soll." - -#, fuzzy -msgid "Subject of the certificate" -msgstr "Datei, in der das Zertifikat gespeichert werden soll." - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "Vorbereiteten Benutzer \"%(value)s\" aktivieren." - -#, fuzzy, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "Bedingung(en) von \"%(value)s\" entfernt" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -#, fuzzy -msgid "cannot be empty" -msgstr "Darf nicht leer sein" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" +"Domain Name System (DNS)\n" msgid "" "\n" @@ -24110,6 +15930,15 @@ msgid "" " ipa dnsconfig-mod --forwarder=203.0.113.113\n" msgstr "" +msgid "invalid IP network format" +msgstr "Ungültiges IP-Netzwerkformat" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "Jedes ACL-Element muss mit einem Semikolon enden" + +msgid "invalid address format" +msgstr "Ungültiges Adressformat" + msgid "" "expected format: <0-255> <0-255> <0-65535> even-" "length_hexadecimal_digits_or_hyphen" @@ -24140,12 +15969,26 @@ msgid "" "All nameservers failed to answer the query for DNS reverse zone %(revdns)s" msgstr "" +#, python-format +msgid "" +"No answers could be found in the specified lifetime for DNS reverse zone " +"%(revdns)s" +msgstr "" + #, python-format msgid "" "DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " "server" msgstr "" +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "DNS Zone %(zone)s nicht gefunden" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "IP-Adresse %(ip)s ist bereits Domain %(domain)s zugewiesen." + #, fuzzy, python-format msgid "" "Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." @@ -24163,6 +16006,14 @@ msgstr "Datensätze" msgid "%s Record" msgstr "Datensätze" +#, python-format +msgid "(see RFC %s for details)" +msgstr "(siehe RFC %s für Details)" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "»%s« ist ein erforderlicher Teil des DNS-Datensatzes" + #, fuzzy msgid "Invalid number of parts!" msgstr "Anzahl der Passwörter" @@ -24171,6 +16022,10 @@ msgstr "Anzahl der Passwörter" msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" msgstr "" +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "Format muss als »%(format)s« %(rfcs)s angegeben werden" + msgid "Create reverse" msgstr "" @@ -24195,6 +16050,10 @@ msgid "" " See RFC 1876 for details" msgstr "" +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "»%(required)s« darf nicht leer sein, wenn »%(name)s« gesetzt ist." + msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" msgstr "" @@ -24232,6 +16091,9 @@ msgstr "Der Host '%(hostname)s' besitzt keinen zugehörigen DNS A/AAAA Record" msgid "Managedby permission" msgstr "Berechtigung" +msgid "DNS is not configured" +msgstr "DNS ist nicht konfiguriert" + #, fuzzy msgid "cannot be used when a zone is specified" msgstr "hosts kann nicht gesetzt sein wenn Typ 'group' ist" @@ -24252,6 +16114,18 @@ msgstr "Aktiver Benutzer mit Name \"%(user)s\" existiert bereits" msgid "Removed system permission \"%(value)s\"" msgstr "Vorbereiteten Benutzer \"%(value)s\" gelöscht" +msgid "DNS zone" +msgstr "DNS-Zone" + +msgid "DNS zones" +msgstr "DNS-Zonen" + +msgid "DNS Zones" +msgstr "DNS-Zonen" + +msgid "DNS Zone" +msgstr "DNS-Zone" + #, fuzzy msgid "Default time to live" msgstr "Lebensdauer" @@ -24358,6 +16232,25 @@ msgstr "" msgid "DNS zone root record cannot be renamed" msgstr "Zonen-Datensatz »%s« kann nicht gelöscht werden" +msgid "DNS records can be only updated one at a time" +msgstr "Es können nicht mehrere DNS-Datensätze aktualisiert werden." + +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "Datensatz »%(value)s« gelöscht" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "Zonen-Datensatz »%s« kann nicht gelöscht werden" + +#, python-format +msgid "Found '%(value)s'" +msgstr "»%(value)s« gefunden" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "Host »%(host)s« nicht gefunden" + #, fuzzy msgid "DNS configuration options" msgstr "Konfigurationsoptionen" @@ -24432,134 +16325,8539 @@ msgstr "" msgid "Do not update records only return expected records" msgstr "" +#, fuzzy +msgid "" +"\n" +"DNS server configuration\n" +msgstr "RADIUS-Proxy Konfiguration" + +#, fuzzy +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "Vererbt von Serverkonfiguration" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +#, fuzzy +msgid "DNS server" +msgstr "Server" + +#, fuzzy +msgid "DNS servers" +msgstr "Server" + +#, fuzzy +msgid "DNS Servers" +msgstr "Radius Server" + +#, fuzzy +msgid "DNS Server" +msgstr "Radius Server" + +#, fuzzy +msgid "DNS Server name" +msgstr "Servername" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +#, fuzzy +msgid "Modify DNS server configuration" +msgstr "Vererbt von Serverkonfiguration" + +#, fuzzy, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "Dienst »%(value)s« geändert" + +#, fuzzy +msgid "Search for DNS servers." +msgstr "Nach DNS-Ressourcen suchen." + +#, fuzzy, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "%(count)d passender Dienst" +msgstr[1] "%(count)d passende Dienste" + +#, fuzzy +msgid "IPA DNS Server is not installed" +msgstr "Zu verwendender IPA-Server" + +#, fuzzy +msgid "Display configuration of a DNS server." +msgstr "Informationen zu einem IPA-Dienst anzeigen." + +#, fuzzy +msgid "Add a new DNS server." +msgstr "Einen neuen Benutzer hinzufügen." + +#, fuzzy, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "Dienst »%(value)s« hinzugefügt" + +#, fuzzy +msgid "Delete a DNS server" +msgstr "Einen Benutzer löschen" + +#, fuzzy, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "Dienst »%(value)s« gelöscht" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +#, fuzzy, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" +"Domain Level kann nicht auf {0} erhöht werden, Server {1} unterstützt das " +"nicht." + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "Domain Level kann nicht gesenkt werden." + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" +"Domain Level kann nicht auf {0} erhöht werden, Server {1} unterstützt das " +"nicht." + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "groups" +msgstr "Gruppen" + +msgid "User Group" +msgstr "Benutzergruppe" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "Gruppe »%(value)s« hinzugefügt" + +#, fuzzy +msgid "gid cannot be set for external group" +msgstr "In externe Gruppe umwandeln" + +#, fuzzy +msgid "attribute \"gidNumber\" not allowed with --nonposix" +msgstr "Attribut \"%s\" ist nicht erlaubt" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "Gruppe »%(value)s« gelöscht" + +#, fuzzy +msgid "privileged group" +msgstr "Keine private Gruppe" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "Gruppe »%(value)s« geändert" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "%(count)d passende Gruppe" +msgstr[1] "%(count)d passende Gruppen" + +#, fuzzy +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" +"Kann den ausgewählten Befehl nicht ohne Samba 4 Unterstützung ausführen. " +"Stellen Sie sicher, dass das server-trust-ad Paket von IPA installiert ist." + +#, fuzzy +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" +"Kann den ausgewählten Befehl nicht ohne eine konfigurierte Samba 4 Instanz " +"auf dieser Maschine ausführen. Stellen Sie sicher, dass ipa-adtrust-install " +"auf dieser Maschine ausgeführt wurde." + +#, fuzzy, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "Vorbereiteten Benutzer \"%(value)s\" gelöscht" + +msgid "not allowed to modify user entries" +msgstr "Es ist nicht erlaubt, Benutzereinträge zu ändern." + +msgid "not allowed to modify group entries" +msgstr "Es ist nicht erlaubt, Gruppeneinträge zu ändern." + +msgid "Not a managed group" +msgstr "Keine verwaltete Gruppe" + +#, fuzzy +msgid "Add users that can manage members of this group." +msgstr "Nutzer hinzufügen die diesen Token verwalten können" + +#, fuzzy +msgid "Remove users that can manage members of this group." +msgstr "Nutzer entfernen die diesen Token verwalten können" + +#, fuzzy +msgid "Host-based access control commands" +msgstr "HBAC Nutzung simulieren" + #, fuzzy msgid "The deny type has been deprecated." msgstr "Diese Option ist veraltet." +msgid "HBAC rules" +msgstr "HBAC-Regeln" + +msgid "HBAC Rules" +msgstr "HBAC-Regeln" + +msgid "HBAC Services" +msgstr "HBAC-Dienste" + +msgid "HBAC Service Groups" +msgstr "HBAC-Dienstgruppen" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "HBAC-Regel \"%(value)s\" hinzugefügt" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "HBAC-Regel \"%(value)s\" gelöscht" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "HBAC-Regel \"%(value)s\" geändert" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "%(count)d HBAC-Regel gefunden" +msgstr[1] "%(count)d HBAC-Regeln gefunden" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "HBAC-Regel \"%(value)s\" aktiviert" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "HBAC-Regel \"%(value)s\" deaktiviert" + +msgid "Access time" +msgstr "Zugriffszeit" + #, fuzzy msgid "Add source hosts and hostgroups to an HBAC rule." msgstr "Ziel-Hosts und Hostgruppen zu einer HBAC-Regel hinzufügen." msgid "" "\n" -"Manage Certificate Profiles\n" +"HBAC Services\n" "\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" "\n" "EXAMPLES:\n" "\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" "\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" "\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" "\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" "\n" msgstr "" -#, fuzzy -msgid "invalid Profile ID" -msgstr "Profil-ID" +msgid "HBAC services" +msgstr "HBAC-Dienste" + +msgid "HBAC Service" +msgstr "HBAC-Dienst" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "HBAC Dienst \"%(value)s\" hinzugefügt" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "HBAC Dienst \"%(value)s\" gelöscht" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "HBAC Dienst \"%(value)s\" geändert" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "%(count)d HBAC-Dienst gefunden" +msgstr[1] "%(count)d HBAC-Dienste gefunden" + +msgid "HBAC service group" +msgstr "HBAC-Dienstgruppe" + +msgid "HBAC service groups" +msgstr "HBAC-Dienstgruppen" + +msgid "HBAC Service Group" +msgstr "HBAC-Dienstgruppe" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "HBAC-Dienstgruppe »%(value)s« hinzugefügt" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "HBAC-Dienstgruppe »%(value)s« gelöscht" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "HBAC-Dienstgruppe »%(value)s« geändert" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "%(count)d HBAC-Dienstgruppe gefunden" +msgstr[1] "%(count)d HBAC-Dienstgruppen gefunden" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" #, fuzzy -msgid "Certificate Profile" -msgstr "Benutze Zertifikatsprofil" +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" +"Kann den ausgewählten Befehl nicht ohne eine konfigurierte Samba 4 Instanz " +"auf dieser Maschine ausführen. Stellen Sie sicher, dass ipa-adtrust-install " +"auf dieser Maschine ausgeführt wurde." + +#, python-format +msgid "Access granted: %s" +msgstr "Zugriff gewährt: %s" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" #, fuzzy -msgid "Certificate Profiles" -msgstr "Benutze Zertifikatsprofil" +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" +"Kerberos-Schlüssel, SSL-Zertifikat und alle Dienste des Hosts deaktivieren." + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host" +msgstr "Host" #, fuzzy -msgid "Profile configuration" -msgstr "OTP Konfiguration" +msgid "Base-64 encoded host certificate" +msgstr "Base-64-kodiertes Serverzertifikat" + +msgid "Serial Number" +msgstr "Seriennummer" + +msgid "Serial Number (hex)" +msgstr "Seriennummer (hex)" + +#, fuzzy +msgid "Authentication Indicators" +msgstr "Authentifizierung" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "Host \"%(value)s\" hinzugefügt" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "Host \"%(value)s\" gelöscht" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "Host \"%(value)s\" geändert" + +#, fuzzy +msgid "Password cannot be set on enrolled host." +msgstr "Priorität der globalen Regel kann nicht gesetzt werden" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "%(count)d Host gefunden" +msgstr[1] "%(count)d Hosts gefunden" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "Host \"%(value)s\" deaktiviert" #, fuzzy, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" +msgid "Added certificates to host \"%(value)s\"" +msgstr "Host \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "Bedingung(en) von \"%(value)s\" entfernt" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, fuzzy, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "Host \"%(value)s\" hinzugefügt" + +#, fuzzy +msgid "Remove principal alias from a host entry" +msgstr "Berechtigungen von Rolle entfernen." + +#, fuzzy, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "Bedingung(en) von \"%(value)s\" entfernt" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "host groups" +msgstr "Hostgruppen" + +msgid "Host Group" +msgstr "Hostgruppe" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "Hostgruppe \"%(value)s\" hinzugefügt" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "Hostgruppe \"%(value)s\" gelöscht" + +#, fuzzy +msgid "hostgroup" +msgstr "Hostgruppe" + +#, fuzzy +msgid "privileged hostgroup" +msgstr "Hostgruppe löschen." + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "Hostgruppe \"%(value)s\" geändert" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "%(count)d Hostgruppe gefunden" +msgstr[1] "%(count)d Hostgruppen gefunden" + +#, fuzzy +msgid "Add users that can manage members of this hostgroup." +msgstr "Nutzer hinzufügen die diesen Token verwalten können" + +#, fuzzy +msgid "Remove users that can manage members of this hostgroup." +msgstr "Nutzer entfernen die diesen Token verwalten können" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"and an ID range of a trusted domain may set\n" +" - auto-private-groups: [true|false|hybrid] automatic creation of private " +"groups\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +#, fuzzy +#| msgid "No private group" +msgid "Auto private groups" +msgstr "Keine private Gruppe" + +msgid "Auto creation of private groups, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +#, fuzzy +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" +"Kann den ausgewählten Befehl nicht ohne Samba 4 Unterstützung ausführen. " +"Stellen Sie sicher, dass das server-trust-ad Paket von IPA installiert ist." + +#, fuzzy +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" +"Kann den ausgewählten Befehl nicht ohne eine konfigurierte Samba 4 Instanz " +"auf dieser Maschine ausführen. Stellen Sie sicher, dass ipa-adtrust-install " +"auf dieser Maschine ausgeführt wurde." + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --auto-private-groups\n" +"\n" +" may be given for a new ID range for a trusted AD domain and\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "Rolle \"%(value)s\" hinzugefügt" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" +"private-groups is specified" +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, fuzzy, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "Rolle \"%(value)s\" gelöscht" + +#, fuzzy, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" msgstr[0] "%(count)d Rolle gefunden" msgstr[1] "%(count)d Rollen gefunden" -#, fuzzy, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "Rolle \"%(value)s\" gelöscht" +#, fuzzy +msgid "" +"Modify ID range.\n" +"\n" +msgstr "Rolle ändern." -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" +#, fuzzy, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "Rolle \"%(value)s\" geändert" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +#, fuzzy +msgid "ID View" +msgstr "Ansicht" + +msgid "system ID View" +msgstr "" + +#, fuzzy +msgid "ID Views" +msgstr "Ansicht" + +#, fuzzy +msgid "User object overrides" +msgstr "Benutzer zum Überschreiben" + +#, fuzzy +msgid "Group object overrides" +msgstr "Gruppe zum Überschreiben" + +#, fuzzy +msgid "Hosts the view applies to" +msgstr "Host-Kategorie, auf welche die Regel angewendet werden soll" + +#, fuzzy, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "Rolle \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "ACI gelöscht \"%(value)s\"" + +#, fuzzy, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "ACI geändert \"%(value)s\"" + +#, fuzzy, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "%(count)d ACI gefunden" +msgstr[1] "%(count)d ACIs gefunden" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +#, fuzzy +msgid "not found" +msgstr "Realm nicht gefunden\n" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" msgstr "" #, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" msgstr "" #, fuzzy, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "Rolle \"%(value)s\" gelöscht" +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "Bedingungen, die nicht entfernt werden konnten" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +#, fuzzy +msgid "Add a new ID override." +msgstr "Einen neuen HBAC-Dienst hinzufügen." #, fuzzy, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgid "Added ID override \"%(value)s\"" +msgstr "Dienst »%(value)s« hinzugefügt" + +#, fuzzy +msgid "Delete an ID override." +msgstr "Einen IPA-Dienst entfernen." + +#, fuzzy, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "Dienst »%(value)s« gelöscht" + +#, fuzzy +msgid "Modify an ID override." +msgstr "HBAC Dienst ändern" + +#, fuzzy, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "Dienst »%(value)s« geändert" + +#, fuzzy +msgid "ID override" +msgstr "Benutzer zum Überschreiben" + +#, fuzzy +msgid "ID overrides cannot be renamed" msgstr "Zonen-Datensatz »%s« kann nicht gelöscht werden" +#, fuzzy +msgid "Search for an ID override." +msgstr "Nach IPA-Diensten suchen." + #, fuzzy, python-format -msgid "Modified Certificate Profile \"%(value)s\"" +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "%(count)d passender Dienst" +msgstr[1] "%(count)d passende Dienste" + +#, fuzzy +msgid "Display information about an ID override." +msgstr "Informationen zu einem IPA-Dienst anzeigen." + +#, fuzzy +msgid "User ID override" +msgstr "Benutzer zum Überschreiben" + +#, fuzzy +msgid "User ID overrides" +msgstr "Benutzer zum Überschreiben" + +#, fuzzy +msgid "Group ID override" +msgstr "Gruppe zum Überschreiben" + +#, fuzzy +msgid "Group ID overrides" +msgstr "Gruppe zum Überschreiben" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, fuzzy, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "Vorbereiteten Benutzer »%(value)s« hinzugefügt" + +#, fuzzy +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "Manager vom Benutzer entfernen" + +#, fuzzy, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "Bedingung(en) von \"%(value)s\" entfernt" + +#, fuzzy, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "Dienst »%(value)s« hinzugefügt" + +#, fuzzy, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "Dienst »%(value)s« gelöscht" + +#, fuzzy, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "Dienst »%(value)s« geändert" + +#, fuzzy, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "%(count)d passender Dienst" +msgstr[1] "%(count)d passende Dienste" + +#, fuzzy, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "Gruppe »%(value)s« hinzugefügt" + +#, fuzzy, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "Gruppe »%(value)s« gelöscht" + +#, fuzzy, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "Gruppe »%(value)s« geändert" + +#, fuzzy, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "%(count)d passende Gruppe" +msgstr[1] "%(count)d passende Gruppen" + +msgid "Internationalization messages" +msgstr "" + +msgid "Your session has expired. Please log in again." +msgstr "" + +msgid "Apply" +msgstr "Anwenden" + +msgid "Rebuild auto membership" +msgstr "Auto-Mitgliedschaft neu erstellen" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "" +"Sind Sie sicher, dass sie die Auto-Mitgliedschaft neu erstellen wollen?" + +msgid "Are you sure you want to proceed with the action?" +msgstr "Sind Sie sicher, dass Sie mit dieser Aktion fortfahren wollen?" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "SInd Sie sicher, dass Sie ${object} löschen wollen?" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "SInd Sie sicher, dass Sie ${object} deaktivieren wollen?" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "SInd Sie sicher, dass Sie ${object} aktivieren wollen?" + +msgid "Actions" +msgstr "Aktionen" + +msgid "Add" +msgstr "Hinzufügen" + +#, python-brace-format +msgid "${count} item(s) added" +msgstr "${count} Einträge hinzugefügt" + +msgid "Direct Membership" +msgstr "Direkte Migliedschaft" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "" + +msgid "Indirect Membership" +msgstr "Indirekte Mitgliedschaft" + +msgid "No entries." +msgstr "Keine Einträge." + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "Zeige ${start} bis ${end} von ${total} Einträgen." + +msgid "Remove" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "${count} Einträge gelöscht" + +msgid "Show Results" +msgstr "Ergebnisse anzeigen" + +#, fuzzy +msgid "Authentication indicators" +msgstr "HOTP Authentifizierungsfenster" + +#, fuzzy +msgid "Authentication indicator" +msgstr "HOTP Authentifizierungsfenster" + +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +#, fuzzy +msgid "Add Custom Authentication Indicator" +msgstr "HOTP Authentifizierungsfenster" + +msgid "Two factor authentication (password + OTP)" +msgstr "Zwei-Faktor-Authentifizierung (Passwort + OTP)" + +#, fuzzy +msgid "RADIUS" +msgstr "Radius Server" + +msgid "PKINIT" +msgstr "PKINIT" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "" + +msgid "Disable per-user override" +msgstr "" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "About" +msgstr "Über" + +msgid "Activate" +msgstr "Aktivieren" + +msgid "Add and Add Another" +msgstr "Hinzufügen und weitere hinzufügen" + +msgid "Add and Close" +msgstr "Hinzufügen und schließen" + +msgid "Add and Edit" +msgstr "Hinzufügen und bearbeiten" + +msgid "Add Many" +msgstr "Mehrere hinzufügen" + +msgid "Back" +msgstr "Zurück" + +msgid "Cancel" +msgstr "Abbrechen" + +msgid "Clear" +msgstr "" + +#, fuzzy +msgid "Clear all fields on the page." +msgstr "Seite neu laden." + +msgid "Close" +msgstr "Schließen" + +msgid "Disable" +msgstr "Deaktivieren" + +msgid "Download" +msgstr "" + +msgid "Download certificate as PEM formatted file." +msgstr "" + +msgid "Edit" +msgstr "Bearbeiten" + +msgid "Enable" +msgstr "Aktivieren" + +msgid "Find" +msgstr "Suchen" + +msgid "Get" +msgstr "Abrufen" + +msgid "Hide" +msgstr "" + +msgid "Issue" +msgstr "Ausgeben" + +#, fuzzy +msgid "Match" +msgstr "Gefunden" + +msgid "Match users according to certificate." +msgstr "" + +msgid "Migrate" +msgstr "" + +msgid "OK" +msgstr "OK" + +msgid "Refresh" +msgstr "Neu laden" + +msgid "Reload current settings from the server." +msgstr "" + +msgid "Delete" +msgstr "Löschen" + +msgid "Remove hold" +msgstr "" + +msgid "Reset" +msgstr "Zurücksetzen" + +msgid "Reset Password" +msgstr "Passwort zurücksetzen" + +#, fuzzy +msgid "Reset Password and Log in" +msgstr "Passwort zurücksetzen" + +msgid "Restore" +msgstr "Wiederherstellen" + +msgid "Retry" +msgstr "Erneut versuchen" + +msgid "Revert" +msgstr "Rückgängig" + +msgid "Revoke" +msgstr "Widerrufen" + +msgid "Save" +msgstr "Speichern" + +msgid "Set" +msgstr "Setzen" + +msgid "Show" +msgstr "" + +msgid "Stage" +msgstr "Vorbereiten" + +msgid "Update" +msgstr "Speichern" + +msgid "View" +msgstr "Ansicht" + +#, fuzzy +msgid "Customization" +msgstr "Bestätigung" + +msgid "Pagination Size" +msgstr "" + +msgid "Collapse All" +msgstr "Alle einklappen" + +msgid "Expand All" +msgstr "Alle aufklappen" + +msgid "General" +msgstr "Allgemein" + +msgid "Identity Settings" +msgstr "Identitätseinstellungen" + +#, fuzzy +msgid "Record Settings" +msgstr "Host Einstellungen" + +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "${entity} ${primary_key} Einstellungen" + +msgid "Back to Top" +msgstr "Zurück nach oben" + +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "${entity} ${primary_key} aktualisiert" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "${entity} erfolgreich hinzugefügt" + +#, fuzzy +msgid "Add custom value" +msgstr "Host \"%(value)s\" hinzugefügt" + +msgid "Available" +msgstr "Verfügbar" + +#, fuzzy +msgid "Some operations failed." +msgstr "Token-Synchronisierung fehlgeschlagen" + +#, fuzzy +msgid "Operations Error" +msgstr "Überprüfungsfehler" + +msgid "Confirmation" +msgstr "Bestätigung" + +msgid "Custom value" +msgstr "" + +msgid "This page has unsaved changes. Please save or revert." +msgstr "" +"Diese Seite hat nicht gespeicherte Änderungen. Bitte Speichern oder " +"Rückgängig machen" + +msgid "Unsaved Changes" +msgstr "Ungespeicherte Änderungen" + +#, python-brace-format +msgid "Edit ${entity}" +msgstr "${entity} bearbeiten" + +msgid "Hide details" +msgstr "Details verbergen" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "${product}, Version: ${version}" + +msgid "Prospective" +msgstr "" + +msgid "Redirection" +msgstr "Umleitung" + +msgid "Select entries to be removed." +msgstr "Einträge zum löschen auswählen." + +#, fuzzy +msgid "Result" +msgstr "Ergebnisse anzeigen" + +msgid "Show details" +msgstr "Details anzeigen" + +msgid "Success" +msgstr "Erfolgreich" + +msgid "Validation error" +msgstr "Überprüfungsfehler" + +msgid "Input form contains invalid or missing values." +msgstr "Eingabeformular enthält ungültige oder fehlende Werte." + +msgid "Please try the following options:" +msgstr "Bitte versuchen Sie die folgenden Optionen:" + +msgid "If the problem persists please contact the system administrator." +msgstr "" +"Bei dauerhaftem Problem wenden Sie sich bitte an den Systemadministrator." + +msgid "Refresh the page." +msgstr "Seite neu laden." + +msgid "Reload the browser." +msgstr "Browser neu laden." + +msgid "Return to the main page and retry the operation" +msgstr "Zur Hauptseite zurückkehren und Vorgang wiederholen" + +#, python-brace-format +msgid "An error has occurred (${error})" +msgstr "Ein Fehler ist aufgetreten (${error})" + +msgid "HTTP Error" +msgstr "HTTP-Fehler" + +msgid "Internal Error" +msgstr "Interner Fehler" + +msgid "IPA Error" +msgstr "IPA-Fehler" + +msgid "No response" +msgstr "Keine Antwort" + +msgid "Unknown Error" +msgstr "Unbekannter Fehler" + +msgid "URL" +msgstr "URL" + +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "${primary_key} wird verwaltet von:" + +#, python-brace-format +msgid "${primary_key} members:" +msgstr "${primary_key} Mitglieder:" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "${primary_key} ist Mitglied von:" + +#, fuzzy, python-brace-format +msgid "${primary_key} member managers:" +msgstr "${primary_key} Mitglieder:" + +msgid "Settings" +msgstr "Einstellungen" + +msgid "Search" +msgstr "Suchen" + +msgid "False" +msgstr "Falsch" + +#, fuzzy, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" +"Benutzern, Gruppen, Hosts und Hostgruppen erlauben die Schlüsseltabelle zu " +"erstellen." + +#, fuzzy, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" +"Benutzern, Gruppen, Hosts und Hostgruppen erlauben die Schlüsseltabelle zu " +"erhalten." + +#, fuzzy, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "" +"Benutzern, Gruppen, Hosts und Hostgruppen erlauben die Schlüsseltabelle zu " +"erstellen." + +#, fuzzy, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "" +"Benutzern, Gruppen, Hosts und Hostgruppen erlauben die Schlüsseltabelle zu " +"erhalten." + +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Allowed to create keytab" +msgstr "Hosts die Schlüsseltabelle erstellen dürfen" + +#, fuzzy +msgid "Allowed to retrieve keytab" +msgstr "Hosts die Schlüsseltabelle abrufen dürfen" + +#, fuzzy, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" +"Benutzern, Gruppen, Hosts und Hostgruppen verbieten die Schlüsseltabelle zu " +"erstellen." + +#, fuzzy, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" +"Benutzern, Gruppen, Hosts und Hostgruppen verbieten die Schlüsseltabelle zu " +"erhalten." + +#, fuzzy, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "" +"Benutzern, Gruppen, Hosts und Hostgruppen verbieten die Schlüsseltabelle zu " +"erstellen." + +#, fuzzy, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "" +"Benutzern, Gruppen, Hosts und Hostgruppen verbieten die Schlüsseltabelle zu " +"erhalten." + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "Benutzer die Schlüsseltabelle abrufen dürfen" + +#, fuzzy +msgid "Add Kerberos Principal Alias" +msgstr "Kerberos-Principal" + +#, fuzzy +msgid "New kerberos principal alias" +msgstr "Kerberos-Principal" + +msgid "Remove Kerberos Alias" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "" + +msgid "Inherited from server configuration" +msgstr "Vererbt von Serverkonfiguration" + +msgid "MS-PAC" +msgstr "MS-PAC" + +msgid "Override inherited settings" +msgstr "Vererbte Einstellungen überschreiben" + +msgid "PAD" +msgstr "PAD" + +#, fuzzy +msgid "Authenticating" +msgstr "Authentifizierung" + +msgid "Authentication with personal certificate failed" +msgstr "" + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" + +msgid "Continue to next page" +msgstr "" + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" + +msgid "Login failed due to an unknown reason" +msgstr "" + +msgid "Logged In As" +msgstr "Angemeldet als" + +msgid "Authentication with Kerberos failed" +msgstr "" + +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" + +msgid "Loading" +msgstr "" + +#, fuzzy +msgid "Kerberos Principal you entered is expired" +msgstr "Kerberos-Principal Ablauf" + +msgid "Loading data" +msgstr "" + +msgid "Log in" +msgstr "" + +#, fuzzy +msgid "Log In Using Certificate" +msgstr "Host-Zertifikat" + +msgid "Log in using personal certificate" +msgstr "" + +msgid "Log out" +msgstr "" + +msgid "Log out error" +msgstr "" + +msgid "Password or Password+One-Time Password" +msgstr "" + +#, python-brace-format +msgid "You will be redirected in ${count}s" +msgstr "" + +msgid "Sync OTP Token" +msgstr "OTP Token synchronisieren" + +#, fuzzy +msgid "Synchronizing" +msgstr "HOTP Sychnronisierungsfenster" + +msgid "The user account you entered is locked" +msgstr "" + +msgid "number of passwords" +msgstr "Anzahl der Passwörter" + +msgid "seconds" +msgstr "Sekunden" + +#, fuzzy +msgid "Migrating" +msgstr "Konfiguration" + +msgid "There was a problem with your request. Please, try again later." +msgstr "" + +#, fuzzy +msgid "Password migration was not successful" +msgstr "Passwort konnte nicht zurückgesetzt werden" + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" + +#, fuzzy +msgid "The password or username you entered is incorrect" +msgstr "Benutzername, Passwort oder Einmalpasswort waren falsch." + +#, fuzzy +msgid "Password migration was successful" +msgstr "Passwort konnte nicht zurückgesetzt werden" + +msgid "Attribute" +msgstr "Attribut" + +#, fuzzy +msgid "Add delegation" +msgstr "Delegation" + +#, fuzzy +msgid "Remove delegations" +msgstr "Delegationen" + +#, fuzzy +msgid "Add permission" +msgstr "Berechtigung" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Remove permissions" +msgstr "Berechtigungen" + +#, fuzzy, python-brace-format +msgid "Remove privileges from permission '${primary_key}'" +msgstr "Berechtigungen von Rolle entfernen." + +#, fuzzy +msgid "Add privilege" +msgstr "Berechtigungen zur Rolle hinzufügen." + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "" + +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Remove privileges" +msgstr "Berechtigungen von Rolle entfernen." + +#, fuzzy, python-brace-format +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "Berechtigungen von Rolle entfernen." + +#, python-brace-format +msgid "Remove roles from privilege '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Role Settings" +msgstr "Host Einstellungen" + +#, fuzzy +msgid "Add role" +msgstr "Neue Rolle hinzufügen." + +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "" + +#, python-brace-format +msgid "Add services into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "" + +msgid "Remove roles" +msgstr "" + +#, python-brace-format +msgid "Remove role '${primary_key}' from privileges" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Remove user groups from role '${primary_key}'" +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Remove services from role '${primary_key}'" +msgstr "Berechtigungen von Rolle entfernen." + +#, fuzzy, python-brace-format +msgid "Remove users from role '${primary_key}'" +msgstr "Mitglieder von Rolle entfernen." + +#, fuzzy +msgid "Add self service permission" +msgstr "Beschreibung des HBAC-Dienstes" + +msgid "Remove self service permissions" +msgstr "" + +#, fuzzy +msgid "Add rule" +msgstr "HBAC-Regel" + +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Are you sure you want to change default group?" +msgstr "SInd Sie sicher, dass Sie die ausgewählten Benutzer aktivieren wollen?" + +msgid "Default host group" +msgstr "Standard Hostgruppe" + +msgid "Default user group" +msgstr "Standard Benutzergruppe" + +msgid "Exclusive" +msgstr "Exklusiv" + +msgid "Expression" +msgstr "Ausdruck" + +#, fuzzy +msgid "Host group rule" +msgstr "Hostgruppe" + +#, fuzzy +msgid "Host group rules" +msgstr "Hostgruppen" + +#, fuzzy +msgid "Inclusive" +msgstr "Exklusiv" + +#, fuzzy +msgid "Remove auto membership rules" +msgstr "Regel für Auto-Mitgliedschaft" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "User group rule" +msgstr "Benutzer-Gruppe" + +#, fuzzy +msgid "User group rules" +msgstr "Benutzer-Gruppe" + +#, fuzzy +msgid "Add automount key" +msgstr "Automount" + +#, fuzzy +msgid "Remove automount keys" +msgstr "Automount-Maps" + +#, fuzzy +msgid "Add automount location" +msgstr "Automount-Ort" + +#, fuzzy +msgid "Automount Location Settings" +msgstr "Automount-Orte" + +#, fuzzy +msgid "Remove automount locations" +msgstr "Automount-Orte" + +#, fuzzy +msgid "Add automount map" +msgstr "Automount-Map" + +#, fuzzy +msgid "Map Type" +msgstr "Gruppentyp" + +msgid "Direct" +msgstr "Direkt" + +msgid "Indirect" +msgstr "Indirekt" + +#, fuzzy +msgid "Remove automount maps" +msgstr "Automount-Maps" + +msgid "Add certificate authority" +msgstr "" + +#, fuzzy +msgid "Remove certificate authorities" +msgstr "Ein Zertifikat widerrufen." + +#, fuzzy +msgid "Add CA ACL" +msgstr "CA ACL" + +#, python-brace-format +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "Benutzer und Gruppen zu einer HBAC-Regel hinzufügen." + +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Add services into CA ACL '${primary_key}'" +msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." + +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "All" +msgstr "Erlauben" + +msgid "Any CA" +msgstr "" + +msgid "Any Host" +msgstr "Jeder Host" + +msgid "Any Service" +msgstr "Jeder Dienst" + +#, fuzzy +msgid "Any Profile" +msgstr "Profile" + +msgid "Anyone" +msgstr "Jeder" + +msgid "Rule status" +msgstr "Regelstatus" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "" + +#, fuzzy +msgid "Remove CA ACLs" +msgstr "CA ACLs" + +#, python-brace-format +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +#, fuzzy, python-brace-format +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +#, python-brace-format +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Specified CAs" +msgstr "Spezifische Gruppe" + +msgid "Specified Hosts and Groups" +msgstr "Spezifische Hosts und Gruppen" + +#, fuzzy +msgid "Specified Profiles" +msgstr "Spezifische Gruppe" + +msgid "Specified Services and Groups" +msgstr "Spezifische Dienste und Gruppen" + +msgid "Specified Users and Groups" +msgstr "Spezifische Benutzer und Gruppen" + +#, fuzzy +msgid "Permitted to have certificates issued" +msgstr "Datei, in der das Zertifikat gespeichert werden soll." + +#, fuzzy +msgid "Remove certificate profiles" +msgstr "Benutze Zertifikatsprofil" + +msgid "AA Compromise" +msgstr "" + +#, fuzzy +msgid "Add principal" +msgstr "Principal" + +msgid "Affiliation Changed" +msgstr "" + +msgid "CA Compromise" +msgstr "" + +msgid "Certificates" +msgstr "Zertifikate" + +#, fuzzy +msgid "Certificate Hold" +msgstr "Zertifikat" + +#, fuzzy +msgid "Cessation of Operation" +msgstr "Replikationseinstellungen" + +#, fuzzy +msgid "Common Name" +msgstr "Befehlsname" + +msgid "the certificate with serial number " +msgstr "" + +msgid "Expires On" +msgstr "Läuft ab am" + +#, fuzzy +msgid "Issued on from" +msgstr "Ausgegeben am" + +#, fuzzy +msgid "Issued on to" +msgstr "Ausgegeben am" + +#, fuzzy +msgid "Maximum serial number" +msgstr "Seriennummer" + +#, fuzzy +msgid "Minimum serial number" +msgstr "Seriennummer" + +#, fuzzy +msgid "Revoked on from" +msgstr "Widerrufen" + +#, fuzzy +msgid "Revoked on to" +msgstr "Widerrufen" + +#, fuzzy +msgid "Valid not after from" +msgstr "Überprüfungsfehler" + +#, fuzzy +msgid "Valid not after to" +msgstr "Gültig ab" + +msgid "Valid not before from" +msgstr "" + +msgid "Valid not before to" +msgstr "" + +#, fuzzy +msgid "Fingerprints" +msgstr "Fingerabdruck" + +#, fuzzy +msgid "Get Certificate" +msgstr "Neues Zertifikat" + +#, fuzzy +msgid "Certificate Hold Removed" +msgstr "Benutze Zertifikatsprofil" + +#, python-brace-format +msgid "Issue new certificate for host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for user '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Issue new certificate" +msgstr "Neues Zertifikat" + +msgid "Issued By" +msgstr "Ausgegeben von" + +msgid "Issued On" +msgstr "Ausgegeben am" + +msgid "Issued To" +msgstr "Ausgegeben an" + +msgid "Key Compromise" +msgstr "" + +msgid "No Valid Certificate" +msgstr "Kein gültiges Zertifikat" + +msgid "New Certificate" +msgstr "Neues Zertifikat" + +msgid "Certificate in base64 or PEM format" +msgstr "" + +msgid "Note" +msgstr "" + +msgid "Organization" +msgstr "Organisation" + +msgid "Organizational Unit" +msgstr "Organisationseinheit" + +#, fuzzy, python-brace-format +msgid "${count} certificate(s) present" +msgstr "${count} Einträge gelöscht" + +msgid "Privilege Withdrawn" +msgstr "" + +msgid "Reason for Revocation" +msgstr "" + +#, fuzzy +msgid "Remove certificate hold" +msgstr "Ein Zertifikat widerrufen." + +#, fuzzy +msgid "Do you want to remove the certificate hold?" +msgstr "Datei, in der das Zertifikat gespeichert werden soll." + +#, fuzzy +msgid "Remove from CRL" +msgstr "DNS Einträge löschen" + +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" + +#, python-brace-format +msgid " -8 '${cn}'" +msgstr "" + +#, fuzzy +msgid "Certificate requested" +msgstr "Zertifikate" + +#, fuzzy +msgid "Revoke certificate" +msgstr "Ein Zertifikat widerrufen." + +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "" + +#, fuzzy +msgid "Certificate Revoked" +msgstr "Zertifikattyp" + +msgid "REVOKED" +msgstr "" + +msgid "SHA1 Fingerprint" +msgstr "SHA1-Fingerabdruck" + +#, fuzzy +msgid "SHA256 Fingerprint" +msgstr "SHA1-Fingerabdruck" + +msgid "Superseded" +msgstr "" + +msgid "Unspecified" +msgstr "Nicht angegeben" + +#, fuzzy +msgid "Valid Certificate Present" +msgstr "Kein gültiges Zertifikat" + +#, fuzzy +msgid "Valid from" +msgstr "Überprüfungsfehler" + +#, fuzzy +msgid "Valid to" +msgstr "Gültigkeit" + +msgid "Validity" +msgstr "Gültigkeit" + +#, fuzzy, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "${entity} ${primary_key} aktualisiert" + +#, fuzzy +msgid "View Certificate" +msgstr "Neues Zertifikat" + +#, fuzzy +msgid "Certificate Data" +msgstr "Zertifikat" + +#, fuzzy +msgid "Certificate For Match" +msgstr "Zertifikat" + +#, fuzzy +msgid "Certificate Mapping Match" +msgstr "Zertifikattyp" + +#, fuzzy +msgid "Matched Users" +msgstr "Zutreffende Regeln" + +#, fuzzy +msgid "User Login" +msgstr "Anmeldename" + +msgid "Add certificate identity mapping rule" +msgstr "" + +msgid "Add certificate mapping data" +msgstr "" + +#, fuzzy +msgid "Configuration string" +msgstr "Konfiguration" + +#, python-brace-format +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "" + +#, fuzzy +msgid "Remove certificate mapping data" +msgstr "Ein Zertifikat widerrufen." + +msgid "Issuer and subject" +msgstr "" + +#, fuzzy +msgid "Remove certificate identity mapping rules" +msgstr "Eine Signaturanfrage (CSR) senden." + +#, fuzzy +msgid "Version" +msgstr "Berechtigung" + +msgid "Group Options" +msgstr "Gruppenoptionen" + +msgid "Search Options" +msgstr "Suchoptionen" + +msgid "SELinux Options" +msgstr "SELinux-Optionen" + +#, fuzzy +msgid "Server Options" +msgstr "Suchoptionen" + +#, fuzzy +msgid "Service Options" +msgstr "Suchoptionen" + +msgid "User Options" +msgstr "Benutzeroptionen" + +msgid "Forward first" +msgstr "" + +#, fuzzy +msgid "Forwarding disabled" +msgstr "Konto ist deaktiviert" + +msgid "Forward only" +msgstr "" + +msgid "Options" +msgstr "Optionen" + +#, fuzzy +msgid "Update System DNS Records" +msgstr "DNS Einträge aktualisieren" + +msgid "Do you want to update system DNS records?" +msgstr "" + +msgid "System DNS records updated" +msgstr "" + +msgid "Add DNS forward zone" +msgstr "" + +msgid "Remove DNS forward zones" +msgstr "" + +msgid "Add DNS resource record" +msgstr "" + +msgid "DNS record was deleted because it contained no data." +msgstr "" + +msgid "Other Record Types" +msgstr "Andere Datensatztypen" + +msgid "Address not valid, can't redirect" +msgstr "" + +#, fuzzy +msgid "Create dns record" +msgstr "Eine neue Gruppe erstellen." + +msgid "Creating record." +msgstr "" + +#, fuzzy +msgid "Record creation failed." +msgstr "Token-Synchronisierung fehlgeschlagen" + +msgid "Checking if record exists." +msgstr "" + +msgid "Record not found." +msgstr "Datensatz nicht gefunden." + +#, fuzzy +msgid "Redirection to PTR record" +msgstr "Umleitung" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "" + +#, fuzzy +msgid "Target reverse zone not found." +msgstr "%(parent)s: %(oname)s nicht gefunden" + +#, fuzzy +msgid "Fetching DNS zones." +msgstr "DNS-Zonen" + +msgid "An error occurred while fetching dns zones." +msgstr "" + +msgid "You will be redirected to DNS Zone." +msgstr "" + +#, fuzzy +msgid "Remove DNS resource records" +msgstr "Nach DNS-Ressourcen suchen." + +#, fuzzy +msgid "Standard Record Types" +msgstr "Andere Datensatztypen" + +msgid "Records for DNS Zone" +msgstr "" + +#, fuzzy +msgid "Record Type" +msgstr "Datensatztyp" + +#, fuzzy +msgid "Add DNS zone" +msgstr "DNS-Zone" + +#, fuzzy, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "SInd Sie sicher, dass Sie ${object} deaktivieren wollen?" + +#, fuzzy +msgid "DNS Zone Settings" +msgstr "DNS-Zonen" + +#, fuzzy +msgid "Remove DNS zones" +msgstr "DNS-Zonen" + +#, fuzzy +msgid "Remove Permission" +msgstr "Berechtigung" + +#, fuzzy, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "SInd Sie sicher, dass Sie ${object} löschen wollen?" + +msgid "Skip DNS check" +msgstr "" + +msgid "Skip overlap check" +msgstr "" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" + +msgid "Authoritative nameserver change" +msgstr "" + +msgid "Level" +msgstr "Level" + +#, fuzzy +msgid "Set Domain Level" +msgstr "Domain Level" + +#, fuzzy +msgid "Add user group" +msgstr "Benutzer-Gruppe" + +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "Benutzer und Gruppen zu einer HBAC-Regel hinzufügen." + +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user ID override into user group '${primary_key}'" +msgstr "" + +msgid "Group Settings" +msgstr "Gruppeneinstellungen" + +msgid "External" +msgstr "Extern" + +msgid "Groups" +msgstr "Gruppen" + +#, fuzzy +msgid "Group categories" +msgstr "Benutzerkategorien" + +msgid "Change to external group" +msgstr "In externe Gruppe umwandeln" + +msgid "Change to POSIX group" +msgstr "In POSIX-Gruppe umwandeln" + +#, fuzzy +msgid "Non-POSIX" +msgstr "POSIX" + +msgid "POSIX" +msgstr "POSIX" + +#, fuzzy +msgid "Remove user groups" +msgstr "Mitglieds-Dienstgruppen" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +#, fuzzy, python-brace-format +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +#, fuzzy, python-brace-format +msgid "Remove user groups from user group '${primary_key}'" +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +#, fuzzy, python-brace-format +msgid "Remove services from user group '${primary_key}'" +msgstr "Dienste von einer HBAC-Gruppe entfernen." + +#, fuzzy, python-brace-format +msgid "Remove users from user group '${primary_key}'" +msgstr "Mitglieder aus einer Gruppe entfernen." + +#, python-brace-format +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "" + +msgid "Group Type" +msgstr "Gruppentyp" + +#, fuzzy +msgid "Add HBAC rule" +msgstr "HBAC-Regel" + +#, fuzzy, python-brace-format +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "Benutzer und Gruppen zu einer HBAC-Regel hinzufügen." + +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." + +#, fuzzy, python-brace-format +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." + +msgid "Accessing" +msgstr "Greift zu" + +#, fuzzy +msgid "Remove HBAC rules" +msgstr "HBAC-Regeln" + +#, fuzzy, python-brace-format +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +#, fuzzy, python-brace-format +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "Dienste von einer HBAC-Gruppe entfernen." + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +msgid "Via Service" +msgstr "Mit Dienst" + +msgid "Who" +msgstr "Wer" + +#, fuzzy +msgid "Add HBAC service" +msgstr "HBAC-Dienst" + +#, fuzzy, python-brace-format +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "Mitglieder zur einer HBAC-Dienstgruppe hinzufügen." + +#, fuzzy +msgid "Remove HBAC services" +msgstr "Mitglieds-HBAC-Dienst" + +#, fuzzy, python-brace-format +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "Mitglieder von einer HBAC-Dienstgruppe entfernen." + +#, fuzzy +msgid "Add HBAC service group" +msgstr "HBAC-Dienstgruppe" + +#, fuzzy, python-brace-format +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "Mitglieder zur einer HBAC-Dienstgruppe hinzufügen." + +#, fuzzy +msgid "Remove HBAC service groups" +msgstr "Mitglieds-HBAC-Servicegruppen" + +#, fuzzy, python-brace-format +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "Mitglieder von einer HBAC-Dienstgruppe entfernen." + +msgid "Access Denied" +msgstr "Zugriff verweigert" + +msgid "Access Granted" +msgstr "Zugriff gewährt" + +msgid "Include Disabled" +msgstr "Deaktivierte einschließen" + +msgid "Include Enabled" +msgstr "Aktivierte einschließen" + +msgid "HBAC Test" +msgstr "HBAC Test" + +msgid "Matched" +msgstr "Gefunden" + +msgid "Missing values: " +msgstr "Fehlende Werte:" + +msgid "New Test" +msgstr "Neuer Test" + +msgid "Rules" +msgstr "Regeln" + +msgid "Run Test" +msgstr "Test Starten" + +#, fuzzy, python-brace-format +msgid "Specify external ${entity}" +msgstr "${entity} bearbeiten" + +#, fuzzy +msgid "Unmatched" +msgstr "Gefunden" + +#, fuzzy +msgid "Add host" +msgstr "Neuen Host hinzufügen." + +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "" + +msgid "Host Certificate" +msgstr "Host-Zertifikat" + +msgid "Host Name" +msgstr "Host-Name" + +msgid "Delete Key, Unprovision" +msgstr "" + +msgid "Host Settings" +msgstr "Host Einstellungen" + +msgid "Enrolled" +msgstr "" + +msgid "Enrollment" +msgstr "" + +msgid "Fully Qualified Host Name" +msgstr "" + +#, fuzzy +msgid "Generate OTP" +msgstr "OTP zurücksetzen" + +#, fuzzy +msgid "Generated OTP" +msgstr "OTP zurücksetzen" + +msgid "Kerberos Key" +msgstr "Kerberos-Schlüssel" + +msgid "Kerberos Key Not Present" +msgstr "Kerberos-Schlüssel nicht vorhanden" + +#, fuzzy +msgid "Kerberos Key Present, Host Provisioned" +msgstr "Kerberos-Schlüssel nicht vorhanden" + +#, fuzzy +msgid "One-Time Password" +msgstr "Einmalpasswort" + +#, fuzzy +msgid "One-Time Password Not Present" +msgstr "Einmalpasswort" + +#, fuzzy +msgid "One-Time Password Present" +msgstr "Einmalpasswort" + +msgid "Reset OTP" +msgstr "OTP zurücksetzen" + +#, fuzzy +msgid "Reset One-Time Password" +msgstr "Einmalpasswort" + +msgid "Set OTP" +msgstr "OTP setzen" + +msgid "OTP set" +msgstr "OTP gesetzt" + +#, fuzzy +msgid "Set One-Time Password" +msgstr "Einmalpasswort" + +#, fuzzy +msgid "Remove hosts" +msgstr "Mitglieds-Hosts" + +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Remove host '${primary_key}' from host groups" +msgstr "Mitglieder von Hostgruppe entfernen." + +#, python-brace-format +msgid "Remove host '${primary_key}' from netgroups" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Remove host '${primary_key}' from roles" +msgstr "Berechtigungen von Rolle entfernen." + +#, fuzzy, python-brace-format +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +#, python-brace-format +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "" + +#, fuzzy +msgid "Unprovision" +msgstr "Provisioning" + +#, fuzzy +msgid "Are you sure you want to unprovision this host?" +msgstr "Sind Sie sicher, dass Sie mit dieser Aktion fortfahren wollen?" + +#, fuzzy +msgid "Unprovisioning host" +msgstr "Provisioning" + +msgid "Host unprovisioned" +msgstr "" + +#, fuzzy +msgid "Add host group" +msgstr "Hostgruppe" + +#, python-brace-format +msgid "Add hosts into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "" + +msgid "Host Group Settings" +msgstr "Hostgruppen-Einstellungen" + +#, fuzzy +msgid "Remove host groups" +msgstr "Mitglieds-Hostgruppen" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "" + +msgid "User to override" +msgstr "Benutzer zum Überschreiben" + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" + +msgid "Enter trusted user login." +msgstr "" + +#, fuzzy +msgid "Profile" +msgstr "Profile" + +msgid "Group to override" +msgstr "Gruppe zum Überschreiben" + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" + +#, fuzzy +msgid "Enter trusted group name." +msgstr "Dienstgruppenname" + +msgid "Add ID view" +msgstr "" + +#, fuzzy +msgid "Add group ID override" +msgstr "Gruppe zum Überschreiben" + +#, fuzzy +msgid "Add user ID override" +msgstr "Benutzer zum Überschreiben" + +#, fuzzy, python-brace-format +msgid "${primary_key} applies to:" +msgstr "${primary_key} Mitglieder:" + +msgid "Applied to hosts" +msgstr "" + +#, fuzzy +msgid "Apply to host groups" +msgstr "Hostgruppen" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "" + +msgid "Apply to hosts" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "" + +#, fuzzy, python-brace-format +msgid "${primary_key} overrides:" +msgstr "${primary_key} Mitglieder:" + +msgid "Remove ID views" +msgstr "" + +#, fuzzy +msgid "Remove user ID overrides" +msgstr "Benutzer zum Überschreiben" + +#, fuzzy +msgid "Remove group ID overrides" +msgstr "Gruppe zum Überschreiben" + +#, fuzzy +msgid "Un-apply from host groups" +msgstr "Nach Hostgruppen suchen." + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" + +#, fuzzy +msgid "Un-apply" +msgstr "Anwenden" + +msgid "Un-apply from hosts" +msgstr "" + +msgid "Un-apply ID Views from hosts" +msgstr "" + +#, fuzzy +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "Sind Sie sicher, dass Sie die ausgewählten Einträge aktivieren wollen?" + +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "Kerberos-Ticket Richtlinien" + +#, fuzzy +msgid "Add netgroup" +msgstr "Hostgruppe hinzufügen." + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Netgroup Settings" +msgstr "Gruppeneinstellungen" + +#, fuzzy +msgid "Netgroups" +msgstr "Gruppen" + +#, fuzzy +msgid "Remove netgroups" +msgstr "Mitglieds-Gruppen" + +#, python-brace-format +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from netgroup '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Add OTP token" +msgstr "OTP Token" + +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" +"Sie können FreeOTP als " +"Softwaretoken einsetzen." + +msgid "Configure your token" +msgstr "Token konfigurieren" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" +"Konfigurieren Sie ihren Token indem sie den QR Code unten scannen. Klicken " +"Sie auf den QR Code wenn Sie dies auf dem Gerät sehen welches Sie " +"konfigurieren möchten." + +msgid "OTP Token Settings" +msgstr "OTP Token Einstellungen" + +msgid "Disable token" +msgstr "Token deaktivieren" + +msgid "Enable token" +msgstr "Token aktivieren" + +#, fuzzy +msgid "Remove OTP tokens" +msgstr "OTP Tokens" + +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "" + +msgid "Show QR code" +msgstr "QR Code zeigen" + +msgid "Show configuration uri" +msgstr "Konfigurations-URL zeigen" + +msgid "Counter-based (HOTP)" +msgstr "Zählerbasiert (HOTP)" + +msgid "Time-based (TOTP)" +msgstr "Zeitbasiert (TOTP)" + +#, fuzzy +msgid "Add Custom Attribute" +msgstr "Attribut" + +#, fuzzy +msgid "Permission settings" +msgstr "Berechtigungen" + +#, fuzzy +msgid "Attribute breakdown" +msgstr "Attribut Schlüssel" + +#, fuzzy +msgid "Privilege Settings" +msgstr "Diensteinstellungen" + +#, fuzzy +msgid "Public key:" +msgstr "Öffentliche SSH Schlüssel" + +#, fuzzy +msgid "Set public key" +msgstr "Öffentlicher SSH Schlüssel" + +msgid "Show/Set key" +msgstr "Zeige/Setze Schlüssel" + +msgid "Modified: key not set" +msgstr "Geändert: Schlüssel nicht gesetzt" + +msgid "Modified" +msgstr "Geändert" + +msgid "New: key not set" +msgstr "Neu: Schlüssel nicht gesetzt" + +msgid "New: key set" +msgstr "Neu: Schlüssel gesetzt" + +#, fuzzy +msgid "Add password policy" +msgstr "Passwortregel" + +msgid "Password Policy" +msgstr "Passwort-Regeln" + +#, fuzzy +msgid "Remove password policies" +msgstr "Passwortregeln" + +#, fuzzy +msgid "Add ID range" +msgstr "Mehrere hinzufügen" + +#, fuzzy +msgid "Range Settings" +msgstr "Einstellungen" + +msgid "Base ID" +msgstr "" + +msgid "Primary RID base" +msgstr "" + +msgid "Range size" +msgstr "" + +#, fuzzy +msgid "Domain SID" +msgstr "Domain" + +msgid "Secondary RID base" +msgstr "" + +msgid "Remove ID ranges" +msgstr "" + +msgid "Active Directory domain with POSIX attributes" +msgstr "" + +msgid "Detect" +msgstr "" + +#, fuzzy +msgid "Local domain" +msgstr "Ort" + +#, fuzzy +msgid "IPA trust" +msgstr "Vertrauensstellung" + +msgid "Active Directory winsync" +msgstr "" + +#, fuzzy +msgid "Add RADIUS server" +msgstr "Radius Server" + +#, fuzzy +msgid "RADIUS Proxy Server Settings" +msgstr "Radius Server" + +#, fuzzy +msgid "Remove RADIUS servers" +msgstr "Radius Server" + +#, fuzzy +msgid "Realm Domains" +msgstr "Domain" + +msgid "Check DNS" +msgstr "" + +msgid "Do you also want to perform DNS check?" +msgstr "" + +msgid "Force Update" +msgstr "Update erzwingen" + +#, fuzzy +msgid "Add SELinux user map" +msgstr "Vorgegebener SELinux-Benutzer" + +#, python-brace-format +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "" + +msgid "Remove selinux user maps" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Server Roles" +msgstr "Servername" + +#, fuzzy +msgid "Server Role" +msgstr "Servername" + +msgid "Warning: Consider service replication" +msgstr "" + +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" + +#, fuzzy +msgid "Delete Server" +msgstr "Einen Benutzer löschen" + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" + +#, fuzzy +msgid "Add service" +msgstr "HBAC-Dienst" + +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "" + +#, fuzzy +msgid "Service Certificate" +msgstr "Neues Zertifikat" + +msgid "Service Settings" +msgstr "Diensteinstellungen" + +msgid "Provisioning" +msgstr "Provisioning" + +#, fuzzy +msgid "Remove services" +msgstr "Mitglieds-Dienste" + +#, fuzzy, python-brace-format +msgid "Remove service '${primary_key}' from roles" +msgstr "Berechtigungen von Rolle entfernen." + +#, fuzzy, python-brace-format +msgid "Remove hosts managing service '${primary_key}'" +msgstr "Hosts entfernen, die diesen Dienst verwalten können." + +#, fuzzy +msgid "Are you sure you want to unprovision this service?" +msgstr "" +"SInd Sie sicher, dass Sie die ausgewählten Benutzer wiederherstellen wollen?" + +#, fuzzy +msgid "Unprovisioning service" +msgstr "Provisioning" + +#, fuzzy +msgid "Service unprovisioned" +msgstr "Dienst-Principal" + +#, fuzzy +msgid "Kerberos Key Present, Service Provisioned" +msgstr "Kerberos-Schlüssel nicht vorhanden" + +msgid "SSH public keys" +msgstr "Öffentlicher SSH Schlüssel" + +msgid "SSH public key:" +msgstr "Öffentliche SSH Schlüssel" + +msgid "Set SSH key" +msgstr "SSH Schlüssel speichern" + +msgid "Are you sure you want to activate selected users?" +msgstr "SInd Sie sicher, dass Sie die ausgewählten Benutzer aktivieren wollen?" + +#, fuzzy, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "SInd Sie sicher, dass Sie ${object} deaktivieren wollen?" + +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "${count} Benutzer aktiviert" + +#, fuzzy +msgid "Add stage user" +msgstr "Vorbereiteter Benutzer" + +msgid "Stage users" +msgstr "Vorbereitete Benutzer" + +msgid "Preserved users" +msgstr "Aufbewahrte Benutzer" + +#, fuzzy +msgid "Remove preserved users" +msgstr "Aufbewahrte Benutzer" + +#, fuzzy +msgid "Remove stage users" +msgstr "Vorbereitete Benutzer" + +#, fuzzy +msgid "Are you sure you want to stage selected users?" +msgstr "" +"SInd Sie sicher, dass Sie die ausgewählten Benutzer wiederherstellen wollen?" + +#, fuzzy, python-brace-format +msgid "${count} users(s) staged" +msgstr "${count} user(s) wiederhergestellt" + +#, fuzzy, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "SInd Sie sicher, dass Sie ${object} deaktivieren wollen?" + +msgid "Are you sure you want to restore selected users?" +msgstr "" +"SInd Sie sicher, dass Sie die ausgewählten Benutzer wiederherstellen wollen?" + +#, fuzzy, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "SInd Sie sicher, dass Sie ${object} löschen wollen?" + +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "${count} user(s) wiederhergestellt" + +msgid "User categories" +msgstr "Benutzerkategorien" + +#, fuzzy +msgid "Add subid" +msgstr "Sudo-Regel" + +msgid "Assigned subids" +msgstr "" + +msgid "DNA remaining" +msgstr "" + +msgid "SubGID range size" +msgstr "" + +msgid "SubGID range start" +msgstr "" + +msgid "SubUID range size" +msgstr "" + +msgid "SubUID range start" +msgstr "" + +msgid "Remaining subids" +msgstr "" + +msgid "Subordinate ID Statistics" +msgstr "" + +#, fuzzy +msgid "Add sudo command" +msgstr "Sudo-Befehl" + +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "" + +#, fuzzy +msgid "Remove sudo commands" +msgstr "Sudo-Befehle" + +#, python-brace-format +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "" + +#, fuzzy +msgid "Add sudo command group" +msgstr "Sudo-Befehlsgruppe" + +#, python-brace-format +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Remove sudo command groups" +msgstr "Sudo-Befehlsgruppen" + +#, python-brace-format +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Add sudo rule" +msgstr "Sudo-Regel" + +#, fuzzy +msgid "Add sudo option" +msgstr "Sudo-Option" + +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "" + +msgid "Allow" +msgstr "Erlauben" + +msgid "Any Command" +msgstr "Jeder Befehl" + +msgid "Any Group" +msgstr "Jede Gruppe" + +msgid "Run Commands" +msgstr "Befehle ausführen" + +msgid "Deny" +msgstr "Verweigern" + +msgid "Access this host" +msgstr "Zugriff auf diesen Host" + +msgid "Option added" +msgstr "Optionen hinzugefügt" + +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "${count} Option(en) entfernt" + +#, fuzzy +msgid "Remove sudo rules" +msgstr "Sudo-Regeln" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "" + +msgid "As Whom" +msgstr "Als Wer" + +msgid "Specified Commands and Groups" +msgstr "Spezifische Befehle und Gruppen" + +msgid "Specified Groups" +msgstr "Spezifische Gruppe" + +#, fuzzy +msgid "Remove sudo options" +msgstr "Sudo-Option" + +#, fuzzy +msgid "Autogenerated" +msgstr "Auto-Mitgliedschaft" + +msgid "Segment details" +msgstr "Segment Details" + +msgid "Replication configuration" +msgstr "Replikationseinstellungen" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" + +msgid "Add IPA location" +msgstr "" + +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Remove IPA locations" +msgstr "Automount-Orte" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "" + +msgid "Add topology segment" +msgstr "" + +msgid "Remove topology segments" +msgstr "" + +msgid "Account" +msgstr "Konto" + +#, fuzzy +msgid "Add trust" +msgstr "Vertrauensstellung" + +msgid "Administrative account" +msgstr "Administratives Konto" + +msgid "SID blocklists" +msgstr "" + +msgid "Trust Settings" +msgstr "Vertrauenseinstellungen" + +msgid "Establish using" +msgstr "" + +msgid "Fetch domains" +msgstr "" + +#, fuzzy +msgid "Pre-shared password" +msgstr "Passwort ändern" + +#, fuzzy +msgid "Remove trusts" +msgstr "Vertrauensstellungen" + +msgid "Remove domains" +msgstr "" + +#, fuzzy +msgid "Trust direction" +msgstr "Umleitung" + +#, fuzzy +msgid "Trust status" +msgstr "Anfragestatus" + +#, fuzzy +msgid "Trust type" +msgstr "Vertrauensstellungstyp" + +#, fuzzy +msgid "Alternative UPN suffixes" +msgstr "UPN Suffixe" + +#, fuzzy +msgid "User attributes for SMB services" +msgstr "Nach HBAC-Diensten suchen." + +msgid "Path to a script executed on a Windows system at logon" +msgstr "" + +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "" + +msgid "Path to a user home directory, in UNC format" +msgstr "" + +#, fuzzy +msgid "Drive to mount a home directory" +msgstr "Vorgegebener Ort für Home-Verzeichnisse" + +msgid "Account Settings" +msgstr "Kontoeinstellungen" + +msgid "Account Status" +msgstr "Kontostatus" + +msgid "Active users" +msgstr "Aktive Benutzer" + +#, fuzzy +msgid "Add user" +msgstr "Einen neuen Benutzer hinzufügen." + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." + +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "" + +msgid "Auto assign subordinate ids" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Are you sure you want to unlock user ${object}?" +msgid "" +"Are you sure you want to auto-assign a subordinate id to user ${object}?" +msgstr "SInd Sie sicher, dass Sie den Benutzer ${object} entsperren möchten?" + +msgid "Contact Settings" +msgstr "Kontakteinstellungen" + +msgid "Delete mode" +msgstr "Lösch-Modus" + +msgid "Employee Information" +msgstr "Mitarbeiterinformationen" + +msgid "Error changing account status" +msgstr "Fehler beim Ändern des Kontostatus" + +msgid "Password expiration" +msgstr "Passwortablauf" + +msgid "Mailing Address" +msgstr "Anschrift" + +msgid "Misc. Information" +msgstr "Weitere Informationen" + +msgid "delete" +msgstr "löschen" + +msgid "preserve" +msgstr "aufbewahren" + +msgid "No private group" +msgstr "Keine private Gruppe" + +#, fuzzy +msgid "Remove users" +msgstr "Mitglieds-Benutzer" + +#, fuzzy, python-brace-format +msgid "Remove user '${primary_key}' from user groups" +msgstr "Mitglieder aus einer Gruppe entfernen." + +#, python-brace-format +msgid "Remove user '${primary_key}' from netgroups" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Remove user '${primary_key}' from roles" +msgstr "Berechtigungen von Rolle entfernen." + +#, fuzzy, python-brace-format +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +#, python-brace-format +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" +"Sind sie sicher, dass sie den Nutzer ${action} möchten?
Die Änderung " +"wird sofort aktiv." + +#, python-brace-format +msgid "Click to ${action}" +msgstr "Klicken um zu ${action}" + +msgid "Unlock" +msgstr "Entsperren" + +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "SInd Sie sicher, dass Sie den Benutzer ${object} entsperren möchten?" + +msgid "Add vault" +msgstr "" + +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "" + +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" + +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" + +msgid "Asymmetric" +msgstr "" + +msgid "Vaults Config" +msgstr "" + +#, fuzzy +msgid "Members" +msgstr "Mitglieds-Host" + +msgid "My User Vaults" +msgstr "" + +#, fuzzy +msgid "Owners" +msgstr "Eigentümer" + +msgid "Remove vaults" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Service Vaults" +msgstr "Dienste" + +msgid "Shared" +msgstr "" + +msgid "Shared Vaults" +msgstr "" + +msgid "Standard" +msgstr "" + +msgid "Symmetric" +msgstr "" + +#, fuzzy +msgid "Vault Type" +msgstr "Gruppentyp" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" + +#, fuzzy +msgid "User Vaults" +msgstr "Benutzergruppen" + +msgid "Current password is required" +msgstr "Aktuelles Passwort ist erforderlich" + +#, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "Ihr Passwort läuft in ${days} Tagen ab." + +msgid "First OTP" +msgstr "Erstes OTP" + +msgid "New password is required" +msgstr "Neues Passwort wird benötigt" + +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" + +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" + +msgid "Token synchronization failed" +msgstr "Token-Synchronisierung fehlgeschlagen" + +msgid "The username, password or token codes are not correct" +msgstr "Benutzername, Passwort oder Einmalpasswort waren falsch." + +msgid "Token was synchronized" +msgstr "Token wurde synchronisiert" + +msgid "Password change complete" +msgstr "Passwortänderung abgeschlossen" + +#, fuzzy +msgid "Your password has expired. Please enter a new password." +msgstr "Ihr Passwort läuft in ${days} Tagen ab." + +msgid "Passwords must match" +msgstr "Passwörter müssen übereinstimmen" + +msgid "Password reset was not successful." +msgstr "Passwort konnte nicht zurückgesetzt werden" + +msgid "Reset your password." +msgstr "Passwort zurücksetzen." + +msgid "Second OTP" +msgstr "Zweites OTP" + +msgid "Verify Password" +msgstr "Passwort verifizieren" + +msgid "Are you sure you want to delete selected entries?" +msgstr "Sind Sie sicher, dass Sie die ausgewählten Einträge löschen wollen?" + +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "${count} Einträge gelöscht" + +msgid "Are you sure you want to disable selected entries?" +msgstr "" +"Sind Sie sicher, dass Sie die ausgewählten Einträge deaktivieren wollen?" + +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "${count} Einträge deaktiviert" + +msgid "Are you sure you want to enable selected entries?" +msgstr "Sind Sie sicher, dass Sie die ausgewählten Einträge aktivieren wollen?" + +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "${count} Einträge aktiviert" + +msgid "Some entries were not deleted" +msgstr "Einige Einträge wurden nicht gelöscht" + +msgid "Quick Links" +msgstr "Schnell Links" + +msgid "Select All" +msgstr "Alle auswählen" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" +"Abfrage hat mehr Ergebnisse erzeugt als das konfigurierte Maximum. Zeige die " +"ersten ${counter} Ergebnisse." + +msgid "Unselect All" +msgstr "Alle abwählen" + +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" + +msgid "Working" +msgstr "Arbeite" + +msgid "Audit" +msgstr "Audit" + +msgid "Authentication" +msgstr "Authentifizierung" + +msgid "Automount" +msgstr "Automount" + +msgid "DNS" +msgstr "DNS" + +#, fuzzy +msgid "Host-Based Access Control" +msgstr "HBAC Nutzung simulieren" + +msgid "Identity" +msgstr "Identität" + +msgid "IPA Server" +msgstr "IPA-Server" + +msgid "Network Services" +msgstr "Netzwerkdienste" + +msgid "Policy" +msgstr "Regeln" + +msgid "Role-Based Access Control" +msgstr "" + +msgid "Subordinate IDs" +msgstr "" + +msgid "Sudo" +msgstr "Sudo" + +msgid "Topology" +msgstr "Topologie" + +#, fuzzy +msgid "Trusts" +msgstr "Vertrauensstellung" + +msgid "True" +msgstr "Wahr" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" + +msgid "API Browser" +msgstr "" + +msgid "First" +msgstr "Erste" + +msgid "Last" +msgstr "Letzte" + +msgid "Next" +msgstr "Nächste" + +msgid "Page" +msgstr "Seite" + +msgid "Prev" +msgstr "Vorherige" + +msgid "Undo" +msgstr "Rückgängig" + +msgid "Undo this change." +msgstr "" + +msgid "Undo All" +msgstr "Alle Rückgängig" + +#, fuzzy +msgid "Undo all changes in this field." +msgstr "Alle Principals in diesem Realm entfernen" + +msgid "Text does not match field pattern" +msgstr "" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" + +#, fuzzy +msgid "Must be a decimal number" +msgstr "muss eine Dezimalzahl sein" + +#, fuzzy +msgid "Format error" +msgstr "Lesefehler\n" + +msgid "Must be an integer" +msgstr "Muss eine Ganzzahl sein" + +msgid "Not a valid IP address" +msgstr "Keine gültige IP-Adresse" + +msgid "Not a valid IPv4 address" +msgstr "Keine gültige IPv4-Adresse" + +msgid "Not a valid IPv6 address" +msgstr "Keine gültige IPv6-Adresse" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "Maximaler Wert ist ${value}" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "Minimaler Wert ist ${value}" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "" + +#, fuzzy +msgid "Parse error" +msgstr "Lesefehler\n" + +#, fuzzy +msgid "Must be a positive number" +msgstr "Muss eine Ganzzahl sein" + +#, fuzzy, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "%(port)s kein gültiger Port" + +#, fuzzy +msgid "Required field" +msgstr "Anfrage-ID" + +#, fuzzy +msgid "Unsupported value" +msgstr "nicht unterstützte Vetrauensstellung" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" + +#, fuzzy +msgid "kerberos ticket policy settings" +msgstr "Kerberos-Ticket Richtlinien" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +#, fuzzy +msgid "RADIUS max renew" +msgstr "RADIUS-Proxy Benutzername" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +#, fuzzy +msgid "" +"\n" +"IPA locations\n" +msgstr "Aktionen" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +#, fuzzy +msgid "location" +msgstr "Ort" + +#, fuzzy +msgid "locations" +msgstr "Ort" + +#, fuzzy +msgid "IPA Locations" +msgstr "Ort" + +#, fuzzy +msgid "IPA Location" +msgstr "Ort" + +#, fuzzy +msgid "Location name" +msgstr "Ort" + +#, fuzzy +msgid "IPA location name" +msgstr "Automount-Ort" + +#, fuzzy +msgid "IPA Location description" +msgstr "Gruppenbeschreibung" + +#, fuzzy +msgid "Servers" +msgstr "Server" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +#, fuzzy +msgid "Add a new IPA location." +msgstr "Neuen OTP-Token hinzufügen" + +#, fuzzy, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "Automount Ort \"%(value)s\" hinzugefügt" + +#, fuzzy +msgid "Delete an IPA location." +msgstr "Automount-Ort löschen." + +#, fuzzy, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "Automount-Ort \"%(value)s\" gelöscht" + +#, fuzzy +msgid "Modify information about an IPA location." +msgstr "Hostinformationen ändern." + +#, fuzzy, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "OTP Token \"%(value)s\" geändert" + +#, fuzzy +msgid "Search for IPA locations." +msgstr "OTP Token suchen." + +#, fuzzy, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "%(count)d Automount-Ort gefunden" +msgstr[1] "%(count)d Automount-Orte gefunden" + +#, fuzzy +msgid "Display information about an IPA location." +msgstr "Informationen über OTP Token anzeigen." + +#, fuzzy +msgid "Servers in location" +msgstr "Servername" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, fuzzy, python-format +msgid "%(user)s is not a POSIX user" +msgstr "%(port)s kein gültiger Port" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +#, fuzzy +msgid "Invalid LDAP URI." +msgstr "LDAP-URI" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +#, fuzzy +msgid "Default group for new users not found" +msgstr "Vorgegebene Gruppe für neue Benutzer" + +#, fuzzy +msgid "netgroups" +msgstr "Gruppen" + +#, fuzzy +msgid "Netgroup" +msgstr "Gruppe" + +#, fuzzy, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "Gruppe »%(value)s« hinzugefügt" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "Gruppe »%(value)s« gelöscht" + +#, fuzzy, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "Gruppe »%(value)s« geändert" + +#, fuzzy, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "%(count)d passende Gruppe" +msgstr[1] "%(count)d passende Gruppen" + +msgid "One time password commands" +msgstr "Einmalpasswort Befehle" + +msgid "OTP configuration options" +msgstr "OTP-Konfigurationsoptionen" + +msgid "OTP Configuration" +msgstr "OTP Konfiguration" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" +"\n" +"OTP Tokens\n" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" +"\n" +"OTP-Tokens bearbeiten.\n" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "OTP Token" + +msgid "OTP tokens" +msgstr "OTP Tokens" + +msgid "OTP Tokens" +msgstr "OTP Token" + +msgid "OTP Token" +msgstr "OTP Token" + +msgid "URI" +msgstr "URI" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "OTP token \"%(value)s\" hinzugefügt" + +#, fuzzy +msgid "cannot be empty" +msgstr "Darf nicht leer sein" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "OTP token \"%(value)s\" gelöscht" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "OTP Token \"%(value)s\" geändert" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "%(count)d OTP Token gefunden" +msgstr[1] "%(count)d OTP Tokens gefunden" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"If the user authentication method is set to password+OTP, the user should\n" +"pass the --otp option when resetting the password.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To reset your own password when password+OTP is set as authentication " +"method:\n" +" ipa passwd --otp\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +msgid "The OTP if the user has a token configured" +msgstr "" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "Passwort für \"%(value)s\" geändert" + +#, fuzzy +msgid "" +"\n" +"Permissions\n" +msgstr "Berechtigungen" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +#, fuzzy +msgid "" +"\n" +"Managed permissions\n" +msgstr "Berechtigungen" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +#, fuzzy +msgid "must be enclosed in parentheses" +msgstr "muss eine Ganzzahl sein" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "" + +#, fuzzy, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "%s ist kein gültiges Attribut" + +#, fuzzy, python-format +msgid "Deprecated; use %s" +msgstr "Veraltete Optionen" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, fuzzy, python-format +msgid "Entry %s not found" +msgstr "Objektklasse %s nicht gefunden" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, python-format +msgid "option was renamed; use %s" +msgstr "" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, fuzzy, python-format +msgid "%s: group not found" +msgstr "Realm nicht gefunden\n" + +#, fuzzy +msgid "target and targetgroup are mutually exclusive" +msgstr "" +"»type«, »filter«, »subtree« und »targetgroup« schließen sich gegenseitig aus." + +#, fuzzy +msgid "subtree and type are mutually exclusive" +msgstr "»filter« und »memberof« schließen sich gegenseitig aus" + +#, fuzzy +msgid "Bad search filter" +msgstr "Falscher Suchfilter %(info)s" + +#, fuzzy, python-format +msgid "Entry %s does not exist" +msgstr "Gruppe »%s« existiert nicht" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, fuzzy, python-format +msgid "Added permission \"%(value)s\"" +msgstr "Rolle \"%(value)s\" hinzugefügt" + +#, fuzzy +msgid "attrs and included attributes are mutually exclusive" +msgstr "»filter« und »memberof« schließen sich gegenseitig aus" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "Rolle \"%(value)s\" gelöscht" + +#, fuzzy +msgid "cannot delete managed permissions" +msgstr "Indirekte Mitglieds-Berechtigungen" + +#, fuzzy, python-format +msgid "ACI of permission %s was not found" +msgstr "ACI mit dem Namen »%s« nicht gefunden" + +#, fuzzy, python-format +msgid "Modified permission \"%(value)s\"" msgstr "Rolle \"%(value)s\" geändert" #, fuzzy -msgid "Certificate profiles cannot be renamed" +msgid "cannot rename managed permissions" +msgstr "Indirekte Mitglieds-Berechtigungen" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +#, fuzzy +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "»filter« und »memberof« schließen sich gegenseitig aus" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "%(count)d Rolle gefunden" +msgstr[1] "%(count)d Rollen gefunden" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +#, fuzzy +msgid "PKINIT status" +msgstr "PKINIT" + +#, fuzzy +msgid "Whether PKINIT is enabled or disabled" +msgstr "Dieser Eintrag kann nicht aktiviert oder deaktiviert werden" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "%(count)d passender Dienst" +msgstr[1] "%(count)d passende Dienste" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, fuzzy, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "Rolle \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "Rolle \"%(value)s\" gelöscht" + +#, fuzzy, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "Rolle \"%(value)s\" geändert" + +#, fuzzy, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "%(count)d Rolle gefunden" +msgstr[1] "%(count)d Rollen gefunden" + +#, fuzzy +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "Radius Server" + +#, fuzzy +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "Radius Server" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +#, fuzzy +msgid "invalid attribute name" +msgstr "%s ist kein gültiges Attribut" + +#, fuzzy +msgid "invalid port number" +msgstr "Seriennummer" + +#, fuzzy +msgid "RADIUS proxy server" +msgstr "RADIUS-Proxy Benutzername" + +#, fuzzy +msgid "RADIUS proxy servers" +msgstr "RADIUS-Proxy Benutzername" + +msgid "RADIUS Servers" +msgstr "Radius Server" + +#, fuzzy +msgid "RADIUS Server" +msgstr "Radius Server" + +#, fuzzy, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "HBAC Dienst \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "HBAC Dienst \"%(value)s\" gelöscht" + +#, fuzzy, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "HBAC Dienst \"%(value)s\" geändert" + +#, fuzzy, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "%(count)d HBAC-Dienst gefunden" +msgstr[1] "%(count)d HBAC-Dienste gefunden" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +#, fuzzy +msgid "Realm domains" +msgstr "Realm-Name" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +#, fuzzy +msgid "IPA server domain cannot be deleted" +msgstr "Zonen-Datensatz »%s« kann nicht gelöscht werden" + +msgid "roles" +msgstr "Rollen" + +msgid "Role" +msgstr "Rolle" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "Rolle \"%(value)s\" hinzugefügt" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "Rolle \"%(value)s\" gelöscht" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "Rolle \"%(value)s\" geändert" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "%(count)d Rolle gefunden" +msgstr[1] "%(count)d Rollen gefunden" + +#, fuzzy +msgid "" +"\n" +"API Schema\n" +msgstr "LDAP-Schema" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +#, fuzzy +msgid "Documentation" +msgstr "Authentifizierung" + +msgid "Exclude from" +msgstr "" + +#, fuzzy +msgid "Include in" +msgstr "Aktivierte einschließen" + +msgid "Help topic" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +#, fuzzy +msgid "Method name" +msgstr "Datensatzname" + +#, fuzzy +msgid "Display information about a command." +msgstr "Informationen über Host anzeigen." + +#, fuzzy +msgid "Search for commands." +msgstr "Nach Sudo-Befehlen suchen." + +#, fuzzy +msgid "Return command defaults" +msgstr "Befehle ausführen" + +#, fuzzy, python-brace-format +msgid "{oname}: {command_name} not found" +msgstr "Realm nicht gefunden\n" + +#, fuzzy +msgid "Display information about a class." +msgstr "Informationen über Host anzeigen." + +#, fuzzy +msgid "Search for classes." +msgstr "Nach Rollen suchen." + +#, fuzzy +msgid "Display information about a help topic." +msgstr "Informationen über Host anzeigen." + +#, fuzzy +msgid "Search for help topics." +msgstr "Nach Hostgruppen suchen." + +#, fuzzy +msgid "Required" +msgstr "Anfrage-ID" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +msgid "CLI name" +msgstr "ACI-Name" + +#, fuzzy +msgid "Confirm (password)" +msgstr "Passwort ändern" + +#, fuzzy +msgid "Default" +msgstr "Vorgabe-Shell" + +#, fuzzy +msgid "Default from" +msgstr "Standard Hostgruppe" + +msgid "Label" +msgstr "" + +#, fuzzy +msgid "Convert on server" +msgstr "Hostname dieses Servers" + +#, fuzzy +msgid "Option group" +msgstr "Hostgruppe" + +msgid "Sensitive" +msgstr "" + +#, fuzzy +msgid "Positional argument" +msgstr "Positionale Argumente" + +#, fuzzy, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "%(parent)s: %(oname)s nicht gefunden" + +#, fuzzy +msgid "Display information about a command parameter." +msgstr "Informationen zu einer genannten Gruppe anzeigen." + +#, fuzzy +msgid "Search command parameters." +msgstr "Nach vorbereiteten Benutzern suchen." + +#, fuzzy, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "%(parent)s: %(oname)s nicht gefunden" + +#, fuzzy +msgid "Display information about a command output." +msgstr "Informationen zu einer genannten Gruppe anzeigen." + +#, fuzzy +msgid "Search for command outputs." +msgstr "Nach Sudo-Befehlen suchen." + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +#, fuzzy +msgid "self service permission" +msgstr "Beschreibung des HBAC-Dienstes" + +#, fuzzy +msgid "self service permissions" +msgstr "Berechtigungen" + +#, fuzzy +msgid "Self Service Permissions" +msgstr "Berechtigungen" + +#, fuzzy +msgid "Self Service Permission" +msgstr "Berechtigung" + +#, fuzzy, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "Dienst »%(value)s« hinzugefügt" + +#, fuzzy, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "Dienst »%(value)s« gelöscht" + +#, fuzzy, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "Dienst »%(value)s« geändert" + +#, fuzzy, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "%(count)d passender Dienst" +msgstr[1] "%(count)d passende Dienste" + +#, fuzzy +msgid "HBAC rule and local members cannot both be set" +msgstr "Benutzer und Host können nicht gleichzeitig gesetzt sein." + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +msgid "SELinux User Map rule" +msgstr "" + +msgid "SELinux User Map rules" +msgstr "" + +#, fuzzy +msgid "SELinux User Maps" +msgstr "SELinux-Optionen" + +#, fuzzy +msgid "SELinux User Map" +msgstr "Vorgegebener SELinux-Benutzer" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "HBAC-Regel %(rule)s nicht gefunden" + +#, fuzzy, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "Benutzer »%(value)s« hinzugefügt" + +#, fuzzy, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "Benutzer »%(value)s« gelöscht" + +#, fuzzy, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "Benutzer »%(value)s« geändert" + +#, fuzzy, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "%(count)d passender Benutzer" +msgstr[1] "%(count)d passende Benutzer" + +#, fuzzy, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "Benutzerkonto »%(value)s« wurde aktiviert" + +#, fuzzy, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "Benutzerkonto »%(value)s« wurde deaktiviert" + +#, fuzzy +msgid "" +"\n" +"IPA server roles\n" +msgstr "" +"\n" +"IPA-Server\n" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +#, fuzzy +msgid "server role" +msgstr "Server" + +#, fuzzy +msgid "server roles" +msgstr "Server" + +#, fuzzy +msgid "IPA Server Roles" +msgstr "IPA-Server" + +#, fuzzy +msgid "IPA Server Role" +msgstr "Zu verwendender IPA-Server" + +#, fuzzy +msgid "IPA server role name" +msgstr "IPA-Server Hostname" + +#, fuzzy +msgid "Role status" +msgstr "Regelstatus" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "%(count)d Rolle gefunden" +msgstr[1] "%(count)d Rollen gefunden" + +msgid "Include IPA master entries" +msgstr "" + +#, fuzzy +msgid "IPA role name" +msgstr "Rollenname" + +#, fuzzy, python-brace-format +msgid "{role}: role not found" +msgstr "Realm nicht gefunden\n" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +#, fuzzy, python-format +msgid "authentication indicators not allowed in service \"%s\"" +msgstr "HOTP Authentifizierungsfenster" + +#, fuzzy +msgid "Malformed principal" +msgstr "Dienst-Principal" + +msgid "{} is required by the IPA master" +msgstr "" + +msgid "service" +msgstr "Dienst" + +msgid "services" +msgstr "Dienste" + +#, fuzzy +msgid "Service principal alias" +msgstr "Dienst-Principal" + +#, fuzzy +msgid "Base-64 encoded service certificate" +msgstr "Base-64-kodiertes Serverzertifikat" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +#, fuzzy +msgid "Add a new IPA service." +msgstr "Einen neuen IPA-Dienst hinzufügen." + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "Dienst »%(value)s« hinzugefügt" + +#, fuzzy +msgid "force principal name even if host not in DNS" +msgstr "Hostname erzwingen auch wenn nicht im DNS" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +#, fuzzy +msgid "Add a new SMB service." +msgstr "Einen neuen HBAC-Dienst hinzufügen." + +#, fuzzy +msgid "SMB service NetBIOS name" +msgstr "Dienstname" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "Dienst »%(value)s« gelöscht" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "Dienst »%(value)s« geändert" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "%(count)d passender Dienst" +msgstr[1] "%(count)d passende Dienste" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "Dienst »%(value)s« deaktiviert" + +#, fuzzy, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "HBAC-Dienstgruppe »%(value)s« hinzugefügt" + +#, fuzzy, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "HBAC-Dienstgruppe »%(value)s« geändert" + +msgid "Add new principal alias to a service" +msgstr "" + +#, fuzzy, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "HBAC-Dienstgruppe »%(value)s« hinzugefügt" + +#, fuzzy +msgid "Remove principal alias from a service" +msgstr "Berechtigungen von Rolle entfernen." + +#, fuzzy, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "Dienst »%(value)s« gelöscht" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +#, fuzzy +msgid "Member principals" +msgstr "Kerberos-Principal" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, fuzzy +msgid "Remove member from a named service delegation." +msgstr "Mitglieder von einer HBAC-Dienstgruppe entfernen." + +#, fuzzy +msgid "service delegation rule" +msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." + +#, fuzzy +msgid "service delegation rules" +msgstr "Delegationen" + +#, fuzzy +msgid "Service delegation rules" +msgstr "Diensteinstellungen" + +#, fuzzy +msgid "Service delegation rule" +msgstr "Diensteinstellungen" + +#, fuzzy, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "Dienst »%(value)s« hinzugefügt" + +#, fuzzy, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "Dienst »%(value)s« gelöscht" + +msgid "privileged service delegation rule" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "%(count)d passender Dienst" +msgstr[1] "%(count)d passende Dienste" + +#, fuzzy +msgid "service delegation target" +msgstr "Delegationsname" + +#, fuzzy +msgid "service delegation targets" +msgstr "Diensteinstellungen" + +#, fuzzy +msgid "Service delegation targets" +msgstr "Diensteinstellungen" + +#, fuzzy +msgid "Service delegation target" +msgstr "Diensteinstellungen" + +#, fuzzy, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "Dienst »%(value)s« hinzugefügt" + +#, fuzzy, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "Dienst »%(value)s« gelöscht" + +msgid "privileged service delegation target" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "%(count)d passender Dienst" +msgstr[1] "%(count)d passende Dienste" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "Vorbereitete Benutzer" + +msgid "Stage User" +msgstr "Vorbereiteter Benutzer" + +msgid "stage user" +msgstr "Vorbereiteter Benutzer" + +msgid "stage users" +msgstr "Vorbereitete Benutzer" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "Vorbereiteten Benutzer »%(value)s« hinzugefügt" + +msgid "givenname is required" +msgstr "givenname wird benötigt" + +msgid "sn is required" +msgstr "sn wird benötigt" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "Vorbereiteten Benutzer \"%(value)s\" gelöscht" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "Vorbereiteten Benutzer »%(value)s« geändert" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "%(count)d passender Benutzer" +msgstr[1] "%(count)d passende Benutzer" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "Vorbereiteten Benutzer \"%(value)s\" aktivieren." + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "Aktiver Benutzer mit Name \"%(user)s\" existiert bereits" + +#, python-format +msgid "Stage user %s activated" +msgstr "Vorbereiteten Benutzer %s aktiviert" + +#, fuzzy +msgid "Add one or more certificates to the stageuser entry" +msgstr "Manager zum vorbereiteten Benutzer hinzufügen" + +#, fuzzy, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "Vorbereiteten Benutzer \"%(value)s\" aktivieren." + +#, fuzzy +msgid "Remove one or more certificates to the stageuser entry" +msgstr "Manager vom Benutzer entfernen" + +#, fuzzy, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "Vorbereiteten Benutzer \"%(value)s\" aktivieren." + +#, fuzzy +msgid "Add new principal alias to the stageuser entry" +msgstr "Manager zum vorbereiteten Benutzer hinzufügen" + +#, fuzzy, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "Vorbereiteten Benutzer »%(value)s« hinzugefügt" + +#, fuzzy +msgid "Remove principal alias from the stageuser entry" +msgstr "Manager vom Benutzer entfernen" + +#, fuzzy, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "Vorbereiteten Benutzer »%(value)s« geändert" + +#, fuzzy +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "Manager zum vorbereiteten Benutzer hinzufügen" + +#, fuzzy +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "Manager vom Benutzer entfernen" + +msgid "" +"\n" +"Subordinate ids\n" +"\n" +"Manage subordinate user and group ids for users\n" +"\n" +"EXAMPLES:\n" +"\n" +" Auto-assign a subordinate id range to current user\n" +" ipa subid-generate\n" +"\n" +" Auto-assign a subordinate id range to user alice:\n" +" ipa subid-generate --owner=alice\n" +"\n" +" Find subordinate ids for user alice:\n" +" ipa subid-find --owner=alice\n" +"\n" +" Match entry by any subordinate uid in range:\n" +" ipa subid-match --subuid=2147483649\n" +msgstr "" + +msgid "Subordinate id" +msgstr "" + +msgid "Subordinate ids" +msgstr "" + +#, fuzzy +msgid "Subordinate id description" +msgstr "Gruppenbeschreibung" + +msgid "Owning user of subordinate id entry" +msgstr "" + +msgid "Start value for subordinate user ID (subuid) range" +msgstr "" + +msgid "Subordinate user ID count" +msgstr "" + +msgid "Start value for subordinate group ID (subgid) range" +msgstr "" + +msgid "Subordinate group ID count" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgid "" +"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." +msgstr "%(oname)s mit dem Namen »%(pkey)s« existiert bereits" + +#, fuzzy, python-format +#| msgid "%(port)s is not a valid port" +msgid "'%(dn)s is not a valid user" +msgstr "%(port)s kein gültiger Port" + +msgid "subgidnumber must be equal to subuidnumber" +msgstr "" + +#, fuzzy +#| msgid "Add a new stage user." +msgid "Add a new subordinate id." +msgstr "Einen neuen vorbereiteten Benutzer hinzufügen." + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added subordinate id \"%(value)s\"" +msgstr "Dienst »%(value)s« hinzugefügt" + +#, fuzzy +msgid "Delete a subordinate id." msgstr "Benutze Zertifikatsprofil" -msgid "Insufficient privilege to modify a certificate profile." +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted subordinate id \"%(value)s\"" +msgstr "Dienst »%(value)s« gelöscht" + +#, fuzzy +#| msgid "Modify a stage user." +msgid "Modify a subordinate id." +msgstr "Einen vorbereiteten Benutzer ändern." + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Modified subordinate id \"%(value)s\"" +msgstr "Dienst »%(value)s« geändert" + +#, fuzzy +msgid "Search for subordinate id." +msgstr "Nach Rollen suchen." + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d subordinate id matched" +msgid_plural "%(count)d subordinate ids matched" +msgstr[0] "%(count)d passender Dienst" +msgstr[1] "%(count)d passende Dienste" + +#, fuzzy +msgid "Display information about a subordinate id." +msgstr "Informationen über eine Rolle anzeigen." + +msgid "Generate and auto-assign subuid and subgid range to user entry" +msgstr "" + +msgid "Match users by any subordinate uid in their range" +msgstr "" + +msgid "SubUID match" +msgstr "" + +msgid "Match value for subordinate user ID" +msgstr "" + +msgid "Subordinate id statistics" msgstr "" #, python-format -msgid "all masters must have %(role)s role enabled" +msgid "%(remaining)i remaining subordinate id ranges" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "Befehle zum Steuern der sudo-Konfiguration" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" msgstr "" #, python-format -msgid "must have %(role)s role enabled" +msgid "must not contain trailing dot: %s" msgstr "" -msgid "must be enabled only on a single master" +msgid "sudo command" +msgstr "Sudo-Befehl" + +msgid "sudo commands" +msgstr "Sudo-Befehle" + +msgid "Sudo Commands" +msgstr "Sudo-Befehle" + +#, fuzzy, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "CA ACL \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "ACI gelöscht \"%(value)s\"" + +#, fuzzy, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "ACI geändert \"%(value)s\"" + +#, fuzzy, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "%(count)d ACI gefunden" +msgstr[1] "%(count)d ACIs gefunden" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "Sudo-Befehlsgruppe" + +msgid "sudo command groups" +msgstr "Sudo-Befehlsgruppen" + +#, fuzzy, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "Gruppe »%(value)s« hinzugefügt" + +#, fuzzy, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "Gruppe »%(value)s« gelöscht" + +#, fuzzy, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "Gruppe »%(value)s« geändert" + +#, fuzzy, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "%(count)d passende Gruppe" +msgstr[1] "%(count)d passende Gruppen" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +#, fuzzy +msgid "segments" +msgstr "Segment Details" + +#, fuzzy +msgid "Topology Segments" +msgstr "Topologie" + +#, fuzzy +msgid "Topology Segment" +msgstr "Topologie" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "%(count)d Host gefunden" +msgstr[1] "%(count)d Hosts gefunden" + +#, fuzzy, python-format +msgid "Added segment \"%(value)s\"" +msgstr "Host \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "Host \"%(value)s\" gelöscht" + +#, fuzzy, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "Host \"%(value)s\" geändert" + +#, fuzzy, python-format +msgid "%(value)s" +msgstr "»%(value)s« gefunden" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, fuzzy +msgid "suffixes" +msgstr "UPN Suffixe" + +#, fuzzy +msgid "Topology suffixes" +msgstr "Topologie" + +#, fuzzy +msgid "Topology suffix" +msgstr "Topologie" + +#, fuzzy, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "%(count)d Host gefunden" +msgstr[1] "%(count)d Hosts gefunden" + +#, fuzzy, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "Host \"%(value)s\" gelöscht" + +#, fuzzy, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "Host \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "Host \"%(value)s\" geändert" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" +"Alternativ sind folgende Server in der Lage den Befehl auszuführen: " +"%(masters)s" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" +"Kann den ausgewählten Befehl nicht ohne Samba 4 Unterstützung ausführen. " +"Stellen Sie sicher, dass das server-trust-ad Paket von IPA installiert ist." + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" +"Kann den ausgewählten Befehl nicht ohne eine konfigurierte Samba 4 Instanz " +"auf dieser Maschine ausführen. Stellen Sie sicher, dass ipa-adtrust-install " +"auf dieser Maschine ausgeführt wurde." + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "Vertrauensstellung" + +msgid "trusts" +msgstr "Vertrauensstellungen" + +msgid "Trust" +msgstr "Vertrauensstellung" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "UPN suffixes" +msgstr "UPN Suffixe" + +#, fuzzy, python-brace-format +msgid "invalid SID: {SID}" +msgstr "ungültiger DN (%s)" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "Externe Vertrauensstellung" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, fuzzy, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "Auto-Mitgliedschaftsregel \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "Automount-Ort \"%(value)s\" gelöscht" + +msgid "missing base_id" +msgstr "fehlende base_id" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "Vertrauensstellungstyp" + +msgid "only \"ad\" is supported" +msgstr "nur \"ad\" ist unterstützt" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" +"Zum Aufbau einer Vertrauensstellung mit einem Active Directory müssen " +"Domänenname und Realm des IPA Servers übereinstimmen" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "Host \"%(value)s\" gelöscht" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "%(count)d Host gefunden" +msgstr[1] "%(count)d Hosts gefunden" + +#, fuzzy +msgid "trust configuration" +msgstr "Konfiguration" + +#, fuzzy +msgid "Global Trust Configuration" +msgstr "OTP Konfiguration" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "nicht unterstützte Vetrauensstellung" + +#, fuzzy, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "ACI geändert \"%(value)s\"" + +msgid "SID" +msgstr "SID" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" +"Dieser Befehl erfordert die Existenz der \"editors\" Gruppe, diese wurde " +"jedoch nicht gefunden." + +msgid "trust domain" +msgstr "" + +#, fuzzy +msgid "trust domains" +msgstr "Vertrauensstellungen" + +#, fuzzy +msgid "Trusted domains" +msgstr "Vertrauenseinstellungen" + +msgid "Trusted domain" +msgstr "" + +msgid "Domain enabled" +msgstr "Domäne aktiviert" + +#, fuzzy, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "Der Server hat keine Informationen über die Domäne '%(domain)s'" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, fuzzy, python-format +msgid "must be \"%s\"" +msgstr "muss '%(value)s' sein" + +#, fuzzy +msgid "not allowed to remotely add agent" +msgstr "Es ist nicht erlaubt, Benutzereinträge zu ändern." + +#, fuzzy, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "Benutzerkonto »%(value)s« wurde aktiviert" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, fuzzy, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "Host \"%(value)s\" deaktiviert" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "users" +msgstr "Benutzer" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "Benutzer »%(value)s« hinzugefügt" + +#, fuzzy +msgid "Default group for new users is not POSIX" +msgstr "Vorgegebene Gruppe für neue Benutzer" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "Benutzer »%(value)s« gelöscht" + +#, python-format +msgid "%s: user is already preserved" +msgstr "%s: Benutzer ist bereits aufbewahrt" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "Benutzer »%(value)s« geändert" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "Benutzerkonto \"%(value)s\" wiederhergestellt" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "Benutzer \"%s\" ist bereits aktiv" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "Vorbereitetes Benutzerkonto \"%(value)s\"" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "Benutzerkonto »%(value)s« wurde deaktiviert" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "Benutzerkonto »%(value)s« wurde aktiviert" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "Konto »%(value)s« wurde entsperrt" + +msgid "Failed logins" +msgstr "Fehlgeschlagene Logins" + +msgid "Last successful authentication" +msgstr "Letzte erfolgreiche Authentifizierung" + +msgid "Last failed authentication" +msgstr "Letzte fehlgeschlagene Authentifizierung" + +msgid "Time now" +msgstr "Aktuelle Zeit" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, fuzzy, python-format +msgid "%(host)s failed" +msgstr "fork() fehlgeschlagen\n" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "Konto deaktiviert: %(disabled)s" + +#, fuzzy, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "Vorbereiteten Benutzer »%(value)s« hinzugefügt" + +#, fuzzy, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "Bedingung(en) von \"%(value)s\" entfernt" + +#, fuzzy +msgid "Add new principal alias to the user entry" +msgstr "Manager zum Benutzer hinzufügen" + +#, fuzzy, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "Vorbereiteten Benutzer »%(value)s« hinzugefügt" + +#, fuzzy +msgid "Remove principal alias from the user entry" +msgstr "Manager vom Benutzer entfernen" + +#, fuzzy, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "Bedingung(en) von \"%(value)s\" entfernt" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +#, fuzzy +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" +"\n" +"OTP-Tokens bearbeiten.\n" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +msgid "Vault Container" +msgstr "" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +#, fuzzy +msgid "Host is not supported" +msgstr "nur \"ad\" ist unterstützt" + +msgid "KRA service is not enabled" +msgstr "" + +#, fuzzy +msgid "Deleted vault container" +msgstr "Automount-Ort löschen." + +#, fuzzy, python-format +msgid "owner %s" +msgstr "Eigentümer" + +#, fuzzy +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" +"\n" +" Auto-Mitgliedschaftsregel hinzufügen.\n" +" " + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, fuzzy, python-format +msgid "Added vault \"%(value)s\"" +msgstr "Host \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "Host \"%(value)s\" gelöscht" + +#, fuzzy, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "%(count)d Host gefunden" +msgstr[1] "%(count)d Hosts gefunden" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, fuzzy, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "Host \"%(value)s\" geändert" + +#, fuzzy +msgid "Vault configuration" +msgstr "Konfiguration" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, fuzzy, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "Vorbereiteten Benutzer \"%(value)s\" aktivieren." + +msgid "Retrieve data from a vault." +msgstr "" + +#, fuzzy, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "Bedingung(en) von \"%(value)s\" entfernt" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, fuzzy, python-format +msgid "not allowed to perform operation: %s" +msgstr "Es ist nicht erlaubt, Gruppeneinträge zu ändern." + +msgid "No such virtual command" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +#, fuzzy +msgid "Delete Class of Service entry" +msgstr "Einen IPA-Dienst entfernen." + +#, fuzzy +msgid "Modify Class of Service entry" +msgstr "HBAC-Dienstgruppe bearbeiten" + +msgid "Display Class of Service entry" +msgstr "" + +#, fuzzy +msgid "Search for Class of Service entry" +msgstr "Suche nach HBAC Dienstgruppe" + +msgid "password policy" +msgstr "Passwortregel" + +msgid "password policies" +msgstr "Passwortregeln" + +msgid "Password Policies" +msgstr "Passwortregeln" + +msgid "Max repeat" +msgstr "" + +#, fuzzy +msgid "Maximum number of same consecutive characters" +msgstr "Maximale Anzahl der zurückgegebenen Einträge" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +#, fuzzy +msgid "User check" +msgstr "Benutzername" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +#, fuzzy +#| msgid "Maximum password life must be greater than minimum." +msgid "Maximum password life must be equal to or greater than the minimum." +msgstr "Maximale Lebensdauer muss größer als das Minimum sein." + +msgid "cannot delete global password policy" +msgstr "Die Globale Passwortregel kann nicht gelöscht werden" + +msgid "priority cannot be set on global policy" +msgstr "Priorität der globalen Regel kann nicht gesetzt werden" + +msgid "" +"\n" +"IPA servers\n" +msgstr "" +"\n" +"IPA-Server\n" + +#, fuzzy +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "Informationen zu einem IPA-Dienst anzeigen." + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +msgid "server" +msgstr "Server" + +msgid "servers" +msgstr "Server" + +msgid "IPA Servers" +msgstr "IPA-Server" + +#, fuzzy +msgid "Server location" +msgstr "Dienstkategorie" + +#, fuzzy +msgid "Service weight" +msgstr "Diensteinstellungen" + +#, fuzzy +msgid "Weight for server services" +msgstr "Nach IPA-Diensten suchen." + +#, fuzzy +msgid "Service relative weight" +msgstr "Diensteinstellungen" + +msgid "Relative weight for server services (counts per location)" +msgstr "" + +#, fuzzy +msgid "Enabled server roles" +msgstr "Dienst »%(value)s« deaktiviert" + +msgid "List of enabled roles" +msgstr "" + +#, fuzzy +msgid "Modify information about an IPA server." +msgstr "Informationen zu einem IPA-Dienst anzeigen." + +#, fuzzy, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "Dienst »%(value)s« geändert" + +#, fuzzy, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "%(count)d passender Dienst" +msgstr[1] "%(count)d passende Dienste" + +#, fuzzy, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "Dienst »%(value)s« gelöscht" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#, fuzzy, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "Fehler auf Server '%(server)s': %(error)s" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +#, fuzzy, python-format +msgid "Failed to remove server from security domain: %s" +msgstr "Fehler auf Server '%(server)s': %(error)s" + +#, fuzzy +msgid "Server has already been deleted" +msgstr "Dieser Eintrag ist bereits aktiviert" + +msgid "Agreements deleted" +msgstr "" + +#, fuzzy +msgid "Following segments were not deleted:" +msgstr "Einige Einträge wurden nicht gelöscht" + +#, fuzzy +msgid "not allowed to perform server connection check" +msgstr "Es ist nicht erlaubt, Benutzereinträge zu ändern." + +msgid "Set enabled/hidden state of a server." +msgstr "" + +#, fuzzy +msgid "State" +msgstr "Status" + +#, fuzzy +msgid "Server state" +msgstr "Servername" + +#, fuzzy, python-format +msgid "Changed server state of \"%(value)s\"." +msgstr "Passwort für \"%(value)s\" geändert" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." +msgstr "" + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" + +#, fuzzy +msgid "" +"\n" +"Sudo Rules\n" +msgstr "Sudo-Regeln" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"Each option needs to be added separately and no validation is done whether\n" +"the option is known by sudo or is in a valid format. Environment variables\n" +"also need to be set individually. For example env_keep=\"FOO BAR\" in " +"sudoers\n" +"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" +"+=BAR.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set multiple default Sudo options:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate' --" +"sudooption mail_badpass\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "Diese Option ist veraltet." + +msgid "sudo rules" +msgstr "Sudo-Regeln" + +msgid "Sudo Rules" +msgstr "Sudo-Regeln" + +msgid "Sudo Rule" +msgstr "Sudo-Regel" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, fuzzy, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "Rolle \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "Rolle \"%(value)s\" gelöscht" + +#, fuzzy, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "Rolle \"%(value)s\" geändert" + +#, fuzzy, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" +"Benutzerkategorie kann nicht auf 'Alle' gesetzt werden wenn es erlaubte " +"Benutzer gibt" + +#, fuzzy +msgid "command" +msgstr "Befehle" + +#, fuzzy +msgid "commands" +msgstr "Befehle" + +#, fuzzy +msgid "runAs user" +msgstr "Vorbereiteter Benutzer" + +#, fuzzy +msgid "runAs users" +msgstr "Vorbereitete Benutzer" + +#, fuzzy +msgid "group runAs" +msgstr "Gruppen" + +#, fuzzy +msgid "runAs groups" +msgstr "Hostgruppen" + +#, fuzzy, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "%(count)d Rolle gefunden" +msgstr[1] "%(count)d Rollen gefunden" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +#, fuzzy +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "users kann nicht gesetzt sein wenn Typ 'hostgroup' ist" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" msgstr "" #, fuzzy @@ -24585,6 +24883,17 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + #, python-format msgid "" "\n" @@ -24604,32 +24913,6 @@ msgstr "" msgid "Topology does not allow server %(server)s to replicate with servers:" msgstr "" -#, fuzzy -msgid "Trusting forest" -msgstr "Vertrauenseinstellungen" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Non-Active Directory domain" -msgstr "" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - msgid "" "\n" "Classes to manage trust joins using DCE-RPC calls\n" @@ -24799,6 +25082,36 @@ msgstr "Aktiver Benutzer mit Name \"%(user)s\" existiert bereits" msgid "must be at least 1" msgstr "muss mindestens %(minvalue)d sein" +msgid "Out of memory\n" +msgstr "Nicht genügend Speicher\n" + +#, fuzzy +msgid "Warning unrecognized encryption type.\n" +msgstr "Unterstützte Verschlüsselungstypen:\n" + +msgid "Warning unrecognized salt type.\n" +msgstr "" + +msgid "Out of memory!?\n" +msgstr "Nicht genügend Speicher!?\n" + +msgid "Enctype comparison failed!\n" +msgstr "" + +#, fuzzy +msgid "Password is too long!\n" +msgstr "Größe der Passworthistorie" + +msgid "Failed to create random key!\n" +msgstr "Zufallsschlüssel konnte nicht erzeugt werden!\n" + +msgid "Failed to create key!\n" +msgstr "Schlüssel konnte nicht erzeugt werden!\n" + +#, fuzzy +msgid "Bad or unsupported salt type.\n" +msgstr "nicht unterstützte Vetrauensstellung" + #, fuzzy, c-format msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" msgstr "ldap-Bibliothek konnte nicht initialisiert werden!\n" @@ -24826,21 +25139,3 @@ msgstr "" #, fuzzy msgid "Unable to initialize STARTTLS session\n" msgstr "ldap-Bibliothek konnte nicht initialisiert werden!\n" - -#, fuzzy -msgid "Warning unrecognized encryption type.\n" -msgstr "Unterstützte Verschlüsselungstypen:\n" - -msgid "Warning unrecognized salt type.\n" -msgstr "" - -msgid "Enctype comparison failed!\n" -msgstr "" - -#, fuzzy -msgid "Password is too long!\n" -msgstr "Größe der Passworthistorie" - -#, fuzzy -msgid "Bad or unsupported salt type.\n" -msgstr "nicht unterstützte Vetrauensstellung" diff --git a/po/en_GB.po b/po/en_GB.po index 0c4e88ab8..e6d37d5f9 100644 --- a/po/en_GB.po +++ b/po/en_GB.po @@ -15,41 +15,418 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" -#, python-format -msgid "%(count)d variables" -msgstr "%(count)d variables" +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "" -#, python-format -msgid "%(filename)s: file not found" -msgstr "%(filename)s: file not found" +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "" -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "Retrieving CA cert chain failed: %s" +#, c-format +msgid "out of memory\n" +msgstr "" -#, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "Retrieving CA status failed with status %d" +#, c-format +msgid "read error\n" +msgstr "" -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "Retrieving CA status failed: %s" +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" -msgid "Show environment variables." -msgstr "Show environment variables." +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" -#, python-format -msgid "objectclass %s not found" +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "" + +#, c-format +msgid "principal not found\n" +msgstr "" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, fuzzy, c-format +msgid "realm not found\n" msgstr "objectclass %s not found" -#, python-format -msgid "request failed with HTTP status %d" -msgstr "request failed with HTTP status %d" +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" +msgstr "" msgid "" -"retrieve and print all attributes from the server. Affects command output." +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "Kerberos Service Principal Name" +msgstr "" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +msgid "Realm name" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "" + +#, c-format +msgid "Out of memory \n" +msgstr "" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "" + +msgid "Simple bind failed\n" +msgstr "" + +msgid "SASL Bind failed\n" +msgstr "" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "" + +#, c-format +msgid "Failed to get result: %s\n" +msgstr "" + +#, c-format +msgid "Timeout exceeded." +msgstr "" + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "" + +#, c-format +msgid "Missing reply control!\n" +msgstr "" + +#, c-format +msgid "Out of Memory!\n" +msgstr "" + +#, c-format +msgid "Failed to create control!\n" +msgstr "" + +#, c-format +msgid "Failed to bind to server!\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab!\n" +msgstr "" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "" + +msgid "Failed to decode control reply!\n" +msgstr "" + +#, c-format +msgid "Passwords do not match!\n" +msgstr "" + +#, c-format +msgid "Failed to open config file %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "" + +msgid "Failed to resolve symlink to keytab.\n" +msgstr "" + +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" + +msgid "Print as little as possible" +msgstr "" + +msgid "Output only on errors" +msgstr "" + +msgid "Output debug info" +msgstr "" + +msgid "Contact this specific KDC Server" +msgstr "" + +msgid "Server Name" +msgstr "" + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" + +msgid "Encryption types to request" +msgstr "" + +msgid "Comma separated encryption types list" +msgstr "" + +msgid "Show the list of permitted encryption types and exit" +msgstr "" + +msgid "Permitted Encryption Types" +msgstr "" + +msgid "Asks for a non-random password to use for the principal" +msgstr "" + +msgid "LDAP DN" +msgstr "" + +msgid "DN to bind as if not using kerberos" +msgstr "" + +msgid "LDAP password" +msgstr "" + +msgid "password to use if not using kerberos" +msgstr "" + +msgid "Prompt for LDAP password" +msgstr "" + +msgid "Path to the IPA CA certificate" +msgstr "" + +msgid "IPA CA certificate" +msgstr "" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" + +msgid "url" +msgstr "" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" + +msgid "GSSAPI|EXTERNAL" +msgstr "" + +msgid "Retrieve current keys without changing them" +msgstr "" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +msgid "Enter LDAP password" +msgstr "" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "" + +#, c-format +msgid "DNS discovery for domain %s\n" +msgstr "" + +#, c-format +msgid "Discovered server %s\n" +msgstr "" + +#, c-format +msgid "Using discovered server %s\n" +msgstr "" + +#, c-format +msgid "DNS Discovery failed\n" +msgstr "" + +#, c-format +msgid "Using server from config %s\n" +msgstr "" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "" + +#, c-format +msgid "Using provided server %s\n" +msgstr "" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "" + +msgid "New Principal Password" +msgstr "" + +msgid "Verify Principal Password" +msgstr "" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" + +#, c-format +msgid "Failed to create key material\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" msgstr "" -"retrieve and print all attributes from the server. Affects command output." #, c-format msgid "Out of memory!\n" @@ -75,9 +452,6 @@ msgstr "" msgid "Unable to enable SSL in LDAP\n" msgstr "" -msgid "SASL Bind failed\n" -msgstr "" - #, c-format msgid "Search for %1$s on rootdse failed with error %2$d\n" msgstr "" @@ -303,389 +677,6 @@ msgstr "" msgid "The hostname must not be: %s\n" msgstr "" -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "" - -#, c-format -msgid "Out of memory \n" -msgstr "" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "" - -msgid "Simple bind failed\n" -msgstr "" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -#, c-format -msgid "Out of Memory!\n" -msgstr "" - -#, c-format -msgid "Failed to create control!\n" -msgstr "" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "" - -msgid "Failed to decode control reply!\n" -msgstr "" - -#, c-format -msgid "Passwords do not match!\n" -msgstr "" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "" - -msgid "Failed to resolve symlink to keytab.\n" -msgstr "" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Output only on errors" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -msgid "Server Name" -msgstr "" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Encryption types to request" -msgstr "" - -msgid "Comma separated encryption types list" -msgstr "" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -msgid "Permitted Encryption Types" -msgstr "" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -msgid "LDAP DN" -msgstr "" - -msgid "DN to bind as if not using kerberos" -msgstr "" - -msgid "LDAP password" -msgstr "" - -msgid "password to use if not using kerberos" -msgstr "" - -msgid "Prompt for LDAP password" -msgstr "" - -msgid "Path to the IPA CA certificate" -msgstr "" - -msgid "IPA CA certificate" -msgstr "" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -msgid "Enter LDAP password" -msgstr "" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -msgid "New Principal Password" -msgstr "" - -msgid "Verify Principal Password" -msgstr "" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, c-format -msgid "Failed to create key material\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, fuzzy, c-format -msgid "realm not found\n" -msgstr "objectclass %s not found" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -msgid "Realm name" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "" - -#, c-format -msgid "out of memory\n" -msgstr "" - -#, c-format -msgid "read error\n" -msgstr "" - msgid "Failed members" msgstr "" @@ -800,132 +791,34 @@ msgstr "" msgid "Skipped %(key)s" msgstr "" +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +msgid "Unrevoked" +msgstr "" + +msgid "Error" +msgstr "" + +msgid "Input filename" +msgstr "" + +msgid "File to load the certificate from." +msgstr "" + +msgid "cannot specify both raw certificate and file" +msgstr "" + msgid "Input file" msgstr "" msgid "File to load the certificate from" msgstr "" -msgid "cannot specify both raw certificate and file" -msgstr "" - #, python-format msgid "Profile configuration stored in file '%(file)s'" msgstr "" -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -msgid "Servers details:" -msgstr "" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "Add a new YubiKey OTP token." -msgstr "" - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -msgid "Maximum number of agreements per replica" -msgstr "" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -msgid "Delete a user" -msgstr "" - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - msgid "Split DNS record to parts" msgstr "" @@ -990,6 +883,131 @@ msgstr "" msgid "file to store DNS records in nsupdate format" msgstr "" +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "" + +msgid "Servers details:" +msgstr "" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "" + +msgid "User ID" +msgstr "" + +msgid "Password" +msgstr "" + +msgid "First Code" +msgstr "" + +msgid "Second Code" +msgstr "" + +msgid "Token ID" +msgstr "" + +msgid "python-yubico is not installed." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" + +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "Add a new YubiKey OTP token." +msgstr "" + +msgid "YubiKey slot" +msgstr "" + +msgid "No free YubiKey slot!" +msgstr "" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "" + +msgid "Topology is disconnected" +msgstr "" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "" + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "" + +msgid "Maximum number of agreements per replica" +msgstr "" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "" + +msgid "Delete a user" +msgstr "" + +msgid "preserve and no-preserve cannot be both set" +msgstr "" + #, python-format msgid "Cannot read file '%(filename)s': %(exc)s" msgstr "" @@ -1109,47 +1127,20 @@ msgstr "" msgid "Missing vault private key" msgstr "" -msgid "Write certificate (chain if --chain used) to file" +#, python-format +msgid "Enabled Sudo Rule \"%s\"" msgstr "" -msgid "Unrevoked" +#, python-format +msgid "Disabled Sudo Rule \"%s\"" msgstr "" -msgid "Error" +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" msgstr "" -msgid "Input filename" -msgstr "" - -msgid "File to load the certificate from." -msgstr "" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -msgid "User ID" -msgstr "" - -msgid "Password" -msgstr "" - -msgid "First Code" -msgstr "" - -msgid "Second Code" -msgstr "" - -msgid "Token ID" +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" msgstr "" msgid "" @@ -1423,6 +1414,243 @@ msgstr "" msgid "Location of the ACI" msgstr "" +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Description" +msgstr "" + +msgid "A description of this auto member rule" +msgstr "" + +msgid "Default (fallback) Group" +msgstr "" + +msgid "Default group for entries to land" +msgstr "" + +msgid "Add an automember rule." +msgstr "" + +msgid "Automember Rule" +msgstr "" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +msgid "Grouping Type" +msgstr "" + +msgid "Grouping to which the rule applies" +msgstr "" + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +msgid "Exclusive Regex" +msgstr "" + +msgid "Attribute Key" +msgstr "" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +msgid "Number of conditions added" +msgstr "" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +msgid "Display information about the default (fallback) automember groups." +msgstr "" + +msgid "Delete an automember rule." +msgstr "" + +msgid "List of deletions that failed" +msgstr "" + +msgid "Search for automember rules." +msgstr "" + +msgid "Modify an automember rule." +msgstr "" + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +msgid "Rights" +msgstr "" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Users" +msgstr "" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Hosts" +msgstr "" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +msgid "Conditions that could not be removed" +msgstr "" + +msgid "Number of conditions removed" +msgstr "" + +msgid "Display information about an automember rule." +msgstr "" + msgid "" "\n" "Automount\n" @@ -1554,31 +1782,15 @@ msgstr "" msgid "Automount map name." msgstr "" -msgid "Description" -msgstr "" - msgid "Create a new automount key." msgstr "" -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - msgid "Delete an automount key." msgstr "" msgid "Continuous mode: Don't stop on errors." msgstr "" -msgid "List of deletions that failed" -msgstr "" - msgid "Search for an automount key." msgstr "" @@ -1597,19 +1809,6 @@ msgstr "" msgid "Modify an automount key." msgstr "" -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "Rights" -msgstr "" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - msgid "New mount information" msgstr "" @@ -1704,6 +1903,184 @@ msgstr "" msgid "Nested Methods to execute" msgstr "" +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +msgid "Search for existing certificates." +msgstr "" + +msgid "Match cn attribute in subject" +msgstr "" + +msgid "Reason" +msgstr "" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "" + +msgid "minimum serial number" +msgstr "" + +msgid "maximum serial number" +msgstr "" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Maximum number of certs returned" +msgstr "" + +msgid "Take a revoked certificate off hold." +msgstr "" + +msgid "Serial number" +msgstr "" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +msgid "Submit a certificate signing request." +msgstr "" + +msgid "CSR" +msgstr "" + +msgid "Principal" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +msgid "Dictionary mapping variable name to value" +msgstr "" + +msgid "Revoke a certificate." +msgstr "" + +msgid "Retrieve an existing certificate." +msgstr "" + +msgid "Output filename" +msgstr "" + +msgid "File to store the certificate in." +msgstr "" + +msgid "Check the status of a certificate signing request." +msgstr "" + +msgid "Request id" +msgstr "" + msgid "" "\n" "Server configuration\n" @@ -2962,6 +3339,306 @@ msgstr "" msgid "Display information about a DNS zone (SOA record)." msgstr "" +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "Group name" +msgstr "" + +msgid "Group description" +msgstr "" + +msgid "GID" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "" + +msgid "Member users" +msgstr "" + +msgid "Member groups" +msgstr "" + +msgid "Member of groups" +msgstr "" + +msgid "Roles" +msgstr "" + +msgid "Member of netgroups" +msgstr "" + +msgid "Member of Sudo rule" +msgstr "" + +msgid "Member of HBAC rule" +msgstr "" + +msgid "Indirect Member users" +msgstr "" + +msgid "Indirect Member groups" +msgstr "" + +msgid "Indirect Member of group" +msgstr "" + +msgid "Indirect Member of netgroup" +msgstr "" + +msgid "Indirect Member of role" +msgstr "" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +msgid "Create a new group." +msgstr "" + +msgid "Create as a non-POSIX group" +msgstr "" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +msgid "Add members to a group." +msgstr "" + +msgid "External member" +msgstr "" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +msgid "member user" +msgstr "" + +msgid "users to add" +msgstr "" + +msgid "member group" +msgstr "" + +msgid "groups to add" +msgstr "" + +msgid "Members that could not be added" +msgstr "" + +msgid "Number of members added" +msgstr "" + +msgid "Delete group." +msgstr "" + +msgid "Detach a managed group from a user." +msgstr "" + +msgid "Search for groups." +msgstr "" + +msgid "search for private groups" +msgstr "" + +msgid "search for POSIX groups" +msgstr "" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +msgid "search for non-POSIX groups" +msgstr "" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "user" +msgstr "" + +msgid "Search for groups with these member users." +msgstr "" + +msgid "Search for groups without these member users." +msgstr "" + +msgid "group" +msgstr "" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +msgid "netgroup" +msgstr "" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +msgid "HBAC rule" +msgstr "" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +msgid "Modify a group." +msgstr "" + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +msgid "Remove members from a group." +msgstr "" + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "" + +msgid "Number of members removed" +msgstr "" + +msgid "Display information about a named group." +msgstr "" + msgid "" "\n" "Host-based access control\n" @@ -3042,15 +3719,9 @@ msgstr "" msgid "Enabled" msgstr "" -msgid "Users" -msgstr "" - msgid "User Groups" msgstr "" -msgid "Hosts" -msgstr "" - msgid "Host Groups" msgstr "" @@ -3066,9 +3737,6 @@ msgstr "" msgid "Create a new HBAC rule." msgstr "" -msgid "Suppress processing of membership attributes." -msgstr "" - msgid "Add target hosts and hostgroups to an HBAC rule." msgstr "" @@ -3084,12 +3752,6 @@ msgstr "" msgid "host groups to add" msgstr "" -msgid "Members that could not be added" -msgstr "" - -msgid "Number of members added" -msgstr "" - msgid "Add services to an HBAC rule." msgstr "" @@ -3108,18 +3770,6 @@ msgstr "" msgid "Add users and groups to an HBAC rule." msgstr "" -msgid "member user" -msgstr "" - -msgid "users to add" -msgstr "" - -msgid "member group" -msgstr "" - -msgid "groups to add" -msgstr "" - msgid "Delete an HBAC rule." msgstr "" @@ -3144,12 +3794,6 @@ msgstr "" msgid "host groups to remove" msgstr "" -msgid "Members that could not be removed" -msgstr "" - -msgid "Number of members removed" -msgstr "" - msgid "Remove service and service groups from an HBAC rule." msgstr "" @@ -3162,12 +3806,6 @@ msgstr "" msgid "Remove users and groups from an HBAC rule." msgstr "" -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - msgid "Display the properties of an HBAC rule." msgstr "" @@ -3276,6 +3914,242 @@ msgstr "" msgid "Display information about an HBAC service group." msgstr "" +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +msgid "User name" +msgstr "" + +msgid "Target host" +msgstr "" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +msgid "Warning" +msgstr "" + +msgid "Matched rules" +msgstr "" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + msgid "" "\n" "Hosts/Machines\n" @@ -3423,33 +4297,9 @@ msgstr "" msgid "Member of host-groups" msgstr "" -msgid "Roles" -msgstr "" - -msgid "Member of netgroups" -msgstr "" - -msgid "Member of Sudo rule" -msgstr "" - -msgid "Member of HBAC rule" -msgstr "" - -msgid "Indirect Member of netgroup" -msgstr "" - msgid "Indirect Member of host-group" msgstr "" -msgid "Indirect Member of role" -msgstr "" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - msgid "Keytab" msgstr "" @@ -3539,45 +4389,30 @@ msgstr "" msgid "Search for hosts without these member of host groups." msgstr "" -msgid "netgroup" -msgstr "" - msgid "Search for hosts with these member of netgroups." msgstr "" msgid "Search for hosts without these member of netgroups." msgstr "" -msgid "role" -msgstr "" - msgid "Search for hosts with these member of roles." msgstr "" msgid "Search for hosts without these member of roles." msgstr "" -msgid "HBAC rule" -msgstr "" - msgid "Search for hosts with these member of HBAC rules." msgstr "" msgid "Search for hosts without these member of HBAC rules." msgstr "" -msgid "sudo rule" -msgstr "" - msgid "Search for hosts with these member of sudo rules." msgstr "" msgid "Search for hosts without these member of sudo rules." msgstr "" -msgid "user" -msgstr "" - msgid "Search for hosts with these enrolled by users." msgstr "" @@ -3729,6 +4564,231 @@ msgstr "" msgid "Display information about a hostgroup." msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "Range name" +msgstr "" + +msgid "First Posix ID of the range" +msgstr "" + +msgid "Number of IDs in the range" +msgstr "" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +msgid "Range type" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "Delete an ID range." +msgstr "" + +msgid "Search for ranges." +msgstr "" + +msgid "Modify ID range." +msgstr "" + +msgid "Display information about a range." +msgstr "" + msgid "" "\n" "ID Views\n" @@ -3745,12 +4805,6 @@ msgstr "" msgid "Anchor to override" msgstr "" -msgid "Group name" -msgstr "" - -msgid "GID" -msgstr "" - msgid "Group ID Number" msgstr "" @@ -3975,9 +5029,6 @@ msgid "" " ipa krbtpolicy-mod admin --maxlife=3600\n" msgstr "" -msgid "User name" -msgstr "" - msgid "Manage ticket policy for specific user" msgstr "" @@ -4223,11 +5274,16 @@ msgid "" "Misc plug-ins\n" msgstr "" +msgid "Show environment variables." +msgstr "Show environment variables." + msgid "Forward to server instead of running locally" msgstr "" -msgid "Dictionary mapping variable name to value" +msgid "" +"retrieve and print all attributes from the server. Affects command output." msgstr "" +"retrieve and print all attributes from the server. Affects command output." msgid "Total number of variables env (>= count)" msgstr "" @@ -4332,9 +5388,6 @@ msgstr "" msgid "Search for netgroups without these member users." msgstr "" -msgid "group" -msgstr "" - msgid "Search for netgroups with these member groups." msgstr "" @@ -4428,6 +5481,148 @@ msgstr "" msgid "Show the current OTP configuration." msgstr "" +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Manager" +msgstr "" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +msgid "Disabled" +msgstr "" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +msgid "Validity start" +msgstr "" + +msgid "First date/time the token can be used" +msgstr "" + +msgid "Validity end" +msgstr "" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "" + +msgid "Token model (informational only)" +msgstr "" + +msgid "Serial" +msgstr "" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +msgid "Add a new OTP token." +msgstr "" + +msgid "(deprecated)" +msgstr "" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +msgid "Delete an OTP token." +msgstr "" + +msgid "Search for OTP token." +msgstr "" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +msgid "Modify a OTP token." +msgstr "" + +msgid "Rename the OTP token object" +msgstr "" + +msgid "Display information about an OTP token." +msgstr "" + msgid "" "\n" "YubiKey Tokens\n" @@ -5108,12 +6303,6 @@ msgstr "" msgid "A description of this role-group" msgstr "" -msgid "Member users" -msgstr "" - -msgid "Member groups" -msgstr "" - msgid "Privileges" msgstr "" @@ -5380,9 +6569,6 @@ msgid "" "httpd.keytab\n" msgstr "" -msgid "Principal" -msgstr "" - msgid "Service principal" msgstr "" @@ -6117,9 +7303,6 @@ msgstr "" msgid "Sudo Command Group" msgstr "" -msgid "Group description" -msgstr "" - msgid "Commands" msgstr "" @@ -6160,1683 +7343,6 @@ msgstr "" msgid "Display Sudo Command Group." msgstr "" -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -msgid "First name" -msgstr "" - -msgid "Last name" -msgstr "" - -msgid "Full name" -msgstr "" - -msgid "Display name" -msgstr "" - -msgid "Initials" -msgstr "" - -msgid "Kerberos principal" -msgstr "" - -msgid "Kerberos principal expiration" -msgstr "" - -msgid "Email address" -msgstr "" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -msgid "Street address" -msgstr "" - -msgid "City" -msgstr "" - -msgid "State/Province" -msgstr "" - -msgid "ZIP" -msgstr "" - -msgid "Telephone Number" -msgstr "" - -msgid "Mobile Telephone Number" -msgstr "" - -msgid "Pager Number" -msgstr "" - -msgid "Fax Number" -msgstr "" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "" - -msgid "Manager" -msgstr "" - -msgid "Car License" -msgstr "" - -#, fuzzy -msgid "Account disabled" -msgstr "%(count)d variables" - -msgid "User authentication types" -msgstr "" - -msgid "Types of supported user authentication" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "RADIUS proxy configuration" -msgstr "" - -msgid "RADIUS proxy username" -msgstr "" - -msgid "Department Number" -msgstr "" - -msgid "Employee Number" -msgstr "" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -msgid "Member of groups" -msgstr "" - -msgid "Indirect Member of group" -msgstr "" - -msgid "Kerberos keys available" -msgstr "" - -msgid "Add a new user." -msgstr "" - -msgid "Don't create user private group" -msgstr "" - -msgid "Delete a user." -msgstr "" - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -msgid "Search for users." -msgstr "" - -msgid "Self" -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -msgid "Modify a user." -msgstr "" - -msgid "Rename the user object" -msgstr "" - -msgid "Display information about a user." -msgstr "" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "A description of this auto member rule" -msgstr "" - -msgid "Default (fallback) Group" -msgstr "" - -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -msgid "Automember Rule" -msgstr "" - -msgid "Grouping Type" -msgstr "" - -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -msgid "Attribute Key" -msgstr "" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -msgid "Delete an automember rule." -msgstr "" - -msgid "Search for automember rules." -msgstr "" - -msgid "Modify an automember rule." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -msgid "Number of conditions removed" -msgstr "" - -msgid "Display information about an automember rule." -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -msgid "Search for existing certificates." -msgstr "" - -msgid "Match cn attribute in subject" -msgstr "" - -msgid "Reason" -msgstr "" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -msgid "minimum serial number" -msgstr "" - -msgid "maximum serial number" -msgstr "" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -msgid "Serial number" -msgstr "" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -msgid "Submit a certificate signing request." -msgstr "" - -msgid "CSR" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -msgid "Revoke a certificate." -msgstr "" - -msgid "Retrieve an existing certificate." -msgstr "" - -msgid "Output filename" -msgstr "" - -msgid "File to store the certificate in." -msgstr "" - -msgid "Check the status of a certificate signing request." -msgstr "" - -msgid "Request id" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "GID (use this option to set it manually)" -msgstr "" - -msgid "Indirect Member users" -msgstr "" - -msgid "Indirect Member groups" -msgstr "" - -msgid "Create a new group." -msgstr "" - -msgid "Create as a non-POSIX group" -msgstr "" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Add members to a group." -msgstr "" - -msgid "External member" -msgstr "" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -msgid "Delete group." -msgstr "" - -msgid "Detach a managed group from a user." -msgstr "" - -msgid "Search for groups." -msgstr "" - -msgid "search for private groups" -msgstr "" - -msgid "search for POSIX groups" -msgstr "" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -msgid "search for non-POSIX groups" -msgstr "" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "Modify a group." -msgstr "" - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -msgid "Remove members from a group." -msgstr "" - -msgid "Display information about a named group." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -msgid "Target host" -msgstr "" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Warning" -msgstr "" - -msgid "Matched rules" -msgstr "" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -msgid "NetBIOS name" -msgstr "" - -msgid "Domain GUID" -msgstr "" - -msgid "Fallback primary group" -msgstr "" - -msgid "Domain name" -msgstr "" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -msgid "Active Directory domain administrator" -msgstr "" - -msgid "Active Directory domain administrator's password" -msgstr "" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "Range type" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -msgid "Delete a trust." -msgstr "" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -msgid "Search for trusts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -msgid "Display information about a trust." -msgstr "" - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "Range name" -msgstr "" - -msgid "First Posix ID of the range" -msgstr "" - -msgid "Number of IDs in the range" -msgstr "" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "Delete an ID range." -msgstr "" - -msgid "Search for ranges." -msgstr "" - -msgid "Modify ID range." -msgstr "" - -msgid "Display information about a range." -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -msgid "Disabled" -msgstr "" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -msgid "Validity start" -msgstr "" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Validity end" -msgstr "" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -msgid "Serial" -msgstr "" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -msgid "Add a new OTP token." -msgstr "" - -msgid "(deprecated)" -msgstr "" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -msgid "Delete an OTP token." -msgstr "" - -msgid "Search for OTP token." -msgstr "" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -msgid "Modify a OTP token." -msgstr "" - -msgid "Rename the OTP token object" -msgstr "" - -msgid "Display information about an OTP token." -msgstr "" - msgid "" "\n" "Sudo Rules\n" @@ -8047,6 +7553,499 @@ msgstr "" msgid "Display Sudo Rule." msgstr "" +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +msgid "NetBIOS name" +msgstr "" + +msgid "Domain GUID" +msgstr "" + +msgid "Fallback primary group" +msgstr "" + +msgid "Domain name" +msgstr "" + +msgid "Trusted domain partner" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +msgid "Active Directory domain administrator" +msgstr "" + +msgid "Active Directory domain administrator's password" +msgstr "" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +msgid "Delete a trust." +msgstr "" + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +msgid "Search for trusts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +msgid "Display information about a trust." +msgstr "" + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "" + +msgid "Last name" +msgstr "" + +msgid "Full name" +msgstr "" + +msgid "Display name" +msgstr "" + +msgid "Initials" +msgstr "" + +msgid "Kerberos principal" +msgstr "" + +msgid "Kerberos principal expiration" +msgstr "" + +msgid "Email address" +msgstr "" + +msgid "Prompt to set the user password" +msgstr "" + +msgid "Generate a random user password" +msgstr "" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" + +msgid "Street address" +msgstr "" + +msgid "City" +msgstr "" + +msgid "State/Province" +msgstr "" + +msgid "ZIP" +msgstr "" + +msgid "Telephone Number" +msgstr "" + +msgid "Mobile Telephone Number" +msgstr "" + +msgid "Pager Number" +msgstr "" + +msgid "Fax Number" +msgstr "" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "" + +msgid "Car License" +msgstr "" + +#, fuzzy +msgid "Account disabled" +msgstr "%(count)d variables" + +msgid "User authentication types" +msgstr "" + +msgid "Types of supported user authentication" +msgstr "" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "RADIUS proxy configuration" +msgstr "" + +msgid "RADIUS proxy username" +msgstr "" + +msgid "Department Number" +msgstr "" + +msgid "Employee Number" +msgstr "" + +msgid "Employee Type" +msgstr "" + +msgid "Preferred Language" +msgstr "" + +msgid "Kerberos keys available" +msgstr "" + +msgid "Add a new user." +msgstr "" + +msgid "Don't create user private group" +msgstr "" + +msgid "Delete a user." +msgstr "" + +msgid "Disable a user account." +msgstr "" + +msgid "Enable a user account." +msgstr "" + +msgid "Search for users." +msgstr "" + +msgid "Self" +msgstr "" + +msgid "Display user record for current Kerberos principal" +msgstr "" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +msgid "Search for users with these member of HBAC rules." +msgstr "" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +msgid "Modify a user." +msgstr "" + +msgid "Rename the user object" +msgstr "" + +msgid "Display information about a user." +msgstr "" + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + msgid "Time limit of search in seconds (0 is unlimited)" msgstr "" @@ -8163,6 +8162,110 @@ msgstr "" msgid "Display the properties of a CA ACL." msgstr "" +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "Profile ID" +msgstr "" + +msgid "Certificate Profile to use" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +msgid "Profile description" +msgstr "" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +msgid "Search for Certificate Profiles." +msgstr "" + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" msgstr "" @@ -8192,6 +8295,218 @@ msgstr "" msgid "Remove certificates from host entry" msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + msgid "Fallback to AD DC LDAP" msgstr "" @@ -8219,6 +8534,9 @@ msgid "" "to onelevel" msgstr "" +msgid "Remove users that can manage this token." +msgstr "" + msgid "Target DN subtree" msgstr "" @@ -8649,6 +8967,13 @@ msgid "" " " msgstr "" +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + msgid "Preserved user" msgstr "" @@ -8939,332 +9264,6 @@ msgstr "" msgid "Display information about a vault container." msgstr "" -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "Profile ID" -msgstr "" - -msgid "Certificate Profile to use" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -msgid "Profile description" -msgstr "" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -msgid "Search for Certificate Profiles." -msgstr "" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - msgid "Resolve a host name in DNS. (Deprecated)" msgstr "" @@ -10943,6 +10942,192 @@ msgid "" " ipa hostgroup-del baltimore\n" msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + msgid "" "Comma-separated list of objectclasses used to search for user entries in DS" msgstr "" @@ -11249,198 +11434,6 @@ msgstr "" msgid "comma-separated list of sudo commands to remove" msgstr "" -msgid "Active directory domain administrator's password" -msgstr "" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - msgid "" "\n" "Sudo Rules\n" @@ -11482,13 +11475,10 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" -msgid "A dictionary representing an LDAP entry" +msgid "Active directory domain administrator's password" msgstr "" -msgid "A list of LDAP entries" -msgstr "" - -msgid "All commands should at least have a result" +msgid "GECOS field" msgstr "" #, python-format @@ -11532,272 +11522,6 @@ msgstr "" msgid "No file to read" msgstr "" -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -msgid "Filename is empty" -msgstr "" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "" - -msgid "empty DNS label" -msgstr "" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "" - -msgid "cannot be longer that {} characters" -msgstr "" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "" - -msgid "invalid SSH public key" -msgstr "" - -msgid "options are not allowed" -msgstr "" - -msgid "invalid hostmask" -msgstr "" - -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" - -msgid "invalid escape code in domain name" -msgstr "" - -msgid "domain name cannot be longer than 255 characters" -msgstr "" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "" - -msgid "invalid domain name" -msgstr "" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -msgid "invalid IP address format" -msgstr "" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" - -msgid "Additional instructions:" -msgstr "" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "" - -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." -msgstr "" - #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" @@ -12154,6 +11878,192 @@ msgid "" "prevents a trust to '%(conflict)s'" msgstr "" +msgid "Results are truncated, try a more specific search" +msgstr "" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "" + +msgid "Client version. Used to determine if server will accept request." +msgstr "" + +msgid "Additional instructions:" +msgstr "" + +#, python-format +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" + +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "%(line)s" +msgstr "" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "" + +#, python-format +msgid "%(count)d variables" +msgstr "%(count)d variables" + +#, fuzzy, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +msgid "A dictionary representing an LDAP entry" +msgstr "" + +msgid "A list of LDAP entries" +msgstr "" + +msgid "All commands should at least have a result" +msgstr "" + msgid "incorrect type" msgstr "" @@ -12284,956 +12194,1371 @@ msgstr "" msgid "Service principal is required" msgstr "" -#, fuzzy, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" +#, python-format +msgid "%(filename)s: file not found" +msgstr "%(filename)s: file not found" -msgid "Results are truncated, try a more specific search" +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +msgid "any of the configured servers" +msgstr "" + +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" msgstr "" #, python-format -msgid "Unknown option: %(option)s" +msgid "Permission denied: %(file)s" msgstr "" -msgid "Client version. Used to determine if server will accept request." +msgid "empty DNS label" +msgstr "" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "" + +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" + +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "" + +msgid "cannot be longer that {} characters" +msgstr "" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "" + +msgid "invalid SSH public key" +msgstr "" + +msgid "options are not allowed" +msgstr "" + +msgid "invalid hostmask" +msgstr "" + +#, python-format +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +msgid "invalid escape code in domain name" +msgstr "" + +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +msgid "invalid domain name" +msgstr "" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +msgid "invalid IP address format" +msgstr "" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgstr "" + +#, python-format +msgid "Retrieving CA cert chain failed: %s" +msgstr "Retrieving CA cert chain failed: %s" + +#, python-format +msgid "request failed with HTTP status %d" +msgstr "request failed with HTTP status %d" + +#, python-format +msgid "Retrieving CA status failed: %s" +msgstr "Retrieving CA status failed: %s" + +#, python-format +msgid "Retrieving CA status failed with status %d" +msgstr "Retrieving CA status failed with status %d" + +#, python-format +msgid "objectclass %s not found" +msgstr "objectclass %s not found" + +msgid "Trusting forest" +msgstr "" + +msgid "Trusted forest" +msgstr "" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +msgid "Unknown" +msgstr "" + +msgid "Non-Active Directory domain" +msgstr "" + +msgid "Active Directory domain" +msgstr "" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" msgstr "" #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "" +msgid "Failed to authenticate to CA REST API" +msgstr "" + #, python-format msgid "Replication agreement for %(hostname)s not found" msgstr "" -msgid "Failed to authenticate to CA REST API" +msgid "A list of ACI values" msgstr "" -msgid "One time password commands" +msgid "type, filter, subtree and targetgroup are mutually exclusive" msgstr "" -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" +msgid "ACI prefix is required" msgstr "" msgid "" -"\n" -"IPA server roles\n" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" msgstr "" -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgid "filter and memberof are mutually exclusive" msgstr "" -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" +msgid "group, permission and self are mutually exclusive" msgstr "" -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" - -msgid "server roles" -msgstr "" - -msgid "IPA Server Roles" -msgstr "" - -msgid "IPA Server Role" -msgstr "" - -msgid "IPA server role name" -msgstr "" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" +msgid "One of group, permission or self is required" msgstr "" #, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include IPA master entries" +msgid "Group '%s' does not exist" msgstr "" -msgid "roles" -msgstr "" - -msgid "IPA role name" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" +msgid "empty filter" msgstr "" #, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgid "Syntax Error: %(error)s" msgstr "" -msgid "Add Class of Service entry" +#, python-format +msgid "invalid DN (%s)" msgstr "" -msgid "Delete Class of Service entry" +#, python-format +msgid "ACI with name \"%s\" not found" msgstr "" -msgid "Modify Class of Service entry" +msgid "ACI object." msgstr "" -msgid "Display Class of Service entry" +msgid "ACIs" msgstr "" -msgid "Search for Class of Service entry" +msgid "ACI" msgstr "" -msgid "password policy" +#, python-format +msgid "Created ACI \"%(value)s\"" msgstr "" -msgid "password policies" +#, python-format +msgid "Deleted ACI \"%(value)s\"" msgstr "" -msgid "Password Policies" +#, python-format +msgid "Modified ACI \"%(value)s\"" msgstr "" -msgid "Password Policy" -msgstr "" +#, fuzzy, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" +#, python-format +msgid "Renamed ACI to \"%(value)s\"" msgstr "" msgid "" "\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" +"Auto Membership Rule.\n" msgstr "" msgid "" "\n" -" Modify realm domains\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" "\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" "\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, fuzzy, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "%(filename)s: file not found" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +msgid "" +"\n" +" Add an automember rule.\n" " " msgstr "" #, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "" + +msgid "Auto Membership is not configured" +msgstr "" + msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" +"\n" +" Add conditions to an automember rule.\n" +" " msgstr "" #, python-format -msgid "The following domains do not belong to this realm: %(domains)s" +msgid "Added condition(s) to \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +msgid "Auto member rule: %s not found!" +msgstr "objectclass %s not found" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "automount location" +msgstr "" + +msgid "automount locations" +msgstr "" + +msgid "Automount Locations" +msgstr "" + +msgid "Automount Location" +msgstr "" + +#, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "automount map" +msgstr "" + +msgid "automount maps" +msgstr "" + +msgid "Automount Maps" +msgstr "" + +msgid "Automount Map" +msgstr "" + +#, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Automount key object." +msgstr "" + +msgid "automount key" +msgstr "" + +msgid "automount keys" +msgstr "" + +msgid "Automount Keys" +msgstr "" + +msgid "Automount Key" msgstr "" #, python-format msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" msgstr "" #, python-format -msgid "Results should contain primary key attribute only (\"%s\")" +msgid "key named %(key)s already exists" msgstr "" -msgid "Help topic" +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" msgstr "" -msgid "Version" +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." msgstr "" -msgid "Parameters" +#, python-format +msgid "Added automount key \"%(value)s\"" msgstr "" -msgid "Method of" +#, python-format +msgid "Added automount indirect map \"%(value)s\"" msgstr "" -msgid "Method name" +msgid "mount point is relative to parent map, cannot begin with /" msgstr "" +#, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Member service groups" +msgstr "" + +msgid "Member HBAC service groups" +msgstr "" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" +msgstr "" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "" + +#, fuzzy, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "%(filename)s: file not found" + #, fuzzy, python-format msgid "%(pkey)s: %(oname)s not found" msgstr "%(filename)s: file not found" -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -msgid "Search for classes." -msgstr "" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -msgid "CLI name" -msgstr "" - -msgid "Confirm (password)" -msgstr "" - -msgid "Default" -msgstr "" - -msgid "Default from" -msgstr "" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "" - -#, fuzzy, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "objectclass %s not found" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, fuzzy, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "%(filename)s: file not found" - -msgid "Display information about a command output." -msgstr "" - -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" msgstr "" #, python-format -msgid "Malformed principal: %(error)s" +msgid "attribute \"%(attribute)s\" not allowed" msgstr "" -msgid "Add target to a named service delegation." +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" msgstr "" #, python-format msgid "member %s" msgstr "" -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" +#, python-format +msgid "%s to add" msgstr "" #, python-format -msgid "Added service delegation rule \"%(value)s\"" +msgid "%s to remove" msgstr "" #, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation rule" +msgid "Results should contain primary key attribute only (\"%s\")" msgstr "" #, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" msgstr "" msgid "" "\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" msgstr "" msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -msgid "Malformed principal" -msgstr "" - -msgid "{} is required by the IPA master" -msgstr "" - -msgid "service" -msgstr "" - -msgid "services" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." msgstr "" msgid "Principal alias" msgstr "" -msgid "Service principal alias" +msgid "User password expiration" msgstr "" -msgid "Base-64 encoded service certificate" +msgid "SSH public key fingerprint" msgstr "" -msgid "Subject" +msgid "Base-64 encoded user certificate" msgstr "" -msgid "Serial Number" +msgid "Certificate mapping data" msgstr "" -msgid "Serial Number (hex)" +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +#, python-format +msgid "can be at most %(len)d characters" msgstr "" msgid "Issuer" msgstr "" -msgid "Not Before" +msgid "Issuer of the certificate" msgstr "" -msgid "Not After" +msgid "Subject" msgstr "" -msgid "Fingerprint (SHA1)" +msgid "Subject of the certificate" msgstr "" -msgid "Fingerprint (SHA256)" +msgid "cannot have an empty subject" msgstr "" -msgid "Revocation reason" +msgid "cannot specify both subject/issuer and certificate" msgstr "" -msgid "Authentication Indicators" +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" msgstr "" msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" msgstr "" -msgid "NONE value cannot be combined with other PAC types" +msgid "Make multiple ipa calls via one remote procedure call" msgstr "" -msgid "Add a new IPA service." -msgstr "" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "" - -msgid "force principal name even if host not in DNS" -msgstr "" - -msgid "Skip host check" +msgid "must contain a tuple (list, dict)" msgstr "" msgid "" -"force service to be created even when host object does not exist to manage it" +"\n" +"Manage Certificate Authorities\n" msgstr "" -#, python-format -msgid "The host '%s' does not exist to add a service to." +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" msgstr "" -msgid "Add a new SMB service." +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" msgstr "" -msgid "SMB service NetBIOS name" +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" msgstr "" -#, python-format -msgid "Deleted service \"%(value)s\"" +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" msgstr "" -#, python-format -msgid "Modified service \"%(value)s\"" +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +msgid "Certificate Authority" +msgstr "" + +msgid "Certificate Authorities" +msgstr "" + +msgid "Name" +msgstr "" + +msgid "Name for referencing the CA" +msgstr "" + +msgid "Description of the purpose of the CA" +msgstr "" + +msgid "Authority ID" +msgstr "" + +msgid "Dogtag Authority ID" +msgstr "" + +msgid "Subject DN" +msgstr "" + +msgid "Subject Distinguished Name" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Issuer Distinguished Name" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +msgid "Certificate chain" +msgstr "" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Search for CAs." msgstr "" #, fuzzy, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" msgstr[0] "%(count)d variables" msgstr[1] "%(count)d variables" -#, python-format -msgid "Disabled service \"%(value)s\"" +msgid "Include certificate chain in output" +msgstr "" + +msgid "Display the properties of a CA." +msgstr "" + +msgid "Create a CA." msgstr "" #, python-format -msgid "Added certificates to service principal \"%(value)s\"" +msgid "Created CA \"%(value)s\"" msgstr "" #, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to a service" +msgid "Insufficient 'add' privilege for entry '%s'." msgstr "" #, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a service" +msgid "Unrecognized attributes: %(attrs)s" msgstr "" #, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" +msgid "Subject DN is already used by CA '%s'" msgstr "" -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" +msgid "Delete a CA (must be disabled first)." msgstr "" #, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgid "Deleted CA \"%(value)s\"" +msgstr "" + +msgid "Insufficient privilege to delete a CA." +msgstr "" + +msgid "CA" +msgstr "" + +msgid "IPA CA cannot be deleted" +msgstr "" + +msgid "Must be disabled first" +msgstr "" + +msgid "Modify CA configuration." msgstr "" #, python-format -msgid "Added Sudo Rule \"%(value)s\"" +msgid "Modified CA \"%(value)s\"" +msgstr "" + +msgid "Insufficient privilege to modify a CA." +msgstr "" + +msgid "Disable a CA." msgstr "" #, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" +msgid "Disabled CA \"%(value)s\"" +msgstr "" + +msgid "IPA CA cannot be disabled" +msgstr "" + +msgid "Enable a CA." msgstr "" #, python-format -msgid "Modified Sudo Rule \"%(value)s\"" +msgid "Enabled CA \"%(value)s\"" msgstr "" -#, python-format msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" msgstr "" -msgid "users" +msgid "CA ACL" msgstr "" -msgid "command" +msgid "CA ACLs" msgstr "" -msgid "commands" +msgid "CA category" msgstr "" -msgid "runAs user" +msgid "CA category the ACL applies to" msgstr "" -msgid "runAs users" -msgstr "" - -msgid "group runAs" -msgstr "" - -msgid "runAs groups" +msgid "CAs" msgstr "" #, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" +msgid "Added CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "" + +msgid "default CA ACL can be only disabled" +msgstr "" + +#, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" + +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" msgstr[0] "" msgstr[1] "" -msgid "commands cannot be added when command category='all'" +#, python-format +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%i user or group added." +msgstr "" + +#, python-format +msgid "%i users or groups added." msgstr "" msgid "users cannot be added when user category='all'" msgstr "" +#, python-format +msgid "%i user or group removed." +msgstr "" + +#, python-format +msgid "%i users or groups removed." +msgstr "" + +#, python-format +msgid "%i host or hostgroup added." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "" + msgid "hosts cannot be added when host category='all'" msgstr "" -msgid "users cannot be added when runAs user or runAs group category='all'" +#, python-format +msgid "%i host or hostgroup removed." msgstr "" #, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" +msgid "%i hosts or hostgroups removed." msgstr "" #, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" +msgid "%i service added." msgstr "" #, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgid "%i services added." +msgstr "" + +msgid "services cannot be added when service category='all'" +msgstr "" + +#, python-format +msgid "%i service removed." +msgstr "" + +#, python-format +msgid "%i services removed." +msgstr "" + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, python-format +msgid "%i profiles removed." +msgstr "" + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." msgstr "" msgid "pyhbac is not installed." @@ -13449,15 +13774,6 @@ msgstr "" msgid "Name of issuing CA" msgstr "" -msgid "Base-64 encoded certificate." -msgstr "" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - msgid "Subject email address" msgstr "" @@ -13491,7 +13807,16 @@ msgstr "" msgid "Subject Other Name" msgstr "" -msgid "Issuer DN" +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" msgstr "" msgid "Serial number (hex)" @@ -13500,9 +13825,6 @@ msgstr "" msgid "Request status" msgstr "" -msgid "Include certificate chain in output" -msgstr "" - msgid "" "automatically add the principal if it doesn't exist (service principals only)" msgstr "" @@ -13596,6 +13918,9 @@ msgstr "" msgid "Revoked" msgstr "" +msgid "Revocation reason" +msgstr "" + msgid "" "Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " "revocation reason details. " @@ -13613,6 +13938,9 @@ msgstr "" msgid "7 is not a valid revocation reason" msgstr "" +msgid "Status of the certificate" +msgstr "" + msgid "Results should contain primary key attribute only (\"certificate\")" msgstr "" @@ -13843,7 +14171,110 @@ msgid_plural "%(count)s users matched" msgstr[0] "" msgstr[1] "" -msgid "Base-64 encoded user certificate" +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +msgid "Certificate Profile" +msgstr "" + +msgid "Certificate Profiles" +msgstr "" + +msgid "Profile configuration" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." msgstr "" msgid "" @@ -13916,6 +14347,9 @@ msgstr "" msgid "Maximum hostname length" msgstr "" +msgid "Enable adding subids to new users" +msgstr "" + msgid "IPA masters" msgstr "" @@ -13988,6 +14422,21 @@ msgstr "" msgid "DNSec key master" msgstr "" +msgid "Setup SID configuration" +msgstr "" + +msgid "New users and groups automatically get a SID assigned" +msgstr "" + +msgid "Add SIDs" +msgstr "" + +msgid "Add SIDs for existing users and groups" +msgstr "" + +msgid "NetBIOS name of the IPA domain" +msgstr "" + msgid "Empty domain is not allowed" msgstr "" @@ -14003,6 +14452,20 @@ msgstr "" msgid "Disabled domain '%(domain)s' is not allowed" msgstr "" +msgid "not allowed to enable SID generation" +msgstr "" + +msgid "" +"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " +"allowed. Empty string is not allowed." +msgstr "" + +msgid "Failed to call DBus" +msgstr "" + +msgid "Configuration of SID failed. See details in the error log" +msgstr "" + msgid "The group doesn't exist" msgstr "" @@ -14027,55 +14490,1610 @@ msgstr "" msgid "SELinux user map default user not in order list" msgstr "" +#, python-format +msgid "You cannot specify %s without the --enable-sid option" +msgstr "" + +msgid "delegation" +msgstr "" + +msgid "delegations" +msgstr "" + +msgid "Delegations" +msgstr "" + +msgid "Delegation" +msgstr "" + +#, python-format +msgid "Added delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "" +msgstr[1] "" + msgid "" "\n" -"Groups of Sudo Commands\n" +"Domain Name System (DNS)\n" +msgstr "" + +msgid "" "\n" -"Manage groups of Sudo Commands.\n" +"Manage DNS zone and resource records.\n" +msgstr "" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" + +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "invalid IP network format" +msgstr "" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "" + +msgid "invalid address format" +msgstr "" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" + +msgid "algorithm value: allowed interval 0-255" +msgstr "" + +msgid "flags value: allowed interval 0-255" +msgstr "" + +msgid "iterations value: allowed interval 0-65535" +msgstr "" + +#, python-format +msgid "salt value: %(err)s" +msgstr "" + +msgid "invalid domain-name: not fully qualified" +msgstr "" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" + +#, python-format +msgid "" +"No answers could be found in the specified lifetime for DNS reverse zone " +"%(revdns)s" +msgstr "" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" + +#, python-format +msgid "%s record" +msgstr "" + +#, python-format +msgid "Raw %s records" +msgstr "" + +#, python-format +msgid "%s Record" +msgstr "" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "" + +msgid "Invalid number of parts!" +msgstr "" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "" + +msgid "Create reverse" +msgstr "" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "" + +msgid "Exchanger" +msgstr "" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" + +msgid "Priority (order)" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Relative weight for entries with the same priority." +msgstr "" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Target Uniform Resource Identifier" +msgstr "" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "" + +msgid "Managedby permission" +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "cannot be used when a zone is specified" +msgstr "" + +msgid "Only one zone type is allowed per zone name" +msgstr "" + +#, python-format +msgid "Added system permission \"%(value)s\"" +msgstr "" + +#, python-format +msgid "permission \"%(value)s\" already exists" +msgstr "" + +#, python-format +msgid "Removed system permission \"%(value)s\"" +msgstr "" + +msgid "DNS zone" +msgstr "" + +msgid "DNS zones" +msgstr "" + +msgid "DNS Zones" +msgstr "" + +msgid "DNS Zone" +msgstr "" + +msgid "Default time to live" +msgstr "" + +msgid "Time to live for records without explicit TTL definition" +msgstr "" + +msgid "setting Authoritative nameserver" +msgstr "" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "" + +msgid "" +msgstr "" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" + +#, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "" + +msgid "is required" +msgstr "" + +#, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "" + +msgid "DNS resource record" +msgstr "" + +msgid "DNS resource records" +msgstr "" + +msgid "DNS Resource Records" +msgstr "" + +msgid "DNS Resource Record" +msgstr "" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" + +msgid "only master zones can contain records" +msgstr "" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" + +msgid "DNS zone root record cannot be renamed" +msgstr "" + +msgid "DNS records can be only updated one at a time" +msgstr "" + +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Found '%(value)s'" +msgstr "" + +#, fuzzy, python-format +msgid "Host '%(host)s' not found" +msgstr "objectclass %s not found" + +msgid "DNS configuration options" +msgstr "" + +msgid "DNS Global Configuration" +msgstr "" + +msgid "IPA DNS version" +msgstr "" + +msgid "List of IPA masters configured as DNS servers" +msgstr "" + +msgid "IPA server configured as DNSSec key master" +msgstr "" + +msgid "Global DNS configuration is empty" +msgstr "" + +msgid "DNS forward zone" +msgstr "" + +msgid "DNS forward zones" +msgstr "" + +msgid "DNS Forward Zones" +msgstr "" + +msgid "DNS Forward Zone" +msgstr "" + +msgid "Please specify forwarders." +msgstr "" + +#, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "" + +msgid "IPA DNS records" +msgstr "" + +msgid "IPA location records" +msgstr "" + +msgid "Update location and IPA server DNS records" +msgstr "" + +msgid "Result of the command" +msgstr "" + +msgid "Dry run" +msgstr "" + +msgid "Do not update records only return expected records" +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +msgid "DNS Servers" +msgstr "" + +msgid "DNS Server" +msgstr "" + +msgid "DNS Server name" +msgstr "" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +msgid "Search for DNS servers." +msgstr "" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "" + +msgid "Delete a DNS server" +msgstr "" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" "\n" "EXAMPLES:\n" "\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" "\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" "\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" "\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" "\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" msgstr "" -msgid "sudo command group" +msgid "groups" msgstr "" -msgid "sudo command groups" +msgid "User Group" msgstr "" #, python-format -msgid "Added Sudo Command Group \"%(value)s\"" +msgid "Added group \"%(value)s\"" +msgstr "" + +msgid "gid cannot be set for external group" +msgstr "" + +msgid "attribute \"gidNumber\" not allowed with --nonposix" msgstr "" #, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" +msgid "Deleted group \"%(value)s\"" +msgstr "" + +msgid "privileged group" msgstr "" #, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" +msgid "Modified group \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" msgstr "" #, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" +msgstr "" + +msgid "HBAC Services" +msgstr "" + +msgid "HBAC Service Groups" +msgstr "" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" msgstr[0] "" msgstr[1] "" +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "" + +msgid "Access time" +msgstr "" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "" + +msgid "HBAC Service" +msgstr "" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC service group" +msgstr "" + +msgid "HBAC service groups" +msgstr "" + +msgid "HBAC Service Group" +msgstr "" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Access granted: %s" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host" +msgstr "" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Serial Number" +msgstr "" + +msgid "Serial Number (hex)" +msgstr "" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + msgid "" "\n" "Groups of hosts.\n" @@ -14155,294 +16173,501 @@ msgstr "" msgid "Remove users that can manage members of this hostgroup." msgstr "" -#, python-format msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" msgstr "" -msgid "REST API is not logged in." +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"and an ID range of a trusted domain may set\n" +" - auto-private-groups: [true|false|hybrid] automatic creation of private " +"groups\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "Auto private groups" +msgstr "" + +msgid "Auto creation of private groups, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --auto-private-groups\n" +"\n" +" may be given for a new ID range for a trusted AD domain and\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" msgstr "" #, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgid "Added ID range \"%(value)s\"" msgstr "" -msgid "Unable to communicate with CMS" +msgid "Options dom-sid and dom-name cannot be used together" msgstr "" -msgid "Response from CA was not valid JSON" +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" msgstr "" msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" msgstr "" -msgid "The OTP if the user has a token configured" +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" +"private-groups is specified" +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." msgstr "" #, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -msgstr "" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -msgid "" -"\n" -"Managed permissions\n" -msgstr "" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "must be enclosed in parentheses" -msgstr "" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -#, python-format -msgid "Deprecated; use %s" -msgstr "" - -msgid "ACI" -msgstr "" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" +msgid "Deleted ID range \"%(value)s\"" msgstr "" #, fuzzy, python-format -msgid "Entry %s not found" -msgstr "objectclass %s not found" +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" #, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgid "Modified ID range \"%(value)s\"" msgstr "" msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, python-format -msgid "%s: group not found" -msgstr "" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" -msgstr "" - -msgid "Bad search filter" -msgstr "" - -#, python-format -msgid "Entry %s does not exist" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" msgstr "" msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +msgid "ID View" +msgstr "" + +msgid "system ID View" +msgstr "" + +msgid "ID Views" +msgstr "" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +msgid "Hosts the view applies to" msgstr "" #, python-format -msgid "Added permission \"%(value)s\"" -msgstr "" - -msgid "attrs and included attributes are mutually exclusive" +msgid "Added ID View \"%(value)s\"" msgstr "" #, python-format -msgid "Cannot store permission ACI to %s" +msgid "Deleted ID View \"%(value)s\"" msgstr "" #, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "" - -msgid "cannot delete managed permissions" +msgid "Modified an ID View \"%(value)s\"" msgstr "" #, python-format -msgid "ACI of permission %s was not found" -msgstr "" - -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" msgstr[0] "" msgstr[1] "" -#, fuzzy, python-brace-format -msgid "{role}: role not found" -msgstr "%(filename)s: file not found" +msgid "Default Trust View cannot be applied on hosts" +msgstr "" -#, python-brace-format -msgid "{attr}: no such attribute" +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." msgstr "" msgid "" -"\n" -"Session Support for IPA\n" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." msgstr "" +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "" + +msgid "Delete an ID override." +msgstr "" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "" + +msgid "Modify an ID override." +msgstr "" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + msgid "Internationalization messages" msgstr "" @@ -14458,9 +16683,6 @@ msgstr "" msgid "Are you sure you want to rebuild auto membership?" msgstr "" -msgid "Automember rebuild membership task completed" -msgstr "" - msgid "Are you sure you want to proceed with the action?" msgstr "" @@ -15350,9 +17572,6 @@ msgstr "" msgid "Affiliation Changed" msgstr "" -msgid "CA" -msgstr "" - msgid "CA Compromise" msgstr "" @@ -15562,9 +17781,6 @@ msgstr "" msgid "Add certificate mapping data" msgstr "" -msgid "Certificate mapping data" -msgstr "" - msgid "Configuration string" msgstr "" @@ -15581,6 +17797,9 @@ msgstr "" msgid "Remove certificate identity mapping rules" msgstr "" +msgid "Version" +msgstr "" + msgid "Group Options" msgstr "" @@ -16290,9 +18509,6 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "" -msgid "Host" -msgstr "" - msgid "Netgroup Settings" msgstr "" @@ -16411,6 +18627,9 @@ msgstr "" msgid "Add password policy" msgstr "" +msgid "Password Policy" +msgstr "" + msgid "Remove password policies" msgstr "" @@ -16438,9 +18657,6 @@ msgstr "" msgid "Remove ID ranges" msgstr "" -msgid "Active Directory domain" -msgstr "" - msgid "Active Directory domain with POSIX attributes" msgstr "" @@ -16465,6 +18681,9 @@ msgstr "" msgid "Remove RADIUS servers" msgstr "" +msgid "Realm Domains" +msgstr "" + msgid "Check DNS" msgstr "" @@ -16637,6 +18856,33 @@ msgstr "" msgid "User categories" msgstr "" +msgid "Add subid" +msgstr "" + +msgid "Assigned subids" +msgstr "" + +msgid "DNA remaining" +msgstr "" + +msgid "SubGID range size" +msgstr "" + +msgid "SubGID range start" +msgstr "" + +msgid "SubUID range size" +msgstr "" + +msgid "SubUID range start" +msgstr "" + +msgid "Remaining subids" +msgstr "" + +msgid "Subordinate ID Statistics" +msgstr "" + msgid "Add sudo command" msgstr "" @@ -16921,6 +19167,14 @@ msgstr "" msgid "Add user '${primary_key}' into sudo rules" msgstr "" +msgid "Auto assign subordinate ids" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to auto-assign a subordinate id to user ${object}?" +msgstr "" + msgid "Contact Settings" msgstr "" @@ -17374,9 +19628,6 @@ msgstr "" msgid "Authentication" msgstr "" -msgid "Automember" -msgstr "" - msgid "Automount" msgstr "" @@ -17401,6 +19652,9 @@ msgstr "" msgid "Role-Based Access Control" msgstr "" +msgid "Subordinate IDs" +msgstr "" + msgid "Sudo" msgstr "" @@ -17512,318 +19766,10 @@ msgstr "" msgid "Unsupported value" msgstr "" -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -msgid "invalid port number" -msgstr "" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" -msgstr "" - #, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -#, python-brace-format msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Access granted: %s" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." msgstr "" msgid "kerberos ticket policy settings" @@ -17990,6 +19936,1761 @@ msgstr "" msgid "Servers in location" msgstr "" +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +msgid "netgroups" +msgstr "" + +msgid "Netgroup" +msgstr "" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +msgid "URI" +msgstr "" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "" + +msgid "cannot be empty" +msgstr "" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"If the user authentication method is set to password+OTP, the user should\n" +"pass the --otp option when resetting the password.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To reset your own password when password+OTP is set as authentication " +"method:\n" +" ipa passwd --otp\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +msgid "The OTP if the user has a token configured" +msgstr "" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Permissions\n" +msgstr "" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +msgid "" +"\n" +"Managed permissions\n" +msgstr "" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "must be enclosed in parentheses" +msgstr "" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "" + +#, python-format +msgid "Deprecated; use %s" +msgstr "" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, fuzzy, python-format +msgid "Entry %s not found" +msgstr "objectclass %s not found" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, python-format +msgid "option was renamed; use %s" +msgstr "" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, python-format +msgid "%s: group not found" +msgstr "" + +msgid "target and targetgroup are mutually exclusive" +msgstr "" + +msgid "subtree and type are mutually exclusive" +msgstr "" + +msgid "Bad search filter" +msgstr "" + +#, python-format +msgid "Entry %s does not exist" +msgstr "" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, python-format +msgid "Added permission \"%(value)s\"" +msgstr "" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "" + +msgid "cannot delete managed permissions" +msgstr "" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "" + +#, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +msgid "invalid port number" +msgstr "" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "Role" +msgstr "" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +msgid "" +"\n" +"API Schema\n" +msgstr "" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +msgid "Documentation" +msgstr "" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +msgid "Help topic" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +msgid "Method name" +msgstr "" + +msgid "Display information about a command." +msgstr "" + +msgid "Search for commands." +msgstr "" + +msgid "Return command defaults" +msgstr "" + +#, fuzzy, python-brace-format +msgid "{oname}: {command_name} not found" +msgstr "%(filename)s: file not found" + +msgid "Display information about a class." +msgstr "" + +msgid "Search for classes." +msgstr "" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +msgid "CLI name" +msgstr "" + +msgid "Confirm (password)" +msgstr "" + +msgid "Default" +msgstr "" + +msgid "Default from" +msgstr "" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" +msgstr "" + +#, fuzzy, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "objectclass %s not found" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, fuzzy, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "%(filename)s: file not found" + +msgid "Display information about a command output." +msgstr "" + +msgid "Search for command outputs." +msgstr "" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "self service permission" +msgstr "" + +msgid "self service permissions" +msgstr "" + +msgid "Self Service Permissions" +msgstr "" + +msgid "Self Service Permission" +msgstr "" + +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +msgid "SELinux User Map rule" +msgstr "" + +msgid "SELinux User Map rules" +msgstr "" + +msgid "SELinux User Maps" +msgstr "" + +msgid "SELinux User Map" +msgstr "" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "" + +#, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +msgid "server roles" +msgstr "" + +msgid "IPA Server Roles" +msgstr "" + +msgid "IPA Server Role" +msgstr "" + +msgid "IPA server role name" +msgstr "" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "IPA role name" +msgstr "" + +#, fuzzy, python-brace-format +msgid "{role}: role not found" +msgstr "%(filename)s: file not found" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +#, python-format +msgid "authentication indicators not allowed in service \"%s\"" +msgstr "" + +msgid "Malformed principal" +msgstr "" + +msgid "{} is required by the IPA master" +msgstr "" + +msgid "service" +msgstr "" + +msgid "services" +msgstr "" + +msgid "Service principal alias" +msgstr "" + +msgid "Base-64 encoded service certificate" +msgstr "" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +msgid "Add a new IPA service." +msgstr "" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "" + +msgid "force principal name even if host not in DNS" +msgstr "" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +msgid "Add a new SMB service." +msgstr "" + +msgid "SMB service NetBIOS name" +msgstr "" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to a service" +msgstr "" + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a service" +msgstr "" + +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Subordinate ids\n" +"\n" +"Manage subordinate user and group ids for users\n" +"\n" +"EXAMPLES:\n" +"\n" +" Auto-assign a subordinate id range to current user\n" +" ipa subid-generate\n" +"\n" +" Auto-assign a subordinate id range to user alice:\n" +" ipa subid-generate --owner=alice\n" +"\n" +" Find subordinate ids for user alice:\n" +" ipa subid-find --owner=alice\n" +"\n" +" Match entry by any subordinate uid in range:\n" +" ipa subid-match --subuid=2147483649\n" +msgstr "" + +msgid "Subordinate id" +msgstr "" + +msgid "Subordinate ids" +msgstr "" + +msgid "Subordinate id description" +msgstr "" + +msgid "Owning user of subordinate id entry" +msgstr "" + +msgid "Start value for subordinate user ID (subuid) range" +msgstr "" + +msgid "Subordinate user ID count" +msgstr "" + +msgid "Start value for subordinate group ID (subgid) range" +msgstr "" + +msgid "Subordinate group ID count" +msgstr "" + +#, python-format +msgid "" +"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." +msgstr "" + +#, python-format +msgid "'%(dn)s is not a valid user" +msgstr "" + +msgid "subgidnumber must be equal to subuidnumber" +msgstr "" + +msgid "Add a new subordinate id." +msgstr "" + +#, python-format +msgid "Added subordinate id \"%(value)s\"" +msgstr "" + +msgid "Delete a subordinate id." +msgstr "" + +#, python-format +msgid "Deleted subordinate id \"%(value)s\"" +msgstr "" + +msgid "Modify a subordinate id." +msgstr "" + +#, python-format +msgid "Modified subordinate id \"%(value)s\"" +msgstr "" + +msgid "Search for subordinate id." +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d subordinate id matched" +msgid_plural "%(count)d subordinate ids matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +msgid "Display information about a subordinate id." +msgstr "" + +msgid "Generate and auto-assign subuid and subgid range to user entry" +msgstr "" + +msgid "Match users by any subordinate uid in their range" +msgstr "" + +msgid "SubUID match" +msgstr "" + +msgid "Match value for subordinate user ID" +msgstr "" + +msgid "Subordinate id statistics" +msgstr "" + +#, python-format +msgid "%(remaining)i remaining subordinate id ranges" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +msgid "sudo command" +msgstr "" + +msgid "sudo commands" +msgstr "" + +msgid "Sudo Commands" +msgstr "" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + msgid "" "\n" "Topology\n" @@ -18206,1002 +21907,6 @@ msgid "" " replication agreements\n" msgstr "" -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -msgid "sudo command" -msgstr "" - -msgid "sudo commands" -msgstr "" - -msgid "Sudo Commands" -msgstr "" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -msgid "Self Service Permissions" -msgstr "" - -msgid "Self Service Permission" -msgstr "" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - -msgid "A list of ACI values" -msgstr "" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -msgid "ACI prefix is required" -msgstr "" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "groups" -msgstr "" - -msgid "User Group" -msgstr "" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "" - -msgid "privileged group" -msgstr "" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -msgid "Not a managed group" -msgstr "" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -msgid "automount location" -msgstr "" - -msgid "automount locations" -msgstr "" - -msgid "Automount Locations" -msgstr "" - -msgid "Automount Location" -msgstr "" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "automount map" -msgstr "" - -msgid "automount maps" -msgstr "" - -msgid "Automount Maps" -msgstr "" - -msgid "Automount Map" -msgstr "" - -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Automount key object." -msgstr "" - -msgid "automount key" -msgstr "" - -msgid "automount keys" -msgstr "" - -msgid "Automount Keys" -msgstr "" - -msgid "Automount Key" -msgstr "" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, python-format -msgid "key named %(key)s already exists" -msgstr "" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" -msgstr[1] "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -msgid "Delete an ID override." -msgstr "" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -msgid "Modify an ID override." -msgstr "" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -msgid "CA category" -msgstr "" - -msgid "CA category the ACL applies to" -msgstr "" - -msgid "CAs" -msgstr "" - -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, python-format -msgid "%i users or groups added." -msgstr "" - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, python-format -msgid "%i service added." -msgstr "" - -#, python-format -msgid "%i services added." -msgstr "" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - msgid "" "\n" "Cross-realm trusts\n" @@ -19367,12 +22072,6 @@ msgid "" " " msgstr "" -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - msgid "Type of trusted domain ID range, one of allowed values" msgstr "" @@ -19609,736 +22308,9 @@ msgid "" "itself" msgstr "" -msgid "" -"\n" -"DNS server configuration\n" +msgid "users" msgstr "" -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "" - -msgid "DNS servers" -msgstr "" - -msgid "DNS Servers" -msgstr "" - -msgid "DNS Server" -msgstr "" - -msgid "DNS Server name" -msgstr "" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "" - -msgid "Search for DNS servers." -msgstr "" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "" - -msgid "Delete a DNS server" -msgstr "" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "" - -msgid "HBAC Services" -msgstr "" - -msgid "HBAC Service" -msgstr "" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -msgid "HBAC service group" -msgstr "" - -msgid "HBAC service groups" -msgstr "" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" -msgstr "" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -msgid "Delegations" -msgstr "" - -msgid "Delegation" -msgstr "" - -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -msgid "Role" -msgstr "" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -msgid "netgroups" -msgstr "" - -msgid "Netgroup" -msgstr "" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - #, python-format msgid "Added user \"%(value)s\"" msgstr "" @@ -20358,12 +22330,6 @@ msgstr "" msgid "Modified user \"%(value)s\"" msgstr "" -#, fuzzy, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - #, python-format msgid "Undeleted user account \"%(value)s\"" msgstr "" @@ -20459,12 +22425,6 @@ msgstr "" msgid "Removed certificates from user \"%(value)s\"" msgstr "" -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - msgid "Add new principal alias to the user entry" msgstr "" @@ -20479,532 +22439,6 @@ msgstr "" msgid "Removed aliases from user \"%(value)s\"" msgstr "" -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, fuzzy, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "%(filename)s: file not found" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Auto member rule: %s not found!" -msgstr "objectclass %s not found" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" -msgstr "" - -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -msgid "SELinux User Maps" -msgstr "" - -msgid "SELinux User Map" -msgstr "" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "" - -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "" - msgid "" "\n" "Vaults\n" @@ -21347,107 +22781,156 @@ msgstr "" msgid "Checks if any of the servers has the KRA service enabled" msgstr "" -msgid "Member service groups" -msgstr "" - -msgid "Member HBAC service groups" -msgstr "" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" +msgid "operation not defined" msgstr "" #, python-format -msgid "container entry (%(container)s) not found" +msgid "not allowed to perform operation: %s" msgstr "" -#, fuzzy, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "%(filename)s: file not found" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgid "No such virtual command" msgstr "" -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "Class of Service object used for linking policies with groups" msgstr "" #, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +msgid "password policy" +msgstr "" + +msgid "password policies" +msgstr "" + +msgid "Password Policies" +msgstr "" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +msgid "User check" +msgstr "" + +msgid "Check if the password contains the username" +msgstr "" + msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" msgstr "" -#, python-format -msgid "added attribute value to entry %(value)s" +msgid "Maximum password life must be equal to or greater than the minimum." msgstr "" -#, python-format -msgid "removed attribute values from entry %(value)s" +msgid "cannot delete global password policy" msgstr "" -msgid "one or more values to remove" +msgid "priority cannot be set on global policy" msgstr "" msgid "" @@ -21594,6 +23077,10 @@ msgstr "" msgid "Ignoring topology connectivity errors." msgstr "" +#, python-format +msgid "Failed to remove server from security domain: %s" +msgstr "" + msgid "Server has already been deleted" msgstr "" @@ -21631,1389 +23118,186 @@ msgstr "" msgid "" "\n" -"Manage Certificate Authorities\n" +"Sudo Rules\n" msgstr "" msgid "" "\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" msgstr "" msgid "" "\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" msgstr "" msgid "" "\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" +"Each option needs to be added separately and no validation is done whether\n" +"the option is known by sudo or is in a valid format. Environment variables\n" +"also need to be set individually. For example env_keep=\"FOO BAR\" in " +"sudoers\n" +"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" +"+=BAR.\n" msgstr "" msgid "" "\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" msgstr "" msgid "" "\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" msgstr "" msgid "" "\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" msgstr "" msgid "" "\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" msgstr "" msgid "" "\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" - -msgid "Certificate Authority" -msgstr "" - -msgid "Certificate Authorities" -msgstr "" - -msgid "Name for referencing the CA" -msgstr "" - -msgid "Description of the purpose of the CA" -msgstr "" - -msgid "Authority ID" -msgstr "" - -msgid "Dogtag Authority ID" -msgstr "" - -msgid "Subject DN" -msgstr "" - -msgid "Subject Distinguished Name" -msgstr "" - -msgid "Issuer Distinguished Name" -msgstr "" - -msgid "Search for CAs." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -msgid "Display the properties of a CA." -msgstr "" - -msgid "Create a CA." -msgstr "" - -#, python-format -msgid "Created CA \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "" - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -msgid "IPA CA cannot be deleted" -msgstr "" - -msgid "Must be disabled first" -msgstr "" - -msgid "Modify CA configuration." -msgstr "" - -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -msgid "Disable a CA." -msgstr "" - -#, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "" - -msgid "IPA CA cannot be disabled" -msgstr "" - -msgid "Enable a CA." -msgstr "" - -#, python-format -msgid "Enabled CA \"%(value)s\"" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" msgstr "" msgid "" "\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" msgstr "" msgid "" "\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" msgstr "" msgid "" "\n" -"OTP Tokens\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" msgstr "" msgid "" "\n" -"Manage OTP tokens.\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" msgstr "" msgid "" "\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" +" Set multiple default Sudo options:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate' --" +"sudooption mail_badpass\n" msgstr "" msgid "" "\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" msgstr "" -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgid "this option has been deprecated." msgstr "" -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" +msgid "sudo rules" msgstr "" -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgid "Sudo Rules" msgstr "" -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -msgid "URI" +msgid "Sudo Rule" msgstr "" #, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "" - -msgid "cannot be empty" +msgid "order must be a unique value (%(order)d already used by %(rule)s)" msgstr "" #, python-format -msgid "Deleted OTP token \"%(value)s\"" +msgid "Added Sudo Rule \"%(value)s\"" msgstr "" #, python-format -msgid "Modified OTP token \"%(value)s\"" +msgid "Deleted Sudo Rule \"%(value)s\"" msgstr "" #, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +msgid "command" +msgstr "" + +msgid "commands" +msgstr "" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +msgid "group runAs" +msgstr "" + +msgid "runAs groups" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" msgstr[0] "" msgstr[1] "" -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" +msgid "commands cannot be added when command category='all'" msgstr "" -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "invalid IP network format" -msgstr "" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -msgid "invalid address format" -msgstr "" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -msgid "flags value: allowed interval 0-255" -msgstr "" - -msgid "iterations value: allowed interval 0-65535" +msgid "users cannot be added when runAs user or runAs group category='all'" msgstr "" #, python-format -msgid "salt value: %(err)s" -msgstr "" - -msgid "invalid domain-name: not fully qualified" -msgstr "" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgid "RunAsUser does not accept '%(name)s' as a user name" msgstr "" #, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgid "RunAsUser does not accept '%(name)s' as a group name" msgstr "" #, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" - -#, python-format -msgid "%s record" -msgstr "" - -#, python-format -msgid "Raw %s records" -msgstr "" - -#, python-format -msgid "%s Record" -msgstr "" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -msgid "Invalid number of parts!" -msgstr "" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -msgid "Create reverse" -msgstr "" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" - -msgid "Exchanger" -msgstr "" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -msgid "Priority (order)" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Relative weight for entries with the same priority." -msgstr "" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Target Uniform Resource Identifier" -msgstr "" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" - -msgid "Managedby permission" -msgstr "" - -msgid "cannot be used when a zone is specified" -msgstr "" - -msgid "Only one zone type is allowed per zone name" -msgstr "" - -#, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "" - -#, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "" - -#, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "" - -msgid "DNS zone" -msgstr "" - -msgid "DNS zones" -msgstr "" - -msgid "DNS Zones" -msgstr "" - -msgid "DNS Zone" -msgstr "" - -msgid "Default time to live" -msgstr "" - -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -msgid "setting Authoritative nameserver" -msgstr "" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -msgid "" -msgstr "" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "" - -msgid "is required" -msgstr "" - -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "" - -msgid "DNS resource record" -msgstr "" - -msgid "DNS resource records" -msgstr "" - -msgid "DNS Resource Records" -msgstr "" - -msgid "DNS Resource Record" -msgstr "" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -msgid "only master zones can contain records" -msgstr "" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -msgid "DNS zone root record cannot be renamed" -msgstr "" - -msgid "DNS records can be only updated one at a time" -msgstr "" - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Found '%(value)s'" -msgstr "" - -#, fuzzy, python-format -msgid "Host '%(host)s' not found" -msgstr "objectclass %s not found" - -msgid "DNS configuration options" -msgstr "" - -msgid "DNS Global Configuration" -msgstr "" - -msgid "IPA DNS version" -msgstr "" - -msgid "List of IPA masters configured as DNS servers" -msgstr "" - -msgid "IPA server configured as DNSSec key master" -msgstr "" - -msgid "Global DNS configuration is empty" -msgstr "" - -msgid "DNS forward zone" -msgstr "" - -msgid "DNS forward zones" -msgstr "" - -msgid "DNS Forward Zones" -msgstr "" - -msgid "DNS Forward Zone" -msgstr "" - -msgid "Please specify forwarders." -msgstr "" - -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "" - -msgid "IPA DNS records" -msgstr "" - -msgid "IPA location records" -msgstr "" - -msgid "Update location and IPA server DNS records" -msgstr "" - -msgid "Result of the command" -msgstr "" - -msgid "Dry run" -msgstr "" - -msgid "Do not update records only return expected records" -msgstr "" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -msgid "Certificate Profile" -msgstr "" - -msgid "Certificate Profiles" -msgstr "" - -msgid "Profile configuration" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -msgid "must be enabled only on a single master" +msgid "RunAsGroup does not accept '%(name)s' as a group name" msgstr "" msgid "Request must be a dict" @@ -23037,6 +23321,17 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + #, python-format msgid "" "\n" @@ -23056,34 +23351,6 @@ msgstr "" msgid "Topology does not allow server %(server)s to replicate with servers:" msgstr "" -msgid "Trusting forest" -msgstr "" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Unknown" -msgstr "" - -msgid "Non-Active Directory domain" -msgstr "" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - msgid "" "\n" "Classes to manage trust joins using DCE-RPC calls\n" @@ -23242,33 +23509,6 @@ msgstr "" msgid "must be at least 1" msgstr "" -#, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -msgid "Unable to initialize STARTTLS session\n" -msgstr "" - msgid "Out of memory\n" msgstr "" @@ -23295,3 +23535,30 @@ msgstr "" msgid "Bad or unsupported salt type.\n" msgstr "" + +#, c-format +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "" + +msgid "" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" +msgstr "" + +msgid "Unable to initialize STARTTLS session\n" +msgstr "" diff --git a/po/es.po b/po/es.po index 64a8a15b8..958151000 100644 --- a/po/es.po +++ b/po/es.po @@ -708,13 +708,13 @@ msgstr "" msgid "" "\n" " Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red " -"Hat\"\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" msgstr "" "\n" " Cambiar el vendedor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red " -"Hat\"\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" msgid "" "\n" @@ -1704,8 +1704,8 @@ msgstr "" "define una localización dentro del mapa que referencia a otro mapa. Esto " "puede ser\n" "hecho bien usando utomountmap-add-indirect –parentmap o manualmente con\n" -"automountkey-add estableciendo la información a \"-type=autofs :" -"\".\n" +"automountkey-add estableciendo la información a \"-type=autofs :" +"\".\n" "\n" "EJEMPLOS:\n" "\n" @@ -1959,15 +1959,15 @@ msgid "" " primary user GID if user authenticating to IPA domain does not have any\n" " other primary GID already set):\n" "\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD " -"group\"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" "\n" "3. Change primary fallback group back to default hidden group (any group " "with\n" " posixGroup object class is allowed):\n" "\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB " -"Group\"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" msgstr "" "\n" "Confianza de reino cruzado\n" @@ -2067,14 +2067,14 @@ msgstr "" "IPA no\n" " tiene ningún otro GID primario establecido ya):\n" "\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD " -"group\"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" "\n" "3. Cambiar el grupo primario de retroceso al grupo escondido predeterminado\n" " (cualquier grupo con un objeto clae posixGroup está permitido):\n" "\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB " -"Group\"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" msgid "" "\n" @@ -3035,8 +3035,8 @@ msgstr "" "\n" "Una ID de Perfil es una cadena sin espacios o puntuación que empieza con " "una\n" -"letra y seguida por una secuencia de letras, dígitos o guiones bajos " -"(\"_\").\n" +"letra y seguida por una secuencia de letras, dígitos o guiones bajos (\"_" +"\").\n" "\n" "EJEMPLOS:\n" "\n" @@ -11527,8 +11527,8 @@ msgstr "" msgid "Results should contain primary key attribute only (\"name\")" msgstr "" -"Los resultados deberían contener solo la clave del atributo primario " -"(\"name\")" +"Los resultados deberían contener solo la clave del atributo primario (\"name" +"\")" msgid "Results should contain primary key attribute only (\"principal\")" msgstr "" @@ -12428,8 +12428,8 @@ msgstr "Error de sintaxis:%(error)s " #, python-format msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set " -"LC_ALL=\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." msgstr "" "La codificación del sistema debe ser UTF-8, '%(encoding)s' no está(n) " "soportada(s). Ajuste LC_ALL=\"C.UTF-8\", o LC_ALL=\"\" y LC_CTYPE=\"C." @@ -13706,8 +13706,8 @@ msgid "" " siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" " See RFC 1876 for details" msgstr "" -"\"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +"\"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] [siz[\"m" +"\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" "donde:\n" "d1: [0 .. 90] (grados de latitud)\n" "d2: [0 .. 180] (grados de longitud)\n" @@ -28432,6 +28432,556 @@ msgstr "" msgid "Password is too long!\n" msgstr "Tamaño del historial de la contraseña" +msgid "Output debug info" +msgstr "" + +#, c-format +msgid "DNS discovery for domain %s\n" +msgstr "" + +#, fuzzy, c-format +msgid "Discovered server %s\n" +msgstr "Anunciado por los servidores" + +#, c-format +msgid "Using discovered server %s\n" +msgstr "" + +#, c-format +msgid "DNS Discovery failed\n" +msgstr "" + +#, c-format +msgid "Using server from config %s\n" +msgstr "" + +#, fuzzy, c-format +msgid "Using provided server %s\n" +msgstr "Hacer ping a un servidor remoto." + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"For more information, see the IPA Documentation to Sudo.\n" +msgstr "" +"\n" +"Reglas Sudo\n" +"\n" +"Sudo (su \"do\") permite a un administrador de sistema delegar autoridad a " +"ciertos\n" +"usuarios dados(o grupos de usuarios) para tener la posibilidad de ejecutar " +"algunos (o\n" +" todos) los comandos como root u otro usuario mientras suministra pistas de " +"auditoria de\n" +" los comandos y sus argumentos.\n" +"\n" +"IPA proporciona un medio para configurar diversos aspectos de Sudo:\n" +" Users: Los usuario(s)/grupos(s) que tienen permitido llamar a Sudo.\n" +" Hosts: Loshost(s)/grupo(s) de host a los que el usuario permite llamar a " +"Sudo.\n" +" Allow Command: El comando(s) específico que tiene permitido ejecutarse " +"por medio de Sudo.\n" +" Deny Command: El comando(s) específico que tiene prohibido ejecutarse por " +"medio de Sudo.\n" +" RunAsUser: El usuario(s) o grupo(s) de usuarios con cuyos derechos será " +"invocado Sudo.\n" +" RunAsGroup: El grupo(s) con cuyos derechos gid será invocado Sudo.\n" +" Options: Las diversas opciones Sudoers que pueden modificar el " +"comportamiento de Sudo.\n" +"\n" +"Su puede aadir un orden a una regla sudo para controlar el orden en el que " +"será evaluada\n" +"(si el cliente lo soporta). Este orden es un entero y debe ser único.\n" +"\n" +"IPA suministra un binddn designado para usar con Sudo situado en :\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"Para habilitar el binddn ejecute el siguiente comando para fijar la " +"contraseña:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"Para más información, vea la Documentación IPA para Sudo.\n" + +#, fuzzy +msgid "Status of the certificate" +msgstr "debe ser un certificado" + +msgid "Enable adding subids to new users" +msgstr "" + +#, fuzzy +msgid "Setup SID configuration" +msgstr "configuración de la confianza" + +msgid "New users and groups automatically get a SID assigned" +msgstr "" + +#, fuzzy +msgid "Add SIDs" +msgstr "Vista ID asignada" + +msgid "Add SIDs for existing users and groups" +msgstr "" + +#, fuzzy +msgid "NetBIOS name of the IPA domain" +msgstr "Nombre del dominio de confianza" + +#, fuzzy +msgid "not allowed to enable SID generation" +msgstr "no está permitido llevar a cabo la operación: %s" + +msgid "" +"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " +"allowed. Empty string is not allowed." +msgstr "" + +#, fuzzy +msgid "Failed to call DBus" +msgstr "Fallo al añadir" + +#, fuzzy +msgid "Configuration of SID failed. See details in the error log" +msgstr "" +"No se pudo recuperar dominios del bosque de confianza. Vea detalles en " +"error_log" + +#, python-format +msgid "You cannot specify %s without the --enable-sid option" +msgstr "" + +#, fuzzy, python-format +msgid "" +"No answers could be found in the specified lifetime for DNS reverse zone " +"%(revdns)s" +msgstr "" +"Todos los servidores de nombre fallaron al responder a la consulta sobre la " +"zona reversa DNS %(revdns)s" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"and an ID range of a trusted domain may set\n" +" - auto-private-groups: [true|false|hybrid] automatic creation of private " +"groups\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +#, fuzzy +msgid "Auto private groups" +msgstr "Búsqueda de grupos privados" + +#, fuzzy +msgid "Auto creation of private groups, one of allowed values" +msgstr "Tipo de rango ID, uno de los siguientes valores" + +#, fuzzy +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --auto-private-groups\n" +"\n" +" may be given for a new ID range for a trusted AD domain and\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" +"\n" +" Añadir un nuevo rango ID.\n" +"\n" +" Para añadir un nuevo rango ID usted debe especificar siempre\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Adicionalmente\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" puede ser dado para un nuevo rangi ID para el dominio local mientras\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" debe ser dado para añadir un nuevo rango para un dominio AD de " +"confianza.\n" +"\n" + +#, fuzzy +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" +"private-groups is specified" +msgstr "" +"El tipo de Rango IPA debe ser uno de ipa-ad-trust o ipa-ad-trust-posix " +"cuando se especifica el SID del dominio de confianza" + +#, fuzzy +msgid "Add subid" +msgstr "regla sudo" + +#, fuzzy +msgid "Assigned subids" +msgstr "Vista ID asignada" + +msgid "DNA remaining" +msgstr "" + +#, fuzzy +msgid "SubGID range size" +msgstr "Nombre del intervalo" + +msgid "SubGID range start" +msgstr "" + +#, fuzzy +msgid "SubUID range size" +msgstr "Nombre del intervalo" + +msgid "SubUID range start" +msgstr "" + +msgid "Remaining subids" +msgstr "" + +msgid "Subordinate ID Statistics" +msgstr "" + +msgid "Auto assign subordinate ids" +msgstr "" + +#, fuzzy, python-brace-format +msgid "" +"Are you sure you want to auto-assign a subordinate id to user ${object}?" +msgstr "Está seguro de que desea habilitar ${object}?" + +msgid "Subordinate IDs" +msgstr "" + +#, fuzzy, python-brace-format +msgid "{oname}: {command_name} not found" +msgstr "{role}: rol no encontrado" + +#, fuzzy, python-format +msgid "authentication indicators not allowed in service \"%s\"" +msgstr "Indicadores de autenticación" + +msgid "" +"\n" +"Subordinate ids\n" +"\n" +"Manage subordinate user and group ids for users\n" +"\n" +"EXAMPLES:\n" +"\n" +" Auto-assign a subordinate id range to current user\n" +" ipa subid-generate\n" +"\n" +" Auto-assign a subordinate id range to user alice:\n" +" ipa subid-generate --owner=alice\n" +"\n" +" Find subordinate ids for user alice:\n" +" ipa subid-find --owner=alice\n" +"\n" +" Match entry by any subordinate uid in range:\n" +" ipa subid-match --subuid=2147483649\n" +msgstr "" + +msgid "Subordinate id" +msgstr "" + +msgid "Subordinate ids" +msgstr "" + +#, fuzzy +msgid "Subordinate id description" +msgstr "Descripción del perfil" + +msgid "Owning user of subordinate id entry" +msgstr "" + +msgid "Start value for subordinate user ID (subuid) range" +msgstr "" + +msgid "Subordinate user ID count" +msgstr "" + +msgid "Start value for subordinate group ID (subgid) range" +msgstr "" + +msgid "Subordinate group ID count" +msgstr "" + +#, fuzzy, python-format +msgid "" +"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." +msgstr " %(oname)s con el nombre \"%(pkey)s\" ya existe" + +#, fuzzy, python-format +msgid "'%(dn)s is not a valid user" +msgstr "%(port)s no es un puerto válido" + +msgid "subgidnumber must be equal to subuidnumber" +msgstr "" + +#, fuzzy +msgid "Add a new subordinate id." +msgstr "Añadir un nuevo escenario usuario." + +#, fuzzy, python-format +msgid "Added subordinate id \"%(value)s\"" +msgstr "Ha sido agregado el servicio \"%(value)s\"" + +#, fuzzy +msgid "Delete a subordinate id." +msgstr "Borrar un Certificado Perfil" + +#, fuzzy, python-format +msgid "Deleted subordinate id \"%(value)s\"" +msgstr "Ha sido eliminado el servicio \"%(value)s\"" + +#, fuzzy +msgid "Modify a subordinate id." +msgstr "Modificar un escenario usuario." + +#, fuzzy, python-format +msgid "Modified subordinate id \"%(value)s\"" +msgstr "Ha sido modificado el servicio \"%(value)s\"" + +#, fuzzy +msgid "Search for subordinate id." +msgstr "Buscar intervalos." + +#, fuzzy, python-format +msgid "%(count)d subordinate id matched" +msgid_plural "%(count)d subordinate ids matched" +msgstr[0] "%(count)d servicio coincidente" +msgstr[1] "%(count)d servicios coincidentes\t\t\t" + +#, fuzzy +msgid "Display information about a subordinate id." +msgstr "Mostrar información sobre un rango." + +msgid "Generate and auto-assign subuid and subgid range to user entry" +msgstr "" + +msgid "Match users by any subordinate uid in their range" +msgstr "" + +msgid "SubUID match" +msgstr "" + +msgid "Match value for subordinate user ID" +msgstr "" + +msgid "Subordinate id statistics" +msgstr "" + +#, python-format +msgid "%(remaining)i remaining subordinate id ranges" +msgstr "" + +#, fuzzy +msgid "Maximum password life must be equal to or greater than the minimum." +msgstr "La duración máxima de la contraseña debe ser mayor que la mínima." + +#, fuzzy, python-format +msgid "Failed to remove server from security domain: %s" +msgstr "" +"Fallo al quitar el servidor %(master)s de la lista de servidores: %(err)s" + +msgid "" +"\n" +"Each option needs to be added separately and no validation is done whether\n" +"the option is known by sudo or is in a valid format. Environment variables\n" +"also need to be set individually. For example env_keep=\"FOO BAR\" in " +"sudoers\n" +"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" +"+=BAR.\n" +msgstr "" + +msgid "" +"\n" +" Set multiple default Sudo options:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate' --" +"sudooption mail_badpass\n" +msgstr "" + #~ msgid "" #~ "\n" #~ " Delete a CA.\n" diff --git a/po/eu.po b/po/eu.po index 12a3f532c..5185cfb5d 100644 --- a/po/eu.po +++ b/po/eu.po @@ -18,526 +18,424 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" -#, python-format -msgid "%(desc)s: %(info)s" -msgstr "%(desc)s: %(info)s" +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "" -#, python-format -msgid "%(info)s" -msgstr "%(info)s" +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "" -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" +#, c-format +msgid "out of memory\n" +msgstr "" -msgid "A description of this host" -msgstr "Ostalari honen deskribapena" +#, c-format +msgid "read error\n" +msgstr "" -msgid "A description of this host-group" -msgstr "Ostalari-talde honen deskribapena" +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" -msgid "A list of ACI values" -msgstr "ACI balioen zerrenda bat" +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" -msgid "ACI" -msgstr "ACI" +#, c-format +msgid "Removing principal %s\n" +msgstr "" -msgid "ACI name" -msgstr "ACI izena" +#, c-format +msgid "Failed to open keytab\n" +msgstr "" -msgid "ACI prefix" -msgstr "ACI aurrizkia" +#, fuzzy, c-format +msgid "principal not found\n" +msgstr "ez da ipa-getkeytab aurkitu\n" -msgid "ACIs" -msgstr "ACIak" +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" -msgid "Account Settings" -msgstr "Kontuaren ezarpenak" +#, c-format +msgid "Unable to remove entry\n" +msgstr "" -msgid "Add Many" -msgstr "Gehitu hainbat" +#, c-format +msgid "kvno %d\n" +msgstr "" -msgid "Add and Add Another" -msgstr "Gehitu eta gehitu beste bat" +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" -msgid "Add and Close" -msgstr "Gehitu eta itxi" +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" -msgid "Add and Edit" -msgstr "Gehitu eta editatu" +#, c-format +msgid "Unable to parse principal\n" +msgstr "" -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "\"%(value)s\" ostalari-taldea gehituta" +#, fuzzy, c-format +msgid "realm not found\n" +msgstr "ez da ipa-getkeytab aurkitu\n" -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" +msgid "Print debugging information" +msgstr "" -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" +msgid "Debugging output" +msgstr "" -msgid "Administrator e-mail address" -msgstr "Administratzailearen e-posta helbidea" +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" -msgid "Allow" -msgstr "Onartu" +msgid "Kerberos Service Principal Name" +msgstr "" -msgid "Any Command" -msgstr "Edozein komando" +msgid "The keytab file to remove the principcal(s) from" +msgstr "" -msgid "Any Group" -msgstr "Edozein talde" +msgid "Keytab File Name" +msgstr "" -msgid "Are you sure you want to delete selected entries?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" +msgid "Remove all principals in this realm" +msgstr "" -msgid "Attribute" -msgstr "Atributua" +#, fuzzy +msgid "Realm name" +msgstr "Berrizendatu" -msgid "Attributes" -msgstr "Atributuak" +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" -msgid "Cancel" -msgstr "Utzi" +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" -msgid "Certificate" -msgstr "Ziurtagiria" +#, c-format +msgid "Closing keytab failed\n" +msgstr "" -msgid "Class" -msgstr "Klasea" +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" -msgid "Close" -msgstr "Itxi" +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "" -msgid "Command name" -msgstr "Komandoaren izena" +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "" -msgid "Configuration" -msgstr "Konfigurazioa" +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "" -msgid "Contact Settings" -msgstr "Kontaktuaren ezarpenak" +#, c-format +msgid "Out of memory \n" +msgstr "" -msgid "Create a new group." -msgstr "Sortu talde berri bat." +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "" -msgid "DNS" -msgstr "DNS" +msgid "Simple bind failed\n" +msgstr "" -msgid "Data" -msgstr "Datuak" +msgid "SASL Bind failed\n" +msgstr "" -msgid "Default e-mail domain" -msgstr "E-posta domeinu lehenetsia" +#, c-format +msgid "Operation failed: %s\n" +msgstr "" -msgid "Default group for new users" -msgstr "Erabiltzaile berrientzako talde lehenetsia" +#, c-format +msgid "Failed to get result: %s\n" +msgstr "" -msgid "Default location of home directories" -msgstr "Karpeta nagusien kokaleku lehenetsia" +#, c-format +msgid "Timeout exceeded." +msgstr "" -msgid "Default shell" -msgstr "Shell lehenetsia" +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "" -msgid "Default shell for new users" -msgstr "Erabiltzaile berrientzako shell lehenetsia" +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "" -msgid "Default users group" -msgstr "Erabiltzaile-talde lehenetsia" +#, c-format +msgid "Missing reply control list!\n" +msgstr "" -msgid "Delete group." -msgstr "Ezabatu taldea." +#, c-format +msgid "Missing reply control!\n" +msgstr "" -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" +#, c-format +msgid "Out of Memory!\n" +msgstr "" -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" +#, c-format +msgid "Failed to create control!\n" +msgstr "" -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" +#, c-format +msgid "Failed to bind to server!\n" +msgstr "" -msgid "Deny" -msgstr "Ukatu" +#, c-format +msgid "Failed to get keytab!\n" +msgstr "" -msgid "Description" -msgstr "Deskribapena" +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "" -msgid "Display name" -msgstr "Bistaratu izena" +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "" -msgid "Email address" -msgstr "E-posta helbidea" +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "" -msgid "Enabled" -msgstr "Gaituta" +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "" -msgid "Error" -msgstr "Errorea" +#, c-format +msgid "Failed to retrieve any keys" +msgstr "" -msgid "External User" -msgstr "Kanpoko erabiltzailea" +msgid "Failed to decode control reply!\n" +msgstr "" -msgid "External host" -msgstr "Kanpoko ostalaria" +#, fuzzy, c-format +msgid "Passwords do not match!\n" +msgstr "Pasahitzak ez datoz bat!" -msgid "Fax Number" -msgstr "Fax-zenbakia" +#, c-format +msgid "Failed to open config file %s\n" +msgstr "" -msgid "Filter" -msgstr "Iragazkia" +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "" -msgid "Fingerprint (SHA1)" -msgstr "Hatz-marka (SHA1)" +msgid "Failed to resolve symlink to keytab.\n" +msgstr "" -msgid "Fingerprints" -msgstr "Hatz-markak" +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" -msgid "First name" -msgstr "Izena" +msgid "Print as little as possible" +msgstr "" -msgid "Force" -msgstr "Behartu" +msgid "Output only on errors" +msgstr "" -msgid "Full name" -msgstr "Izen osoa" +msgid "Output debug info" +msgstr "" -msgid "General" -msgstr "Orokorra" +msgid "Contact this specific KDC Server" +msgstr "" -msgid "Group" -msgstr "Taldea" +#, fuzzy +msgid "Server Name" +msgstr "Zerbitzuaren izena" -msgid "Group Settings" -msgstr "Taldearen ezarpenak" +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" -msgid "Groups" -msgstr "Taldeak" +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" -msgid "HBAC Rules" -msgstr "HBAC arauak" +msgid "Encryption types to request" +msgstr "" -msgid "HBAC Services" -msgstr "HBAC zerbitzuak" +msgid "Comma separated encryption types list" +msgstr "" -msgid "HBAC rule" -msgstr "HBAC araua" +msgid "Show the list of permitted encryption types and exit" +msgstr "" -msgid "HBAC rules" -msgstr "HBAC arauak" +msgid "Permitted Encryption Types" +msgstr "" -msgid "HBAC service" -msgstr "HBAC zerbitzua" +msgid "Asks for a non-random password to use for the principal" +msgstr "" -msgid "HBAC service description" -msgstr "HBAC zerbitzuaren deskribapena" +msgid "LDAP DN" +msgstr "" -msgid "HBAC service group description" -msgstr "HBAC zerbitzu-taldearen deskribapena" - -msgid "History size" -msgstr "Historiaren tamaina" - -msgid "Home directory base" -msgstr "Direktorio nagusiaren oinarria" - -msgid "Host Groups" -msgstr "Ostalari-taldeak" - -msgid "Host Name" -msgstr "Ostalari-izena" - -msgid "Host name" -msgstr "Ostalari-izena" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "Ostalariaren sistema eragilea eta bertsioa (adibidez, \"Fedora 9\")" - -msgid "Host-group" -msgstr "Ostalari-taldea" - -msgid "Hostname" -msgstr "Ostalari-izena" - -msgid "Hosts" -msgstr "Ostalariak" - -msgid "IPA Server" -msgstr "IPA zerbitzaria" - -msgid "IPA Server to use" -msgstr "Erabili beharreko IPA zerbitzaria" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "Baliogabeko JSON-RPC eskaera: %(error)s" - -msgid "Invalid LDAP URI." -msgstr "LDAP URI baliogabea." - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Kerberos errorea: %(major)s/%(minor)s" +msgid "DN to bind as if not using kerberos" +msgstr "" msgid "LDAP password" msgstr "LDAP pasahitza" -msgid "Last name" -msgstr "Abizena" +msgid "password to use if not using kerberos" +msgstr "" -msgid "Manager" -msgstr "Kudeatzailea" +#, fuzzy +msgid "Prompt for LDAP password" +msgstr "LDAP pasahitza" -msgid "Maximum username length" -msgstr "Erabiltzaile-izenaren gehienezko luzera" +msgid "Path to the IPA CA certificate" +msgstr "" -msgid "Mobile Telephone Number" -msgstr "Mugikor-zenbakia" +#, fuzzy +msgid "IPA CA certificate" +msgstr "Ziurtagiria" -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" +msgid "url" +msgstr "" -msgid "Modify a group." -msgstr "Aldatu talde bat." +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" -msgid "NIS domain name" -msgstr "NIS domeinu-izena" +msgid "GSSAPI|EXTERNAL" +msgstr "" -msgid "Name of host-group" -msgstr "Ostalari-taldearen izena" - -msgid "New ACI name" -msgstr "ACI izen berria" - -msgid "New Certificate" -msgstr "Ziurtagiri berria" - -msgid "New Password" -msgstr "Pasahitz berria" - -msgid "OK" -msgstr "Ados" - -msgid "Operating system" -msgstr "Sistema eragilea" - -msgid "Organization" -msgstr "Erakundea" - -msgid "Output filename" -msgstr "Irteerako fitxategi-izena" - -msgid "PKINIT" -msgstr "PKINIT" - -msgid "Pager Number" -msgstr "Bilagailu-zenbakia" - -msgid "Password" -msgstr "Pasahitza" - -msgid "Passwords do not match" -msgstr "Pasahitzak ez datoz bat" - -msgid "Passwords do not match!" -msgstr "Pasahitzak ez datoz bat!" - -msgid "Passwords must match" -msgstr "Pasahitzek bat etorri behar dute" - -msgid "Permission" -msgstr "Baimena" - -msgid "Permissions" -msgstr "Baimenak" - -msgid "Random password" -msgstr "Ausazko pasahitza" - -msgid "Reason" -msgstr "Arrazoia" - -msgid "Rename" -msgstr "Berrizendatu" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "%(ldap_obj_name)s objektua berrizendatu" - -msgid "Reset Password" -msgstr "Berrezarri pasahitza" - -msgid "Retry" -msgstr "Saiatu berriz" - -msgid "Rule type" -msgstr "Arau-mota" - -msgid "Run Commands" -msgstr "Exekutatu komandoak" - -msgid "RunAs External Group" -msgstr "Exekutatu kanpoko talde bezala" - -msgid "RunAs External User" -msgstr "Exekutatu kanpoko erabiltzaile bezala" - -msgid "SHA1 Fingerprint" -msgstr "SHA1 hatz-marka" - -msgid "Search" -msgstr "Bilatu" - -msgid "Search for groups." -msgstr "Bilatu taldeak." - -msgid "Serial Number" -msgstr "Serie-zenbakia" - -msgid "Serial number" -msgstr "Serie-zenbakia" - -msgid "Service Groups" -msgstr "Zerbitzu-taldeak" - -msgid "Service group name" -msgstr "Zerbitzu-taldearen izena" - -msgid "Service name" -msgstr "Zerbitzuaren izena" - -msgid "Services" -msgstr "Zerbitzuak" - -msgid "Set OTP" -msgstr "Ezarri OTP" - -msgid "Settings" -msgstr "Ezarpenak" - -msgid "Specified Groups" -msgstr "Zehazturiko taldeak" - -msgid "Status" -msgstr "Egoera" - -msgid "Street address" -msgstr "Kalea" - -msgid "Subject" -msgstr "Gaia" - -msgid "Subtree" -msgstr "Azpi-zuhaitza" - -msgid "Sudo" -msgstr "Sudo" - -msgid "Sudo Command Group" -msgstr "Sudo komando-taldea" - -msgid "Sudo Commands" -msgstr "Sudo komandoak" - -msgid "Sudo Option" -msgstr "Sudo aukera" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "Sintaxi-errorea: %(error)s" - -msgid "Target group" -msgstr "Helburuko taldea" - -msgid "Telephone Number" -msgstr "Telefono-zenbakia" - -msgid "The group doesn't exist" -msgstr "Taldea ez da existitzen" - -msgid "This entry already exists" -msgstr "Sarrera hau dagoeneko existitzen da" - -msgid "Type" -msgstr "Mota" - -msgid "UID" -msgstr "UID" - -msgid "User" -msgstr "Erabiltzailea" - -msgid "User Group" -msgstr "Erabiltzaile-taldea" - -msgid "User Groups" -msgstr "Erabiltzaile-taldeak" - -msgid "User group" -msgstr "Erabiltzaile-taldea" - -msgid "User password" -msgstr "Erabiltzailearen pasahitza" - -msgid "Username" -msgstr "Erabiltzaile-izena" - -msgid "Users" -msgstr "Erabiltzaileak" - -msgid "View" -msgstr "Ikusi" - -msgid "an internal error has occurred" -msgstr "barne-errore bat gertatu da" - -msgid "description" -msgstr "deskribapena" - -msgid "entries" -msgstr "sarrerak" - -msgid "entry" -msgstr "sarrera" - -msgid "filename" -msgstr "fitxategi-izena" - -msgid "group" -msgstr "taldea" - -msgid "groups" -msgstr "taldeak" - -msgid "hostname" -msgstr "ostalari-izena" - -msgid "invalid IP address format" -msgstr "IP helbide formatu baliogabea" - -msgid "invalid IP network format" -msgstr "IP sare formatu baliogabea" +msgid "Retrieve current keys without changing them" +msgstr "" #, c-format -msgid "ipa-getkeytab not found\n" -msgstr "ez da ipa-getkeytab aurkitu\n" +msgid "No system preferred enctypes ?!\n" +msgstr "" -msgid "password" -msgstr "pasahitza" +#, c-format +msgid "Supported encryption types:\n" +msgstr "" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +#, fuzzy +msgid "Enter LDAP password" +msgstr "LDAP pasahitza" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "" + +#, c-format +msgid "DNS discovery for domain %s\n" +msgstr "" + +#, c-format +msgid "Discovered server %s\n" +msgstr "" + +#, c-format +msgid "Using discovered server %s\n" +msgstr "" + +#, c-format +msgid "DNS Discovery failed\n" +msgstr "" + +#, c-format +msgid "Using server from config %s\n" +msgstr "" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "" + +#, c-format +msgid "Using provided server %s\n" +msgstr "" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "" + +#, fuzzy +msgid "New Principal Password" +msgstr "Pasahitz berria" + +msgid "Verify Principal Password" +msgstr "" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" + +#, c-format +msgid "Failed to create key material\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "" #, c-format msgid "Out of memory!\n" @@ -563,9 +461,6 @@ msgstr "" msgid "Unable to enable SSL in LDAP\n" msgstr "" -msgid "SASL Bind failed\n" -msgstr "" - #, c-format msgid "Search for %1$s on rootdse failed with error %2$d\n" msgstr "" @@ -700,6 +595,10 @@ msgstr "" msgid "fork() failed\n" msgstr "" +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "ez da ipa-getkeytab aurkitu\n" + #, fuzzy, c-format msgid "ipa-getkeytab has bad permissions?\n" msgstr "ez da ipa-getkeytab aurkitu\n" @@ -748,15 +647,27 @@ msgstr "" msgid "Hostname of this server" msgstr "" +msgid "hostname" +msgstr "ostalari-izena" + +msgid "IPA Server to use" +msgstr "Erabili beharreko IPA zerbitzaria" + msgid "Specifies where to store keytab information." msgstr "" +msgid "filename" +msgstr "fitxategi-izena" + msgid "Force the host join. Rejoin even if already joined." msgstr "" msgid "LDAP password (if not using Kerberos)" msgstr "" +msgid "password" +msgstr "pasahitza" + #, fuzzy msgid "LDAP basedn" msgstr "LDAP pasahitza" @@ -776,392 +687,6 @@ msgstr "" msgid "The hostname must not be: %s\n" msgstr "" -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "" - -#, c-format -msgid "Out of memory \n" -msgstr "" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "" - -msgid "Simple bind failed\n" -msgstr "" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -#, c-format -msgid "Out of Memory!\n" -msgstr "" - -#, c-format -msgid "Failed to create control!\n" -msgstr "" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "" - -msgid "Failed to decode control reply!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Passwords do not match!\n" -msgstr "Pasahitzak ez datoz bat!" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "" - -msgid "Failed to resolve symlink to keytab.\n" -msgstr "" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Output only on errors" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -#, fuzzy -msgid "Server Name" -msgstr "Zerbitzuaren izena" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Encryption types to request" -msgstr "" - -msgid "Comma separated encryption types list" -msgstr "" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -msgid "Permitted Encryption Types" -msgstr "" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -msgid "LDAP DN" -msgstr "" - -msgid "DN to bind as if not using kerberos" -msgstr "" - -msgid "password to use if not using kerberos" -msgstr "" - -#, fuzzy -msgid "Prompt for LDAP password" -msgstr "LDAP pasahitza" - -msgid "Path to the IPA CA certificate" -msgstr "" - -#, fuzzy -msgid "IPA CA certificate" -msgstr "Ziurtagiria" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -#, fuzzy -msgid "Enter LDAP password" -msgstr "LDAP pasahitza" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -#, fuzzy -msgid "New Principal Password" -msgstr "Pasahitz berria" - -msgid "Verify Principal Password" -msgstr "" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, c-format -msgid "Failed to create key material\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, fuzzy, c-format -msgid "principal not found\n" -msgstr "ez da ipa-getkeytab aurkitu\n" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, fuzzy, c-format -msgid "realm not found\n" -msgstr "ez da ipa-getkeytab aurkitu\n" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -#, fuzzy -msgid "Realm name" -msgstr "Berrizendatu" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "" - -#, c-format -msgid "out of memory\n" -msgstr "" - -#, c-format -msgid "read error\n" -msgstr "" - msgid "Failed members" msgstr "" @@ -1278,6 +803,25 @@ msgstr "" msgid "Skipped %(key)s" msgstr "" +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +msgid "Unrevoked" +msgstr "" + +msgid "Error" +msgstr "Errorea" + +#, fuzzy +msgid "Input filename" +msgstr "Irteerako fitxategi-izena" + +msgid "File to load the certificate from." +msgstr "" + +msgid "cannot specify both raw certificate and file" +msgstr "" + #, fuzzy msgid "Input file" msgstr "Irteerako fitxategi-izena" @@ -1285,127 +829,10 @@ msgstr "Irteerako fitxategi-izena" msgid "File to load the certificate from" msgstr "" -msgid "cannot specify both raw certificate and file" -msgstr "" - #, python-format msgid "Profile configuration stored in file '%(file)s'" msgstr "" -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -msgid "Servers details:" -msgstr "" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "Add a new YubiKey OTP token." -msgstr "" - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -msgid "Maximum number of agreements per replica" -msgstr "" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -#, fuzzy -msgid "Delete a user" -msgstr "Ezabatu taldea." - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - msgid "Split DNS record to parts" msgstr "" @@ -1470,6 +897,134 @@ msgstr "" msgid "file to store DNS records in nsupdate format" msgstr "" +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "" + +msgid "Servers details:" +msgstr "" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "" + +#, fuzzy +msgid "User ID" +msgstr "Erabiltzailea" + +msgid "Password" +msgstr "Pasahitza" + +#, fuzzy +msgid "First Code" +msgstr "Izena" + +msgid "Second Code" +msgstr "" + +msgid "Token ID" +msgstr "" + +msgid "python-yubico is not installed." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" + +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "Add a new YubiKey OTP token." +msgstr "" + +msgid "YubiKey slot" +msgstr "" + +msgid "No free YubiKey slot!" +msgstr "" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "" + +msgid "Topology is disconnected" +msgstr "" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "" + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "" + +msgid "Maximum number of agreements per replica" +msgstr "" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "" + +#, fuzzy +msgid "Delete a user" +msgstr "Ezabatu taldea." + +msgid "preserve and no-preserve cannot be both set" +msgstr "" + #, python-format msgid "Cannot read file '%(filename)s': %(exc)s" msgstr "" @@ -1586,50 +1141,29 @@ msgstr "" msgid "File containing the vault private key" msgstr "" +msgid "Data" +msgstr "Datuak" + msgid "Private key specified multiple times" msgstr "" msgid "Missing vault private key" msgstr "" -msgid "Write certificate (chain if --chain used) to file" +#, python-format +msgid "Enabled Sudo Rule \"%s\"" msgstr "" -msgid "Unrevoked" +#, python-format +msgid "Disabled Sudo Rule \"%s\"" msgstr "" -#, fuzzy -msgid "Input filename" -msgstr "Irteerako fitxategi-izena" - -msgid "File to load the certificate from." +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" msgstr "" -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -#, fuzzy -msgid "User ID" -msgstr "Erabiltzailea" - -#, fuzzy -msgid "First Code" -msgstr "Izena" - -msgid "Second Code" -msgstr "" - -msgid "Token ID" +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" msgstr "" msgid "" @@ -1753,18 +1287,36 @@ msgid "" "targetattr REPLACES the current attributes, it does not add to them.\n" msgstr "" +msgid "ACI name" +msgstr "ACI izena" + +msgid "Permission" +msgstr "Baimena" + msgid "Permission ACI grants access to" msgstr "" +msgid "User group" +msgstr "Erabiltzaile-taldea" + msgid "User group ACI grants access to" msgstr "" +msgid "Permissions" +msgstr "Baimenak" + msgid "Permissions to grant(read, write, add, delete, all)" msgstr "" msgid "Attributes to which the permission applies" msgstr "" +msgid "Attributes" +msgstr "Atributuak" + +msgid "Type" +msgstr "Mota" + msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" msgstr "" @@ -1775,12 +1327,21 @@ msgstr "" msgid "Member of a group" msgstr "Aldatu talde bat." +msgid "Filter" +msgstr "Iragazkia" + msgid "Legal LDAP filter (e.g. ou=Engineering)" msgstr "" +msgid "Subtree" +msgstr "Azpi-zuhaitza" + msgid "Subtree to apply ACI to" msgstr "" +msgid "Target group" +msgstr "Helburuko taldea" + msgid "Group to apply ACI to" msgstr "" @@ -1794,6 +1355,9 @@ msgstr "" msgid "Create new ACI." msgstr "Sortu talde berri bat." +msgid "ACI prefix" +msgstr "ACI aurrizkia" + msgid "" "Prefix used to distinguish ACI types (permission, delegation, selfservice, " "none)" @@ -1867,12 +1431,257 @@ msgstr "Aldatu talde bat." msgid "Rename an ACI." msgstr "Berrizendatu" +msgid "New ACI name" +msgstr "ACI izen berria" + msgid "Display a single ACI given an ACI name." msgstr "" msgid "Location of the ACI" msgstr "" +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Description" +msgstr "Deskribapena" + +#, fuzzy +msgid "A description of this auto member rule" +msgstr "Ostalari honen deskribapena" + +#, fuzzy +msgid "Default (fallback) Group" +msgstr "Erabiltzaile-talde lehenetsia" + +#, fuzzy +msgid "Default group for entries to land" +msgstr "Erabiltzaile berrientzako talde lehenetsia" + +msgid "Add an automember rule." +msgstr "" + +msgid "Automember Rule" +msgstr "" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +msgid "Grouping Type" +msgstr "" + +msgid "Grouping to which the rule applies" +msgstr "" + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +msgid "Exclusive Regex" +msgstr "" + +#, fuzzy +msgid "Attribute Key" +msgstr "Atributua" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +msgid "Number of conditions added" +msgstr "" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +msgid "Display information about the default (fallback) automember groups." +msgstr "" + +msgid "Delete an automember rule." +msgstr "" + +msgid "List of deletions that failed" +msgstr "" + +#, fuzzy +msgid "Search for automember rules." +msgstr "Bilatu taldeak." + +msgid "Modify an automember rule." +msgstr "" + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +msgid "Rights" +msgstr "" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Users" +msgstr "Erabiltzaileak" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Hosts" +msgstr "Ostalariak" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +msgid "Conditions that could not be removed" +msgstr "" + +msgid "Number of conditions removed" +msgstr "" + +msgid "Display information about an automember rule." +msgstr "" + msgid "" "\n" "Automount\n" @@ -1990,6 +1799,9 @@ msgstr "" msgid "Mount information" msgstr "Konfigurazioa" +msgid "description" +msgstr "deskribapena" + msgid "Location" msgstr "" @@ -2006,25 +1818,12 @@ msgstr "" msgid "Create a new automount key." msgstr "Sortu talde berri bat." -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - msgid "Delete an automount key." msgstr "" msgid "Continuous mode: Don't stop on errors." msgstr "" -msgid "List of deletions that failed" -msgstr "" - #, fuzzy msgid "Search for an automount key." msgstr "Bilatu taldeak." @@ -2045,22 +1844,12 @@ msgstr "" msgid "Modify an automount key." msgstr "Aldatu talde bat." -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "Rights" -msgstr "" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - msgid "New mount information" msgstr "" +msgid "Rename" +msgstr "Berrizendatu" + #, fuzzy msgid "Rename the automount key object" msgstr "%(ldap_obj_name)s objektua berrizendatu" @@ -2156,6 +1945,187 @@ msgstr "" msgid "Nested Methods to execute" msgstr "" +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +msgid "Search for existing certificates." +msgstr "" + +msgid "Match cn attribute in subject" +msgstr "" + +msgid "Reason" +msgstr "Arrazoia" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "" + +#, fuzzy +msgid "minimum serial number" +msgstr "Serie-zenbakia" + +#, fuzzy +msgid "maximum serial number" +msgstr "Serie-zenbakia" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Maximum number of certs returned" +msgstr "" + +msgid "Take a revoked certificate off hold." +msgstr "" + +msgid "Serial number" +msgstr "Serie-zenbakia" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +msgid "Submit a certificate signing request." +msgstr "" + +msgid "CSR" +msgstr "" + +msgid "Principal" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +msgid "Dictionary mapping variable name to value" +msgstr "" + +#, fuzzy +msgid "Revoke a certificate." +msgstr "Ziurtagiri berria" + +msgid "Retrieve an existing certificate." +msgstr "" + +msgid "Output filename" +msgstr "Irteerako fitxategi-izena" + +msgid "File to store the certificate in." +msgstr "" + +msgid "Check the status of a certificate signing request." +msgstr "" + +msgid "Request id" +msgstr "" + msgid "" "\n" "Server configuration\n" @@ -2205,6 +2175,30 @@ msgid "" "s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" msgstr "" +msgid "Maximum username length" +msgstr "Erabiltzaile-izenaren gehienezko luzera" + +msgid "Home directory base" +msgstr "Direktorio nagusiaren oinarria" + +msgid "Default location of home directories" +msgstr "Karpeta nagusien kokaleku lehenetsia" + +msgid "Default shell" +msgstr "Shell lehenetsia" + +msgid "Default shell for new users" +msgstr "Erabiltzaile berrientzako shell lehenetsia" + +msgid "Default users group" +msgstr "Erabiltzaile-talde lehenetsia" + +msgid "Default group for new users" +msgstr "Erabiltzaile berrientzako talde lehenetsia" + +msgid "Default e-mail domain" +msgstr "E-posta domeinu lehenetsia" + msgid "Search time limit" msgstr "" @@ -2745,6 +2739,9 @@ msgstr "Azpi-zuhaitza" msgid "AFSDB Hostname" msgstr "Ostalari-izena" +msgid "Hostname" +msgstr "Ostalari-izena" + msgid "APL record" msgstr "" @@ -3223,6 +3220,9 @@ msgstr "" msgid "Authoritative nameserver domain name" msgstr "" +msgid "Administrator e-mail address" +msgstr "Administratzailearen e-posta helbidea" + msgid "SOA serial" msgstr "" @@ -3348,6 +3348,9 @@ msgstr "" msgid "Add new DNS resource record." msgstr "" +msgid "Force" +msgstr "Behartu" + msgid "force NS record creation even if its hostname is not in DNS" msgstr "" @@ -3418,6 +3421,323 @@ msgstr "" msgid "Display information about a DNS zone (SOA record)." msgstr "" +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +#, fuzzy +msgid "Group name" +msgstr "Taldea" + +#, fuzzy +msgid "Group description" +msgstr "deskribapena" + +#, fuzzy +msgid "GID" +msgstr "UID" + +msgid "GID (use this option to set it manually)" +msgstr "" + +msgid "Member users" +msgstr "" + +#, fuzzy +msgid "Member groups" +msgstr "Erabiltzaile-taldea" + +#, fuzzy +msgid "Member of groups" +msgstr "Bilatu taldeak." + +msgid "Roles" +msgstr "" + +#, fuzzy +msgid "Member of netgroups" +msgstr "Ostalari-taldearen izena" + +msgid "Member of Sudo rule" +msgstr "" + +#, fuzzy +msgid "Member of HBAC rule" +msgstr "HBAC araua" + +msgid "Indirect Member users" +msgstr "" + +msgid "Indirect Member groups" +msgstr "" + +msgid "Indirect Member of group" +msgstr "" + +msgid "Indirect Member of netgroup" +msgstr "" + +msgid "Indirect Member of role" +msgstr "" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +msgid "Create a new group." +msgstr "Sortu talde berri bat." + +#, fuzzy +msgid "Create as a non-POSIX group" +msgstr "Sortu talde berri bat." + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +msgid "Add members to a group." +msgstr "" + +#, fuzzy +msgid "External member" +msgstr "Kanpoko erabiltzailea" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +msgid "member user" +msgstr "" + +msgid "users to add" +msgstr "" + +#, fuzzy +msgid "member group" +msgstr "Erabiltzaile-taldea" + +#, fuzzy +msgid "groups to add" +msgstr "taldeak" + +msgid "Members that could not be added" +msgstr "" + +msgid "Number of members added" +msgstr "" + +msgid "Delete group." +msgstr "Ezabatu taldea." + +msgid "Detach a managed group from a user." +msgstr "" + +msgid "Search for groups." +msgstr "Bilatu taldeak." + +#, fuzzy +msgid "search for private groups" +msgstr "Bilatu taldeak." + +#, fuzzy +msgid "search for POSIX groups" +msgstr "Bilatu taldeak." + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +#, fuzzy +msgid "search for non-POSIX groups" +msgstr "Bilatu taldeak." + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "user" +msgstr "" + +#, fuzzy +msgid "Search for groups with these member users." +msgstr "Bilatu taldeak." + +msgid "Search for groups without these member users." +msgstr "" + +msgid "group" +msgstr "taldea" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +#, fuzzy +msgid "netgroup" +msgstr "taldea" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +msgid "HBAC rule" +msgstr "HBAC araua" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +msgid "Modify a group." +msgstr "Aldatu talde bat." + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +#, fuzzy +msgid "Rename the group object" +msgstr "%(ldap_obj_name)s objektua berrizendatu" + +msgid "Remove members from a group." +msgstr "" + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "" + +msgid "Number of members removed" +msgstr "" + +msgid "Display information about a named group." +msgstr "" + msgid "" "\n" "Host-based access control\n" @@ -3472,6 +3792,9 @@ msgstr "" msgid "Rule name" msgstr "Berrizendatu" +msgid "Rule type" +msgstr "Arau-mota" + #, fuzzy msgid "Rule type (allow)" msgstr "Arau-mota" @@ -3497,13 +3820,28 @@ msgstr "Zerbitzuaren izena" msgid "Service category the rule applies to" msgstr "" +msgid "Enabled" +msgstr "Gaituta" + +msgid "User Groups" +msgstr "Erabiltzaile-taldeak" + +msgid "Host Groups" +msgstr "Ostalari-taldeak" + +msgid "Services" +msgstr "Zerbitzuak" + +msgid "Service Groups" +msgstr "Zerbitzu-taldeak" + +msgid "External host" +msgstr "Kanpoko ostalaria" + #, fuzzy msgid "Create a new HBAC rule." msgstr "Sortu talde berri bat." -msgid "Suppress processing of membership attributes." -msgstr "" - msgid "Add target hosts and hostgroups to an HBAC rule." msgstr "" @@ -3521,12 +3859,6 @@ msgstr "Ostalari-taldearen izena" msgid "host groups to add" msgstr "Ostalari-taldeak" -msgid "Members that could not be added" -msgstr "" - -msgid "Number of members added" -msgstr "" - msgid "Add services to an HBAC rule." msgstr "" @@ -3549,20 +3881,6 @@ msgstr "HBAC zerbitzu-taldearen deskribapena" msgid "Add users and groups to an HBAC rule." msgstr "" -msgid "member user" -msgstr "" - -msgid "users to add" -msgstr "" - -#, fuzzy -msgid "member group" -msgstr "Erabiltzaile-taldea" - -#, fuzzy -msgid "groups to add" -msgstr "taldeak" - #, fuzzy msgid "Delete an HBAC rule." msgstr "HBAC araua" @@ -3592,12 +3910,6 @@ msgstr "" msgid "host groups to remove" msgstr "" -msgid "Members that could not be removed" -msgstr "" - -msgid "Number of members removed" -msgstr "" - msgid "Remove service and service groups from an HBAC rule." msgstr "" @@ -3612,12 +3924,6 @@ msgstr "HBAC zerbitzu-taldearen deskribapena" msgid "Remove users and groups from an HBAC rule." msgstr "" -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - msgid "Display the properties of an HBAC rule." msgstr "" @@ -3644,6 +3950,15 @@ msgid "" " ipa hbacsvc-del tftp\n" msgstr "" +msgid "Service name" +msgstr "Zerbitzuaren izena" + +msgid "HBAC service" +msgstr "HBAC zerbitzua" + +msgid "HBAC service description" +msgstr "HBAC zerbitzuaren deskribapena" + #, fuzzy msgid "Member of HBAC service groups" msgstr "HBAC zerbitzu-taldearen deskribapena" @@ -3691,6 +4006,12 @@ msgid "" " ipa hbacsvcgroup-del login\n" msgstr "" +msgid "Service group name" +msgstr "Zerbitzu-taldearen izena" + +msgid "HBAC service group description" +msgstr "HBAC zerbitzu-taldearen deskribapena" + #, fuzzy msgid "Member HBAC service" msgstr "HBAC zerbitzua" @@ -3720,6 +4041,244 @@ msgstr "" msgid "Display information about an HBAC service group." msgstr "" +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +#, fuzzy +msgid "User name" +msgstr "Erabiltzaile-izena" + +#, fuzzy +msgid "Target host" +msgstr "Helburuko taldea" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +msgid "Warning" +msgstr "" + +msgid "Matched rules" +msgstr "" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + msgid "" "\n" "Hosts/Machines\n" @@ -3784,6 +4343,12 @@ msgid "" " ipa host-allow-create-keytab test2 --users=tuser1\n" msgstr "" +msgid "Host name" +msgstr "Ostalari-izena" + +msgid "A description of this host" +msgstr "Ostalari honen deskribapena" + msgid "Locality" msgstr "" @@ -3799,12 +4364,27 @@ msgstr "" msgid "Host hardware platform (e.g. \"Lenovo T61\")" msgstr "" +msgid "Operating system" +msgstr "Sistema eragilea" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "Ostalariaren sistema eragilea eta bertsioa (adibidez, \"Fedora 9\")" + +msgid "User password" +msgstr "Erabiltzailearen pasahitza" + msgid "Password used in bulk enrollment" msgstr "" msgid "Generate a random password to be used in bulk enrollment" msgstr "" +msgid "Random password" +msgstr "Ausazko pasahitza" + +msgid "Certificate" +msgstr "Ziurtagiria" + msgid "Base-64 encoded server certificate" msgstr "" @@ -3822,6 +4402,9 @@ msgstr "" msgid "SSH public key" msgstr "" +msgid "Class" +msgstr "Klasea" + msgid "" "Host category (semantics placed on this attribute are for local " "interpretation)" @@ -3846,36 +4429,10 @@ msgstr "" msgid "Member of host-groups" msgstr "Ostalari-taldearen izena" -msgid "Roles" -msgstr "" - -#, fuzzy -msgid "Member of netgroups" -msgstr "Ostalari-taldearen izena" - -msgid "Member of Sudo rule" -msgstr "" - -#, fuzzy -msgid "Member of HBAC rule" -msgstr "HBAC araua" - -msgid "Indirect Member of netgroup" -msgstr "" - #, fuzzy msgid "Indirect Member of host-group" msgstr "Ostalari-taldearen izena" -msgid "Indirect Member of role" -msgstr "" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - msgid "Keytab" msgstr "" @@ -3971,19 +4528,12 @@ msgstr "" msgid "Search for hosts without these member of host groups." msgstr "" -#, fuzzy -msgid "netgroup" -msgstr "taldea" - msgid "Search for hosts with these member of netgroups." msgstr "" msgid "Search for hosts without these member of netgroups." msgstr "" -msgid "role" -msgstr "" - msgid "Search for hosts with these member of roles." msgstr "" @@ -3996,18 +4546,12 @@ msgstr "" msgid "Search for hosts without these member of HBAC rules." msgstr "" -msgid "sudo rule" -msgstr "" - msgid "Search for hosts with these member of sudo rules." msgstr "" msgid "Search for hosts without these member of sudo rules." msgstr "" -msgid "user" -msgstr "" - msgid "Search for hosts with these enrolled by users." msgstr "" @@ -4079,6 +4623,15 @@ msgid "" " ipa hostgroup-del baltimore\n" msgstr "" +msgid "Host-group" +msgstr "Ostalari-taldea" + +msgid "Name of host-group" +msgstr "Ostalari-taldearen izena" + +msgid "A description of this host-group" +msgstr "Ostalari-talde honen deskribapena" + msgid "Member hosts" msgstr "" @@ -4157,6 +4710,235 @@ msgstr "" msgid "Display information about a hostgroup." msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +#, fuzzy +msgid "Range name" +msgstr "Berrizendatu" + +msgid "First Posix ID of the range" +msgstr "" + +msgid "Number of IDs in the range" +msgstr "" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +#, fuzzy +msgid "Range type" +msgstr "Arau-mota" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "Delete an ID range." +msgstr "" + +#, fuzzy +msgid "Search for ranges." +msgstr "Bilatu taldeak." + +#, fuzzy +msgid "Modify ID range." +msgstr "Aldatu talde bat." + +msgid "Display information about a range." +msgstr "" + msgid "" "\n" "ID Views\n" @@ -4173,14 +4955,6 @@ msgstr "" msgid "Anchor to override" msgstr "" -#, fuzzy -msgid "Group name" -msgstr "Taldea" - -#, fuzzy -msgid "GID" -msgstr "UID" - msgid "Group ID Number" msgstr "" @@ -4188,6 +4962,9 @@ msgstr "" msgid "User login" msgstr "Erabiltzaile-taldea" +msgid "UID" +msgstr "UID" + #, fuzzy msgid "User ID Number" msgstr "Bilagailu-zenbakia" @@ -4415,10 +5192,6 @@ msgid "" " ipa krbtpolicy-mod admin --maxlife=3600\n" msgstr "" -#, fuzzy -msgid "User name" -msgstr "Erabiltzaile-izena" - msgid "Manage ticket policy for specific user" msgstr "" @@ -4679,9 +5452,6 @@ msgid "" "retrieve and print all attributes from the server. Affects command output." msgstr "" -msgid "Dictionary mapping variable name to value" -msgstr "" - msgid "Total number of variables env (>= count)" msgstr "" @@ -4730,6 +5500,9 @@ msgstr "Zerbitzu-taldearen izena" msgid "Netgroup description" msgstr "HBAC zerbitzu-taldearen deskribapena" +msgid "NIS domain name" +msgstr "NIS domeinu-izena" + msgid "IPA unique ID" msgstr "" @@ -4886,6 +5659,153 @@ msgstr "" msgid "Show the current OTP configuration." msgstr "" +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Manager" +msgstr "Kudeatzailea" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +#, fuzzy +msgid "Disabled" +msgstr "Gaituta" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +msgid "Validity start" +msgstr "" + +msgid "First date/time the token can be used" +msgstr "" + +msgid "Validity end" +msgstr "" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "" + +msgid "Token model (informational only)" +msgstr "" + +#, fuzzy +msgid "Serial" +msgstr "Serie-zenbakia" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +msgid "Add a new OTP token." +msgstr "" + +msgid "(deprecated)" +msgstr "" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +msgid "Delete an OTP token." +msgstr "" + +#, fuzzy +msgid "Search for OTP token." +msgstr "Bilatu taldeak." + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +#, fuzzy +msgid "Modify a OTP token." +msgstr "Aldatu talde bat." + +#, fuzzy +msgid "Rename the OTP token object" +msgstr "%(ldap_obj_name)s objektua berrizendatu" + +msgid "Display information about an OTP token." +msgstr "" + msgid "" "\n" "YubiKey Tokens\n" @@ -4925,6 +5845,9 @@ msgstr "" msgid "Set a user's password." msgstr "Erabiltzailearen pasahitza" +msgid "New Password" +msgstr "Pasahitz berria" + #, fuzzy msgid "Current Password" msgstr "Berrezarri pasahitza" @@ -5337,6 +6260,9 @@ msgid "" " ipa pwpolicy-mod --minclasses=2 localadmins\n" msgstr "" +msgid "Group" +msgstr "Taldea" + msgid "Manage password policy for specific group" msgstr "" @@ -5352,6 +6278,9 @@ msgstr "" msgid "Minimum password lifetime (in hours)" msgstr "" +msgid "History size" +msgstr "Historiaren tamaina" + #, fuzzy msgid "Password history size" msgstr "Historiaren tamaina" @@ -5413,6 +6342,9 @@ msgstr "Aldatu talde bat." msgid "Display information about password policy." msgstr "" +msgid "User" +msgstr "Erabiltzailea" + msgid "Display effective policy for a specific user" msgstr "" @@ -5592,13 +6524,6 @@ msgstr "Berrizendatu" msgid "A description of this role-group" msgstr "Ostalari-talde honen deskribapena" -msgid "Member users" -msgstr "" - -#, fuzzy -msgid "Member groups" -msgstr "Erabiltzaile-taldea" - msgid "Privileges" msgstr "" @@ -5878,9 +6803,6 @@ msgid "" "httpd.keytab\n" msgstr "" -msgid "Principal" -msgstr "" - #, fuzzy msgid "Service principal" msgstr "Zerbitzuaren izena" @@ -6622,9 +7544,8 @@ msgid "" " ipa group-show localadmins\n" msgstr "" -#, fuzzy -msgid "Group description" -msgstr "deskribapena" +msgid "Sudo Command Group" +msgstr "Sudo komando-taldea" #, fuzzy msgid "Commands" @@ -6680,1050 +7601,231 @@ msgstr "Sudo komando-taldea" msgid "" "\n" -"Users\n" +"Sudo Rules\n" "\n" -"Manage user entries. All users are POSIX users.\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" "\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" "\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" "\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" "\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" "\n" "EXAMPLES:\n" "\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" "\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" "\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" "\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" "\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" "\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -msgid "Initials" -msgstr "" - -msgid "Kerberos principal" -msgstr "" - -msgid "Kerberos principal expiration" -msgstr "" - -msgid "Prompt to set the user password" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" msgstr "" #, fuzzy -msgid "Generate a random user password" -msgstr "Ausazko pasahitza" +msgid "Command category" +msgstr "Komandoaren izena" -msgid "User ID Number (system will assign one if not provided)" +msgid "Command category the rule applies to" msgstr "" -msgid "City" +msgid "RunAs User category" msgstr "" -msgid "State/Province" +msgid "RunAs User category the rule applies to" msgstr "" -msgid "ZIP" +msgid "RunAs Group category" msgstr "" -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "" - -msgid "Car License" +msgid "RunAs Group category the rule applies to" msgstr "" #, fuzzy -msgid "Account disabled" -msgstr "Kontuaren ezarpenak" +msgid "Sudo order" +msgstr "Sudo komandoak" -msgid "User authentication types" +msgid "integer to order the Sudo rules" msgstr "" -msgid "Types of supported user authentication" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -#, fuzzy -msgid "RADIUS proxy configuration" -msgstr "Konfigurazioa" - -msgid "RADIUS proxy username" -msgstr "" - -#, fuzzy -msgid "Department Number" -msgstr "Bilagailu-zenbakia" - -#, fuzzy -msgid "Employee Number" -msgstr "Telefono-zenbakia" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -#, fuzzy -msgid "Member of groups" -msgstr "Bilatu taldeak." - -msgid "Indirect Member of group" -msgstr "" - -msgid "Kerberos keys available" -msgstr "" - -#, fuzzy -msgid "Add a new user." -msgstr "Gehitu eta itxi" - -#, fuzzy -msgid "Don't create user private group" -msgstr "Erabiltzaile-talde lehenetsia" - -#, fuzzy -msgid "Delete a user." -msgstr "Ezabatu taldea." - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -#, fuzzy -msgid "Search for users." -msgstr "Bilatu taldeak." - -msgid "Self" -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -#, fuzzy -msgid "Modify a user." -msgstr "Aldatu talde bat." - -#, fuzzy -msgid "Rename the user object" -msgstr "%(ldap_obj_name)s objektua berrizendatu" - -msgid "Display information about a user." -msgstr "" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -#, fuzzy -msgid "A description of this auto member rule" -msgstr "Ostalari honen deskribapena" - -#, fuzzy -msgid "Default (fallback) Group" -msgstr "Erabiltzaile-talde lehenetsia" - -#, fuzzy -msgid "Default group for entries to land" -msgstr "Erabiltzaile berrientzako talde lehenetsia" - -msgid "Add an automember rule." -msgstr "" - -msgid "Automember Rule" -msgstr "" - -msgid "Grouping Type" -msgstr "" - -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -#, fuzzy -msgid "Attribute Key" -msgstr "Atributua" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -msgid "Delete an automember rule." -msgstr "" - -#, fuzzy -msgid "Search for automember rules." -msgstr "Bilatu taldeak." - -msgid "Modify an automember rule." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -msgid "Number of conditions removed" -msgstr "" - -msgid "Display information about an automember rule." -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -msgid "Search for existing certificates." -msgstr "" - -msgid "Match cn attribute in subject" -msgstr "" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -#, fuzzy -msgid "minimum serial number" -msgstr "Serie-zenbakia" - -#, fuzzy -msgid "maximum serial number" -msgstr "Serie-zenbakia" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -msgid "Submit a certificate signing request." -msgstr "" - -msgid "CSR" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -#, fuzzy -msgid "Revoke a certificate." -msgstr "Ziurtagiri berria" - -msgid "Retrieve an existing certificate." -msgstr "" - -msgid "File to store the certificate in." -msgstr "" - -msgid "Check the status of a certificate signing request." -msgstr "" - -msgid "Request id" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "GID (use this option to set it manually)" -msgstr "" - -msgid "Indirect Member users" -msgstr "" - -msgid "Indirect Member groups" -msgstr "" - -#, fuzzy -msgid "Create as a non-POSIX group" -msgstr "Sortu talde berri bat." - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Add members to a group." -msgstr "" - -#, fuzzy -msgid "External member" +msgid "External User" msgstr "Kanpoko erabiltzailea" -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -msgid "Detach a managed group from a user." +msgid "External User the rule applies to (sudorule-find only)" msgstr "" #, fuzzy -msgid "search for private groups" +msgid "Host Masks" +msgstr "Ostalariak" + +#, fuzzy +msgid "Sudo Allow Commands" +msgstr "Sudo komandoak" + +#, fuzzy +msgid "Sudo Deny Commands" +msgstr "Sudo komandoak" + +#, fuzzy +msgid "Sudo Allow Command Groups" +msgstr "Sudo komando-taldea" + +#, fuzzy +msgid "Sudo Deny Command Groups" +msgstr "Sudo komando-taldea" + +#, fuzzy +msgid "RunAs Users" +msgstr "Exekutatu kanpoko erabiltzaile bezala" + +msgid "Run as a user" +msgstr "" + +msgid "Groups of RunAs Users" +msgstr "" + +msgid "Run as any user within a specified group" +msgstr "" + +msgid "RunAs External User" +msgstr "Exekutatu kanpoko erabiltzaile bezala" + +msgid "External User the commands can run as (sudorule-find only)" +msgstr "" + +#, fuzzy +msgid "External Groups of RunAs Users" +msgstr "Kanpoko erabiltzailea" + +msgid "External Groups of users that the command can run as" +msgstr "" + +#, fuzzy +msgid "RunAs Groups" +msgstr "Ostalari-taldeak" + +msgid "Run with the gid of a specified POSIX group" +msgstr "" + +msgid "RunAs External Group" +msgstr "Exekutatu kanpoko talde bezala" + +msgid "External Group the commands can run as (sudorule-find only)" +msgstr "" + +msgid "Sudo Option" +msgstr "Sudo aukera" + +#, fuzzy +msgid "Create new Sudo Rule." +msgstr "Sortu talde berri bat." + +msgid "Add commands and sudo command groups affected by Sudo Rule." +msgstr "" + +#, fuzzy +msgid "member sudo command group" +msgstr "Sudo komando-taldea" + +#, fuzzy +msgid "sudo command groups to add" +msgstr "Sudo komando-taldea" + +msgid "Add hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "host masks of allowed hosts" +msgstr "" + +msgid "Add an option to the Sudo Rule." +msgstr "" + +msgid "Add group for Sudo to execute as." +msgstr "" + +msgid "Add users and groups for Sudo to execute as." +msgstr "" + +msgid "Add users and groups affected by Sudo Rule." +msgstr "" + +#, fuzzy +msgid "Delete Sudo Rule." +msgstr "Ezabatu taldea." + +msgid "Disable a Sudo Rule." +msgstr "" + +msgid "Enable a Sudo Rule." +msgstr "" + +#, fuzzy +msgid "Search for Sudo Rule." msgstr "Bilatu taldeak." -#, fuzzy -msgid "search for POSIX groups" -msgstr "Bilatu taldeak." - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" +msgid "Results should contain primary key attribute only (\"sudorule-name\")" msgstr "" #, fuzzy -msgid "search for non-POSIX groups" -msgstr "Bilatu taldeak." +msgid "Modify Sudo Rule." +msgstr "Aldatu talde bat." -msgid "Results should contain primary key attribute only (\"group-name\")" +msgid "Remove commands and sudo command groups affected by Sudo Rule." msgstr "" #, fuzzy -msgid "Search for groups with these member users." -msgstr "Bilatu taldeak." +msgid "sudo command groups to remove" +msgstr "Sudo komando-taldea" -msgid "Search for groups without these member users." +msgid "Remove hosts and hostgroups affected by Sudo Rule." msgstr "" -msgid "Search for groups with these member groups." +msgid "Remove an option from Sudo Rule." msgstr "" -msgid "Search for groups without these member groups." +msgid "Remove group for Sudo to execute as." msgstr "" -msgid "Search for groups with these member of groups." +msgid "Remove users and groups for Sudo to execute as." msgstr "" -msgid "Search for groups without these member of groups." -msgstr "" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" +msgid "Remove users and groups affected by Sudo Rule." msgstr "" #, fuzzy -msgid "Rename the group object" -msgstr "%(ldap_obj_name)s objektua berrizendatu" - -msgid "Remove members from a group." -msgstr "" - -msgid "Display information about a named group." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -#, fuzzy -msgid "Target host" -msgstr "Helburuko taldea" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Warning" -msgstr "" - -msgid "Matched rules" -msgstr "" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" +msgid "Display Sudo Rule." +msgstr "Bistaratu izena" msgid "" "\n" @@ -7905,10 +8007,6 @@ msgstr "" msgid "Size of the ID range reserved for the trusted domain" msgstr "" -#, fuzzy -msgid "Range type" -msgstr "Arau-mota" - msgid "" "Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" msgstr "" @@ -7972,6 +8070,528 @@ msgstr "" msgid "Modify trustdomain of the trust" msgstr "" +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "Izena" + +msgid "Last name" +msgstr "Abizena" + +msgid "Full name" +msgstr "Izen osoa" + +msgid "Display name" +msgstr "Bistaratu izena" + +msgid "Initials" +msgstr "" + +msgid "Kerberos principal" +msgstr "" + +msgid "Kerberos principal expiration" +msgstr "" + +msgid "Email address" +msgstr "E-posta helbidea" + +msgid "Prompt to set the user password" +msgstr "" + +#, fuzzy +msgid "Generate a random user password" +msgstr "Ausazko pasahitza" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" + +msgid "Street address" +msgstr "Kalea" + +msgid "City" +msgstr "" + +msgid "State/Province" +msgstr "" + +msgid "ZIP" +msgstr "" + +msgid "Telephone Number" +msgstr "Telefono-zenbakia" + +msgid "Mobile Telephone Number" +msgstr "Mugikor-zenbakia" + +msgid "Pager Number" +msgstr "Bilagailu-zenbakia" + +msgid "Fax Number" +msgstr "Fax-zenbakia" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "" + +msgid "Car License" +msgstr "" + +#, fuzzy +msgid "Account disabled" +msgstr "Kontuaren ezarpenak" + +msgid "User authentication types" +msgstr "" + +msgid "Types of supported user authentication" +msgstr "" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +#, fuzzy +msgid "RADIUS proxy configuration" +msgstr "Konfigurazioa" + +msgid "RADIUS proxy username" +msgstr "" + +#, fuzzy +msgid "Department Number" +msgstr "Bilagailu-zenbakia" + +#, fuzzy +msgid "Employee Number" +msgstr "Telefono-zenbakia" + +msgid "Employee Type" +msgstr "" + +msgid "Preferred Language" +msgstr "" + +msgid "Kerberos keys available" +msgstr "" + +#, fuzzy +msgid "Add a new user." +msgstr "Gehitu eta itxi" + +#, fuzzy +msgid "Don't create user private group" +msgstr "Erabiltzaile-talde lehenetsia" + +#, fuzzy +msgid "Delete a user." +msgstr "Ezabatu taldea." + +msgid "Disable a user account." +msgstr "" + +msgid "Enable a user account." +msgstr "" + +#, fuzzy +msgid "Search for users." +msgstr "Bilatu taldeak." + +msgid "Self" +msgstr "" + +msgid "Display user record for current Kerberos principal" +msgstr "" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +msgid "Search for users with these member of HBAC rules." +msgstr "" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +#, fuzzy +msgid "Modify a user." +msgstr "Aldatu talde bat." + +#, fuzzy +msgid "Rename the user object" +msgstr "%(ldap_obj_name)s objektua berrizendatu" + +msgid "Display information about a user." +msgstr "" + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + +msgid "Time limit of search in seconds (0 is unlimited)" +msgstr "" + +msgid "Maximum number of entries returned (0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which principals are\n" +"permitted to have certificates issued using a given certificate\n" +"profile.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile:\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +#, fuzzy +msgid "ACL name" +msgstr "ACI izena" + +msgid "Profile category" +msgstr "" + +msgid "Profile category the ACL applies to" +msgstr "" + +msgid "User category the ACL applies to" +msgstr "" + +msgid "Host category the ACL applies to" +msgstr "" + +msgid "Service category the ACL applies to" +msgstr "" + +msgid "Profiles" +msgstr "" + +#, fuzzy +msgid "Create a new CA ACL." +msgstr "Sortu talde berri bat." + +msgid "Add target hosts and hostgroups to a CA ACL." +msgstr "" + +msgid "Add profiles to a CA ACL." +msgstr "" + +#, fuzzy +msgid "member Certificate Profile" +msgstr "Ziurtagiri berria" + +msgid "Certificate Profiles to add" +msgstr "" + +msgid "Add services to a CA ACL." +msgstr "" + +msgid "Add users and groups to a CA ACL." +msgstr "" + +msgid "Delete a CA ACL." +msgstr "" + +msgid "Disable a CA ACL." +msgstr "" + +msgid "Enable a CA ACL." +msgstr "" + +#, fuzzy +msgid "Search for CA ACLs." +msgstr "Bilatu taldeak." + +#, fuzzy +msgid "Modify a CA ACL." +msgstr "Aldatu talde bat." + +msgid "Remove target hosts and hostgroups from a CA ACL." +msgstr "" + +msgid "Remove profiles from a CA ACL." +msgstr "" + +msgid "Certificate Profiles to remove" +msgstr "" + +msgid "Remove services from a CA ACL." +msgstr "" + +msgid "Remove users and groups from a CA ACL." +msgstr "" + +msgid "Display the properties of a CA ACL." +msgstr "" + +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "Profile ID" +msgstr "" + +msgid "Certificate Profile to use" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +#, fuzzy +msgid "Profile description" +msgstr "deskribapena" + +#, fuzzy +msgid "Brief description of this profile" +msgstr "Ostalari honen deskribapena" + +#, fuzzy +msgid "Store issued certificates" +msgstr "Ziurtagiri berria" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +#, fuzzy +msgid "Search for Certificate Profiles." +msgstr "Bilatu taldeak." + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + +msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" +msgstr "" + +msgid "Maximum number of records to search (-1 or 0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Raise the IPA Domain Level.\n" +msgstr "" + +msgid "Query current Domain Level." +msgstr "" + +msgid "Current domain level:" +msgstr "" + +msgid "Change current Domain Level." +msgstr "" + +msgid "Domain Level" +msgstr "" + +msgid "Add certificates to host entry" +msgstr "" + +msgid "Remove certificates from host entry" +msgstr "" + msgid "" "\n" "ID ranges\n" @@ -8103,6 +8723,7 @@ msgid "" "user. RIDs are unique in a domain, 32bit values and are used for users and\n" "groups.\n" "\n" +"=======\n" "WARNING:\n" "\n" "DNA plugin in 389-ds will allocate IDs based on the ranges configured for " @@ -8117,31 +8738,7 @@ msgid "" "IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " "be\n" "modified to match the new range.\n" -msgstr "" - -#, fuzzy -msgid "Range name" -msgstr "Berrizendatu" - -msgid "First Posix ID of the range" -msgstr "" - -msgid "Number of IDs in the range" -msgstr "" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +"=======\n" msgstr "" msgid "" @@ -8165,546 +8762,46 @@ msgid "" "\n" " must be given to add a new range for a trusted AD domain.\n" "\n" -" WARNING:\n" +"=======\n" +"WARNING:\n" "\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " "based\n" -" on the local ranges set via this family of commands.\n" +"on the local ranges set via this family of commands.\n" "\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" " " msgstr "" -msgid "Delete an ID range." -msgstr "" - -#, fuzzy -msgid "Search for ranges." -msgstr "Bilatu taldeak." - -#, fuzzy -msgid "Modify ID range." -msgstr "Aldatu talde bat." - -msgid "Display information about a range." -msgstr "" - msgid "" "\n" -"OTP Tokens\n" +"Modify ID range.\n" "\n" -"Manage OTP tokens.\n" +"=======\n" +"WARNING:\n" "\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" "\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -#, fuzzy -msgid "Disabled" -msgstr "Gaituta" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -msgid "Validity start" -msgstr "" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Validity end" -msgstr "" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -#, fuzzy -msgid "Serial" -msgstr "Serie-zenbakia" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -msgid "Add a new OTP token." -msgstr "" - -msgid "(deprecated)" -msgstr "" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -msgid "Delete an OTP token." -msgstr "" - -#, fuzzy -msgid "Search for OTP token." -msgstr "Bilatu taldeak." - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -#, fuzzy -msgid "Modify a OTP token." -msgstr "Aldatu talde bat." - -#, fuzzy -msgid "Rename the OTP token object" -msgstr "%(ldap_obj_name)s objektua berrizendatu" - -msgid "Display information about an OTP token." -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -#, fuzzy -msgid "Command category" -msgstr "Komandoaren izena" - -msgid "Command category the rule applies to" -msgstr "" - -msgid "RunAs User category" -msgstr "" - -msgid "RunAs User category the rule applies to" -msgstr "" - -msgid "RunAs Group category" -msgstr "" - -msgid "RunAs Group category the rule applies to" -msgstr "" - -#, fuzzy -msgid "Sudo order" -msgstr "Sudo komandoak" - -msgid "integer to order the Sudo rules" -msgstr "" - -msgid "External User the rule applies to (sudorule-find only)" -msgstr "" - -#, fuzzy -msgid "Host Masks" -msgstr "Ostalariak" - -#, fuzzy -msgid "Sudo Allow Commands" -msgstr "Sudo komandoak" - -#, fuzzy -msgid "Sudo Deny Commands" -msgstr "Sudo komandoak" - -#, fuzzy -msgid "Sudo Allow Command Groups" -msgstr "Sudo komando-taldea" - -#, fuzzy -msgid "Sudo Deny Command Groups" -msgstr "Sudo komando-taldea" - -#, fuzzy -msgid "RunAs Users" -msgstr "Exekutatu kanpoko erabiltzaile bezala" - -msgid "Run as a user" -msgstr "" - -msgid "Groups of RunAs Users" -msgstr "" - -msgid "Run as any user within a specified group" -msgstr "" - -msgid "External User the commands can run as (sudorule-find only)" -msgstr "" - -#, fuzzy -msgid "External Groups of RunAs Users" -msgstr "Kanpoko erabiltzailea" - -msgid "External Groups of users that the command can run as" -msgstr "" - -#, fuzzy -msgid "RunAs Groups" -msgstr "Ostalari-taldeak" - -msgid "Run with the gid of a specified POSIX group" -msgstr "" - -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "" - -#, fuzzy -msgid "Create new Sudo Rule." -msgstr "Sortu talde berri bat." - -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "" - -#, fuzzy -msgid "member sudo command group" -msgstr "Sudo komando-taldea" - -#, fuzzy -msgid "sudo command groups to add" -msgstr "Sudo komando-taldea" - -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "host masks of allowed hosts" -msgstr "" - -msgid "Add an option to the Sudo Rule." -msgstr "" - -msgid "Add group for Sudo to execute as." -msgstr "" - -msgid "Add users and groups for Sudo to execute as." -msgstr "" - -msgid "Add users and groups affected by Sudo Rule." -msgstr "" - -#, fuzzy -msgid "Delete Sudo Rule." -msgstr "Ezabatu taldea." - -msgid "Disable a Sudo Rule." -msgstr "" - -msgid "Enable a Sudo Rule." -msgstr "" - -#, fuzzy -msgid "Search for Sudo Rule." -msgstr "Bilatu taldeak." - -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "" - -#, fuzzy -msgid "Modify Sudo Rule." -msgstr "Aldatu talde bat." - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "" - -#, fuzzy -msgid "sudo command groups to remove" -msgstr "Sudo komando-taldea" - -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "Remove an option from Sudo Rule." -msgstr "" - -msgid "Remove group for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups affected by Sudo Rule." -msgstr "" - -#, fuzzy -msgid "Display Sudo Rule." -msgstr "Bistaratu izena" - -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "" - -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which principals are\n" -"permitted to have certificates issued using a given certificate\n" -"profile.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -#, fuzzy -msgid "ACL name" -msgstr "ACI izena" - -msgid "Profile category" -msgstr "" - -msgid "Profile category the ACL applies to" -msgstr "" - -msgid "User category the ACL applies to" -msgstr "" - -msgid "Host category the ACL applies to" -msgstr "" - -msgid "Service category the ACL applies to" -msgstr "" - -msgid "Profiles" -msgstr "" - -#, fuzzy -msgid "Create a new CA ACL." -msgstr "Sortu talde berri bat." - -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "" - -msgid "Add profiles to a CA ACL." -msgstr "" - -#, fuzzy -msgid "member Certificate Profile" -msgstr "Ziurtagiri berria" - -msgid "Certificate Profiles to add" -msgstr "" - -msgid "Add services to a CA ACL." -msgstr "" - -msgid "Add users and groups to a CA ACL." -msgstr "" - -msgid "Delete a CA ACL." -msgstr "" - -msgid "Disable a CA ACL." -msgstr "" - -msgid "Enable a CA ACL." -msgstr "" - -#, fuzzy -msgid "Search for CA ACLs." -msgstr "Bilatu taldeak." - -#, fuzzy -msgid "Modify a CA ACL." -msgstr "Aldatu talde bat." - -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "" - -msgid "Remove profiles from a CA ACL." -msgstr "" - -msgid "Certificate Profiles to remove" -msgstr "" - -msgid "Remove services from a CA ACL." -msgstr "" - -msgid "Remove users and groups from a CA ACL." -msgstr "" - -msgid "Display the properties of a CA ACL." -msgstr "" - -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "" - -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Raise the IPA Domain Level.\n" -msgstr "" - -msgid "Query current Domain Level." -msgstr "" - -msgid "Current domain level:" -msgstr "" - -msgid "Change current Domain Level." -msgstr "" - -msgid "Domain Level" -msgstr "" - -msgid "Add certificates to host entry" -msgstr "" - -msgid "Remove certificates from host entry" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " msgstr "" msgid "Fallback to AD DC LDAP" @@ -8736,6 +8833,9 @@ msgid "" "to onelevel" msgstr "" +msgid "Remove users that can manage this token." +msgstr "" + msgid "Target DN subtree" msgstr "" @@ -9187,6 +9287,13 @@ msgid "" " " msgstr "" +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + msgid "Preserved user" msgstr "" @@ -9491,336 +9598,6 @@ msgstr "" msgid "Display information about a vault container." msgstr "" -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "Profile ID" -msgstr "" - -msgid "Certificate Profile to use" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -#, fuzzy -msgid "Profile description" -msgstr "deskribapena" - -#, fuzzy -msgid "Brief description of this profile" -msgstr "Ostalari honen deskribapena" - -#, fuzzy -msgid "Store issued certificates" -msgstr "Ziurtagiri berria" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -#, fuzzy -msgid "Search for Certificate Profiles." -msgstr "Bilatu taldeak." - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - msgid "Resolve a host name in DNS. (Deprecated)" msgstr "" @@ -11057,6 +10834,9 @@ msgstr "" msgid "Register to the entitlement system." msgstr "" +msgid "Username" +msgstr "Erabiltzaile-izena" + msgid "Enrollment UUID (not implemented)" msgstr "" @@ -11506,6 +11286,192 @@ msgid "" " ipa hostgroup-del baltimore\n" msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + msgid "" "Comma-separated list of objectclasses used to search for user entries in DS" msgstr "" @@ -11814,198 +11780,6 @@ msgstr "" msgid "comma-separated list of sudo commands to remove" msgstr "" -msgid "Active directory domain administrator's password" -msgstr "" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - msgid "" "\n" "Sudo Rules\n" @@ -12047,20 +11821,19 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" -msgid "A dictionary representing an LDAP entry" +msgid "Active directory domain administrator's password" msgstr "" -#, fuzzy -msgid "A list of LDAP entries" -msgstr "ACI balioen zerrenda bat" - -msgid "All commands should at least have a result" +msgid "GECOS field" msgstr "" #, python-format msgid "Enter %(label)s again to verify: " msgstr "" +msgid "Passwords do not match!" +msgstr "Pasahitzak ez datoz bat!" + msgid "No matching entries found" msgstr "" @@ -12081,6 +11854,9 @@ msgstr "" msgid " ipa --help" msgstr "" +msgid "Command name" +msgstr "Komandoaren izena" + msgid "Positional arguments" msgstr "" @@ -12095,108 +11871,374 @@ msgid "No file to read" msgstr "" #, python-format -msgid "%(filename)s: file not found" -msgstr "" - -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -msgid "Filename is empty" +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" #, python-format -msgid "Permission denied: %(file)s" +msgid "unknown error %(code)d from %(server)s: %(error)s" msgstr "" -msgid "empty DNS label" +msgid "an internal error has occurred" +msgstr "barne-errore bat gertatu da" + +#, fuzzy, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "barne-errore bat gertatu da" + +#, python-format +msgid "unknown command '%(name)s'" msgstr "" -msgid "DNS label cannot be longer that 63 characters" +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "Baliogabeko JSON-RPC eskaera: %(error)s" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" msgstr "" #, python-format msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "" - -msgid "cannot be longer that {} characters" -msgstr "" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "" - -msgid "invalid SSH public key" -msgstr "" - -msgid "options are not allowed" -msgstr "" - -msgid "invalid hostmask" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." msgstr "" #, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Kerberos errorea: %(major)s/%(minor)s" + +msgid "did not receive Kerberos credentials" msgstr "" #, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "" + +msgid "No credentials cache found" +msgstr "" + +msgid "Ticket expired" +msgstr "" + +msgid "Credentials cache permissions incorrect" +msgstr "" + +msgid "Bad format in credentials cache" +msgstr "" + +msgid "Cannot resolve KDC for requested realm" +msgstr "" + +msgid "Session error" +msgstr "" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "" + +#, python-format +msgid "'%(name)s' is required" +msgstr "" + +#, fuzzy, python-format +msgid "invalid '%(name)s': %(error)s" +msgstr "Baliogabeko JSON-RPC eskaera: %(error)s" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "" + +msgid "Passwords do not match" +msgstr "Pasahitzak ez datoz bat" + +#, fuzzy +msgid "Command not implemented" +msgstr "Komandoaren izena" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "" + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "" + +#, python-format +msgid "%(reason)s" +msgstr "%(reason)s" + +msgid "This entry already exists" +msgstr "Sarrera hau dagoeneko existitzen da" + +msgid "You must enroll a host in order to create a host service" msgstr "" #, python-format msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" + +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "" + +msgid "This command requires root access" +msgstr "" + +msgid "This is already a posix group" msgstr "" #, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" - -msgid "invalid escape code in domain name" -msgstr "" - -msgid "domain name cannot be longer than 255 characters" -msgstr "" - -msgid "DNS label cannot be longer than 63 characters" +msgid "Principal is not of the form user@REALM: '%(principal)s'" msgstr "" #, fuzzy -msgid "invalid domain name" -msgstr "NIS domeinu-izena" +msgid "This entry is already enabled" +msgstr "Sarrera hau dagoeneko existitzen da" + +#, fuzzy +msgid "This entry is already disabled" +msgstr "Sarrera hau dagoeneko existitzen da" + +msgid "This entry cannot be enabled or disabled" +msgstr "" + +msgid "This entry is not a member" +msgstr "" + +msgid "A group may not be a member of itself" +msgstr "" + +#, fuzzy +msgid "This entry is already a member" +msgstr "Sarrera hau dagoeneko existitzen da" #, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgid "Base64 decoding failed: %(reason)s" +msgstr "" + +msgid "A group may not be added as a member of itself" +msgstr "" + +#, fuzzy +msgid "The default users group cannot be removed" +msgstr "Erabiltzaile-talde lehenetsia" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" + +msgid "A managed group cannot have a password policy." msgstr "" #, python-format -msgid "invalid domain-name: %s" +msgid "'%(entry)s' doesn't have a certificate." msgstr "" #, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgid "Unable to create private group. A group '%(group)s' already exists." msgstr "" #, python-format -msgid "%(port)s is not a valid port" -msgstr "" - msgid "" -"at least one value equal to the canonical principal name must be present" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" msgstr "" -msgid "realm or UPN suffix overlaps with trusted domain namespace" +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" + +msgid "This group already allows external members" +msgstr "" + +msgid "This group cannot be posix because it is external" +msgstr "" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "" + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" + +#, python-format +msgid "'%(attr)s' already contains one or more values" +msgstr "" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "" + +msgid "change collided with another change" +msgstr "" + +msgid "no modifications to be performed" +msgstr "" + +#, python-format +msgid "%(desc)s: %(info)s" +msgstr "%(desc)s: %(info)s" + +msgid "limits exceeded for this query" +msgstr "" + +#, python-format +msgid "%(info)s" +msgstr "%(info)s" + +msgid "modifying primary key is not allowed" +msgstr "" + +#, python-format +msgid "%(attr)s: Only one value allowed." +msgstr "" + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "" + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "" + +msgid "Not allowed on non-leaf entry" +msgstr "" + +msgid "LDAP timeout" +msgstr "" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "" + +msgid "Configured time limit exceeded" +msgstr "" + +msgid "Configured size limit exceeded" +msgstr "" + +msgid "Configured administrative server limit exceeded" +msgstr "" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "" + +#, fuzzy, python-format +msgid "Certificate format error: %(error)s" +msgstr "Sintaxi-errorea: %(error)s" + +msgid "Already registered" +msgstr "" + +msgid "Not registered yet" +msgstr "" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "" + +#, fuzzy, python-format +msgid "%(exception)s" +msgstr "%(reason)s" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" + +msgid "Results are truncated, try a more specific search" +msgstr "" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "" + +msgid "Client version. Used to determine if server will accept request." msgstr "" msgid "Additional instructions:" @@ -12356,342 +12398,24 @@ msgstr "" msgid "The certificate for %(ca)s is not available on this server." msgstr "" -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." +#, python-format +msgid "%(count)d variables" msgstr "" #, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "" - -#, fuzzy, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "barne-errore bat gertatu da" - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "" - -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" - -msgid "did not receive Kerberos credentials" -msgstr "" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "" - -msgid "No credentials cache found" -msgstr "" - -msgid "Ticket expired" -msgstr "" - -msgid "Credentials cache permissions incorrect" -msgstr "" - -msgid "Bad format in credentials cache" -msgstr "" - -msgid "Cannot resolve KDC for requested realm" -msgstr "" - -msgid "Session error" -msgstr "" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" msgstr[0] "" msgstr[1] "" -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "" - -#, python-format -msgid "'%(name)s' is required" -msgstr "" - -#, fuzzy, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "Baliogabeko JSON-RPC eskaera: %(error)s" - -#, python-format -msgid "api has no such namespace: '%(name)s'" +msgid "A dictionary representing an LDAP entry" msgstr "" #, fuzzy -msgid "Command not implemented" -msgstr "Komandoaren izena" +msgid "A list of LDAP entries" +msgstr "ACI balioen zerrenda bat" -msgid "Client is not configured. Run ipa-client-install." -msgstr "" - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" - -msgid "You must enroll a host in order to create a host service" -msgstr "" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "" - -msgid "This command requires root access" -msgstr "" - -msgid "This is already a posix group" -msgstr "" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "" - -#, fuzzy -msgid "This entry is already enabled" -msgstr "Sarrera hau dagoeneko existitzen da" - -#, fuzzy -msgid "This entry is already disabled" -msgstr "Sarrera hau dagoeneko existitzen da" - -msgid "This entry cannot be enabled or disabled" -msgstr "" - -msgid "This entry is not a member" -msgstr "" - -msgid "A group may not be a member of itself" -msgstr "" - -#, fuzzy -msgid "This entry is already a member" -msgstr "Sarrera hau dagoeneko existitzen da" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "" - -msgid "A group may not be added as a member of itself" -msgstr "" - -#, fuzzy -msgid "The default users group cannot be removed" -msgstr "Erabiltzaile-talde lehenetsia" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" - -msgid "A managed group cannot have a password policy." -msgstr "" - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" - -msgid "This group already allows external members" -msgstr "" - -msgid "This group cannot be posix because it is external" -msgstr "" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" - -#, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "" - -msgid "change collided with another change" -msgstr "" - -msgid "no modifications to be performed" -msgstr "" - -msgid "limits exceeded for this query" -msgstr "" - -msgid "modifying primary key is not allowed" -msgstr "" - -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "" - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "" - -msgid "Not allowed on non-leaf entry" -msgstr "" - -msgid "LDAP timeout" -msgstr "" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" - -msgid "Configured time limit exceeded" -msgstr "" - -msgid "Configured size limit exceeded" -msgstr "" - -msgid "Configured administrative server limit exceeded" -msgstr "" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "" - -#, fuzzy, python-format -msgid "Certificate format error: %(error)s" -msgstr "Sintaxi-errorea: %(error)s" - -msgid "Already registered" -msgstr "" - -msgid "Not registered yet" -msgstr "" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" - -#, fuzzy, python-format -msgid "%(exception)s" -msgstr "%(reason)s" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" +msgid "All commands should at least have a result" msgstr "" msgid "incorrect type" @@ -12826,27 +12550,117 @@ msgid "Service principal is required" msgstr "" #, python-format -msgid "%(count)d variables" +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +msgid "any of the configured servers" +msgstr "" + +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" msgstr "" #, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "" -msgstr[1] "" +msgid "Permission denied: %(file)s" +msgstr "" -msgid "Results are truncated, try a more specific search" +msgid "empty DNS label" +msgstr "" + +msgid "DNS label cannot be longer that 63 characters" msgstr "" #, python-format -msgid "Unknown option: %(option)s" +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" msgstr "" -msgid "Client version. Used to determine if server will accept request." +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "" + +msgid "cannot be longer that {} characters" +msgstr "" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "" + +msgid "invalid SSH public key" +msgstr "" + +msgid "options are not allowed" +msgstr "" + +msgid "invalid hostmask" msgstr "" #, python-format -msgid "objectclass %s not found" +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +msgid "invalid escape code in domain name" +msgstr "" + +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +#, fuzzy +msgid "invalid domain name" +msgstr "NIS domeinu-izena" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +msgid "invalid IP address format" +msgstr "IP helbide formatu baliogabea" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" #, python-format @@ -12865,6092 +12679,54 @@ msgstr "" msgid "Retrieving CA status failed with status %d" msgstr "" +#, python-format +msgid "objectclass %s not found" +msgstr "" + +msgid "Trusting forest" +msgstr "" + +msgid "Trusted forest" +msgstr "" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +msgid "Unknown" +msgstr "" + +msgid "Non-Active Directory domain" +msgstr "" + +msgid "Active Directory domain" +msgstr "" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "" +msgid "Failed to authenticate to CA REST API" +msgstr "" + #, python-format msgid "Replication agreement for %(hostname)s not found" msgstr "" -msgid "Failed to authenticate to CA REST API" -msgstr "" - -msgid "One time password commands" -msgstr "" - -#, fuzzy -msgid "OTP configuration options" -msgstr "Konfigurazioa" - -#, fuzzy -msgid "OTP Configuration" -msgstr "Konfigurazioa" - -#, fuzzy -msgid "" -"\n" -"IPA server roles\n" -msgstr "Erabili beharreko IPA zerbitzaria" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" - -msgid "server roles" -msgstr "" - -#, fuzzy -msgid "IPA Server Roles" -msgstr "Erabili beharreko IPA zerbitzaria" - -#, fuzzy -msgid "IPA Server Role" -msgstr "Erabili beharreko IPA zerbitzaria" - -#, fuzzy -msgid "IPA server role name" -msgstr "Erabili beharreko IPA zerbitzaria" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include IPA master entries" -msgstr "" - -msgid "roles" -msgstr "" - -msgid "IPA role name" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -#, fuzzy -msgid "password policy" -msgstr "pasahitza" - -#, fuzzy -msgid "password policies" -msgstr "pasahitza" - -#, fuzzy -msgid "Password Policies" -msgstr "Pasahitza" - -#, fuzzy -msgid "Password Policy" -msgstr "Pasahitza" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -#, fuzzy -msgid "Realm domains" -msgstr "E-posta domeinu lehenetsia" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -#, fuzzy -msgid "Name" -msgstr "Ostalari-izena" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -msgid "Help topic" -msgstr "" - -#, fuzzy -msgid "Version" -msgstr "Baimena" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -msgid "Method name" -msgstr "ostalari-izena" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command." -msgstr "" - -#, fuzzy -msgid "Search for commands." -msgstr "Bilatu taldeak." - -#, fuzzy -msgid "Return command defaults" -msgstr "Exekutatu komandoak" - -msgid "Display information about a class." -msgstr "" - -#, fuzzy -msgid "Search for classes." -msgstr "Bilatu taldeak." - -msgid "Display information about a help topic." -msgstr "" - -#, fuzzy -msgid "Search for help topics." -msgstr "Bilatu taldeak." - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -msgid "CLI name" -msgstr "ACI izena" - -#, fuzzy -msgid "Confirm (password)" -msgstr "Ausazko pasahitza" - -#, fuzzy -msgid "Default" -msgstr "Shell lehenetsia" - -#, fuzzy -msgid "Default from" -msgstr "Erabiltzaile-talde lehenetsia" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command output." -msgstr "" - -#, fuzzy -msgid "Search for command outputs." -msgstr "Bilatu taldeak." - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" -msgstr "" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, fuzzy, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -#, fuzzy, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -#, fuzzy -msgid "Service delegation target" -msgstr "Zerbitzu-taldearen izena" - -#, fuzzy, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -#, fuzzy, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" - -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -msgid "Malformed principal" -msgstr "" - -msgid "{} is required by the IPA master" -msgstr "" - -#, fuzzy -msgid "service" -msgstr "Zerbitzuak" - -#, fuzzy -msgid "services" -msgstr "Zerbitzuak" - -msgid "Principal alias" -msgstr "" - -msgid "Service principal alias" -msgstr "" - -msgid "Base-64 encoded service certificate" -msgstr "" - -#, fuzzy -msgid "Serial Number (hex)" -msgstr "Serie-zenbakia" - -msgid "Issuer" -msgstr "" - -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -#, fuzzy -msgid "Fingerprint (SHA256)" -msgstr "Hatz-marka (SHA1)" - -msgid "Revocation reason" -msgstr "" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "" - -msgid "Add a new IPA service." -msgstr "" - -msgid "force principal name even if host not in DNS" -msgstr "" - -msgid "Skip host check" -msgstr "" - -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "" - -msgid "Add a new SMB service." -msgstr "" - -#, fuzzy -msgid "SMB service NetBIOS name" -msgstr "Zerbitzuaren izena" - -#, fuzzy, python-format -msgid "Modified service \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -#, fuzzy, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to a service" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -msgid "Remove principal alias from a service" -msgstr "" - -#, fuzzy, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -#, fuzzy -msgid "sudo rules" -msgstr "HBAC arauak" - -#, fuzzy -msgid "Sudo Rules" -msgstr "HBAC arauak" - -#, fuzzy -msgid "Sudo Rule" -msgstr "Sudo" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, fuzzy, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -#, fuzzy, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, fuzzy, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -#, fuzzy -msgid "users" -msgstr "Erabiltzaileak" - -#, fuzzy -msgid "command" -msgstr "Edozein komando" - -#, fuzzy -msgid "commands" -msgstr "Exekutatu komandoak" - -msgid "runAs user" -msgstr "" - -msgid "runAs users" -msgstr "" - -#, fuzzy -msgid "group runAs" -msgstr "taldeak" - -#, fuzzy -msgid "runAs groups" -msgstr "taldeak" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when user category='all'" -msgstr "" - -msgid "hosts cannot be added when host category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -msgid "pyhbac is not installed." -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Base-64 encoded certificate." -msgstr "" - -#, fuzzy -msgid "Certificate chain" -msgstr "Ziurtagiria" - -msgid "X.509 certificate chain" -msgstr "" - -#, fuzzy -msgid "Subject email address" -msgstr "E-posta helbidea" - -#, fuzzy -msgid "Subject DNS name" -msgstr "Gaia" - -#, fuzzy -msgid "Subject X.400 address" -msgstr "Kalea" - -#, fuzzy -msgid "Subject directory name" -msgstr "Direktorio nagusiaren oinarria" - -msgid "Subject EDI Party name" -msgstr "" - -#, fuzzy -msgid "Subject URI" -msgstr "Gaia" - -#, fuzzy -msgid "Subject IP Address" -msgstr "Kalea" - -#, fuzzy -msgid "Subject OID" -msgstr "Gaia" - -#, fuzzy -msgid "Subject UPN" -msgstr "Gaia" - -msgid "Subject Kerberos principal name" -msgstr "" - -msgid "Subject Other Name" -msgstr "" - -msgid "Issuer DN" -msgstr "" - -#, fuzzy -msgid "Serial number (hex)" -msgstr "Serie-zenbakia" - -msgid "Request status" -msgstr "" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -#, fuzzy -msgid "'add' option" -msgstr "Sudo aukera" - -#, fuzzy -msgid "The principal for this request doesn't exist." -msgstr "Taldea ez da existitzen" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Revoked" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -msgid "domain" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -#, fuzzy -msgid "User logins" -msgstr "Erabiltzaile-taldeak" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Base-64 encoded user certificate" -msgstr "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "must be at least 10" -msgstr "" - -#, fuzzy -msgid "configuration options" -msgstr "Konfigurazioa" - -#, fuzzy -msgid "Maximum hostname length" -msgstr "Erabiltzaile-izenaren gehienezko luzera" - -msgid "IPA masters" -msgstr "" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -#, fuzzy -msgid "IPA CA servers" -msgstr "IPA zerbitzaria" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -#, fuzzy -msgid "IPA KRA servers" -msgstr "IPA zerbitzaria" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" - -msgid "Domain resolution order" -msgstr "" - -msgid "colon-separated list of domains used for short name qualification" -msgstr "" - -#, fuzzy -msgid "IPA DNS servers" -msgstr "IPA zerbitzaria" - -msgid "IPA servers configured as domain name server" -msgstr "" - -#, fuzzy -msgid "Hidden IPA DNS servers" -msgstr "IPA zerbitzaria" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "IPA DNSSec key master" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -msgid "Empty domain is not allowed" -msgstr "" - -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" - -msgid "SELinux user map default user not in order list" -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -#, fuzzy -msgid "sudo command group" -msgstr "Sudo komando-taldea" - -#, fuzzy -msgid "sudo command groups" -msgstr "Sudo komando-taldea" - -#, fuzzy, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "\"%(value)s\" ostalari-taldea gehituta" - -#, fuzzy, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, fuzzy, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, fuzzy, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "Sudo komando-taldea" -msgstr[1] "Sudo komando-taldea" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -#, fuzzy -msgid "host groups" -msgstr "Ostalari-taldeak" - -#, fuzzy -msgid "Host Group" -msgstr "Ostalari-taldeak" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy -msgid "hostgroup" -msgstr "Ostalari-taldea" - -msgid "privileged hostgroup" -msgstr "" - -#, fuzzy, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "The OTP if the user has a token configured" -msgstr "" - -#, fuzzy, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -#, fuzzy -msgid "" -"\n" -"Permissions\n" -msgstr "Baimenak" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Managed permissions\n" -msgstr "Baimenak" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "must be enclosed in parentheses" -msgstr "" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -#, fuzzy, python-format -msgid "Deprecated; use %s" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, python-format -msgid "Entry %s not found" -msgstr "" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, python-format -msgid "%s: group not found" -msgstr "" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" -msgstr "" - -msgid "Bad search filter" -msgstr "" - -#, fuzzy, python-format -msgid "Entry %s does not exist" -msgstr "Taldea ez da existitzen" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, fuzzy, python-format -msgid "Added permission \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -msgid "cannot delete managed permissions" -msgstr "" - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "" - -#, fuzzy, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "" -msgstr[1] "" - -#, python-brace-format -msgid "{role}: role not found" -msgstr "" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -msgid "Internationalization messages" -msgstr "" - -msgid "Your session has expired. Please log in again." -msgstr "" - -msgid "Apply" -msgstr "" - -msgid "Rebuild auto membership" -msgstr "" - -#, fuzzy -msgid "Are you sure you want to rebuild auto membership?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, fuzzy -msgid "Are you sure you want to proceed with the action?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -msgid "Actions" -msgstr "" - -msgid "Add" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) added" -msgstr "" - -msgid "Direct Membership" -msgstr "" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "" - -msgid "Indirect Membership" -msgstr "" - -#, fuzzy -msgid "No entries." -msgstr "sarrerak" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "" - -msgid "Remove" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "" - -msgid "Show Results" -msgstr "" - -msgid "Authentication indicators" -msgstr "" - -msgid "Authentication indicator" -msgstr "" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "Add Custom Authentication Indicator" -msgstr "" - -msgid "Two factor authentication (password + OTP)" -msgstr "" - -msgid "RADIUS" -msgstr "" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -msgid "Disable per-user override" -msgstr "" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "About" -msgstr "" - -msgid "Activate" -msgstr "" - -msgid "Back" -msgstr "" - -msgid "Clear" -msgstr "" - -msgid "Clear all fields on the page." -msgstr "" - -msgid "Disable" -msgstr "" - -msgid "Download" -msgstr "" - -msgid "Download certificate as PEM formatted file." -msgstr "" - -msgid "Edit" -msgstr "" - -#, fuzzy -msgid "Enable" -msgstr "Gaituta" - -msgid "Find" -msgstr "" - -msgid "Get" -msgstr "" - -msgid "Hide" -msgstr "" - -msgid "Issue" -msgstr "" - -msgid "Match" -msgstr "" - -msgid "Match users according to certificate." -msgstr "" - -msgid "Migrate" -msgstr "" - -msgid "Refresh" -msgstr "" - -msgid "Reload current settings from the server." -msgstr "" - -#, fuzzy -msgid "Delete" -msgstr "Ezabatu taldea." - -msgid "Remove hold" -msgstr "" - -msgid "Reset" -msgstr "" - -#, fuzzy -msgid "Reset Password and Log in" -msgstr "Berrezarri pasahitza" - -msgid "Restore" -msgstr "" - -msgid "Revert" -msgstr "" - -msgid "Revoke" -msgstr "" - -msgid "Save" -msgstr "" - -#, fuzzy -msgid "Set" -msgstr "Ezarri OTP" - -msgid "Show" -msgstr "" - -msgid "Stage" -msgstr "" - -msgid "Update" -msgstr "" - -#, fuzzy -msgid "Customization" -msgstr "Konfigurazioa" - -msgid "Pagination Size" -msgstr "" - -msgid "Collapse All" -msgstr "" - -msgid "Expand All" -msgstr "" - -#, fuzzy -msgid "Identity Settings" -msgstr "Kontaktuaren ezarpenak" - -#, fuzzy -msgid "Record Settings" -msgstr "Kontuaren ezarpenak" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "" - -msgid "Back to Top" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "" - -#, fuzzy -msgid "Add custom value" -msgstr "\"%(value)s\" ostalaria gehituta" - -msgid "Available" -msgstr "" - -msgid "Some operations failed." -msgstr "" - -msgid "Operations Error" -msgstr "" - -#, fuzzy -msgid "Confirmation" -msgstr "Konfigurazioa" - -msgid "Custom value" -msgstr "" - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" - -msgid "Unsaved Changes" -msgstr "" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "" - -msgid "Hide details" -msgstr "" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "" - -msgid "Prospective" -msgstr "" - -#, fuzzy -msgid "Redirection" -msgstr "deskribapena" - -msgid "Select entries to be removed." -msgstr "" - -msgid "Result" -msgstr "" - -msgid "Show details" -msgstr "" - -msgid "Success" -msgstr "" - -msgid "Validation error" -msgstr "" - -msgid "Input form contains invalid or missing values." -msgstr "" - -msgid "Please try the following options:" -msgstr "" - -msgid "If the problem persists please contact the system administrator." -msgstr "" - -msgid "Refresh the page." -msgstr "" - -msgid "Reload the browser." -msgstr "" - -msgid "Return to the main page and retry the operation" -msgstr "" - -#, fuzzy, python-brace-format -msgid "An error has occurred (${error})" -msgstr "barne-errore bat gertatu da" - -#, fuzzy -msgid "HTTP Error" -msgstr "Errorea" - -msgid "Internal Error" -msgstr "" - -#, fuzzy -msgid "IPA Error" -msgstr "Errorea" - -msgid "No response" -msgstr "" - -msgid "Unknown Error" -msgstr "" - -msgid "URL" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} member managers:" -msgstr "" - -msgid "False" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Allowed to create keytab" -msgstr "" - -msgid "Allowed to retrieve keytab" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Add Kerberos Principal Alias" -msgstr "" - -msgid "New kerberos principal alias" -msgstr "" - -msgid "Remove Kerberos Alias" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "" - -msgid "Inherited from server configuration" -msgstr "" - -msgid "MS-PAC" -msgstr "" - -msgid "Override inherited settings" -msgstr "" - -msgid "PAD" -msgstr "" - -#, fuzzy -msgid "Authenticating" -msgstr "Kontuaren ezarpenak" - -msgid "Authentication with personal certificate failed" -msgstr "" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" - -msgid "Continue to next page" -msgstr "" - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" - -msgid "Login failed due to an unknown reason" -msgstr "" - -msgid "Logged In As" -msgstr "" - -msgid "Authentication with Kerberos failed" -msgstr "" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -msgid "Loading" -msgstr "" - -msgid "Kerberos Principal you entered is expired" -msgstr "" - -msgid "Loading data" -msgstr "" - -msgid "Log in" -msgstr "" - -#, fuzzy -msgid "Log In Using Certificate" -msgstr "Ziurtagiria" - -msgid "Log in using personal certificate" -msgstr "" - -msgid "Log out" -msgstr "" - -msgid "Log out error" -msgstr "" - -msgid "Password or Password+One-Time Password" -msgstr "" - -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "" - -msgid "Sync OTP Token" -msgstr "" - -msgid "Synchronizing" -msgstr "" - -msgid "The user account you entered is locked" -msgstr "" - -#, fuzzy -msgid "number of passwords" -msgstr "Erabiltzailearen pasahitza" - -msgid "seconds" -msgstr "" - -#, fuzzy -msgid "Migrating" -msgstr "Konfigurazioa" - -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -msgid "Password migration was not successful" -msgstr "" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -msgid "The password or username you entered is incorrect" -msgstr "" - -msgid "Password migration was successful" -msgstr "" - -msgid "Add delegation" -msgstr "" - -msgid "Remove delegations" -msgstr "" - -#, fuzzy -msgid "Add permission" -msgstr "Baimena" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove permissions" -msgstr "Baimenak" - -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "" - -msgid "Add privilege" -msgstr "" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -msgid "Remove privileges" -msgstr "" - -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "" - -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Role Settings" -msgstr "Ezarpenak" - -msgid "Add role" -msgstr "" - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "" - -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -msgid "Remove roles" -msgstr "" - -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Add self service permission" -msgstr "HBAC zerbitzuaren deskribapena" - -msgid "Remove self service permissions" -msgstr "" - -#, fuzzy -msgid "Add rule" -msgstr "HBAC araua" - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Are you sure you want to change default group?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -#, fuzzy -msgid "Default host group" -msgstr "Erabiltzaile-talde lehenetsia" - -#, fuzzy -msgid "Default user group" -msgstr "Erabiltzaile-talde lehenetsia" - -msgid "Exclusive" -msgstr "" - -#, fuzzy -msgid "Expression" -msgstr "Baimena" - -#, fuzzy -msgid "Host group rule" -msgstr "Ostalari-taldea" - -#, fuzzy -msgid "Host group rules" -msgstr "Ostalari-taldeak" - -msgid "Inclusive" -msgstr "" - -msgid "Remove auto membership rules" -msgstr "" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "User group rule" -msgstr "Erabiltzaile-taldea" - -#, fuzzy -msgid "User group rules" -msgstr "Erabiltzaile-taldea" - -msgid "Add automount key" -msgstr "" - -msgid "Remove automount keys" -msgstr "" - -msgid "Add automount location" -msgstr "" - -#, fuzzy -msgid "Automount Location Settings" -msgstr "Kontuaren ezarpenak" - -msgid "Remove automount locations" -msgstr "" - -msgid "Add automount map" -msgstr "" - -#, fuzzy -msgid "Map Type" -msgstr "Mota" - -msgid "Direct" -msgstr "" - -msgid "Indirect" -msgstr "" - -msgid "Remove automount maps" -msgstr "" - -msgid "Add certificate authority" -msgstr "" - -msgid "Remove certificate authorities" -msgstr "" - -msgid "Add CA ACL" -msgstr "" - -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "All" -msgstr "Onartu" - -msgid "Any CA" -msgstr "" - -#, fuzzy -msgid "Any Host" -msgstr "Ostalariak" - -#, fuzzy -msgid "Any Service" -msgstr "HBAC zerbitzuak" - -#, fuzzy -msgid "Any Profile" -msgstr "Edozein talde" - -msgid "Anyone" -msgstr "" - -#, fuzzy -msgid "Rule status" -msgstr "Arau-mota" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" - -msgid "Remove CA ACLs" -msgstr "" - -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Specified CAs" -msgstr "Zehazturiko taldeak" - -#, fuzzy -msgid "Specified Hosts and Groups" -msgstr "Zehazturiko taldeak" - -#, fuzzy -msgid "Specified Profiles" -msgstr "Zehazturiko taldeak" - -#, fuzzy -msgid "Specified Services and Groups" -msgstr "Zehazturiko taldeak" - -#, fuzzy -msgid "Specified Users and Groups" -msgstr "Zehazturiko taldeak" - -msgid "Permitted to have certificates issued" -msgstr "" - -msgid "Remove certificate profiles" -msgstr "" - -msgid "AA Compromise" -msgstr "" - -msgid "Add principal" -msgstr "" - -msgid "Affiliation Changed" -msgstr "" - -msgid "CA" -msgstr "" - -msgid "CA Compromise" -msgstr "" - -#, fuzzy -msgid "Certificates" -msgstr "Ziurtagiria" - -#, fuzzy -msgid "Certificate Hold" -msgstr "Ziurtagiria" - -msgid "Cessation of Operation" -msgstr "" - -#, fuzzy -msgid "Common Name" -msgstr "Komandoaren izena" - -msgid "the certificate with serial number " -msgstr "" - -msgid "Expires On" -msgstr "" - -msgid "Issued on from" -msgstr "" - -msgid "Issued on to" -msgstr "" - -#, fuzzy -msgid "Maximum serial number" -msgstr "Serie-zenbakia" - -#, fuzzy -msgid "Minimum serial number" -msgstr "Serie-zenbakia" - -msgid "Revoked on from" -msgstr "" - -msgid "Revoked on to" -msgstr "" - -msgid "Valid not after from" -msgstr "" - -msgid "Valid not after to" -msgstr "" - -msgid "Valid not before from" -msgstr "" - -msgid "Valid not before to" -msgstr "" - -#, fuzzy -msgid "Get Certificate" -msgstr "Ziurtagiri berria" - -#, fuzzy -msgid "Certificate Hold Removed" -msgstr "Ziurtagiria" - -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Issue new certificate" -msgstr "Ziurtagiri berria" - -msgid "Issued By" -msgstr "" - -msgid "Issued On" -msgstr "" - -msgid "Issued To" -msgstr "" - -msgid "Key Compromise" -msgstr "" - -#, fuzzy -msgid "No Valid Certificate" -msgstr "Ziurtagiri berria" - -msgid "Certificate in base64 or PEM format" -msgstr "" - -msgid "Note" -msgstr "" - -#, fuzzy -msgid "Organizational Unit" -msgstr "Erakundea" - -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "" - -msgid "Privilege Withdrawn" -msgstr "" - -msgid "Reason for Revocation" -msgstr "" - -#, fuzzy -msgid "Remove certificate hold" -msgstr "Ziurtagiri berria" - -msgid "Do you want to remove the certificate hold?" -msgstr "" - -msgid "Remove from CRL" -msgstr "" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" - -#, fuzzy -msgid "Certificate requested" -msgstr "Ziurtagiria" - -#, fuzzy -msgid "Revoke certificate" -msgstr "Ziurtagiri berria" - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" - -#, fuzzy -msgid "Certificate Revoked" -msgstr "Ziurtagiria" - -msgid "REVOKED" -msgstr "" - -#, fuzzy -msgid "SHA256 Fingerprint" -msgstr "SHA1 hatz-marka" - -msgid "Superseded" -msgstr "" - -msgid "Unspecified" -msgstr "" - -#, fuzzy -msgid "Valid Certificate Present" -msgstr "Ziurtagiria" - -msgid "Valid from" -msgstr "" - -msgid "Valid to" -msgstr "" - -msgid "Validity" -msgstr "" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "" - -#, fuzzy -msgid "View Certificate" -msgstr "Ziurtagiri berria" - -#, fuzzy -msgid "Certificate Data" -msgstr "Ziurtagiria" - -#, fuzzy -msgid "Certificate For Match" -msgstr "Ziurtagiria" - -#, fuzzy -msgid "Certificate Mapping Match" -msgstr "Ziurtagiria" - -msgid "Matched Users" -msgstr "" - -#, fuzzy -msgid "User Login" -msgstr "Erabiltzaile-taldea" - -msgid "Add certificate identity mapping rule" -msgstr "" - -msgid "Add certificate mapping data" -msgstr "" - -#, fuzzy -msgid "Certificate mapping data" -msgstr "Ziurtagiria" - -#, fuzzy -msgid "Configuration string" -msgstr "Konfigurazioa" - -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "" - -msgid "Remove certificate mapping data" -msgstr "" - -msgid "Issuer and subject" -msgstr "" - -msgid "Remove certificate identity mapping rules" -msgstr "" - -#, fuzzy -msgid "Group Options" -msgstr "Taldearen ezarpenak" - -#, fuzzy -msgid "Search Options" -msgstr "Sudo aukera" - -#, fuzzy -msgid "SELinux Options" -msgstr "Sudo aukera" - -#, fuzzy -msgid "Server Options" -msgstr "Erabili beharreko IPA zerbitzaria" - -#, fuzzy -msgid "Service Options" -msgstr "Zerbitzuak" - -#, fuzzy -msgid "User Options" -msgstr "Sudo aukera" - -msgid "Forward first" -msgstr "" - -msgid "Forwarding disabled" -msgstr "" - -msgid "Forward only" -msgstr "" - -#, fuzzy -msgid "Options" -msgstr "Sudo aukera" - -msgid "Update System DNS Records" -msgstr "" - -msgid "Do you want to update system DNS records?" -msgstr "" - -msgid "System DNS records updated" -msgstr "" - -msgid "Add DNS forward zone" -msgstr "" - -msgid "Remove DNS forward zones" -msgstr "" - -msgid "Add DNS resource record" -msgstr "" - -msgid "DNS record was deleted because it contained no data." -msgstr "" - -msgid "Other Record Types" -msgstr "" - -msgid "Address not valid, can't redirect" -msgstr "" - -#, fuzzy -msgid "Create dns record" -msgstr "Sortu talde berri bat." - -msgid "Creating record." -msgstr "" - -msgid "Record creation failed." -msgstr "" - -msgid "Checking if record exists." -msgstr "" - -msgid "Record not found." -msgstr "" - -msgid "Redirection to PTR record" -msgstr "" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "" - -msgid "Target reverse zone not found." -msgstr "" - -msgid "Fetching DNS zones." -msgstr "" - -msgid "An error occurred while fetching dns zones." -msgstr "" - -msgid "You will be redirected to DNS Zone." -msgstr "" - -msgid "Remove DNS resource records" -msgstr "" - -msgid "Standard Record Types" -msgstr "" - -msgid "Records for DNS Zone" -msgstr "" - -msgid "Record Type" -msgstr "" - -msgid "Add DNS zone" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "" - -#, fuzzy -msgid "DNS Zone Settings" -msgstr "Kontuaren ezarpenak" - -msgid "Remove DNS zones" -msgstr "" - -#, fuzzy -msgid "Remove Permission" -msgstr "Baimena" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "" - -msgid "Skip DNS check" -msgstr "" - -msgid "Skip overlap check" -msgstr "" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" - -msgid "Authoritative nameserver change" -msgstr "" - -msgid "Level" -msgstr "" - -msgid "Set Domain Level" -msgstr "" - -#, fuzzy -msgid "Add user group" -msgstr "Erabiltzaile-taldea" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "External" -msgstr "Kanpoko erabiltzailea" - -#, fuzzy -msgid "Group categories" -msgstr "Taldearen ezarpenak" - -#, fuzzy -msgid "Change to external group" -msgstr "Exekutatu kanpoko talde bezala" - -#, fuzzy -msgid "Change to POSIX group" -msgstr "Helburuko taldea" - -msgid "Non-POSIX" -msgstr "" - -msgid "POSIX" -msgstr "" - -#, fuzzy -msgid "Remove user groups" -msgstr "Erabiltzaile-talde lehenetsia" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Group Type" -msgstr "Taldea" - -#, fuzzy -msgid "Add HBAC rule" -msgstr "HBAC araua" - -#, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "" - -msgid "Accessing" -msgstr "" - -#, fuzzy -msgid "Remove HBAC rules" -msgstr "HBAC arauak" - -#, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Via Service" -msgstr "Zerbitzuak" - -msgid "Who" -msgstr "" - -#, fuzzy -msgid "Add HBAC service" -msgstr "HBAC zerbitzua" - -#, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "" - -#, fuzzy -msgid "Remove HBAC services" -msgstr "HBAC zerbitzua" - -#, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "" - -#, fuzzy -msgid "Add HBAC service group" -msgstr "HBAC zerbitzua" - -#, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove HBAC service groups" -msgstr "HBAC zerbitzu-taldearen deskribapena" - -#, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "" - -msgid "Access Denied" -msgstr "" - -msgid "Access Granted" -msgstr "" - -msgid "Include Disabled" -msgstr "" - -#, fuzzy -msgid "Include Enabled" -msgstr "Gaituta" - -#, fuzzy -msgid "HBAC Test" -msgstr "HBAC arauak" - -msgid "Matched" -msgstr "" - -msgid "Missing values: " -msgstr "" - -msgid "New Test" -msgstr "" - -#, fuzzy -msgid "Rules" -msgstr "HBAC arauak" - -msgid "Run Test" -msgstr "" - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "" - -msgid "Unmatched" -msgstr "" - -msgid "Add host" -msgstr "" - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -#, fuzzy -msgid "Host Certificate" -msgstr "Ziurtagiria" - -msgid "Delete Key, Unprovision" -msgstr "" - -#, fuzzy -msgid "Host Settings" -msgstr "Ezarpenak" - -msgid "Enrolled" -msgstr "" - -msgid "Enrollment" -msgstr "" - -msgid "Fully Qualified Host Name" -msgstr "" - -#, fuzzy -msgid "Generate OTP" -msgstr "Orokorra" - -#, fuzzy -msgid "Generated OTP" -msgstr "Orokorra" - -msgid "Kerberos Key" -msgstr "" - -msgid "Kerberos Key Not Present" -msgstr "" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "" - -#, fuzzy -msgid "One-Time Password" -msgstr "Berrezarri pasahitza" - -msgid "One-Time Password Not Present" -msgstr "" - -msgid "One-Time Password Present" -msgstr "" - -#, fuzzy -msgid "Reset OTP" -msgstr "Ezarri OTP" - -#, fuzzy -msgid "Reset One-Time Password" -msgstr "Berrezarri pasahitza" - -msgid "OTP set" -msgstr "" - -#, fuzzy -msgid "Set One-Time Password" -msgstr "Berrezarri pasahitza" - -msgid "Remove hosts" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "" - -msgid "Unprovision" -msgstr "" - -#, fuzzy -msgid "Are you sure you want to unprovision this host?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -msgid "Unprovisioning host" -msgstr "" - -msgid "Host unprovisioned" -msgstr "" - -#, fuzzy -msgid "Add host group" -msgstr "Ostalari-taldea" - -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Host Group Settings" -msgstr "Taldearen ezarpenak" - -#, fuzzy -msgid "Remove host groups" -msgstr "Ostalari-taldearen izena" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -msgid "User to override" -msgstr "" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" - -msgid "Enter trusted user login." -msgstr "" - -msgid "Profile" -msgstr "" - -msgid "Group to override" -msgstr "" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" - -#, fuzzy -msgid "Enter trusted group name." -msgstr "Zerbitzu-taldearen izena" - -msgid "Add ID view" -msgstr "" - -msgid "Add group ID override" -msgstr "" - -msgid "Add user ID override" -msgstr "" - -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "" - -msgid "Applied to hosts" -msgstr "" - -#, fuzzy -msgid "Apply to host groups" -msgstr "Ostalari-taldearen izena" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" - -msgid "Apply to hosts" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "" - -msgid "Remove ID views" -msgstr "" - -msgid "Remove user ID overrides" -msgstr "" - -msgid "Remove group ID overrides" -msgstr "" - -#, fuzzy -msgid "Un-apply from host groups" -msgstr "Ostalari-taldearen izena" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" - -msgid "Un-apply" -msgstr "" - -msgid "Un-apply from hosts" -msgstr "" - -msgid "Un-apply ID Views from hosts" -msgstr "" - -#, fuzzy -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "" - -msgid "Add netgroup" -msgstr "" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Host" -msgstr "Ostalariak" - -#, fuzzy -msgid "Netgroup Settings" -msgstr "Taldearen ezarpenak" - -#, fuzzy -msgid "Netgroups" -msgstr "taldeak" - -#, fuzzy -msgid "Remove netgroups" -msgstr "Zerbitzu-taldeak" - -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "" - -msgid "Add OTP token" -msgstr "" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" - -#, fuzzy -msgid "Configure your token" -msgstr "Konfigurazioa" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" - -#, fuzzy -msgid "OTP Token Settings" -msgstr "Kontuaren ezarpenak" - -msgid "Disable token" -msgstr "" - -#, fuzzy -msgid "Enable token" -msgstr "Gaituta" - -msgid "Remove OTP tokens" -msgstr "" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" - -msgid "Show QR code" -msgstr "" - -#, fuzzy -msgid "Show configuration uri" -msgstr "Konfigurazioa" - -msgid "Counter-based (HOTP)" -msgstr "" - -msgid "Time-based (TOTP)" -msgstr "" - -#, fuzzy -msgid "Add Custom Attribute" -msgstr "Atributua" - -#, fuzzy -msgid "Permission settings" -msgstr "Baimenak" - -#, fuzzy -msgid "Attribute breakdown" -msgstr "Atributua" - -#, fuzzy -msgid "Privilege Settings" -msgstr "Taldearen ezarpenak" - -msgid "Public key:" -msgstr "" - -msgid "Set public key" -msgstr "" - -msgid "Show/Set key" -msgstr "" - -msgid "Modified: key not set" -msgstr "" - -msgid "Modified" -msgstr "" - -msgid "New: key not set" -msgstr "" - -msgid "New: key set" -msgstr "" - -#, fuzzy -msgid "Add password policy" -msgstr "LDAP pasahitza" - -msgid "Remove password policies" -msgstr "" - -#, fuzzy -msgid "Add ID range" -msgstr "Gehitu hainbat" - -#, fuzzy -msgid "Range Settings" -msgstr "Ezarpenak" - -msgid "Base ID" -msgstr "" - -msgid "Primary RID base" -msgstr "" - -msgid "Range size" -msgstr "" - -msgid "Domain SID" -msgstr "" - -msgid "Secondary RID base" -msgstr "" - -msgid "Remove ID ranges" -msgstr "" - -msgid "Active Directory domain" -msgstr "" - -msgid "Active Directory domain with POSIX attributes" -msgstr "" - -msgid "Detect" -msgstr "" - -msgid "Local domain" -msgstr "" - -msgid "IPA trust" -msgstr "" - -msgid "Active Directory winsync" -msgstr "" - -msgid "Add RADIUS server" -msgstr "" - -msgid "RADIUS Proxy Server Settings" -msgstr "" - -msgid "Remove RADIUS servers" -msgstr "" - -msgid "Check DNS" -msgstr "" - -msgid "Do you also want to perform DNS check?" -msgstr "" - -msgid "Force Update" -msgstr "" - -msgid "Add SELinux user map" -msgstr "" - -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "" - -msgid "Remove selinux user maps" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Server Roles" -msgstr "Erabili beharreko IPA zerbitzaria" - -#, fuzzy -msgid "Server Role" -msgstr "Erabili beharreko IPA zerbitzaria" - -msgid "Warning: Consider service replication" -msgstr "" - -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" - -#, fuzzy -msgid "Delete Server" -msgstr "Ezabatu taldea." - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" - -#, fuzzy -msgid "Add service" -msgstr "HBAC zerbitzua" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -#, fuzzy -msgid "Service Certificate" -msgstr "Ziurtagiri berria" - -#, fuzzy -msgid "Service Settings" -msgstr "Taldearen ezarpenak" - -#, fuzzy -msgid "Provisioning" -msgstr "Baimena" - -#, fuzzy -msgid "Remove services" -msgstr "Zerbitzuak" - -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Are you sure you want to unprovision this service?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -msgid "Unprovisioning service" -msgstr "" - -#, fuzzy -msgid "Service unprovisioned" -msgstr "Zerbitzu-taldeak" - -msgid "Kerberos Key Present, Service Provisioned" -msgstr "" - -msgid "SSH public keys" -msgstr "" - -msgid "SSH public key:" -msgstr "" - -msgid "Set SSH key" -msgstr "" - -#, fuzzy -msgid "Are you sure you want to activate selected users?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "" - -msgid "Add stage user" -msgstr "" - -msgid "Stage users" -msgstr "" - -msgid "Preserved users" -msgstr "" - -msgid "Remove preserved users" -msgstr "" - -msgid "Remove stage users" -msgstr "" - -#, fuzzy -msgid "Are you sure you want to stage selected users?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -#, fuzzy -msgid "Are you sure you want to restore selected users?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "" - -msgid "User categories" -msgstr "" - -#, fuzzy -msgid "Add sudo command" -msgstr "Sudo komandoak" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "" - -#, fuzzy -msgid "Remove sudo commands" -msgstr "Sudo komandoak" - -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "" - -#, fuzzy -msgid "Add sudo command group" -msgstr "Sudo komando-taldea" - -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove sudo command groups" -msgstr "Sudo komando-taldea" - -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Add sudo rule" -msgstr "Gehitu eta itxi" - -#, fuzzy -msgid "Add sudo option" -msgstr "Sudo aukera" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Access this host" -msgstr "Ostalari honen deskribapena" - -msgid "Option added" -msgstr "" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "" - -msgid "Remove sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -msgid "As Whom" -msgstr "" - -#, fuzzy -msgid "Specified Commands and Groups" -msgstr "Zehazturiko taldeak" - -#, fuzzy -msgid "Remove sudo options" -msgstr "Sudo aukera" - -msgid "Autogenerated" -msgstr "" - -msgid "Segment details" -msgstr "" - -#, fuzzy -msgid "Replication configuration" -msgstr "Konfigurazioa" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" - -msgid "Add IPA location" -msgstr "" - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -msgid "Remove IPA locations" -msgstr "" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -msgid "Add topology segment" -msgstr "" - -msgid "Remove topology segments" -msgstr "" - -#, fuzzy -msgid "Account" -msgstr "Kontuaren ezarpenak" - -msgid "Add trust" -msgstr "" - -msgid "Administrative account" -msgstr "" - -msgid "SID blocklists" -msgstr "" - -#, fuzzy -msgid "Trust Settings" -msgstr "Taldearen ezarpenak" - -msgid "Establish using" -msgstr "" - -msgid "Fetch domains" -msgstr "" - -#, fuzzy -msgid "Pre-shared password" -msgstr "Erabiltzailearen pasahitza" - -msgid "Remove trusts" -msgstr "" - -msgid "Remove domains" -msgstr "" - -msgid "Trust direction" -msgstr "" - -msgid "Trust status" -msgstr "" - -#, fuzzy -msgid "Trust type" -msgstr "Arau-mota" - -msgid "Alternative UPN suffixes" -msgstr "" - -msgid "User attributes for SMB services" -msgstr "" - -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -msgid "Path to a user home directory, in UNC format" -msgstr "" - -#, fuzzy -msgid "Drive to mount a home directory" -msgstr "Karpeta nagusien kokaleku lehenetsia" - -#, fuzzy -msgid "Account Status" -msgstr "Kontuaren ezarpenak" - -msgid "Active users" -msgstr "" - -msgid "Add user" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -#, fuzzy -msgid "Delete mode" -msgstr "Ezabatu taldea." - -msgid "Employee Information" -msgstr "" - -msgid "Error changing account status" -msgstr "" - -msgid "Password expiration" -msgstr "" - -#, fuzzy -msgid "Mailing Address" -msgstr "E-posta helbidea" - -msgid "Misc. Information" -msgstr "" - -msgid "delete" -msgstr "" - -msgid "preserve" -msgstr "" - -msgid "No private group" -msgstr "" - -msgid "Remove users" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" - -#, python-brace-format -msgid "Click to ${action}" -msgstr "" - -msgid "Unlock" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -msgid "Add vault" -msgstr "" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -msgid "Asymmetric" -msgstr "" - -msgid "Vaults Config" -msgstr "" - -msgid "Members" -msgstr "" - -msgid "My User Vaults" -msgstr "" - -msgid "Owners" -msgstr "" - -msgid "Remove vaults" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Service Vaults" -msgstr "Zerbitzuak" - -msgid "Shared" -msgstr "" - -msgid "Shared Vaults" -msgstr "" - -msgid "Standard" -msgstr "" - -msgid "Symmetric" -msgstr "" - -msgid "Vault Type" -msgstr "" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -#, fuzzy -msgid "User Vaults" -msgstr "Erabiltzaile-taldeak" - -msgid "Current password is required" -msgstr "" - -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "" - -#, fuzzy -msgid "First OTP" -msgstr "Izena" - -#, fuzzy -msgid "New password is required" -msgstr "Pasahitz berria" - -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" - -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" - -msgid "Token synchronization failed" -msgstr "" - -msgid "The username, password or token codes are not correct" -msgstr "" - -msgid "Token was synchronized" -msgstr "" - -msgid "Password change complete" -msgstr "" - -msgid "Your password has expired. Please enter a new password." -msgstr "" - -msgid "Password reset was not successful." -msgstr "" - -#, fuzzy -msgid "Reset your password." -msgstr "Berrezarri pasahitza" - -#, fuzzy -msgid "Second OTP" -msgstr "Ezarri OTP" - -#, fuzzy -msgid "Verify Password" -msgstr "Pasahitz berria" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "" - -#, fuzzy -msgid "Are you sure you want to disable selected entries?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "" - -#, fuzzy -msgid "Are you sure you want to enable selected entries?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "" - -msgid "Some entries were not deleted" -msgstr "" - -msgid "Quick Links" -msgstr "" - -msgid "Select All" -msgstr "" - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" - -msgid "Unselect All" -msgstr "" - -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" - -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" - -msgid "Working" -msgstr "" - -msgid "Audit" -msgstr "" - -msgid "Authentication" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "Automount" -msgstr "" - -msgid "Host-Based Access Control" -msgstr "" - -msgid "Identity" -msgstr "" - -#, fuzzy -msgid "Network Services" -msgstr "Zerbitzuak" - -msgid "Policy" -msgstr "" - -msgid "Role-Based Access Control" -msgstr "" - -msgid "Topology" -msgstr "" - -msgid "Trusts" -msgstr "" - -msgid "True" -msgstr "" - -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" - -msgid "API Browser" -msgstr "" - -#, fuzzy -msgid "First" -msgstr "Izena" - -#, fuzzy -msgid "Last" -msgstr "Abizena" - -msgid "Next" -msgstr "" - -msgid "Page" -msgstr "" - -msgid "Prev" -msgstr "" - -msgid "Undo" -msgstr "" - -msgid "Undo this change." -msgstr "" - -msgid "Undo All" -msgstr "" - -msgid "Undo all changes in this field." -msgstr "" - -msgid "Text does not match field pattern" -msgstr "" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" - -msgid "Must be a decimal number" -msgstr "" - -msgid "Format error" -msgstr "" - -msgid "Must be an integer" -msgstr "" - -#, fuzzy -msgid "Not a valid IP address" -msgstr "IP helbide formatu baliogabea" - -#, fuzzy -msgid "Not a valid IPv4 address" -msgstr "IP helbide formatu baliogabea" - -#, fuzzy -msgid "Not a valid IPv6 address" -msgstr "IP helbide formatu baliogabea" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "" - -msgid "Parse error" -msgstr "" - -msgid "Must be a positive number" -msgstr "" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "" - -msgid "Required field" -msgstr "" - -msgid "Unsupported value" -msgstr "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -#, fuzzy -msgid "invalid port number" -msgstr "Serie-zenbakia" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -#, fuzzy -msgid "RADIUS Servers" -msgstr "IPA zerbitzaria" - -#, fuzzy -msgid "RADIUS Server" -msgstr "IPA zerbitzaria" - -#, fuzzy, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -#, fuzzy, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -#, fuzzy, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"IPA locations\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -msgid "location" -msgstr "" - -msgid "locations" -msgstr "" - -msgid "IPA Locations" -msgstr "" - -msgid "IPA Location" -msgstr "" - -#, fuzzy -msgid "Location name" -msgstr "Abizena" - -#, fuzzy -msgid "IPA location name" -msgstr "NIS domeinu-izena" - -#, fuzzy -msgid "IPA Location description" -msgstr "deskribapena" - -#, fuzzy -msgid "Servers" -msgstr "Zerbitzuak" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, fuzzy, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -msgid "Delete an IPA location." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -msgid "Modify information about an IPA location." -msgstr "" - -#, fuzzy, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -#, fuzzy -msgid "Search for IPA locations." -msgstr "Bilatu taldeak." - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an IPA location." -msgstr "" - -msgid "Servers in location" -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Added segment \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -#, fuzzy, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -#, python-format -msgid "%(value)s" -msgstr "" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -#, fuzzy, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -#, fuzzy -msgid "sudo command" -msgstr "Sudo komandoak" - -#, fuzzy -msgid "sudo commands" -msgstr "Sudo komandoak" - -#, fuzzy, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -#, fuzzy, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "self service permission" -msgstr "HBAC zerbitzuaren deskribapena" - -#, fuzzy -msgid "self service permissions" -msgstr "HBAC zerbitzuaren deskribapena" - -#, fuzzy -msgid "Self Service Permissions" -msgstr "Baimenak" - -#, fuzzy -msgid "Self Service Permission" -msgstr "Baimena" - -#, fuzzy, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -#, fuzzy, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -#, fuzzy, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" +msgid "A list of ACI values" +msgstr "ACI balioen zerrenda bat" msgid "type, filter, subtree and targetgroup are mutually exclusive" msgstr "" @@ -18980,6 +12756,10 @@ msgstr "Taldea ez da existitzen" msgid "empty filter" msgstr "" +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "Sintaxi-errorea: %(error)s" + #, python-format msgid "invalid DN (%s)" msgstr "" @@ -18991,6 +12771,12 @@ msgstr "" msgid "ACI object." msgstr "" +msgid "ACIs" +msgstr "ACIak" + +msgid "ACI" +msgstr "ACI" + #, fuzzy, python-format msgid "Created ACI \"%(value)s\"" msgstr "\"%(value)s\" ostalaria ezabatuta" @@ -19013,2242 +12799,6 @@ msgstr[1] "" msgid "Renamed ACI to \"%(value)s\"" msgstr "\"%(value)s\" ostalaria ezabatuta" -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -#, fuzzy, python-format -msgid "Added group \"%(value)s\"" -msgstr "\"%(value)s\" ostalari-taldea gehituta" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy -msgid "privileged group" -msgstr "Helburuko taldea" - -#, fuzzy, python-format -msgid "Modified group \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, fuzzy, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -#, fuzzy -msgid "Not a managed group" -msgstr "Sortu talde berri bat." - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -msgid "automount location" -msgstr "" - -msgid "automount locations" -msgstr "" - -msgid "Automount Locations" -msgstr "" - -msgid "Automount Location" -msgstr "" - -#, fuzzy, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -#, fuzzy, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "automount map" -msgstr "" - -msgid "automount maps" -msgstr "" - -msgid "Automount Maps" -msgstr "" - -msgid "Automount Map" -msgstr "" - -#, fuzzy, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "\"%(value)s\" ostalari-taldea gehituta" - -#, fuzzy, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Automount key object." -msgstr "" - -msgid "automount key" -msgstr "" - -msgid "automount keys" -msgstr "" - -msgid "Automount Keys" -msgstr "" - -msgid "Automount Key" -msgstr "" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, fuzzy, python-format -msgid "key named %(key)s already exists" -msgstr "Sarrera hau dagoeneko existitzen da" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, fuzzy, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -#, fuzzy, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "\"%(value)s\" ostalari-taldea gehituta" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "ID View" -msgstr "Ikusi" - -msgid "system ID View" -msgstr "" - -#, fuzzy -msgid "ID Views" -msgstr "Ikusi" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, fuzzy, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -#, fuzzy, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, fuzzy, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -msgid "Delete an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -msgid "Modify an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -#, fuzzy, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -#, fuzzy, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -#, fuzzy, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, fuzzy, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -#, fuzzy -msgid "Default group for new users not found" -msgstr "Erabiltzaile berrientzako talde lehenetsia" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -msgid "CA category" -msgstr "" - -msgid "CA category the ACL applies to" -msgstr "" - -msgid "CAs" -msgstr "" - -#, fuzzy, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -#, fuzzy, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, fuzzy, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, fuzzy, python-format -msgid "%i users or groups added." -msgstr "Bilatu taldeak." - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, fuzzy, python-format -msgid "%i service added." -msgstr "Zerbitzuaren izena" - -#, fuzzy, python-format -msgid "%i services added." -msgstr "Zerbitzuaren izena" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -#, fuzzy -msgid "External trust" -msgstr "Kanpoko ostalaria" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -#, fuzzy -msgid "trust type" -msgstr "Arau-mota" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "trust configuration" -msgstr "Konfigurazioa" - -#, fuzzy -msgid "Global Trust Configuration" -msgstr "Konfigurazioa" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, fuzzy, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "\"%(value)s\" ostalaria aldatuta" - -#, fuzzy -msgid "SID" -msgstr "UID" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -#, fuzzy -msgid "Domain enabled" -msgstr "NIS domeinu-izena" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, fuzzy, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, fuzzy, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"DNS server configuration\n" -msgstr "Konfigurazioa" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -#, fuzzy -msgid "DNS server" -msgstr "IPA zerbitzaria" - -msgid "DNS servers" -msgstr "" - -#, fuzzy -msgid "DNS Servers" -msgstr "IPA zerbitzaria" - -#, fuzzy -msgid "DNS Server" -msgstr "IPA zerbitzaria" - -#, fuzzy -msgid "DNS Server name" -msgstr "Zerbitzuaren izena" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, fuzzy, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, fuzzy -msgid "Search for DNS servers." -msgstr "Bilatu taldeak." - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "IPA DNS Server is not installed" -msgstr "Erabili beharreko IPA zerbitzaria" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, fuzzy, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -msgid "Delete a DNS server" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -#, fuzzy -msgid "SSH public key fingerprint" -msgstr "SHA1 hatz-marka" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -#, fuzzy, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, fuzzy, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -#, fuzzy -msgid "HBAC services" -msgstr "HBAC zerbitzua" - -#, fuzzy -msgid "HBAC Service" -msgstr "HBAC zerbitzuak" - -#, fuzzy, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -#, fuzzy, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -#, fuzzy, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "HBAC service group" -msgstr "HBAC zerbitzua" - -#, fuzzy -msgid "HBAC service groups" -msgstr "HBAC zerbitzu-taldearen deskribapena" - -#, fuzzy -msgid "HBAC Service Groups" -msgstr "Zerbitzu-taldeak" - -#, fuzzy -msgid "HBAC Service Group" -msgstr "Zerbitzu-taldeak" - -#, fuzzy, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -#, fuzzy, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -#, fuzzy, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, fuzzy, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "HBAC zerbitzu-taldearen deskribapena" -msgstr[1] "HBAC zerbitzu-taldearen deskribapena" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -msgid "Delegations" -msgstr "" - -msgid "Delegation" -msgstr "" - -#, fuzzy, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -#, fuzzy, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, fuzzy, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -#, fuzzy, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -#, fuzzy, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Role" -msgstr "" - -#, fuzzy, python-format -msgid "Added role \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -#, fuzzy, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy, python-format -msgid "Modified role \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -#, fuzzy -msgid "local domain range" -msgstr "NIS domeinu-izena" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "" -"Modify ID range.\n" -"\n" -msgstr "Aldatu talde bat." - -#, fuzzy, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, fuzzy -msgid "netgroups" -msgstr "taldeak" - -#, fuzzy -msgid "Netgroup" -msgstr "taldea" - -#, fuzzy, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "\"%(value)s\" ostalari-taldea gehituta" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, fuzzy, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "Default group for new users is not POSIX" -msgstr "Erabiltzaile berrientzako talde lehenetsia" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, fuzzy, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, fuzzy, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, fuzzy, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, fuzzy, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -msgid "Failed logins" -msgstr "" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -msgid "Time now" -msgstr "" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -#, fuzzy, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, fuzzy, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -#, fuzzy -msgid "PKINIT status" -msgstr "PKINIT" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" -msgstr[1] "" - msgid "" "\n" "Auto Membership Rule.\n" @@ -21583,10 +13133,16 @@ msgstr "" msgid "Automember rebuild membership task started" msgstr "" +msgid "Automember rebuild membership task completed" +msgstr "" + #, python-format msgid "Task DN = '%s'" msgstr "" +msgid "Automember" +msgstr "" + msgid "" "\n" " Search for orphan automember rules. The command might need to be run as\n" @@ -21597,411 +13153,121 @@ msgstr "" msgid "Remove orphan automember rules" msgstr "" -msgid "HBAC rule and local members cannot both be set" +msgid "automount location" msgstr "" -msgid "Invalid SELinux user name, must match {}" +msgid "automount locations" msgstr "" -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgid "Automount Locations" msgstr "" -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -msgid "SELinux User Maps" -msgstr "" - -msgid "SELinux User Map" -msgstr "" - -#, python-format -msgid "HBAC rule %(rule)s not found" +msgid "Automount Location" msgstr "" #, fuzzy, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -#, fuzzy, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, fuzzy, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, fuzzy, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -msgid "Vault Container" -msgstr "" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, fuzzy, python-format -msgid "Added vault \"%(value)s\"" +msgid "Added automount location \"%(value)s\"" msgstr "\"%(value)s\" ostalaria gehituta" #, fuzzy, python-format -msgid "Deleted vault \"%(value)s\"" +msgid "Deleted automount location \"%(value)s\"" msgstr "\"%(value)s\" ostalaria ezabatuta" #, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" msgstr[0] "" msgstr[1] "" -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgid "automount map" +msgstr "" + +msgid "automount maps" +msgstr "" + +msgid "Automount Maps" +msgstr "" + +msgid "Automount Map" msgstr "" #, fuzzy, python-format -msgid "Modified vault \"%(value)s\"" +msgid "Added automount map \"%(value)s\"" +msgstr "\"%(value)s\" ostalari-taldea gehituta" + +#, fuzzy, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, fuzzy, python-format +msgid "Modified automount map \"%(value)s\"" msgstr "\"%(value)s\" ostalaria aldatuta" -#, fuzzy -msgid "Vault configuration" -msgstr "Konfigurazioa" +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" +msgstr[1] "" -msgid "IPA servers configured as key recovery agents" +msgid "Automount key object." +msgstr "" + +msgid "automount key" +msgstr "" + +msgid "automount keys" +msgstr "" + +msgid "Automount Keys" +msgstr "" + +msgid "Automount Key" +msgstr "" + +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" msgstr "" #, fuzzy, python-format -msgid "Archived data into vault \"%(value)s\"" +msgid "key named %(key)s already exists" +msgstr "Sarrera hau dagoeneko existitzen da" + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "" + +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" + +#, fuzzy, python-format +msgid "Added automount key \"%(value)s\"" msgstr "\"%(value)s\" ostalaria gehituta" -msgid "Retrieve data from a vault." +#, fuzzy, python-format +msgid "Added automount indirect map \"%(value)s\"" +msgstr "\"%(value)s\" ostalari-taldea gehituta" + +msgid "mount point is relative to parent map, cannot begin with /" msgstr "" #, fuzzy, python-format -msgid "Retrieved data from vault \"%(value)s\"" +msgid "Deleted automount key \"%(value)s\"" msgstr "\"%(value)s\" ostalaria ezabatuta" -msgid "No archived data." -msgstr "" +#, fuzzy, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "" +msgstr[1] "" #, fuzzy msgid "Member service groups" @@ -22033,6 +13299,12 @@ msgstr "" msgid "An IPA master host cannot be deleted or disabled" msgstr "" +msgid "entry" +msgstr "sarrera" + +msgid "entries" +msgstr "sarrerak" + #, fuzzy msgid "Entry" msgstr "sarrera" @@ -22045,6 +13317,10 @@ msgstr "" msgid "%(parent)s: %(oname)s not found" msgstr "" +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "" + #, python-format msgid "%(oname)s with name \"%(pkey)s\" already exists" msgstr "" @@ -22063,6 +13339,10 @@ msgstr "" msgid "No such attribute on this entry" msgstr "" +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "%(ldap_obj_name)s objektua berrizendatu" + msgid "the entry was deleted while being modified" msgstr "" @@ -22070,6 +13350,10 @@ msgstr "" msgid "%s" msgstr "" +#, python-format +msgid "member %s" +msgstr "" + #, python-format msgid "%s to add" msgstr "" @@ -22078,6 +13362,10 @@ msgstr "" msgid "%s to remove" msgstr "" +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + #, python-format msgid "" "Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." @@ -22100,189 +13388,137 @@ msgstr "" msgid "one or more values to remove" msgstr "" -#, fuzzy msgid "" "\n" -"IPA servers\n" -msgstr "IPA zerbitzaria" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" -msgid "" -"\n" -"Get information about installed IPA servers.\n" +msgid "must be TRUE or FALSE" msgstr "" msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." msgstr "" -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" +msgid "Principal alias" msgstr "" #, fuzzy -msgid "server" -msgstr "IPA zerbitzaria" +msgid "User password expiration" +msgstr "Erabiltzailearen pasahitza" -msgid "servers" +#, fuzzy +msgid "SSH public key fingerprint" +msgstr "SHA1 hatz-marka" + +msgid "Base-64 encoded user certificate" msgstr "" #, fuzzy -msgid "IPA Servers" -msgstr "IPA zerbitzaria" +msgid "Certificate mapping data" +msgstr "Ziurtagiria" -msgid "Server location" +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" msgstr "" #, fuzzy -msgid "Service weight" -msgstr "Zerbitzuaren izena" +msgid "SMB Home Directory" +msgstr "Direktorio nagusiaren oinarria" -msgid "Weight for server services" +#, fuzzy +msgid "SMB Home Directory Drive" +msgstr "Direktorio nagusiaren oinarria" + +#, python-format +msgid "invalid e-mail format: %(email)s" msgstr "" -msgid "Service relative weight" +#, python-format +msgid "manager %(manager)s not found" msgstr "" -msgid "Relative weight for server services (counts per location)" +#, python-format +msgid "can be at most %(len)d characters" msgstr "" -msgid "Enabled server roles" +msgid "Issuer" msgstr "" -msgid "List of enabled roles" +#, fuzzy +msgid "Issuer of the certificate" +msgstr "Ziurtagiri berria" + +msgid "Subject" +msgstr "Gaia" + +msgid "Subject of the certificate" msgstr "" -msgid "Modify information about an IPA server." +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." msgstr "" #, fuzzy, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -#, fuzzy -msgid "State" -msgstr "Egoera" - -#, fuzzy -msgid "Server state" -msgstr "Zerbitzuaren izena" - -#, fuzzy, python-format -msgid "Changed server state of \"%(value)s\"." +msgid "Added certificate mappings to user \"%(value)s\"" msgstr "\"%(value)s\" zerbitzua gehituta" -msgid "Cannot hide CA renewal master." +msgid "Remove one or more certificate mappings from the user entry." msgstr "" -msgid "Cannot hide DNSSec key master." +#, fuzzy, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" msgstr "" -#, python-format -msgid "Cannot hide last enabled %(name)s server." +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" msgstr "" msgid "" @@ -22357,6 +13593,10 @@ msgstr "Ziurtagiria" msgid "Certificate Authorities" msgstr "Ziurtagiria" +#, fuzzy +msgid "Name" +msgstr "Ostalari-izena" + msgid "Name for referencing the CA" msgstr "" @@ -22377,9 +13617,22 @@ msgstr "Gaia" msgid "Subject Distinguished Name" msgstr "" +msgid "Issuer DN" +msgstr "" + msgid "Issuer Distinguished Name" msgstr "" +msgid "Base-64 encoded certificate." +msgstr "" + +#, fuzzy +msgid "Certificate chain" +msgstr "Ziurtagiria" + +msgid "X.509 certificate chain" +msgstr "" + #, fuzzy msgid "Search for CAs." msgstr "Bilatu taldeak." @@ -22390,6 +13643,9 @@ msgid_plural "%(count)d CAs matched" msgstr[0] "" msgstr[1] "" +msgid "Include certificate chain in output" +msgstr "" + msgid "Display the properties of a CA." msgstr "" @@ -22423,6 +13679,9 @@ msgstr "\"%(value)s\" ostalaria ezabatuta" msgid "Insufficient privilege to delete a CA." msgstr "" +msgid "CA" +msgstr "" + msgid "IPA CA cannot be deleted" msgstr "" @@ -22460,319 +13719,1213 @@ msgstr "\"%(value)s\" ostalaria ezabatuta" msgid "" "\n" -"Stageusers\n" +"Manage CA ACL rules.\n" "\n" -"Manage stage user entries.\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" "\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" +"SUBJECT PRINCIPAL SCOPE:\n" "\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" "\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" "\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" +"CERTIFICATE AUTHORITY SCOPE:\n" "\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" "\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"PROFILE SCOPE:\n" "\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" "\n" "EXAMPLES:\n" "\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" "\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" "\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" msgstr "" -#, fuzzy -msgid "Stage Users" -msgstr "Erabiltzaileak" - -#, fuzzy -msgid "Stage User" -msgstr "Kanpoko erabiltzailea" - -msgid "stage user" +msgid "CA ACL" msgstr "" -msgid "stage users" +msgid "CA ACLs" +msgstr "" + +msgid "CA category" +msgstr "" + +msgid "CA category the ACL applies to" +msgstr "" + +msgid "CAs" msgstr "" #, fuzzy, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, fuzzy, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, fuzzy, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -#, fuzzy -msgid "User password expiration" -msgstr "Erabiltzailearen pasahitza" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -#, fuzzy -msgid "SMB Home Directory" -msgstr "Direktorio nagusiaren oinarria" - -#, fuzzy -msgid "SMB Home Directory Drive" -msgstr "Direktorio nagusiaren oinarria" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -#, fuzzy -msgid "Issuer of the certificate" -msgstr "Ziurtagiri berria" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -#, fuzzy, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -#, fuzzy -msgid "URI" -msgstr "UID" - -#, fuzzy, python-format -msgid "Added OTP token \"%(value)s\"" +msgid "Added CA ACL \"%(value)s\"" msgstr "\"%(value)s\" ostalaria gehituta" -msgid "cannot be empty" +#, fuzzy, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +msgid "default CA ACL can be only disabled" msgstr "" #, fuzzy, python-format -msgid "Deleted OTP token \"%(value)s\"" +msgid "Modified CA ACL \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" + +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +msgid "Enabled CA ACL \"%(value)s\"" msgstr "\"%(value)s\" ostalaria ezabatuta" #, fuzzy, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" #, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" +msgid "%i user or group added." +msgstr "" + +#, fuzzy, python-format +msgid "%i users or groups added." +msgstr "Bilatu taldeak." + +msgid "users cannot be added when user category='all'" +msgstr "" + +#, python-format +msgid "%i user or group removed." +msgstr "" + +#, python-format +msgid "%i users or groups removed." +msgstr "" + +#, python-format +msgid "%i host or hostgroup added." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "" + +msgid "hosts cannot be added when host category='all'" +msgstr "" + +#, python-format +msgid "%i host or hostgroup removed." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups removed." +msgstr "" + +#, fuzzy, python-format +msgid "%i service added." +msgstr "Zerbitzuaren izena" + +#, fuzzy, python-format +msgid "%i services added." +msgstr "Zerbitzuaren izena" + +msgid "services cannot be added when service category='all'" +msgstr "" + +#, python-format +msgid "%i service removed." +msgstr "" + +#, python-format +msgid "%i services removed." +msgstr "" + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, python-format +msgid "%i profiles removed." +msgstr "" + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +msgid " * 0 - unspecified\n" +msgstr "" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +#, fuzzy +msgid "Subject email address" +msgstr "E-posta helbidea" + +#, fuzzy +msgid "Subject DNS name" +msgstr "Gaia" + +#, fuzzy +msgid "Subject X.400 address" +msgstr "Kalea" + +#, fuzzy +msgid "Subject directory name" +msgstr "Direktorio nagusiaren oinarria" + +msgid "Subject EDI Party name" +msgstr "" + +#, fuzzy +msgid "Subject URI" +msgstr "Gaia" + +#, fuzzy +msgid "Subject IP Address" +msgstr "Kalea" + +#, fuzzy +msgid "Subject OID" +msgstr "Gaia" + +#, fuzzy +msgid "Subject UPN" +msgstr "Gaia" + +msgid "Subject Kerberos principal name" +msgstr "" + +msgid "Subject Other Name" +msgstr "" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "Hatz-marka (SHA1)" + +#, fuzzy +msgid "Fingerprint (SHA256)" +msgstr "Hatz-marka (SHA1)" + +#, fuzzy +msgid "Serial number (hex)" +msgstr "Serie-zenbakia" + +msgid "Request status" +msgstr "" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +#, fuzzy +msgid "'add' option" +msgstr "Sudo aukera" + +#, fuzzy +msgid "The principal for this request doesn't exist." +msgstr "Taldea ez da existitzen" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "Egoera" + +msgid "Revoked" +msgstr "" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "" + +#, fuzzy +msgid "Status of the certificate" +msgstr "Ziurtagiri berria" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +msgid "domain" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +#, fuzzy +msgid "User logins" +msgstr "Erabiltzaile-taldeak" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" msgstr[0] "" msgstr[1] "" msgid "" "\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" +"Manage Certificate Profiles\n" "\n" -"To run this code in the lite-server\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" "\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" "\n" -"where the contents of the file batch_request.json follow the below example\n" +"PROFILE ID SYNTAX:\n" "\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" "\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" +"EXAMPLES:\n" "\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" "\n" -"And then a nested response for each IPA command method sent in the request\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" "\n" msgstr "" -msgid "Make multiple ipa calls via one remote procedure call" +msgid "invalid Profile ID" msgstr "" -msgid "must contain a tuple (list, dict)" +#, fuzzy +msgid "Certificate Profile" +msgstr "Ziurtagiria" + +#, fuzzy +msgid "Certificate Profiles" +msgstr "Ziurtagiria" + +#, fuzzy +msgid "Profile configuration" +msgstr "Konfigurazioa" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" msgstr "" +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, fuzzy, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "must be at least 10" +msgstr "" + +#, fuzzy +msgid "configuration options" +msgstr "Konfigurazioa" + +msgid "Configuration" +msgstr "Konfigurazioa" + +#, fuzzy +msgid "Maximum hostname length" +msgstr "Erabiltzaile-izenaren gehienezko luzera" + +msgid "Enable adding subids to new users" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +#, fuzzy +msgid "IPA CA servers" +msgstr "IPA zerbitzaria" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +#, fuzzy +msgid "IPA KRA servers" +msgstr "IPA zerbitzaria" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "Domain resolution order" +msgstr "" + +msgid "colon-separated list of domains used for short name qualification" +msgstr "" + +#, fuzzy +msgid "IPA DNS servers" +msgstr "IPA zerbitzaria" + +msgid "IPA servers configured as domain name server" +msgstr "" + +#, fuzzy +msgid "Hidden IPA DNS servers" +msgstr "IPA zerbitzaria" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "IPA DNSSec key master" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +#, fuzzy +msgid "Setup SID configuration" +msgstr "Konfigurazioa" + +msgid "New users and groups automatically get a SID assigned" +msgstr "" + +#, fuzzy +msgid "Add SIDs" +msgstr "Gehitu hainbat" + +msgid "Add SIDs for existing users and groups" +msgstr "" + +msgid "NetBIOS name of the IPA domain" +msgstr "" + +msgid "Empty domain is not allowed" +msgstr "" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "not allowed to enable SID generation" +msgstr "" + +msgid "" +"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " +"allowed. Empty string is not allowed." +msgstr "" + +msgid "Failed to call DBus" +msgstr "" + +msgid "Configuration of SID failed. See details in the error log" +msgstr "" + +msgid "The group doesn't exist" +msgstr "Taldea ez da existitzen" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" + +msgid "SELinux user map default user not in order list" +msgstr "" + +#, python-format +msgid "You cannot specify %s without the --enable-sid option" +msgstr "" + +msgid "delegation" +msgstr "" + +msgid "delegations" +msgstr "" + +msgid "Delegations" +msgstr "" + +msgid "Delegation" +msgstr "" + +#, fuzzy, python-format +msgid "Added delegation \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +#, fuzzy, python-format +msgid "Deleted delegation \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, fuzzy, python-format +msgid "Modified delegation \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "" +msgstr[1] "" + msgid "" "\n" "Domain Name System (DNS)\n" @@ -23166,6 +15319,9 @@ msgid "" " ipa dnsconfig-mod --forwarder=203.0.113.113\n" msgstr "" +msgid "invalid IP network format" +msgstr "IP sare formatu baliogabea" + msgid "each ACL element must be terminated with a semicolon" msgstr "" @@ -23202,6 +15358,12 @@ msgid "" "All nameservers failed to answer the query for DNS reverse zone %(revdns)s" msgstr "" +#, python-format +msgid "" +"No answers could be found in the specified lifetime for DNS reverse zone " +"%(revdns)s" +msgstr "" + #, python-format msgid "" "DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " @@ -23316,6 +15478,9 @@ msgstr "" msgid "Managedby permission" msgstr "Baimena" +msgid "DNS is not configured" +msgstr "" + msgid "cannot be used when a zone is specified" msgstr "" @@ -23534,9 +15699,330 @@ msgstr "" msgid "Do not update records only return expected records" msgstr "" +#, fuzzy +msgid "" +"\n" +"DNS server configuration\n" +msgstr "Konfigurazioa" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +#, fuzzy +msgid "DNS server" +msgstr "IPA zerbitzaria" + +msgid "DNS servers" +msgstr "" + +#, fuzzy +msgid "DNS Servers" +msgstr "IPA zerbitzaria" + +#, fuzzy +msgid "DNS Server" +msgstr "IPA zerbitzaria" + +#, fuzzy +msgid "DNS Server name" +msgstr "Zerbitzuaren izena" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, fuzzy, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, fuzzy +msgid "Search for DNS servers." +msgstr "Bilatu taldeak." + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +msgid "IPA DNS Server is not installed" +msgstr "Erabili beharreko IPA zerbitzaria" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, fuzzy, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +msgid "Delete a DNS server" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "groups" +msgstr "taldeak" + +msgid "User Group" +msgstr "Erabiltzaile-taldea" + +#, fuzzy, python-format +msgid "Added group \"%(value)s\"" +msgstr "\"%(value)s\" ostalari-taldea gehituta" + +msgid "gid cannot be set for external group" +msgstr "" + +msgid "attribute \"gidNumber\" not allowed with --nonposix" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, fuzzy +msgid "privileged group" +msgstr "Helburuko taldea" + +#, fuzzy, python-format +msgid "Modified group \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, fuzzy, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +#, fuzzy +msgid "Not a managed group" +msgstr "Sortu talde berri bat." + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + msgid "The deny type has been deprecated." msgstr "" +msgid "HBAC rules" +msgstr "HBAC arauak" + +msgid "HBAC Rules" +msgstr "HBAC arauak" + +msgid "HBAC Services" +msgstr "HBAC zerbitzuak" + +#, fuzzy +msgid "HBAC Service Groups" +msgstr "Zerbitzu-taldeak" + #, fuzzy, python-format msgid "Added HBAC rule \"%(value)s\"" msgstr "\"%(value)s\" erabiltzailea gehituta" @@ -23571,122 +16057,7932 @@ msgstr "" msgid "" "\n" -"Manage Certificate Profiles\n" +"HBAC Services\n" "\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" "\n" "EXAMPLES:\n" "\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" "\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" "\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" "\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" "\n" msgstr "" -msgid "invalid Profile ID" -msgstr "" +#, fuzzy +msgid "HBAC services" +msgstr "HBAC zerbitzua" #, fuzzy -msgid "Certificate Profile" -msgstr "Ziurtagiria" +msgid "HBAC Service" +msgstr "HBAC zerbitzuak" -#, fuzzy -msgid "Certificate Profiles" -msgstr "Ziurtagiria" +#, fuzzy, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" -#, fuzzy -msgid "Profile configuration" -msgstr "Konfigurazioa" +#, fuzzy, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +#, fuzzy, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" #, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +msgid "HBAC service group" +msgstr "HBAC zerbitzua" + +#, fuzzy +msgid "HBAC service groups" +msgstr "HBAC zerbitzu-taldearen deskribapena" + +#, fuzzy +msgid "HBAC Service Group" +msgstr "Zerbitzu-taldeak" + +#, fuzzy, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +#, fuzzy, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +#, fuzzy, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, fuzzy, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "HBAC zerbitzu-taldearen deskribapena" +msgstr[1] "HBAC zerbitzu-taldearen deskribapena" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Access granted: %s" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +#, fuzzy +msgid "Host" +msgstr "Ostalariak" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Serial Number" +msgstr "Serie-zenbakia" + +#, fuzzy +msgid "Serial Number (hex)" +msgstr "Serie-zenbakia" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" msgstr[0] "" msgstr[1] "" #, fuzzy, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" +msgid "Disabled host \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" +#, fuzzy, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +#, fuzzy, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +msgid "Add new principal alias to host entry" msgstr "" #, fuzzy, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" +msgid "Added new aliases to host \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgid "Remove principal alias from a host entry" msgstr "" #, fuzzy, python-format -msgid "Modified Certificate Profile \"%(value)s\"" +msgid "Removed aliases from host \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#, fuzzy +msgid "host groups" +msgstr "Ostalari-taldeak" + +#, fuzzy +msgid "Host Group" +msgstr "Ostalari-taldeak" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "\"%(value)s\" ostalari-taldea gehituta" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, fuzzy +msgid "hostgroup" +msgstr "Ostalari-taldea" + +msgid "privileged hostgroup" +msgstr "" + +#, fuzzy, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"and an ID range of a trusted domain may set\n" +" - auto-private-groups: [true|false|hybrid] automatic creation of private " +"groups\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +#, fuzzy +msgid "local domain range" +msgstr "NIS domeinu-izena" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +#, fuzzy +msgid "Auto private groups" +msgstr "Bilatu taldeak." + +msgid "Auto creation of private groups, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --auto-private-groups\n" +"\n" +" may be given for a new ID range for a trusted AD domain and\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" +"private-groups is specified" +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, fuzzy, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +msgid "" +"Modify ID range.\n" +"\n" +msgstr "Aldatu talde bat." + +#, fuzzy, python-format +msgid "Modified ID range \"%(value)s\"" msgstr "\"%(value)s\" erabiltzailea aldatuta" -msgid "Certificate profiles cannot be renamed" +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" msgstr "" -msgid "Insufficient privilege to modify a certificate profile." +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +#, fuzzy +msgid "ID View" +msgstr "Ikusi" + +msgid "system ID View" +msgstr "" + +#, fuzzy +msgid "ID Views" +msgstr "Ikusi" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +msgid "Hosts the view applies to" +msgstr "" + +#, fuzzy, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +#, fuzzy, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, fuzzy, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" msgstr "" #, python-format -msgid "all masters must have %(role)s role enabled" +msgid "ID View applied to %i host." msgstr "" #, python-format -msgid "must have %(role)s role enabled" +msgid "ID View applied to %i hosts." msgstr "" -msgid "must be enabled only on a single master" +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, fuzzy, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +msgid "Delete an ID override." +msgstr "" + +#, fuzzy, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +msgid "Modify an ID override." +msgstr "" + +#, fuzzy, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, fuzzy, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +#, fuzzy, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +#, fuzzy, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +#, fuzzy, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, fuzzy, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Internationalization messages" +msgstr "" + +msgid "Your session has expired. Please log in again." +msgstr "" + +msgid "Apply" +msgstr "" + +msgid "Rebuild auto membership" +msgstr "" + +#, fuzzy +msgid "Are you sure you want to rebuild auto membership?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +#, fuzzy +msgid "Are you sure you want to proceed with the action?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +#, fuzzy, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +#, fuzzy, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +#, fuzzy, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +msgid "Actions" +msgstr "" + +msgid "Add" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) added" +msgstr "" + +msgid "Direct Membership" +msgstr "" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "" + +msgid "Indirect Membership" +msgstr "" + +#, fuzzy +msgid "No entries." +msgstr "sarrerak" + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "" + +msgid "Remove" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "" + +msgid "Show Results" +msgstr "" + +msgid "Authentication indicators" +msgstr "" + +msgid "Authentication indicator" +msgstr "" + +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "Add Custom Authentication Indicator" +msgstr "" + +msgid "Two factor authentication (password + OTP)" +msgstr "" + +msgid "RADIUS" +msgstr "" + +msgid "PKINIT" +msgstr "PKINIT" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "" + +msgid "Disable per-user override" +msgstr "" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "About" +msgstr "" + +msgid "Activate" +msgstr "" + +msgid "Add and Add Another" +msgstr "Gehitu eta gehitu beste bat" + +msgid "Add and Close" +msgstr "Gehitu eta itxi" + +msgid "Add and Edit" +msgstr "Gehitu eta editatu" + +msgid "Add Many" +msgstr "Gehitu hainbat" + +msgid "Back" +msgstr "" + +msgid "Cancel" +msgstr "Utzi" + +msgid "Clear" +msgstr "" + +msgid "Clear all fields on the page." +msgstr "" + +msgid "Close" +msgstr "Itxi" + +msgid "Disable" +msgstr "" + +msgid "Download" +msgstr "" + +msgid "Download certificate as PEM formatted file." +msgstr "" + +msgid "Edit" +msgstr "" + +#, fuzzy +msgid "Enable" +msgstr "Gaituta" + +msgid "Find" +msgstr "" + +msgid "Get" +msgstr "" + +msgid "Hide" +msgstr "" + +msgid "Issue" +msgstr "" + +msgid "Match" +msgstr "" + +msgid "Match users according to certificate." +msgstr "" + +msgid "Migrate" +msgstr "" + +msgid "OK" +msgstr "Ados" + +msgid "Refresh" +msgstr "" + +msgid "Reload current settings from the server." +msgstr "" + +#, fuzzy +msgid "Delete" +msgstr "Ezabatu taldea." + +msgid "Remove hold" +msgstr "" + +msgid "Reset" +msgstr "" + +msgid "Reset Password" +msgstr "Berrezarri pasahitza" + +#, fuzzy +msgid "Reset Password and Log in" +msgstr "Berrezarri pasahitza" + +msgid "Restore" +msgstr "" + +msgid "Retry" +msgstr "Saiatu berriz" + +msgid "Revert" +msgstr "" + +msgid "Revoke" +msgstr "" + +msgid "Save" +msgstr "" + +#, fuzzy +msgid "Set" +msgstr "Ezarri OTP" + +msgid "Show" +msgstr "" + +msgid "Stage" +msgstr "" + +msgid "Update" +msgstr "" + +msgid "View" +msgstr "Ikusi" + +#, fuzzy +msgid "Customization" +msgstr "Konfigurazioa" + +msgid "Pagination Size" +msgstr "" + +msgid "Collapse All" +msgstr "" + +msgid "Expand All" +msgstr "" + +msgid "General" +msgstr "Orokorra" + +#, fuzzy +msgid "Identity Settings" +msgstr "Kontaktuaren ezarpenak" + +#, fuzzy +msgid "Record Settings" +msgstr "Kontuaren ezarpenak" + +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "" + +msgid "Back to Top" +msgstr "" + +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "" + +#, fuzzy +msgid "Add custom value" +msgstr "\"%(value)s\" ostalaria gehituta" + +msgid "Available" +msgstr "" + +msgid "Some operations failed." +msgstr "" + +msgid "Operations Error" +msgstr "" + +#, fuzzy +msgid "Confirmation" +msgstr "Konfigurazioa" + +msgid "Custom value" +msgstr "" + +msgid "This page has unsaved changes. Please save or revert." +msgstr "" + +msgid "Unsaved Changes" +msgstr "" + +#, python-brace-format +msgid "Edit ${entity}" +msgstr "" + +msgid "Hide details" +msgstr "" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "" + +msgid "Prospective" +msgstr "" + +#, fuzzy +msgid "Redirection" +msgstr "deskribapena" + +msgid "Select entries to be removed." +msgstr "" + +msgid "Result" +msgstr "" + +msgid "Show details" +msgstr "" + +msgid "Success" +msgstr "" + +msgid "Validation error" +msgstr "" + +msgid "Input form contains invalid or missing values." +msgstr "" + +msgid "Please try the following options:" +msgstr "" + +msgid "If the problem persists please contact the system administrator." +msgstr "" + +msgid "Refresh the page." +msgstr "" + +msgid "Reload the browser." +msgstr "" + +msgid "Return to the main page and retry the operation" +msgstr "" + +#, fuzzy, python-brace-format +msgid "An error has occurred (${error})" +msgstr "barne-errore bat gertatu da" + +#, fuzzy +msgid "HTTP Error" +msgstr "Errorea" + +msgid "Internal Error" +msgstr "" + +#, fuzzy +msgid "IPA Error" +msgstr "Errorea" + +msgid "No response" +msgstr "" + +msgid "Unknown Error" +msgstr "" + +msgid "URL" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} members:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} member managers:" +msgstr "" + +msgid "Settings" +msgstr "Ezarpenak" + +msgid "Search" +msgstr "Bilatu" + +msgid "False" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Allowed to create keytab" +msgstr "" + +msgid "Allowed to retrieve keytab" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Add Kerberos Principal Alias" +msgstr "" + +msgid "New kerberos principal alias" +msgstr "" + +msgid "Remove Kerberos Alias" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "" + +msgid "Inherited from server configuration" +msgstr "" + +msgid "MS-PAC" +msgstr "" + +msgid "Override inherited settings" +msgstr "" + +msgid "PAD" +msgstr "" + +#, fuzzy +msgid "Authenticating" +msgstr "Kontuaren ezarpenak" + +msgid "Authentication with personal certificate failed" +msgstr "" + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" + +msgid "Continue to next page" +msgstr "" + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" + +msgid "Login failed due to an unknown reason" +msgstr "" + +msgid "Logged In As" +msgstr "" + +msgid "Authentication with Kerberos failed" +msgstr "" + +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" + +msgid "Loading" +msgstr "" + +msgid "Kerberos Principal you entered is expired" +msgstr "" + +msgid "Loading data" +msgstr "" + +msgid "Log in" +msgstr "" + +#, fuzzy +msgid "Log In Using Certificate" +msgstr "Ziurtagiria" + +msgid "Log in using personal certificate" +msgstr "" + +msgid "Log out" +msgstr "" + +msgid "Log out error" +msgstr "" + +msgid "Password or Password+One-Time Password" +msgstr "" + +#, python-brace-format +msgid "You will be redirected in ${count}s" +msgstr "" + +msgid "Sync OTP Token" +msgstr "" + +msgid "Synchronizing" +msgstr "" + +msgid "The user account you entered is locked" +msgstr "" + +#, fuzzy +msgid "number of passwords" +msgstr "Erabiltzailearen pasahitza" + +msgid "seconds" +msgstr "" + +#, fuzzy +msgid "Migrating" +msgstr "Konfigurazioa" + +msgid "There was a problem with your request. Please, try again later." +msgstr "" + +msgid "Password migration was not successful" +msgstr "" + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" + +msgid "The password or username you entered is incorrect" +msgstr "" + +msgid "Password migration was successful" +msgstr "" + +msgid "Attribute" +msgstr "Atributua" + +msgid "Add delegation" +msgstr "" + +msgid "Remove delegations" +msgstr "" + +#, fuzzy +msgid "Add permission" +msgstr "Baimena" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Remove permissions" +msgstr "Baimenak" + +#, python-brace-format +msgid "Remove privileges from permission '${primary_key}'" +msgstr "" + +msgid "Add privilege" +msgstr "" + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "" + +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "" + +msgid "Remove privileges" +msgstr "" + +#, python-brace-format +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "" + +#, python-brace-format +msgid "Remove roles from privilege '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Role Settings" +msgstr "Ezarpenak" + +msgid "Add role" +msgstr "" + +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "" + +#, python-brace-format +msgid "Add services into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "" + +msgid "Remove roles" +msgstr "" + +#, python-brace-format +msgid "Remove role '${primary_key}' from privileges" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from role '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Add self service permission" +msgstr "HBAC zerbitzuaren deskribapena" + +msgid "Remove self service permissions" +msgstr "" + +#, fuzzy +msgid "Add rule" +msgstr "HBAC araua" + +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Are you sure you want to change default group?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +#, fuzzy +msgid "Default host group" +msgstr "Erabiltzaile-talde lehenetsia" + +#, fuzzy +msgid "Default user group" +msgstr "Erabiltzaile-talde lehenetsia" + +msgid "Exclusive" +msgstr "" + +#, fuzzy +msgid "Expression" +msgstr "Baimena" + +#, fuzzy +msgid "Host group rule" +msgstr "Ostalari-taldea" + +#, fuzzy +msgid "Host group rules" +msgstr "Ostalari-taldeak" + +msgid "Inclusive" +msgstr "" + +msgid "Remove auto membership rules" +msgstr "" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "User group rule" +msgstr "Erabiltzaile-taldea" + +#, fuzzy +msgid "User group rules" +msgstr "Erabiltzaile-taldea" + +msgid "Add automount key" +msgstr "" + +msgid "Remove automount keys" +msgstr "" + +msgid "Add automount location" +msgstr "" + +#, fuzzy +msgid "Automount Location Settings" +msgstr "Kontuaren ezarpenak" + +msgid "Remove automount locations" +msgstr "" + +msgid "Add automount map" +msgstr "" + +#, fuzzy +msgid "Map Type" +msgstr "Mota" + +msgid "Direct" +msgstr "" + +msgid "Indirect" +msgstr "" + +msgid "Remove automount maps" +msgstr "" + +msgid "Add certificate authority" +msgstr "" + +msgid "Remove certificate authorities" +msgstr "" + +msgid "Add CA ACL" +msgstr "" + +#, python-brace-format +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "All" +msgstr "Onartu" + +msgid "Any CA" +msgstr "" + +#, fuzzy +msgid "Any Host" +msgstr "Ostalariak" + +#, fuzzy +msgid "Any Service" +msgstr "HBAC zerbitzuak" + +#, fuzzy +msgid "Any Profile" +msgstr "Edozein talde" + +msgid "Anyone" +msgstr "" + +#, fuzzy +msgid "Rule status" +msgstr "Arau-mota" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "" + +msgid "Remove CA ACLs" +msgstr "" + +#, python-brace-format +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Specified CAs" +msgstr "Zehazturiko taldeak" + +#, fuzzy +msgid "Specified Hosts and Groups" +msgstr "Zehazturiko taldeak" + +#, fuzzy +msgid "Specified Profiles" +msgstr "Zehazturiko taldeak" + +#, fuzzy +msgid "Specified Services and Groups" +msgstr "Zehazturiko taldeak" + +#, fuzzy +msgid "Specified Users and Groups" +msgstr "Zehazturiko taldeak" + +msgid "Permitted to have certificates issued" +msgstr "" + +msgid "Remove certificate profiles" +msgstr "" + +msgid "AA Compromise" +msgstr "" + +msgid "Add principal" +msgstr "" + +msgid "Affiliation Changed" +msgstr "" + +msgid "CA Compromise" +msgstr "" + +#, fuzzy +msgid "Certificates" +msgstr "Ziurtagiria" + +#, fuzzy +msgid "Certificate Hold" +msgstr "Ziurtagiria" + +msgid "Cessation of Operation" +msgstr "" + +#, fuzzy +msgid "Common Name" +msgstr "Komandoaren izena" + +msgid "the certificate with serial number " +msgstr "" + +msgid "Expires On" +msgstr "" + +msgid "Issued on from" +msgstr "" + +msgid "Issued on to" +msgstr "" + +#, fuzzy +msgid "Maximum serial number" +msgstr "Serie-zenbakia" + +#, fuzzy +msgid "Minimum serial number" +msgstr "Serie-zenbakia" + +msgid "Revoked on from" +msgstr "" + +msgid "Revoked on to" +msgstr "" + +msgid "Valid not after from" +msgstr "" + +msgid "Valid not after to" +msgstr "" + +msgid "Valid not before from" +msgstr "" + +msgid "Valid not before to" +msgstr "" + +msgid "Fingerprints" +msgstr "Hatz-markak" + +#, fuzzy +msgid "Get Certificate" +msgstr "Ziurtagiri berria" + +#, fuzzy +msgid "Certificate Hold Removed" +msgstr "Ziurtagiria" + +#, python-brace-format +msgid "Issue new certificate for host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for user '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Issue new certificate" +msgstr "Ziurtagiri berria" + +msgid "Issued By" +msgstr "" + +msgid "Issued On" +msgstr "" + +msgid "Issued To" +msgstr "" + +msgid "Key Compromise" +msgstr "" + +#, fuzzy +msgid "No Valid Certificate" +msgstr "Ziurtagiri berria" + +msgid "New Certificate" +msgstr "Ziurtagiri berria" + +msgid "Certificate in base64 or PEM format" +msgstr "" + +msgid "Note" +msgstr "" + +msgid "Organization" +msgstr "Erakundea" + +#, fuzzy +msgid "Organizational Unit" +msgstr "Erakundea" + +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "" + +msgid "Privilege Withdrawn" +msgstr "" + +msgid "Reason for Revocation" +msgstr "" + +#, fuzzy +msgid "Remove certificate hold" +msgstr "Ziurtagiri berria" + +msgid "Do you want to remove the certificate hold?" +msgstr "" + +msgid "Remove from CRL" +msgstr "" + +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" + +#, python-brace-format +msgid " -8 '${cn}'" +msgstr "" + +#, fuzzy +msgid "Certificate requested" +msgstr "Ziurtagiria" + +#, fuzzy +msgid "Revoke certificate" +msgstr "Ziurtagiri berria" + +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "" + +#, fuzzy +msgid "Certificate Revoked" +msgstr "Ziurtagiria" + +msgid "REVOKED" +msgstr "" + +msgid "SHA1 Fingerprint" +msgstr "SHA1 hatz-marka" + +#, fuzzy +msgid "SHA256 Fingerprint" +msgstr "SHA1 hatz-marka" + +msgid "Superseded" +msgstr "" + +msgid "Unspecified" +msgstr "" + +#, fuzzy +msgid "Valid Certificate Present" +msgstr "Ziurtagiria" + +msgid "Valid from" +msgstr "" + +msgid "Valid to" +msgstr "" + +msgid "Validity" +msgstr "" + +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "" + +#, fuzzy +msgid "View Certificate" +msgstr "Ziurtagiri berria" + +#, fuzzy +msgid "Certificate Data" +msgstr "Ziurtagiria" + +#, fuzzy +msgid "Certificate For Match" +msgstr "Ziurtagiria" + +#, fuzzy +msgid "Certificate Mapping Match" +msgstr "Ziurtagiria" + +msgid "Matched Users" +msgstr "" + +#, fuzzy +msgid "User Login" +msgstr "Erabiltzaile-taldea" + +msgid "Add certificate identity mapping rule" +msgstr "" + +msgid "Add certificate mapping data" +msgstr "" + +#, fuzzy +msgid "Configuration string" +msgstr "Konfigurazioa" + +#, python-brace-format +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "" + +msgid "Remove certificate mapping data" +msgstr "" + +msgid "Issuer and subject" +msgstr "" + +msgid "Remove certificate identity mapping rules" +msgstr "" + +#, fuzzy +msgid "Version" +msgstr "Baimena" + +#, fuzzy +msgid "Group Options" +msgstr "Taldearen ezarpenak" + +#, fuzzy +msgid "Search Options" +msgstr "Sudo aukera" + +#, fuzzy +msgid "SELinux Options" +msgstr "Sudo aukera" + +#, fuzzy +msgid "Server Options" +msgstr "Erabili beharreko IPA zerbitzaria" + +#, fuzzy +msgid "Service Options" +msgstr "Zerbitzuak" + +#, fuzzy +msgid "User Options" +msgstr "Sudo aukera" + +msgid "Forward first" +msgstr "" + +msgid "Forwarding disabled" +msgstr "" + +msgid "Forward only" +msgstr "" + +#, fuzzy +msgid "Options" +msgstr "Sudo aukera" + +msgid "Update System DNS Records" +msgstr "" + +msgid "Do you want to update system DNS records?" +msgstr "" + +msgid "System DNS records updated" +msgstr "" + +msgid "Add DNS forward zone" +msgstr "" + +msgid "Remove DNS forward zones" +msgstr "" + +msgid "Add DNS resource record" +msgstr "" + +msgid "DNS record was deleted because it contained no data." +msgstr "" + +msgid "Other Record Types" +msgstr "" + +msgid "Address not valid, can't redirect" +msgstr "" + +#, fuzzy +msgid "Create dns record" +msgstr "Sortu talde berri bat." + +msgid "Creating record." +msgstr "" + +msgid "Record creation failed." +msgstr "" + +msgid "Checking if record exists." +msgstr "" + +msgid "Record not found." +msgstr "" + +msgid "Redirection to PTR record" +msgstr "" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "" + +msgid "Target reverse zone not found." +msgstr "" + +msgid "Fetching DNS zones." +msgstr "" + +msgid "An error occurred while fetching dns zones." +msgstr "" + +msgid "You will be redirected to DNS Zone." +msgstr "" + +msgid "Remove DNS resource records" +msgstr "" + +msgid "Standard Record Types" +msgstr "" + +msgid "Records for DNS Zone" +msgstr "" + +msgid "Record Type" +msgstr "" + +msgid "Add DNS zone" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "" + +#, fuzzy +msgid "DNS Zone Settings" +msgstr "Kontuaren ezarpenak" + +msgid "Remove DNS zones" +msgstr "" + +#, fuzzy +msgid "Remove Permission" +msgstr "Baimena" + +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "" + +msgid "Skip DNS check" +msgstr "" + +msgid "Skip overlap check" +msgstr "" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" + +msgid "Authoritative nameserver change" +msgstr "" + +msgid "Level" +msgstr "" + +msgid "Set Domain Level" +msgstr "" + +#, fuzzy +msgid "Add user group" +msgstr "Erabiltzaile-taldea" + +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user ID override into user group '${primary_key}'" +msgstr "" + +msgid "Group Settings" +msgstr "Taldearen ezarpenak" + +#, fuzzy +msgid "External" +msgstr "Kanpoko erabiltzailea" + +msgid "Groups" +msgstr "Taldeak" + +#, fuzzy +msgid "Group categories" +msgstr "Taldearen ezarpenak" + +#, fuzzy +msgid "Change to external group" +msgstr "Exekutatu kanpoko talde bezala" + +#, fuzzy +msgid "Change to POSIX group" +msgstr "Helburuko taldea" + +msgid "Non-POSIX" +msgstr "" + +msgid "POSIX" +msgstr "" + +#, fuzzy +msgid "Remove user groups" +msgstr "Erabiltzaile-talde lehenetsia" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Group Type" +msgstr "Taldea" + +#, fuzzy +msgid "Add HBAC rule" +msgstr "HBAC araua" + +#, python-brace-format +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "" + +msgid "Accessing" +msgstr "" + +#, fuzzy +msgid "Remove HBAC rules" +msgstr "HBAC arauak" + +#, python-brace-format +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Via Service" +msgstr "Zerbitzuak" + +msgid "Who" +msgstr "" + +#, fuzzy +msgid "Add HBAC service" +msgstr "HBAC zerbitzua" + +#, python-brace-format +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "" + +#, fuzzy +msgid "Remove HBAC services" +msgstr "HBAC zerbitzua" + +#, python-brace-format +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "" + +#, fuzzy +msgid "Add HBAC service group" +msgstr "HBAC zerbitzua" + +#, python-brace-format +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Remove HBAC service groups" +msgstr "HBAC zerbitzu-taldearen deskribapena" + +#, python-brace-format +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "" + +msgid "Access Denied" +msgstr "" + +msgid "Access Granted" +msgstr "" + +msgid "Include Disabled" +msgstr "" + +#, fuzzy +msgid "Include Enabled" +msgstr "Gaituta" + +#, fuzzy +msgid "HBAC Test" +msgstr "HBAC arauak" + +msgid "Matched" +msgstr "" + +msgid "Missing values: " +msgstr "" + +msgid "New Test" +msgstr "" + +#, fuzzy +msgid "Rules" +msgstr "HBAC arauak" + +msgid "Run Test" +msgstr "" + +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "" + +msgid "Unmatched" +msgstr "" + +msgid "Add host" +msgstr "" + +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "" + +#, fuzzy +msgid "Host Certificate" +msgstr "Ziurtagiria" + +msgid "Host Name" +msgstr "Ostalari-izena" + +msgid "Delete Key, Unprovision" +msgstr "" + +#, fuzzy +msgid "Host Settings" +msgstr "Ezarpenak" + +msgid "Enrolled" +msgstr "" + +msgid "Enrollment" +msgstr "" + +msgid "Fully Qualified Host Name" +msgstr "" + +#, fuzzy +msgid "Generate OTP" +msgstr "Orokorra" + +#, fuzzy +msgid "Generated OTP" +msgstr "Orokorra" + +msgid "Kerberos Key" +msgstr "" + +msgid "Kerberos Key Not Present" +msgstr "" + +msgid "Kerberos Key Present, Host Provisioned" +msgstr "" + +#, fuzzy +msgid "One-Time Password" +msgstr "Berrezarri pasahitza" + +msgid "One-Time Password Not Present" +msgstr "" + +msgid "One-Time Password Present" +msgstr "" + +#, fuzzy +msgid "Reset OTP" +msgstr "Ezarri OTP" + +#, fuzzy +msgid "Reset One-Time Password" +msgstr "Berrezarri pasahitza" + +msgid "Set OTP" +msgstr "Ezarri OTP" + +msgid "OTP set" +msgstr "" + +#, fuzzy +msgid "Set One-Time Password" +msgstr "Berrezarri pasahitza" + +msgid "Remove hosts" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "" + +msgid "Unprovision" +msgstr "" + +#, fuzzy +msgid "Are you sure you want to unprovision this host?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +msgid "Unprovisioning host" +msgstr "" + +msgid "Host unprovisioned" +msgstr "" + +#, fuzzy +msgid "Add host group" +msgstr "Ostalari-taldea" + +#, python-brace-format +msgid "Add hosts into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Host Group Settings" +msgstr "Taldearen ezarpenak" + +#, fuzzy +msgid "Remove host groups" +msgstr "Ostalari-taldearen izena" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "" + +msgid "User to override" +msgstr "" + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" + +msgid "Enter trusted user login." +msgstr "" + +msgid "Profile" +msgstr "" + +msgid "Group to override" +msgstr "" + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" + +#, fuzzy +msgid "Enter trusted group name." +msgstr "Zerbitzu-taldearen izena" + +msgid "Add ID view" +msgstr "" + +msgid "Add group ID override" +msgstr "" + +msgid "Add user ID override" +msgstr "" + +#, python-brace-format +msgid "${primary_key} applies to:" +msgstr "" + +msgid "Applied to hosts" +msgstr "" + +#, fuzzy +msgid "Apply to host groups" +msgstr "Ostalari-taldearen izena" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "" + +msgid "Apply to hosts" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "" + +#, python-brace-format +msgid "${primary_key} overrides:" +msgstr "" + +msgid "Remove ID views" +msgstr "" + +msgid "Remove user ID overrides" +msgstr "" + +msgid "Remove group ID overrides" +msgstr "" + +#, fuzzy +msgid "Un-apply from host groups" +msgstr "Ostalari-taldearen izena" + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" + +msgid "Un-apply" +msgstr "" + +msgid "Un-apply from hosts" +msgstr "" + +msgid "Un-apply ID Views from hosts" +msgstr "" + +#, fuzzy +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "" + +msgid "Add netgroup" +msgstr "" + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Netgroup Settings" +msgstr "Taldearen ezarpenak" + +#, fuzzy +msgid "Netgroups" +msgstr "taldeak" + +#, fuzzy +msgid "Remove netgroups" +msgstr "Zerbitzu-taldeak" + +#, python-brace-format +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from netgroup '${primary_key}'" +msgstr "" + +msgid "Add OTP token" +msgstr "" + +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" + +#, fuzzy +msgid "Configure your token" +msgstr "Konfigurazioa" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" + +#, fuzzy +msgid "OTP Token Settings" +msgstr "Kontuaren ezarpenak" + +msgid "Disable token" +msgstr "" + +#, fuzzy +msgid "Enable token" +msgstr "Gaituta" + +msgid "Remove OTP tokens" +msgstr "" + +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "" + +msgid "Show QR code" +msgstr "" + +#, fuzzy +msgid "Show configuration uri" +msgstr "Konfigurazioa" + +msgid "Counter-based (HOTP)" +msgstr "" + +msgid "Time-based (TOTP)" +msgstr "" + +#, fuzzy +msgid "Add Custom Attribute" +msgstr "Atributua" + +#, fuzzy +msgid "Permission settings" +msgstr "Baimenak" + +#, fuzzy +msgid "Attribute breakdown" +msgstr "Atributua" + +#, fuzzy +msgid "Privilege Settings" +msgstr "Taldearen ezarpenak" + +msgid "Public key:" +msgstr "" + +msgid "Set public key" +msgstr "" + +msgid "Show/Set key" +msgstr "" + +msgid "Modified: key not set" +msgstr "" + +msgid "Modified" +msgstr "" + +msgid "New: key not set" +msgstr "" + +msgid "New: key set" +msgstr "" + +#, fuzzy +msgid "Add password policy" +msgstr "LDAP pasahitza" + +#, fuzzy +msgid "Password Policy" +msgstr "Pasahitza" + +msgid "Remove password policies" +msgstr "" + +#, fuzzy +msgid "Add ID range" +msgstr "Gehitu hainbat" + +#, fuzzy +msgid "Range Settings" +msgstr "Ezarpenak" + +msgid "Base ID" +msgstr "" + +msgid "Primary RID base" +msgstr "" + +msgid "Range size" +msgstr "" + +msgid "Domain SID" +msgstr "" + +msgid "Secondary RID base" +msgstr "" + +msgid "Remove ID ranges" +msgstr "" + +msgid "Active Directory domain with POSIX attributes" +msgstr "" + +msgid "Detect" +msgstr "" + +msgid "Local domain" +msgstr "" + +msgid "IPA trust" +msgstr "" + +msgid "Active Directory winsync" +msgstr "" + +msgid "Add RADIUS server" +msgstr "" + +msgid "RADIUS Proxy Server Settings" +msgstr "" + +msgid "Remove RADIUS servers" +msgstr "" + +msgid "Realm Domains" +msgstr "" + +msgid "Check DNS" +msgstr "" + +msgid "Do you also want to perform DNS check?" +msgstr "" + +msgid "Force Update" +msgstr "" + +msgid "Add SELinux user map" +msgstr "" + +#, python-brace-format +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "" + +msgid "Remove selinux user maps" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Server Roles" +msgstr "Erabili beharreko IPA zerbitzaria" + +#, fuzzy +msgid "Server Role" +msgstr "Erabili beharreko IPA zerbitzaria" + +msgid "Warning: Consider service replication" +msgstr "" + +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" + +#, fuzzy +msgid "Delete Server" +msgstr "Ezabatu taldea." + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" + +#, fuzzy +msgid "Add service" +msgstr "HBAC zerbitzua" + +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "" + +#, fuzzy +msgid "Service Certificate" +msgstr "Ziurtagiri berria" + +#, fuzzy +msgid "Service Settings" +msgstr "Taldearen ezarpenak" + +#, fuzzy +msgid "Provisioning" +msgstr "Baimena" + +#, fuzzy +msgid "Remove services" +msgstr "Zerbitzuak" + +#, python-brace-format +msgid "Remove service '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing service '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Are you sure you want to unprovision this service?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +msgid "Unprovisioning service" +msgstr "" + +#, fuzzy +msgid "Service unprovisioned" +msgstr "Zerbitzu-taldeak" + +msgid "Kerberos Key Present, Service Provisioned" +msgstr "" + +msgid "SSH public keys" +msgstr "" + +msgid "SSH public key:" +msgstr "" + +msgid "Set SSH key" +msgstr "" + +#, fuzzy +msgid "Are you sure you want to activate selected users?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +#, fuzzy, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "" + +msgid "Add stage user" +msgstr "" + +msgid "Stage users" +msgstr "" + +msgid "Preserved users" +msgstr "" + +msgid "Remove preserved users" +msgstr "" + +msgid "Remove stage users" +msgstr "" + +#, fuzzy +msgid "Are you sure you want to stage selected users?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +#, fuzzy +msgid "Are you sure you want to restore selected users?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +#, fuzzy, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "" + +msgid "User categories" +msgstr "" + +#, fuzzy +msgid "Add subid" +msgstr "Gehitu eta itxi" + +msgid "Assigned subids" +msgstr "" + +msgid "DNA remaining" +msgstr "" + +msgid "SubGID range size" +msgstr "" + +msgid "SubGID range start" +msgstr "" + +msgid "SubUID range size" +msgstr "" + +msgid "SubUID range start" +msgstr "" + +msgid "Remaining subids" +msgstr "" + +msgid "Subordinate ID Statistics" +msgstr "" + +#, fuzzy +msgid "Add sudo command" +msgstr "Sudo komandoak" + +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "" + +#, fuzzy +msgid "Remove sudo commands" +msgstr "Sudo komandoak" + +#, python-brace-format +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "" + +#, fuzzy +msgid "Add sudo command group" +msgstr "Sudo komando-taldea" + +#, python-brace-format +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Remove sudo command groups" +msgstr "Sudo komando-taldea" + +#, python-brace-format +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Add sudo rule" +msgstr "Gehitu eta itxi" + +#, fuzzy +msgid "Add sudo option" +msgstr "Sudo aukera" + +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "" + +msgid "Allow" +msgstr "Onartu" + +msgid "Any Command" +msgstr "Edozein komando" + +msgid "Any Group" +msgstr "Edozein talde" + +msgid "Run Commands" +msgstr "Exekutatu komandoak" + +msgid "Deny" +msgstr "Ukatu" + +#, fuzzy +msgid "Access this host" +msgstr "Ostalari honen deskribapena" + +msgid "Option added" +msgstr "" + +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "" + +msgid "Remove sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "" + +msgid "As Whom" +msgstr "" + +#, fuzzy +msgid "Specified Commands and Groups" +msgstr "Zehazturiko taldeak" + +msgid "Specified Groups" +msgstr "Zehazturiko taldeak" + +#, fuzzy +msgid "Remove sudo options" +msgstr "Sudo aukera" + +msgid "Autogenerated" +msgstr "" + +msgid "Segment details" +msgstr "" + +#, fuzzy +msgid "Replication configuration" +msgstr "Konfigurazioa" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" + +msgid "Add IPA location" +msgstr "" + +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "" + +msgid "Remove IPA locations" +msgstr "" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "" + +msgid "Add topology segment" +msgstr "" + +msgid "Remove topology segments" +msgstr "" + +#, fuzzy +msgid "Account" +msgstr "Kontuaren ezarpenak" + +msgid "Add trust" +msgstr "" + +msgid "Administrative account" +msgstr "" + +msgid "SID blocklists" +msgstr "" + +#, fuzzy +msgid "Trust Settings" +msgstr "Taldearen ezarpenak" + +msgid "Establish using" +msgstr "" + +msgid "Fetch domains" +msgstr "" + +#, fuzzy +msgid "Pre-shared password" +msgstr "Erabiltzailearen pasahitza" + +msgid "Remove trusts" +msgstr "" + +msgid "Remove domains" +msgstr "" + +msgid "Trust direction" +msgstr "" + +msgid "Trust status" +msgstr "" + +#, fuzzy +msgid "Trust type" +msgstr "Arau-mota" + +msgid "Alternative UPN suffixes" +msgstr "" + +msgid "User attributes for SMB services" +msgstr "" + +msgid "Path to a script executed on a Windows system at logon" +msgstr "" + +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "" + +msgid "Path to a user home directory, in UNC format" +msgstr "" + +#, fuzzy +msgid "Drive to mount a home directory" +msgstr "Karpeta nagusien kokaleku lehenetsia" + +msgid "Account Settings" +msgstr "Kontuaren ezarpenak" + +#, fuzzy +msgid "Account Status" +msgstr "Kontuaren ezarpenak" + +msgid "Active users" +msgstr "" + +msgid "Add user" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "" + +msgid "Auto assign subordinate ids" +msgstr "" + +#, fuzzy, python-brace-format +msgid "" +"Are you sure you want to auto-assign a subordinate id to user ${object}?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +msgid "Contact Settings" +msgstr "Kontaktuaren ezarpenak" + +#, fuzzy +msgid "Delete mode" +msgstr "Ezabatu taldea." + +msgid "Employee Information" +msgstr "" + +msgid "Error changing account status" +msgstr "" + +msgid "Password expiration" +msgstr "" + +#, fuzzy +msgid "Mailing Address" +msgstr "E-posta helbidea" + +msgid "Misc. Information" +msgstr "" + +msgid "delete" +msgstr "" + +msgid "preserve" +msgstr "" + +msgid "No private group" +msgstr "" + +msgid "Remove users" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" + +#, python-brace-format +msgid "Click to ${action}" +msgstr "" + +msgid "Unlock" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +msgid "Add vault" +msgstr "" + +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "" + +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" + +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" + +msgid "Asymmetric" +msgstr "" + +msgid "Vaults Config" +msgstr "" + +msgid "Members" +msgstr "" + +msgid "My User Vaults" +msgstr "" + +msgid "Owners" +msgstr "" + +msgid "Remove vaults" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Service Vaults" +msgstr "Zerbitzuak" + +msgid "Shared" +msgstr "" + +msgid "Shared Vaults" +msgstr "" + +msgid "Standard" +msgstr "" + +msgid "Symmetric" +msgstr "" + +msgid "Vault Type" +msgstr "" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" + +#, fuzzy +msgid "User Vaults" +msgstr "Erabiltzaile-taldeak" + +msgid "Current password is required" +msgstr "" + +#, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "" + +#, fuzzy +msgid "First OTP" +msgstr "Izena" + +#, fuzzy +msgid "New password is required" +msgstr "Pasahitz berria" + +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" + +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" + +msgid "Token synchronization failed" +msgstr "" + +msgid "The username, password or token codes are not correct" +msgstr "" + +msgid "Token was synchronized" +msgstr "" + +msgid "Password change complete" +msgstr "" + +msgid "Your password has expired. Please enter a new password." +msgstr "" + +msgid "Passwords must match" +msgstr "Pasahitzek bat etorri behar dute" + +msgid "Password reset was not successful." +msgstr "" + +#, fuzzy +msgid "Reset your password." +msgstr "Berrezarri pasahitza" + +#, fuzzy +msgid "Second OTP" +msgstr "Ezarri OTP" + +#, fuzzy +msgid "Verify Password" +msgstr "Pasahitz berria" + +msgid "Are you sure you want to delete selected entries?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "" + +#, fuzzy +msgid "Are you sure you want to disable selected entries?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "" + +#, fuzzy +msgid "Are you sure you want to enable selected entries?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "" + +msgid "Some entries were not deleted" +msgstr "" + +msgid "Quick Links" +msgstr "" + +msgid "Select All" +msgstr "" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" + +msgid "Unselect All" +msgstr "" + +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" + +msgid "Working" +msgstr "" + +msgid "Audit" +msgstr "" + +msgid "Authentication" +msgstr "" + +msgid "Automount" +msgstr "" + +msgid "DNS" +msgstr "DNS" + +msgid "Host-Based Access Control" +msgstr "" + +msgid "Identity" +msgstr "" + +msgid "IPA Server" +msgstr "IPA zerbitzaria" + +#, fuzzy +msgid "Network Services" +msgstr "Zerbitzuak" + +msgid "Policy" +msgstr "" + +msgid "Role-Based Access Control" +msgstr "" + +msgid "Subordinate IDs" +msgstr "" + +msgid "Sudo" +msgstr "Sudo" + +msgid "Topology" +msgstr "" + +msgid "Trusts" +msgstr "" + +msgid "True" +msgstr "" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" + +msgid "API Browser" +msgstr "" + +#, fuzzy +msgid "First" +msgstr "Izena" + +#, fuzzy +msgid "Last" +msgstr "Abizena" + +msgid "Next" +msgstr "" + +msgid "Page" +msgstr "" + +msgid "Prev" +msgstr "" + +msgid "Undo" +msgstr "" + +msgid "Undo this change." +msgstr "" + +msgid "Undo All" +msgstr "" + +msgid "Undo all changes in this field." +msgstr "" + +msgid "Text does not match field pattern" +msgstr "" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" + +msgid "Must be a decimal number" +msgstr "" + +msgid "Format error" +msgstr "" + +msgid "Must be an integer" +msgstr "" + +#, fuzzy +msgid "Not a valid IP address" +msgstr "IP helbide formatu baliogabea" + +#, fuzzy +msgid "Not a valid IPv4 address" +msgstr "IP helbide formatu baliogabea" + +#, fuzzy +msgid "Not a valid IPv6 address" +msgstr "IP helbide formatu baliogabea" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "" + +msgid "Parse error" +msgstr "" + +msgid "Must be a positive number" +msgstr "" + +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "" + +msgid "Required field" +msgstr "" + +msgid "Unsupported value" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +msgid "" +"\n" +"IPA locations\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +msgid "location" +msgstr "" + +msgid "locations" +msgstr "" + +msgid "IPA Locations" +msgstr "" + +msgid "IPA Location" +msgstr "" + +#, fuzzy +msgid "Location name" +msgstr "Abizena" + +#, fuzzy +msgid "IPA location name" +msgstr "NIS domeinu-izena" + +#, fuzzy +msgid "IPA Location description" +msgstr "deskribapena" + +#, fuzzy +msgid "Servers" +msgstr "Zerbitzuak" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, fuzzy, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +msgid "Delete an IPA location." +msgstr "" + +#, fuzzy, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +msgid "Modify information about an IPA location." +msgstr "" + +#, fuzzy, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +#, fuzzy +msgid "Search for IPA locations." +msgstr "Bilatu taldeak." + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an IPA location." +msgstr "" + +msgid "Servers in location" +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "LDAP URI baliogabea." + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +#, fuzzy +msgid "Default group for new users not found" +msgstr "Erabiltzaile berrientzako talde lehenetsia" + +#, fuzzy +msgid "netgroups" +msgstr "taldeak" + +#, fuzzy +msgid "Netgroup" +msgstr "taldea" + +#, fuzzy, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "\"%(value)s\" ostalari-taldea gehituta" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, fuzzy, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "One time password commands" +msgstr "" + +#, fuzzy +msgid "OTP configuration options" +msgstr "Konfigurazioa" + +#, fuzzy +msgid "OTP Configuration" +msgstr "Konfigurazioa" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +#, fuzzy +msgid "URI" +msgstr "UID" + +#, fuzzy, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +msgid "cannot be empty" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, fuzzy, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"If the user authentication method is set to password+OTP, the user should\n" +"pass the --otp option when resetting the password.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To reset your own password when password+OTP is set as authentication " +"method:\n" +" ipa passwd --otp\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +msgid "The OTP if the user has a token configured" +msgstr "" + +#, fuzzy, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +#, fuzzy +msgid "" +"\n" +"Permissions\n" +msgstr "Baimenak" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +#, fuzzy +msgid "" +"\n" +"Managed permissions\n" +msgstr "Baimenak" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "must be enclosed in parentheses" +msgstr "" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "" + +#, fuzzy, python-format +msgid "Deprecated; use %s" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, python-format +msgid "Entry %s not found" +msgstr "" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, python-format +msgid "option was renamed; use %s" +msgstr "" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, python-format +msgid "%s: group not found" +msgstr "" + +msgid "target and targetgroup are mutually exclusive" +msgstr "" + +msgid "subtree and type are mutually exclusive" +msgstr "" + +msgid "Bad search filter" +msgstr "" + +#, fuzzy, python-format +msgid "Entry %s does not exist" +msgstr "Taldea ez da existitzen" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, fuzzy, python-format +msgid "Added permission \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +msgid "cannot delete managed permissions" +msgstr "" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "" + +#, fuzzy, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +#, fuzzy +msgid "PKINIT status" +msgstr "PKINIT" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, fuzzy, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +#, fuzzy, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +#, fuzzy, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +#, fuzzy +msgid "invalid port number" +msgstr "Serie-zenbakia" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +#, fuzzy +msgid "RADIUS Servers" +msgstr "IPA zerbitzaria" + +#, fuzzy +msgid "RADIUS Server" +msgstr "IPA zerbitzaria" + +#, fuzzy, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +#, fuzzy, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +#, fuzzy, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +#, fuzzy +msgid "Realm domains" +msgstr "E-posta domeinu lehenetsia" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "Role" +msgstr "" + +#, fuzzy, python-format +msgid "Added role \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +#, fuzzy, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, fuzzy, python-format +msgid "Modified role \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"API Schema\n" +msgstr "" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +msgid "Documentation" +msgstr "" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +msgid "Help topic" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +#, fuzzy +msgid "Method name" +msgstr "ostalari-izena" + +msgid "Display information about a command." +msgstr "" + +#, fuzzy +msgid "Search for commands." +msgstr "Bilatu taldeak." + +#, fuzzy +msgid "Return command defaults" +msgstr "Exekutatu komandoak" + +#, python-brace-format +msgid "{oname}: {command_name} not found" +msgstr "" + +msgid "Display information about a class." +msgstr "" + +#, fuzzy +msgid "Search for classes." +msgstr "Bilatu taldeak." + +msgid "Display information about a help topic." +msgstr "" + +#, fuzzy +msgid "Search for help topics." +msgstr "Bilatu taldeak." + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +msgid "CLI name" +msgstr "ACI izena" + +#, fuzzy +msgid "Confirm (password)" +msgstr "Ausazko pasahitza" + +#, fuzzy +msgid "Default" +msgstr "Shell lehenetsia" + +#, fuzzy +msgid "Default from" +msgstr "Erabiltzaile-talde lehenetsia" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" +msgstr "" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command output." +msgstr "" + +#, fuzzy +msgid "Search for command outputs." +msgstr "Bilatu taldeak." + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +#, fuzzy +msgid "self service permission" +msgstr "HBAC zerbitzuaren deskribapena" + +#, fuzzy +msgid "self service permissions" +msgstr "HBAC zerbitzuaren deskribapena" + +#, fuzzy +msgid "Self Service Permissions" +msgstr "Baimenak" + +#, fuzzy +msgid "Self Service Permission" +msgstr "Baimena" + +#, fuzzy, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +#, fuzzy, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +#, fuzzy, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +msgid "SELinux User Map rule" +msgstr "" + +msgid "SELinux User Map rules" +msgstr "" + +msgid "SELinux User Maps" +msgstr "" + +msgid "SELinux User Map" +msgstr "" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "" + +#, fuzzy, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +#, fuzzy, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, fuzzy, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, fuzzy, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, fuzzy +msgid "" +"\n" +"IPA server roles\n" +msgstr "Erabili beharreko IPA zerbitzaria" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +msgid "server roles" +msgstr "" + +#, fuzzy +msgid "IPA Server Roles" +msgstr "Erabili beharreko IPA zerbitzaria" + +#, fuzzy +msgid "IPA Server Role" +msgstr "Erabili beharreko IPA zerbitzaria" + +#, fuzzy +msgid "IPA server role name" +msgstr "Erabili beharreko IPA zerbitzaria" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "IPA role name" +msgstr "" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +#, python-format +msgid "authentication indicators not allowed in service \"%s\"" +msgstr "" + +msgid "Malformed principal" +msgstr "" + +msgid "{} is required by the IPA master" +msgstr "" + +#, fuzzy +msgid "service" +msgstr "Zerbitzuak" + +#, fuzzy +msgid "services" +msgstr "Zerbitzuak" + +msgid "Service principal alias" +msgstr "" + +msgid "Base-64 encoded service certificate" +msgstr "" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +msgid "Add a new IPA service." +msgstr "" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +msgid "force principal name even if host not in DNS" +msgstr "" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +msgid "Add a new SMB service." +msgstr "" + +#, fuzzy +msgid "SMB service NetBIOS name" +msgstr "Zerbitzuaren izena" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +#, fuzzy, python-format +msgid "Modified service \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +#, fuzzy, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to a service" +msgstr "" + +#, fuzzy, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +msgid "Remove principal alias from a service" +msgstr "" + +#, fuzzy, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, fuzzy, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +#, fuzzy, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +#, fuzzy +msgid "Service delegation target" +msgstr "Zerbitzu-taldearen izena" + +#, fuzzy, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +#, fuzzy, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +#, fuzzy +msgid "Stage Users" +msgstr "Erabiltzaileak" + +#, fuzzy +msgid "Stage User" +msgstr "Kanpoko erabiltzailea" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, fuzzy, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, fuzzy, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, fuzzy, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Subordinate ids\n" +"\n" +"Manage subordinate user and group ids for users\n" +"\n" +"EXAMPLES:\n" +"\n" +" Auto-assign a subordinate id range to current user\n" +" ipa subid-generate\n" +"\n" +" Auto-assign a subordinate id range to user alice:\n" +" ipa subid-generate --owner=alice\n" +"\n" +" Find subordinate ids for user alice:\n" +" ipa subid-find --owner=alice\n" +"\n" +" Match entry by any subordinate uid in range:\n" +" ipa subid-match --subuid=2147483649\n" +msgstr "" + +msgid "Subordinate id" +msgstr "" + +msgid "Subordinate ids" +msgstr "" + +#, fuzzy +msgid "Subordinate id description" +msgstr "deskribapena" + +msgid "Owning user of subordinate id entry" +msgstr "" + +msgid "Start value for subordinate user ID (subuid) range" +msgstr "" + +msgid "Subordinate user ID count" +msgstr "" + +msgid "Start value for subordinate group ID (subgid) range" +msgstr "" + +msgid "Subordinate group ID count" +msgstr "" + +#, python-format +msgid "" +"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." +msgstr "" + +#, python-format +msgid "'%(dn)s is not a valid user" +msgstr "" + +msgid "subgidnumber must be equal to subuidnumber" +msgstr "" + +#, fuzzy +msgid "Add a new subordinate id." +msgstr "Gehitu eta itxi" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added subordinate id \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +#, fuzzy +msgid "Delete a subordinate id." +msgstr "Ezabatu taldea." + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted subordinate id \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +#, fuzzy +msgid "Modify a subordinate id." +msgstr "Aldatu talde bat." + +#, fuzzy, python-format +msgid "Modified subordinate id \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, fuzzy +msgid "Search for subordinate id." +msgstr "Bilatu taldeak." + +#, fuzzy, python-format +msgid "%(count)d subordinate id matched" +msgid_plural "%(count)d subordinate ids matched" +msgstr[0] "HBAC zerbitzu-taldearen deskribapena" +msgstr[1] "HBAC zerbitzu-taldearen deskribapena" + +msgid "Display information about a subordinate id." +msgstr "" + +msgid "Generate and auto-assign subuid and subgid range to user entry" +msgstr "" + +msgid "Match users by any subordinate uid in their range" +msgstr "" + +msgid "SubUID match" +msgstr "" + +msgid "Match value for subordinate user ID" +msgstr "" + +msgid "Subordinate id statistics" +msgstr "" + +#, python-format +msgid "%(remaining)i remaining subordinate id ranges" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +#, fuzzy +msgid "sudo command" +msgstr "Sudo komandoak" + +#, fuzzy +msgid "sudo commands" +msgstr "Sudo komandoak" + +msgid "Sudo Commands" +msgstr "Sudo komandoak" + +#, fuzzy, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +#, fuzzy, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, fuzzy, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +#, fuzzy +msgid "sudo command group" +msgstr "Sudo komando-taldea" + +#, fuzzy +msgid "sudo command groups" +msgstr "Sudo komando-taldea" + +#, fuzzy, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "\"%(value)s\" ostalari-taldea gehituta" + +#, fuzzy, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, fuzzy, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, fuzzy, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "Sudo komando-taldea" +msgstr[1] "Sudo komando-taldea" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +msgid "Added segment \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +#, fuzzy, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, fuzzy, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +#, python-format +msgid "%(value)s" +msgstr "" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, fuzzy, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +#, fuzzy, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +#, fuzzy +msgid "External trust" +msgstr "Kanpoko ostalaria" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +#, fuzzy +msgid "trust type" +msgstr "Arau-mota" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +msgid "trust configuration" +msgstr "Konfigurazioa" + +#, fuzzy +msgid "Global Trust Configuration" +msgstr "Konfigurazioa" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, fuzzy, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "\"%(value)s\" ostalaria aldatuta" + +#, fuzzy +msgid "SID" +msgstr "UID" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +#, fuzzy +msgid "Domain enabled" +msgstr "NIS domeinu-izena" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, fuzzy, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, fuzzy, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +#, fuzzy +msgid "users" +msgstr "Erabiltzaileak" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +#, fuzzy +msgid "Default group for new users is not POSIX" +msgstr "Erabiltzaile berrientzako talde lehenetsia" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, fuzzy, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, fuzzy, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, fuzzy, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, fuzzy, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, fuzzy, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +msgid "Failed logins" +msgstr "" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +msgid "Time now" +msgstr "" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#, fuzzy, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +#, fuzzy, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, fuzzy, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +msgid "Remove principal alias from the user entry" +msgstr "" + +#, fuzzy, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +msgid "Vault Container" +msgstr "" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, fuzzy, python-format +msgid "Added vault \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +#, fuzzy, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, fuzzy, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +#, fuzzy +msgid "Vault configuration" +msgstr "Konfigurazioa" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, fuzzy, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +msgid "Retrieve data from a vault." +msgstr "" + +#, fuzzy, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +#, fuzzy +msgid "password policy" +msgstr "pasahitza" + +#, fuzzy +msgid "password policies" +msgstr "pasahitza" + +#, fuzzy +msgid "Password Policies" +msgstr "Pasahitza" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +msgid "User check" +msgstr "" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be equal to or greater than the minimum." +msgstr "" + +msgid "cannot delete global password policy" +msgstr "" + +msgid "priority cannot be set on global policy" +msgstr "" + +#, fuzzy +msgid "" +"\n" +"IPA servers\n" +msgstr "IPA zerbitzaria" + +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "" + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +#, fuzzy +msgid "server" +msgstr "IPA zerbitzaria" + +msgid "servers" +msgstr "" + +#, fuzzy +msgid "IPA Servers" +msgstr "IPA zerbitzaria" + +msgid "Server location" +msgstr "" + +#, fuzzy +msgid "Service weight" +msgstr "Zerbitzuaren izena" + +msgid "Weight for server services" +msgstr "" + +msgid "Service relative weight" +msgstr "" + +msgid "Relative weight for server services (counts per location)" +msgstr "" + +msgid "Enabled server roles" +msgstr "" + +msgid "List of enabled roles" +msgstr "" + +msgid "Modify information about an IPA server." +msgstr "" + +#, fuzzy, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +#, python-format +msgid "Failed to remove server from security domain: %s" +msgstr "" + +msgid "Server has already been deleted" +msgstr "" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +#, fuzzy +msgid "State" +msgstr "Egoera" + +#, fuzzy +msgid "Server state" +msgstr "Zerbitzuaren izena" + +#, fuzzy, python-format +msgid "Changed server state of \"%(value)s\"." +msgstr "\"%(value)s\" zerbitzua gehituta" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." +msgstr "" + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"Each option needs to be added separately and no validation is done whether\n" +"the option is known by sudo or is in a valid format. Environment variables\n" +"also need to be set individually. For example env_keep=\"FOO BAR\" in " +"sudoers\n" +"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" +"+=BAR.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set multiple default Sudo options:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate' --" +"sudooption mail_badpass\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +#, fuzzy +msgid "sudo rules" +msgstr "HBAC arauak" + +#, fuzzy +msgid "Sudo Rules" +msgstr "HBAC arauak" + +#, fuzzy +msgid "Sudo Rule" +msgstr "Sudo" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, fuzzy, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +#, fuzzy, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, fuzzy, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +#, fuzzy +msgid "command" +msgstr "Edozein komando" + +#, fuzzy +msgid "commands" +msgstr "Exekutatu komandoak" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +#, fuzzy +msgid "group runAs" +msgstr "taldeak" + +#, fuzzy +msgid "runAs groups" +msgstr "taldeak" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" msgstr "" msgid "Request must be a dict" @@ -23710,6 +24006,17 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + #, python-format msgid "" "\n" @@ -23729,34 +24036,6 @@ msgstr "" msgid "Topology does not allow server %(server)s to replicate with servers:" msgstr "" -msgid "Trusting forest" -msgstr "" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Unknown" -msgstr "" - -msgid "Non-Active Directory domain" -msgstr "" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - msgid "" "\n" "Classes to manage trust joins using DCE-RPC calls\n" @@ -23915,33 +24194,6 @@ msgstr "" msgid "must be at least 1" msgstr "" -#, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -msgid "Unable to initialize STARTTLS session\n" -msgstr "" - msgid "Out of memory\n" msgstr "" @@ -23969,3 +24221,30 @@ msgstr "" msgid "Bad or unsupported salt type.\n" msgstr "" + +#, c-format +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "" + +msgid "" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" +msgstr "" + +msgid "Unable to initialize STARTTLS session\n" +msgstr "" diff --git a/po/fi.po b/po/fi.po index 6ebf8dcb8..f9d0f3e09 100644 --- a/po/fi.po +++ b/po/fi.po @@ -18,240 +18,154 @@ msgstr "" "Plural-Forms: nplurals=2; plural=n != 1;\n" "X-Generator: Weblate 4.6.1\n" +#, fuzzy, c-format +msgid "cannot open configuration file %s\n" +msgstr "Toimenpide epäonnistui: %s\n" + +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "" + +#, c-format +msgid "out of memory\n" +msgstr "muisti lopussa\n" + +#, fuzzy, c-format +msgid "read error\n" +msgstr "Jäsennysvirhe" + +#, c-format +msgid "Unable to parse principal name\n" +msgstr "Prinsipaalinimen jäsentäminen ei onnistu\n" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "krb5_parse_name %1$d: %2$s\n" + +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "Keytabin avaaminen epäonnistui\n" + +#, c-format +msgid "principal not found\n" +msgstr "toimeksiantajaa ei löydy\n" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "Merkintää ei voi poistaa\n" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, fuzzy, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "Tuloksen saaminen epäonnistui: %s\n" + +#, fuzzy, c-format +msgid "Unable to parse principal\n" +msgstr "Prinsipaalin jäsentäminen ei onnistu: %1$s (%2$d)\n" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, fuzzy, c-format +msgid "realm not found\n" +msgstr "ei löytynyt" + +msgid "Print debugging information" +msgstr "Tulosta virheenkorjaustiedot" + +msgid "Debugging output" +msgstr "" + msgid "" -"\n" -"OTP Tokens\n" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" msgstr "" -"\n" -"OTP-tunnukset\n" -#, python-format -msgid "%s" -msgstr "%s" - -msgid "A IP Address" -msgstr "IP-osoite" - -msgid "About" -msgstr "Tietoja" - -msgid "Access Denied" -msgstr "Pääsy evätty" - -msgid "Account" -msgstr "Tili" - -msgid "Account Settings" -msgstr "Tilin asetukset" - -msgid "Actions" -msgstr "Toimet" - -msgid "Activate" -msgstr "Aktivoi" - -msgid "Add" -msgstr "Lisää" - -msgid "Add OTP token" -msgstr "Lisää OTP-tunnus" - -msgid "Add a new host." -msgstr "Lisää uusi isäntä." - -msgid "Add role" -msgstr "Lisää rooli" - -msgid "Add rule" -msgstr "Lisää sääntö" - -msgid "Add service" -msgstr "Lisää palvelu" - -msgid "Add user" -msgstr "Lisää käyttäjä" - -msgid "Administrative account" -msgstr "Hallinnollinen tili" - -msgid "All" -msgstr "Kaikki" - -msgid "Any Service" -msgstr "Mikä tahansa palvelu" - -msgid "Apply" -msgstr "Toteuta" - -msgid "Audit" -msgstr "Auditointi" - -msgid "Authenticating" -msgstr "Tunnistaudutaan" - -msgid "Authentication" -msgstr "Tunnistatuminen" - -msgid "Available" -msgstr "Saatavilla" - -msgid "Back" -msgstr "Takaisin" - -msgid "Cancel" -msgstr "Peru" - -#, c-format -msgid "Cannot get host's FQDN!\n" -msgstr "Ei voida saada koneen FQDN:ia!\n" - -msgid "Change password" -msgstr "Vaihda salasana" - -msgid "City" -msgstr "Kaupunki" - -msgid "Class" -msgstr "Luokka" - -msgid "Close" -msgstr "Sulje" - -msgid "Commands" -msgstr "Komennot" - -msgid "Configuration" -msgstr "Asetukset" - -msgid "Confirm (password)" -msgstr "Vahvista (salasana)" - -msgid "Continue" -msgstr "Jatka" - -msgid "Current Password" -msgstr "Nykyinen salasana" - -msgid "DNS" -msgstr "DNS" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "DNS-nimi voi sisältää enintään 63 merkkiä" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "DNS-nimi voi sisältää enintään 63 merkkiä" - -msgid "Default" -msgstr "Oletus" - -msgid "Delete" -msgstr "Poista" - -msgid "Delete a user" -msgstr "Poista käyttäjä" - -msgid "Delete all?" -msgstr "Poista kaikki?" - -msgid "Delete mode" -msgstr "Poista moodi" - -msgid "Description" -msgstr "Kuvaus" - -msgid "Direct" -msgstr "Suora" - -msgid "Disable" -msgstr "Poista käytöstä" - -msgid "Disabled" -msgstr "Ei käytössä" - -msgid "Display name" -msgstr "Näyttönimi" - -msgid "Documentation" -msgstr "Dokumentaatio" - -msgid "Domain" -msgstr "Toimialue" - -msgid "Domain name" -msgstr "Toimialueen nimi" - -msgid "Download" -msgstr "Lataa" - -msgid "Edit" -msgstr "Muokkaa" - -msgid "Email address" -msgstr "Sähköpostiosoite" - -msgid "Enable" -msgstr "Ota käyttöön" - -msgid "Enabled" -msgstr "Käytössä" - -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "Rekisteröinti epäonnistui. %s\n" - -msgid "Entry" -msgstr "Tietue" - -msgid "Error" -msgstr "Virhe" - -#, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "Kerberos-oletusalueen hakemisessa tapahtui virhe: %s\n" - -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "Virhe ensimmäisten tunnistetietojen hankinnassa: %s\n" - -#, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "Virhe jäsennettäessä \"%1$s\": %2$s.\n" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "Virhe keytabin selvittämisessä: %s\n" - -#, c-format -msgid "Error storing creds in credential cache: %s.\n" +msgid "Kerberos Service Principal Name" msgstr "" -"Virhe tallennettaessa valtuustietoja kirjautumistietojen välimuistiin: %s\n" -msgid "Exclusive" -msgstr "Poissulkeva" +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +#, fuzzy +msgid "Realm name" +msgstr "Nimeä uudelleen" #, c-format -msgid "Expanding buffer in jsonrpc_handle_response failed" -msgstr "jsonrpc_handle_response puskurin laajennus epäonnistui" +msgid "Kerberos context initialization failed\n" +msgstr "Kerberos-kontekstin alustus epäonnistui\n" -msgid "External" -msgstr "Ulkoinen" +#, fuzzy, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "Tuloksen jäsentäminen epäonnistui: %s\n" #, c-format -msgid "Extracting the data from the JSON-RPC response failed: %s\n" -msgstr "Tiedon purkaminen JSON-RPC-vastauksesta epäonnistui: %s\n" +msgid "Closing keytab failed\n" +msgstr "" #, c-format -msgid "Extracting the error from the JSON-RPC response failed: %s\n" -msgstr "Virheen purkaminen JSON-RPC-vastauksesta epäonnistui: %s\n" +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" #, c-format -msgid "Failed to create control!\n" -msgstr "Tarkistuksen luominen epäonnistui!\n" +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "Kerberos-kontekstin alustus epäonnistui: %1$s (%2$d)\n" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "Prinsipaalin jäsentäminen ei onnistu: %1$s (%2$d)\n" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "KDC ei hyväksy avaimia\n" + +#, c-format +msgid "Out of memory \n" +msgstr "Muisti loppui \n" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "LDAP-kirjaston alustaminen epäonnistui!\n" + +msgid "Simple bind failed\n" +msgstr "Yksinkertainen sidonta epäonnistui\n" + +msgid "SASL Bind failed\n" +msgstr "SASL-sidonta epäonnistui\n" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "Toimenpide epäonnistui: %s\n" #, c-format msgid "Failed to get result: %s\n" msgstr "Tuloksen saaminen epäonnistui: %s\n" +#, c-format +msgid "Timeout exceeded." +msgstr "Aikakatkaisu ylitetty." + #, c-format msgid "Failed to parse extended result: %s\n" msgstr "Laajennetun tuloksen jäsentäminen epäonnistui: %s\n" @@ -260,173 +174,6 @@ msgstr "Laajennetun tuloksen jäsentäminen epäonnistui: %s\n" msgid "Failed to parse result: %s\n" msgstr "Tuloksen jäsentäminen epäonnistui: %s\n" -msgid "False" -msgstr "Epätosi" - -msgid "Filter" -msgstr "Suodin" - -msgid "Find" -msgstr "Etsi" - -msgid "Fingerprint" -msgstr "Sormenjälki" - -msgid "Fingerprints" -msgstr "Sormenjäljet" - -msgid "First OTP" -msgstr "Ensimmäinen OTP" - -msgid "First name" -msgstr "Etunimi" - -msgid "Force the host join. Rejoin even if already joined." -msgstr "Pakota kone liittymään. Liity uudelleen, vaikka olisit jo liittynyt." - -msgid "Full name" -msgstr "Koko nimi" - -msgid "General" -msgstr "Yleinen" - -msgid "Group" -msgstr "Ryhmä" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "Ryhmää '%s' ei ole olemassa" - -msgid "Group name" -msgstr "Ryhmän nimi" - -msgid "Groups" -msgstr "Ryhmät" - -msgid "Hide" -msgstr "Piilota" - -msgid "Home directory" -msgstr "Kotihakemisto" - -msgid "Host" -msgstr "Kone" - -msgid "Host Name" -msgstr "Koneen nimi" - -#, c-format -msgid "Host is already joined.\n" -msgstr "Kone on jo liittynyt.\n" - -msgid "Host name" -msgstr "Koneen nimi" - -msgid "Hostname" -msgstr "Koneen nimi" - -msgid "Hostname of this server" -msgstr "Palvelimen isäntänimi" - -msgid "Hosts" -msgstr "Koneet" - -msgid "IP Address" -msgstr "IP-osoite" - -msgid "IPA Server to use" -msgstr "Käytettävä IPA-palvelin" - -#, c-format -msgid "IPA namingContext not found\n" -msgstr "IPA-nimeämiskontekstia ei löytynyt\n" - -msgid "Identity" -msgstr "Identiteetti" - -msgid "Input file" -msgstr "Syötetiedosto" - -msgid "Internal Error" -msgstr "Sisäinen virhe" - -msgid "Invalid credentials" -msgstr "Virheelliset tunnistautumistiedot" - -msgid "Invalid number of parts!" -msgstr "Virheellinen osien lukumäärä!" - -#, c-format -msgid "JSON-RPC call failed with status code: %li\n" -msgstr "JSON-RPC kutsu epäonnistui statuskoodilla: %li\n" - -#, c-format -msgid "JSON-RPC call failed: %s\n" -msgstr "JSON-RPC kutsu epäonnistui: %s\n" - -#, c-format -msgid "JSON-RPC call was unauthorized. Check your credentials.\n" -msgstr "JSON-RPC kutsu oli käyttöoikeudeton. Tarkista valtuustietosi .\n" - -#, c-format -msgid "" -"JSON-RPC request:\n" -"%s\n" -msgstr "" -"JSON-RPC pyyntö:\n" -"%s\n" - -#, c-format -msgid "" -"JSON-RPC response:\n" -"%s\n" -msgstr "" -"JSON-RPC vastaus:\n" -"%s\n" - -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "Kerberos-kontekstin alustus epäonnistui: %1$s (%2$d)\n" - -msgid "LDAP basedn" -msgstr "LDAP:in BaseDN" - -msgid "LDAP password (if not using Kerberos)" -msgstr "LDAP-salasana (jos et käytä Kerberosia)" - -msgid "Label" -msgstr "Nimiö" - -msgid "Labels" -msgstr "Nimiöt" - -msgid "Last name" -msgstr "Sukunimi" - -msgid "Level" -msgstr "Taso" - -msgid "Location" -msgstr "Sijainti" - -msgid "Log in" -msgstr "Kirjaudu sisään" - -msgid "Log out" -msgstr "Kirjaudu ulos" - -msgid "MAC address" -msgstr "MAC-osoite" - -msgid "Members" -msgstr "Jäsenet" - -msgid "Migrate" -msgstr "Suorita migraatio" - -msgid "Migrating" -msgstr "Suoritetaan migraatiota" - #, c-format msgid "Missing reply control list!\n" msgstr "Puuttuu vastausten tarkistusluettelo!\n" @@ -435,696 +182,13 @@ msgstr "Puuttuu vastausten tarkistusluettelo!\n" msgid "Missing reply control!\n" msgstr "Puuttuu vastausten tarkistus!\n" -msgid "Model" -msgstr "Malli" - -msgid "Modify a group." -msgstr "Muokkaa ryhmää." - -msgid "Mount information" -msgstr "Tietoja liitoksesta" - -msgid "Mount point" -msgstr "Liitospiste" - -msgid "Must be a positive number" -msgstr "Tulee olla positiivinen numero" - -msgid "Name" -msgstr "Nimi" - -msgid "Netgroup description" -msgstr "Verkkoryhmän kuvaus" - -msgid "Network Services" -msgstr "Verkon palvelut" - -msgid "New Password" -msgstr "Uusi salasana" - -msgid "Next" -msgstr "Seuraava" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "KDC ei hyväksy avaimia\n" - -msgid "No matching entries found" -msgstr "Vastaavia tietueita ei löytynyt" - -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "Ei lupaa liittää tätä isäntää IPA toimialueeseen.\n" - -#, c-format -msgid "No values for %s" -msgstr "Ei arvoja kohteelle %s" - -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "Ei kirjoitusoikeuksia keytab-tiedostoon '%s'\n" - -msgid "Note" -msgstr "Huomautus" - -msgid "OK" -msgstr "OK" - -msgid "OTP" -msgstr "Kertakäyttöinen salasana" - -msgid "OTP Configuration" -msgstr "Kertakäyttöisen salasanan määritykset" - -msgid "OTP Token" -msgstr "OTP-tunnus" - -msgid "OTP Tokens" -msgstr "OTP-tunnukset" - -msgid "OTP token" -msgstr "OTP-tunnus" - -msgid "OTP tokens" -msgstr "OTP-tunnukset" - -msgid "One Time Password" -msgstr "Kertakäyttöinen salasana" - -msgid "One-Time Password" -msgstr "Kertakäyttöinen salasana" - -msgid "Operating system" -msgstr "Käyttöjärjestelmä" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "Toimenpide epäonnistui: %s\n" - -msgid "Options" -msgstr "Valinnat" - -msgid "Order" -msgstr "Järjestys" - -msgid "Organization" -msgstr "Organisaatio" - #, c-format msgid "Out of Memory!\n" msgstr "Muisti loppui!\n" -msgid "Out of memory\n" -msgstr "Muisti loppui\n" - #, c-format -msgid "Out of memory \n" -msgstr "Muisti loppui \n" - -#, c-format -msgid "Out of memory!" -msgstr "Muisti loppui!" - -#, c-format -msgid "Out of memory!\n" -msgstr "Muisti loppui!\n" - -msgid "Out of memory!?\n" -msgstr "Muisti loppui!?\n" - -msgid "Owner" -msgstr "Omistaja" - -msgid "Owner groups" -msgstr "Omistajaryhmät" - -msgid "Parse error" -msgstr "Jäsennysvirhe" - -#, c-format -msgid "Parsing JSON-RPC response failed: %s\n" -msgstr "JSON-RPC-vastauksen jäsentäminen epäonnistui: %s\n" - -#, c-format -msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" -msgstr "" -"JSON-RPC-vastauksen jäsentäminen epäonnistui: \"Tulos\"arvoa ei löytynyt.\n" - -msgid "Password" -msgstr "Salasana" - -msgid "Password expiration" -msgstr "Salasanan vanheneminen" - -msgid "Password or Password+One-Time Password" -msgstr "Salasana tai salasana + Kertakäyttöinen salasana (eng. OTP)" - -msgid "Passwords do not match" -msgstr "Salasanat eivät täsmää" - -msgid "Passwords do not match!" -msgstr "Salasanat eivät täsmää!" - -#, c-format -msgid "Passwords do not match!\n" -msgstr "Salasanat eivät täsmää!\n" - -msgid "Passwords must match" -msgstr "Salasanojen täytyy täsmätä" - -msgid "Permission" -msgstr "Käyttöoikeus" - -msgid "Platform" -msgstr "Alusta" - -msgid "Port" -msgstr "Portti" - -msgid "Positional arguments" -msgstr "Sijainnilliset parametrit" - -msgid "Preference" -msgstr "Etusija" - -msgid "Print debugging information" -msgstr "Tulosta virheenkorjaustiedot" - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "Tulosta XML-RPC-raaka-tuloste GSSAPI-tilassa" - -msgid "Priority" -msgstr "Prioriteetti" - -msgid "Profile" -msgstr "Profiili" - -msgid "Profile description" -msgstr "Profiilin kuvaus" - -msgid "Profiles" -msgstr "Profiilit" - -msgid "Protocol" -msgstr "Protokolla" - -msgid "Public Key" -msgstr "Julkinen avain" - -msgid "Public key" -msgstr "Julkinen avain" - -msgid "Public key:" -msgstr "Julkinen avain:" - -msgid "Quiet mode. Only errors are displayed." -msgstr "Hiljainen tila. Vain virheet näytetään." - -msgid "Reason" -msgstr "Syy" - -msgid "Records" -msgstr "Merkinnät" - -msgid "Redirection" -msgstr "Uudelleenohjeus" - -msgid "Refresh" -msgstr "Päivitä" - -msgid "Remove" -msgstr "Poista" - -msgid "Remove roles" -msgstr "Poista rooleja" - -msgid "Remove services" -msgstr "Poista palveluita" - -msgid "Remove users" -msgstr "Poista käyttäjiä" - -msgid "Rename" -msgstr "Nimeä uudelleen" - -msgid "Required" -msgstr "Vaaditaan" - -msgid "Requires pre-authentication" -msgstr "Vaatii ennakkotunnistautumisen" - -msgid "Reset" -msgstr "Nollaa" - -msgid "Restore" -msgstr "Palauta" - -msgid "Retry" -msgstr "Yritä uudelleen" - -msgid "Revert" -msgstr "Palaa takaisin" - -msgid "Rights" -msgstr "Oikeudet" - -msgid "Role" -msgstr "Rooli" - -msgid "Roles" -msgstr "Roolit" - -msgid "Rules" -msgstr "Säännöt" - -msgid "SASL Bind failed\n" -msgstr "SASL-sidonta epäonnistui\n" - -msgid "SELinux User" -msgstr "SELinux-käyttäjä" - -msgid "SELinux User Map" -msgstr "SELinux-käyttäjäkartta" - -msgid "SELinux User Maps" -msgstr "SELinux-käyttäjäkartat" - -msgid "SSH public key" -msgstr "Julkinen SSH-avain" - -msgid "SSH public key:" -msgstr "Julkinen SSH-avain:" - -msgid "SSH public keys" -msgstr "Julkisia SSH-avaimia" - -msgid "Save" -msgstr "Tallenna" - -msgid "Search" -msgstr "Haku" - -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "%1$s:n haku rootdse:stä epäonnistui virheellä %2$d\n" - -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "IPA-nimeämiskontekstin haku epäonnistui virheellä %d\n" - -msgid "Second OTP" -msgstr "Toinen OTP" - -msgid "Secret" -msgstr "Salainen" - -msgid "Select All" -msgstr "Valitse kaikki" - -msgid "Serial" -msgstr "Sarjanumero" - -msgid "Serial Number" -msgstr "Sarjanumero" - -msgid "Serial number" -msgstr "Sarjanumero" - -msgid "Server" -msgstr "Palvelin" - -msgid "Server Name" -msgstr "Palvelimen nimi" - -msgid "Server name" -msgstr "Palvelimen nimi" - -msgid "Servers" -msgstr "Palvelimet" - -msgid "Service" -msgstr "Palvelu" - -msgid "Service Options" -msgstr "Palveluvalinnat" - -msgid "Service Settings" -msgstr "Palvelun asetukset" - -msgid "Service name" -msgstr "Palvelun nimi" - -msgid "Services" -msgstr "Palvelut" - -msgid "Settings" -msgstr "Asetukset" - -msgid "Shared" -msgstr "Jaettu" - -msgid "Show" -msgstr "Näytä" - -msgid "Signature" -msgstr "Allekirjoitus" - -msgid "Simple bind failed\n" -msgstr "Yksinkertainen sidonta epäonnistui\n" - -msgid "Size" -msgstr "Koko" - -msgid "Source Hosts" -msgstr "Lähde koneet" - -msgid "Source host" -msgstr "Lähde kone" - -msgid "Specifies where to store keytab information." -msgstr "Määrittää, mihin keytab tiedot tallennetaan." - -msgid "Stage" -msgstr "Vaihe" - -msgid "Standard" -msgstr "Tavallinen" - -msgid "State" -msgstr "Tila" - -msgid "Status" -msgstr "Tila" - -msgid "Subject" -msgstr "Aihe" - -msgid "Success" -msgstr "Onnistui" - -msgid "Sync OTP Token" -msgstr "Synkronointi-OTP-tunnus" - -msgid "Synchronize an OTP token." -msgstr "Synkronoi OTP-tunnus." - -msgid "Synchronizing" -msgstr "Synkronoidaan" - -msgid "Target" -msgstr "Kohde" - -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "Koneen nimen on oltava täysin määritelty: %s\n" - -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "Koneen nimi ei voi olla: %s\n" - -msgid "Timeout" -msgstr "Aikakatkaisu" - -#, c-format -msgid "Timeout exceeded." -msgstr "Aikakatkaisu ylitetty." - -msgid "Token ID" -msgstr "Token-tunniste" - -msgid "Topology" -msgstr "Topologia" - -msgid "Type" -msgstr "Tyyppi" - -msgid "URL" -msgstr "URL" - -msgid "UUID" -msgstr "UUID" - -msgid "Unable to communicate with CMS" -msgstr "Kommunikaatio CMS:n kanssa epäonnistui" - -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "IPA-palvelinta ei voida määrittää kohteesta %s\n" - -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "%s: root DN:ää ei voida määrittää\n" - -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "SSL:n ottaminen käyttöön LDAP:ssa ei onnistu\n" - -#, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "Kerberos-kirjautumistietovälimuistia ei voi luoda\n" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "LDAP-kirjaston alustaminen epäonnistui!\n" - -#, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "" -"Ei voida liittyä isäntään: Kerberos-kirjautumistietovälimuistia ei löydy\n" - -#, c-format -msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" -msgstr "" -"Ei voida liittyä isäntään: Kerberos User Principalia ei löydy ja " -"isäntäsalasanaa ei annettu.\n" - -#, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "Ei voida liittyä isäntään: Kerberos-kontekstin alustus epäonnistui\n" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "Prinsipaalin jäsentäminen ei onnistu: %1$s (%2$d)\n" - -msgid "Unenroll this host from IPA server" -msgstr "Poista tämän koneen rekisteröinti IPA-palvelimelta" - -#, c-format -msgid "Unenrollment failed.\n" -msgstr "Rekisteröinnin purkaminen epäonnistui.\n" - -#, c-format -msgid "Unenrollment successful.\n" -msgstr "Rekisteröinnin purkaminen onnistui.\n" - -msgid "Unknown" -msgstr "Tuntematon" - -msgid "Unknown Error" -msgstr "Tuntematon virhe" - -msgid "Unlock" -msgstr "Avaa" - -msgid "Unsupported value" -msgstr "Ei tuettu arvo" - -msgid "Update" -msgstr "Päivitä" - -msgid "User" -msgstr "Käyttäjä" - -msgid "User ID" -msgstr "Käyttäjä ID" - -msgid "User name" -msgstr "Käyttäjätunnus" - -msgid "User password" -msgstr "Käyttäjän salasana" - -msgid "Username" -msgstr "Käyttäjätunnus" - -msgid "Users" -msgstr "Käyttäjät" - -msgid "Vendor" -msgstr "Toimittaja" - -msgid "Version" -msgstr "Versio" - -msgid "View" -msgstr "Näytä" - -msgid "Warning" -msgstr "Varoitus" - -msgid "Working" -msgstr "Toimii" - -msgid "Your session has expired. Please log in again." -msgstr "Istuntosi on vahventunut. Ole hyvä ja kirjaudu uudelleen sisään." - -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "pääsy() kohteeseen %1$s epäonnistui: virhenro = %2$d\n" - -msgid "basedn" -msgstr "BaseDN" - -msgid "cannot be longer that {} characters" -msgstr "voi sisältää enintään {} merkkiä" - -#, c-format -msgid "child exited with %d\n" -msgstr "lapsi poistui viestillä %d\n" - -msgid "command" -msgstr "komento" - -msgid "commands" -msgstr "komennot" - -#, c-format -msgid "curl_easy_init() failed\n" -msgstr "curl_easy_init() epäonnistui\n" - -#, c-format -msgid "curl_easy_setopt() failed\n" -msgstr "curl_easy_setopt() epäonnistui\n" - -#, c-format -msgid "curl_global_init() failed\n" -msgstr "curl_global_init() epäonnistui\n" - -#, c-format -msgid "curl_slist_append() failed for value: '%s'\n" -msgstr "curl_slist_append() epäonnistui arvolle: '%s'\n" - -msgid "delete" -msgstr "poista" - -msgid "description" -msgstr "kuvaus" - -msgid "domain" -msgstr "toimialue" - -msgid "domain is not trusted" -msgstr "toimialueseen ei luoteta" - -msgid "entries" -msgstr "tietueet" - -msgid "entry" -msgstr "tietue" - -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "ipa-getkeytabin suorittaminen epäonnistui, virhe %d\n" - -msgid "filename" -msgstr "tiedostonimi" - -#, c-format -msgid "fork() failed\n" -msgstr "fork() epäonnistui\n" - -msgid "group" -msgstr "ryhmä" - -msgid "groups" -msgstr "ryhmät" - -msgid "host" -msgstr "kone" - -msgid "hostname" -msgstr "koneen nimi" - -msgid "hosts" -msgstr "koneet" - -msgid "invalid port number" -msgstr "virheellinen porttinumero" - -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "ipa-getkeytabilla on väärät käyttöoikeudet?\n" - -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "ipa-getkeytabia ei löydy\n" - -#, c-format -msgid "json_dumps() failed\n" -msgstr "json_dumps() epäonnistui\n" - -#, c-format -msgid "json_pack_ex() failed: %s\n" -msgstr "json_pack_ex() epäonnistui: %s\n" - -msgid "location" -msgstr "sijainti" - -msgid "not found" -msgstr "ei löytynyt" - -#, c-format -msgid "out of memory\n" -msgstr "muisti lopussa\n" - -msgid "password" -msgstr "salasana" - -msgid "preserve" -msgstr "säilytä" - -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "toimeksiantajaa ei löydy XML-RPC-vastauksesta\n" - -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "tulosta ei löydy XML-RPC-vastauksesta\n" - -msgid "role" -msgstr "rooli" - -msgid "roles" -msgstr "roolit" - -msgid "seconds" -msgstr "sekuntia" - -msgid "server" -msgstr "palvelin" - -msgid "servers" -msgstr "palvelimet" - -msgid "service" -msgstr "palvelu" - -msgid "services" -msgstr "palvelut" - -msgid "unsupported trust type" -msgstr "luottamustyyppi, jota ei tueta" - -msgid "user" -msgstr "käyttäjä" - -msgid "users" -msgstr "käyttäjät" - -msgid "value" -msgstr "arvo" +msgid "Failed to create control!\n" +msgstr "Tarkistuksen luominen epäonnistui!\n" #, c-format msgid "Failed to bind to server!\n" @@ -1157,6 +221,10 @@ msgstr "Yhtään avainta ei saatu" msgid "Failed to decode control reply!\n" msgstr "Tarkistusvastauksen purkaminen epäonnistui!\n" +#, c-format +msgid "Passwords do not match!\n" +msgstr "Salasanat eivät täsmää!\n" + #, c-format msgid "Failed to open config file %s\n" msgstr "Kokoonpanotiedoston %s avaaminen epäonnistui\n" @@ -1177,13 +245,16 @@ msgstr "" msgid "Output only on errors" msgstr "" +msgid "Output debug info" +msgstr "" + msgid "Contact this specific KDC Server" msgstr "" -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" +msgid "Server Name" +msgstr "Palvelimen nimi" -msgid "Kerberos Service Principal Name" +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" msgstr "" msgid "" @@ -1191,9 +262,6 @@ msgid "" "exist)." msgstr "" -msgid "Keytab File Name" -msgstr "" - msgid "Encryption types to request" msgstr "" @@ -1245,10 +313,6 @@ msgstr "" msgid "Retrieve current keys without changing them" msgstr "" -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "Kerberos-kontekstin alustus epäonnistui\n" - #, c-format msgid "No system preferred enctypes ?!\n" msgstr "" @@ -1284,10 +348,34 @@ msgstr "" msgid "Cannot specify server and LDAP uri simultaneously.\n" msgstr "" +#, c-format +msgid "DNS discovery for domain %s\n" +msgstr "" + +#, c-format +msgid "Discovered server %s\n" +msgstr "" + +#, c-format +msgid "Using discovered server %s\n" +msgstr "" + +#, c-format +msgid "DNS Discovery failed\n" +msgstr "" + +#, c-format +msgid "Using server from config %s\n" +msgstr "" + #, c-format msgid "Server name not provided and unavailable\n" msgstr "" +#, c-format +msgid "Using provided server %s\n" +msgstr "" + #, c-format msgid "Incompatible options provided (-r and -P)\n" msgstr "" @@ -1345,97 +433,262 @@ msgid "Keytab successfully retrieved and stored in: %s\n" msgstr "" #, c-format -msgid "Unable to parse principal name\n" -msgstr "Prinsipaalinimen jäsentäminen ei onnistu\n" +msgid "Out of memory!\n" +msgstr "Muisti loppui!\n" #, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "krb5_parse_name %1$d: %2$s\n" +msgid "No permission to join this host to the IPA domain.\n" +msgstr "Ei lupaa liittää tätä isäntää IPA toimialueeseen.\n" #, c-format -msgid "Removing principal %s\n" -msgstr "" +msgid "No write permissions on keytab file '%s'\n" +msgstr "Ei kirjoitusoikeuksia keytab-tiedostoon '%s'\n" #, c-format -msgid "Failed to open keytab\n" -msgstr "Keytabin avaaminen epäonnistui\n" +msgid "access() on %1$s failed: errno = %2$d\n" +msgstr "pääsy() kohteeseen %1$s epäonnistui: virhenro = %2$d\n" #, c-format -msgid "principal not found\n" -msgstr "toimeksiantajaa ei löydy\n" +msgid "Out of memory!" +msgstr "Muisti loppui!" #, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" +msgid "Unable to enable SSL in LDAP\n" +msgstr "SSL:n ottaminen käyttöön LDAP:ssa ei onnistu\n" #, c-format -msgid "Unable to remove entry\n" -msgstr "Merkintää ei voi poistaa\n" +msgid "Search for %1$s on rootdse failed with error %2$d\n" +msgstr "%1$s:n haku rootdse:stä epäonnistui virheellä %2$d\n" #, c-format -msgid "kvno %d\n" -msgstr "" +msgid "No values for %s" +msgstr "Ei arvoja kohteelle %s" #, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "Tuloksen saaminen epäonnistui: %s\n" - -#, fuzzy, c-format -msgid "Unable to parse principal\n" -msgstr "Prinsipaalin jäsentäminen ei onnistu: %1$s (%2$d)\n" +msgid "Search for IPA namingContext failed with error %d\n" +msgstr "IPA-nimeämiskontekstin haku epäonnistui virheellä %d\n" #, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" +msgid "IPA namingContext not found\n" +msgstr "IPA-nimeämiskontekstia ei löytynyt\n" -#, fuzzy, c-format -msgid "realm not found\n" -msgstr "ei löytynyt" +#, c-format +msgid "Unable to determine root DN of %s\n" +msgstr "%s: root DN:ää ei voida määrittää\n" -msgid "Debugging output" -msgstr "" +#, c-format +msgid "Enrollment failed. %s\n" +msgstr "Rekisteröinti epäonnistui. %s\n" +#, c-format +msgid "principal not found in XML-RPC response\n" +msgstr "toimeksiantajaa ei löydy XML-RPC-vastauksesta\n" + +#, c-format +msgid "Host is already joined.\n" +msgstr "Kone on jo liittynyt.\n" + +#, c-format +msgid "curl_slist_append() failed for value: '%s'\n" +msgstr "curl_slist_append() epäonnistui arvolle: '%s'\n" + +#, c-format +msgid "curl_easy_setopt() failed\n" +msgstr "curl_easy_setopt() epäonnistui\n" + +#, c-format +msgid "Expanding buffer in jsonrpc_handle_response failed" +msgstr "jsonrpc_handle_response puskurin laajennus epäonnistui" + +#, c-format +msgid "curl_global_init() failed\n" +msgstr "curl_global_init() epäonnistui\n" + +#, c-format +msgid "curl_easy_init() failed\n" +msgstr "curl_easy_init() epäonnistui\n" + +#, c-format +msgid "json_dumps() failed\n" +msgstr "json_dumps() epäonnistui\n" + +#, c-format msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +"JSON-RPC request:\n" +"%s\n" msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -#, fuzzy -msgid "Realm name" -msgstr "Nimeä uudelleen" - -#, fuzzy, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "Tuloksen jäsentäminen epäonnistui: %s\n" +"JSON-RPC pyyntö:\n" +"%s\n" #, c-format -msgid "Closing keytab failed\n" -msgstr "" +msgid "JSON-RPC call failed: %s\n" +msgstr "JSON-RPC kutsu epäonnistui: %s\n" #, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, fuzzy, c-format -msgid "cannot open configuration file %s\n" -msgstr "Toimenpide epäonnistui: %s\n" +msgid "JSON-RPC call failed with status code: %li\n" +msgstr "JSON-RPC kutsu epäonnistui statuskoodilla: %li\n" #, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "" +msgid "JSON-RPC call was unauthorized. Check your credentials.\n" +msgstr "JSON-RPC kutsu oli käyttöoikeudeton. Tarkista valtuustietosi .\n" -#, fuzzy, c-format -msgid "read error\n" -msgstr "Jäsennysvirhe" +#, c-format +msgid "" +"JSON-RPC response:\n" +"%s\n" +msgstr "" +"JSON-RPC vastaus:\n" +"%s\n" + +#, c-format +msgid "Extracting the error from the JSON-RPC response failed: %s\n" +msgstr "Virheen purkaminen JSON-RPC-vastauksesta epäonnistui: %s\n" + +#, c-format +msgid "Parsing JSON-RPC response failed: %s\n" +msgstr "JSON-RPC-vastauksen jäsentäminen epäonnistui: %s\n" + +#, c-format +msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" +msgstr "" +"JSON-RPC-vastauksen jäsentäminen epäonnistui: \"Tulos\"arvoa ei löytynyt.\n" + +#, c-format +msgid "Extracting the data from the JSON-RPC response failed: %s\n" +msgstr "Tiedon purkaminen JSON-RPC-vastauksesta epäonnistui: %s\n" + +#, c-format +msgid "json_pack_ex() failed: %s\n" +msgstr "json_pack_ex() epäonnistui: %s\n" + +#, c-format +msgid "Unenrollment successful.\n" +msgstr "Rekisteröinnin purkaminen onnistui.\n" + +#, c-format +msgid "Unenrollment failed.\n" +msgstr "Rekisteröinnin purkaminen epäonnistui.\n" + +#, c-format +msgid "result not found in XML-RPC response\n" +msgstr "tulosta ei löydy XML-RPC-vastauksesta\n" + +#, c-format +msgid "Unable to determine IPA server from %s\n" +msgstr "IPA-palvelinta ei voida määrittää kohteesta %s\n" + +#, c-format +msgid "Unable to join host: Kerberos context initialization failed\n" +msgstr "Ei voida liittyä isäntään: Kerberos-kontekstin alustus epäonnistui\n" + +#, c-format +msgid "Unable to join host: Kerberos Credential Cache not found\n" +msgstr "" +"Ei voida liittyä isäntään: Kerberos-kirjautumistietovälimuistia ei löydy\n" + +#, c-format +msgid "" +"Unable to join host: Kerberos User Principal not found and host password not " +"provided.\n" +msgstr "" +"Ei voida liittyä isäntään: Kerberos User Principalia ei löydy ja " +"isäntäsalasanaa ei annettu.\n" + +#, c-format +msgid "fork() failed\n" +msgstr "fork() epäonnistui\n" + +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "ipa-getkeytabia ei löydy\n" + +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "ipa-getkeytabilla on väärät käyttöoikeudet?\n" + +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "ipa-getkeytabin suorittaminen epäonnistui, virhe %d\n" + +#, c-format +msgid "child exited with %d\n" +msgstr "lapsi poistui viestillä %d\n" + +#, c-format +msgid "Error resolving keytab: %s.\n" +msgstr "Virhe keytabin selvittämisessä: %s\n" + +#, c-format +msgid "Error getting default Kerberos realm: %s.\n" +msgstr "Kerberos-oletusalueen hakemisessa tapahtui virhe: %s\n" + +#, c-format +msgid "Error parsing \"%1$s\": %2$s.\n" +msgstr "Virhe jäsennettäessä \"%1$s\": %2$s.\n" + +#, c-format +msgid "Error obtaining initial credentials: %s.\n" +msgstr "Virhe ensimmäisten tunnistetietojen hankinnassa: %s\n" + +#, c-format +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "Kerberos-kirjautumistietovälimuistia ei voi luoda\n" + +#, c-format +msgid "Error storing creds in credential cache: %s.\n" +msgstr "" +"Virhe tallennettaessa valtuustietoja kirjautumistietojen välimuistiin: %s\n" + +msgid "Print the raw XML-RPC output in GSSAPI mode" +msgstr "Tulosta XML-RPC-raaka-tuloste GSSAPI-tilassa" + +msgid "Quiet mode. Only errors are displayed." +msgstr "Hiljainen tila. Vain virheet näytetään." + +msgid "Unenroll this host from IPA server" +msgstr "Poista tämän koneen rekisteröinti IPA-palvelimelta" + +msgid "Hostname of this server" +msgstr "Palvelimen isäntänimi" + +msgid "hostname" +msgstr "koneen nimi" + +msgid "IPA Server to use" +msgstr "Käytettävä IPA-palvelin" + +msgid "Specifies where to store keytab information." +msgstr "Määrittää, mihin keytab tiedot tallennetaan." + +msgid "filename" +msgstr "tiedostonimi" + +msgid "Force the host join. Rejoin even if already joined." +msgstr "Pakota kone liittymään. Liity uudelleen, vaikka olisit jo liittynyt." + +msgid "LDAP password (if not using Kerberos)" +msgstr "LDAP-salasana (jos et käytä Kerberosia)" + +msgid "password" +msgstr "salasana" + +msgid "LDAP basedn" +msgstr "LDAP:in BaseDN" + +msgid "basedn" +msgstr "BaseDN" + +#, c-format +msgid "Cannot get host's FQDN!\n" +msgstr "Ei voida saada koneen FQDN:ia!\n" + +#, c-format +msgid "The hostname must be fully-qualified: %s\n" +msgstr "Koneen nimen on oltava täysin määritelty: %s\n" + +#, c-format +msgid "The hostname must not be: %s\n" +msgstr "Koneen nimi ei voi olla: %s\n" msgid "Failed members" msgstr "" @@ -1555,16 +808,99 @@ msgstr "" msgid "Skipped %(key)s" msgstr "" -msgid "File to load the certificate from" +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +msgid "Unrevoked" +msgstr "" + +msgid "Error" +msgstr "Virhe" + +#, fuzzy +msgid "Input filename" +msgstr "Syötetiedosto" + +msgid "File to load the certificate from." msgstr "" msgid "cannot specify both raw certificate and file" msgstr "" +msgid "Input file" +msgstr "Syötetiedosto" + +msgid "File to load the certificate from" +msgstr "" + #, python-format msgid "Profile configuration stored in file '%(file)s'" msgstr "" +msgid "Split DNS record to parts" +msgstr "" + +msgid "Please choose a type of DNS resource record to be added" +msgstr "" + +#, python-format +msgid "The most common types for this type of zone are: %s\n" +msgstr "" + +msgid "DNS resource record type" +msgstr "" + +#, python-format +msgid "Invalid or unsupported type. Allowed values are: %s" +msgstr "" + +msgid "No option to modify specific record provided." +msgstr "" + +msgid "Current DNS record contents:\n" +msgstr "" + +#, python-format +msgid "Modify %(name)s '%(value)s'?" +msgstr "" + +#, python-format +msgid "" +"%(count)d %(type)s record skipped. Only one value per DNS record type can be " +"modified at one time." +msgid_plural "" +"%(count)d %(type)s records skipped. Only one value per DNS record type can " +"be modified at one time." +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Neither --del-all nor options to delete a specific record provided.\n" +"Command help may be consulted for all supported record types." +msgstr "" + +msgid "No option to delete specific record provided." +msgstr "" + +msgid "Delete all?" +msgstr "Poista kaikki?" + +#, python-format +msgid "Delete %(name)s '%(value)s'?" +msgstr "" + +msgid "Server will check DNS forwarder(s)." +msgstr "" + +msgid "This may take some time, please wait ..." +msgstr "" + +msgid "DNS forwarder" +msgstr "" + +msgid "file to store DNS records in nsupdate format" +msgstr "" + #, python-format msgid "Certificate(s) stored in file '%(file)s'" msgstr "" @@ -1586,6 +922,36 @@ msgid "" "can use their Kerberos accounts." msgstr "" +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "Synkronoi OTP-tunnus." + +msgid "User ID" +msgstr "Käyttäjä ID" + +msgid "Password" +msgstr "Salasana" + +#, fuzzy +msgid "First Code" +msgstr "Etunimi" + +#, fuzzy +msgid "Second Code" +msgstr "Toinen OTP" + +msgid "Token ID" +msgstr "Token-tunniste" + msgid "python-yubico is not installed." msgstr "" @@ -1633,22 +999,6 @@ msgstr "" msgid "Removing %(servers)s from replication topology, please wait..." msgstr "" -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - #, python-format msgid "Replication topology of suffix \"%(suffix)s\" is in order." msgstr "" @@ -1677,70 +1027,12 @@ msgstr "" msgid "Delete a user, keeping the entry available for future use" msgstr "" +msgid "Delete a user" +msgstr "Poista käyttäjä" + msgid "preserve and no-preserve cannot be both set" msgstr "" -msgid "Split DNS record to parts" -msgstr "" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "" - -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "" - -msgid "DNS resource record type" -msgstr "" - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "" - -msgid "No option to modify specific record provided." -msgstr "" - -msgid "Current DNS record contents:\n" -msgstr "" - -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "" - -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" - -msgid "No option to delete specific record provided." -msgstr "" - -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "" - -msgid "Server will check DNS forwarder(s)." -msgstr "" - -msgid "This may take some time, please wait ..." -msgstr "" - -msgid "DNS forwarder" -msgstr "" - -msgid "file to store DNS records in nsupdate format" -msgstr "" - #, python-format msgid "Cannot read file '%(filename)s': %(exc)s" msgstr "" @@ -1749,6 +1041,9 @@ msgstr "" msgid "Cannot decode file '%(filename)s': %(exc)s" msgstr "" +msgid "Invalid credentials" +msgstr "Virheelliset tunnistautumistiedot" + msgid "Create a new vault." msgstr "" @@ -1785,6 +1080,9 @@ msgstr "" msgid "Modify a vault." msgstr "Muokkaa ryhmää." +msgid "Change password" +msgstr "Vaihda salasana" + #, fuzzy msgid "Old vault password" msgstr "salasana" @@ -1858,37 +1156,22 @@ msgstr "" msgid "Missing vault private key" msgstr "" -msgid "Write certificate (chain if --chain used) to file" +#, python-format +msgid "Enabled Sudo Rule \"%s\"" msgstr "" -msgid "Unrevoked" +#, python-format +msgid "Disabled Sudo Rule \"%s\"" msgstr "" -#, fuzzy -msgid "Input filename" -msgstr "Syötetiedosto" - -msgid "File to load the certificate from." +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" msgstr "" -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" msgstr "" -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -#, fuzzy -msgid "First Code" -msgstr "Etunimi" - -#, fuzzy -msgid "Second Code" -msgstr "Toinen OTP" - msgid "" "\n" "Directory Server Access Control Instructions (ACIs)\n" @@ -2013,6 +1296,9 @@ msgstr "" msgid "ACI name" msgstr "" +msgid "Permission" +msgstr "Käyttöoikeus" + msgid "Permission ACI grants access to" msgstr "" @@ -2036,6 +1322,9 @@ msgstr "" msgid "Attributes" msgstr "" +msgid "Type" +msgstr "Tyyppi" + msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" msgstr "" @@ -2047,6 +1336,9 @@ msgstr "Jäsenet" msgid "Member of a group" msgstr "Muokkaa ryhmää." +msgid "Filter" +msgstr "Suodin" + msgid "Legal LDAP filter (e.g. ou=Engineering)" msgstr "" @@ -2157,6 +1449,246 @@ msgstr "" msgid "Location of the ACI" msgstr "" +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Description" +msgstr "Kuvaus" + +msgid "A description of this auto member rule" +msgstr "" + +msgid "Default (fallback) Group" +msgstr "" + +msgid "Default group for entries to land" +msgstr "" + +msgid "Add an automember rule." +msgstr "" + +msgid "Automember Rule" +msgstr "" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +#, fuzzy +msgid "Grouping Type" +msgstr "Ryhmän nimi" + +msgid "Grouping to which the rule applies" +msgstr "" + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +#, fuzzy +msgid "Exclusive Regex" +msgstr "Poissulkeva" + +msgid "Attribute Key" +msgstr "" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +msgid "Number of conditions added" +msgstr "" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +msgid "Display information about the default (fallback) automember groups." +msgstr "" + +#, fuzzy +msgid "Delete an automember rule." +msgstr "Poista käyttäjä" + +msgid "List of deletions that failed" +msgstr "" + +msgid "Search for automember rules." +msgstr "" + +msgid "Modify an automember rule." +msgstr "" + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +msgid "Rights" +msgstr "Oikeudet" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Users" +msgstr "Käyttäjät" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Hosts" +msgstr "Koneet" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +msgid "Conditions that could not be removed" +msgstr "" + +msgid "Number of conditions removed" +msgstr "" + +msgid "Display information about an automember rule." +msgstr "" + msgid "" "\n" "Automount\n" @@ -2270,6 +1802,15 @@ msgstr "" msgid "Automount key name." msgstr "" +msgid "Mount information" +msgstr "Tietoja liitoksesta" + +msgid "description" +msgstr "kuvaus" + +msgid "Location" +msgstr "Sijainti" + msgid "Automount location name." msgstr "" @@ -2282,25 +1823,12 @@ msgstr "" msgid "Create a new automount key." msgstr "" -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - msgid "Delete an automount key." msgstr "" msgid "Continuous mode: Don't stop on errors." msgstr "" -msgid "List of deletions that failed" -msgstr "" - msgid "Search for an automount key." msgstr "" @@ -2320,20 +1848,13 @@ msgstr "" msgid "Modify an automount key." msgstr "Muokkaa ryhmää." -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - #, fuzzy msgid "New mount information" msgstr "Tietoja liitoksesta" +msgid "Rename" +msgstr "Nimeä uudelleen" + msgid "Rename the automount key object" msgstr "" @@ -2365,6 +1886,9 @@ msgstr "" msgid "Create a new indirect mount point." msgstr "" +msgid "Mount point" +msgstr "Liitospiste" + msgid "Parent map" msgstr "" @@ -2421,6 +1945,188 @@ msgstr "" msgid "Nested Methods to execute" msgstr "" +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +msgid "Search for existing certificates." +msgstr "" + +msgid "Match cn attribute in subject" +msgstr "" + +msgid "Reason" +msgstr "Syy" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "" + +#, fuzzy +msgid "minimum serial number" +msgstr "Sarjanumero" + +#, fuzzy +msgid "maximum serial number" +msgstr "Sarjanumero" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Maximum number of certs returned" +msgstr "" + +msgid "Take a revoked certificate off hold." +msgstr "" + +msgid "Serial number" +msgstr "Sarjanumero" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +msgid "Submit a certificate signing request." +msgstr "" + +msgid "CSR" +msgstr "" + +msgid "Principal" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +msgid "Dictionary mapping variable name to value" +msgstr "" + +msgid "Revoke a certificate." +msgstr "" + +msgid "Retrieve an existing certificate." +msgstr "" + +#, fuzzy +msgid "Output filename" +msgstr "tiedostonimi" + +msgid "File to store the certificate in." +msgstr "" + +msgid "Check the status of a certificate signing request." +msgstr "" + +#, fuzzy +msgid "Request id" +msgstr "Vaaditaan" + msgid "" "\n" "Server configuration\n" @@ -2971,6 +2677,9 @@ msgstr "Nimeä uudelleen" msgid "Time to live" msgstr "" +msgid "Records" +msgstr "Merkinnät" + #, fuzzy msgid "Record type" msgstr "Merkinnät" @@ -2987,6 +2696,12 @@ msgstr "Merkinnät" msgid "Raw A records" msgstr "Merkinnät" +msgid "A IP Address" +msgstr "IP-osoite" + +msgid "IP Address" +msgstr "IP-osoite" + msgid "A Create reverse" msgstr "" @@ -3034,6 +2749,9 @@ msgstr "" msgid "AFSDB Hostname" msgstr "Koneen nimi" +msgid "Hostname" +msgstr "Koneen nimi" + msgid "APL record" msgstr "" @@ -3127,6 +2845,9 @@ msgstr "" msgid "DNAME Target" msgstr "Kohde" +msgid "Target" +msgstr "Kohde" + msgid "DNSKEY record" msgstr "" @@ -3259,6 +2980,9 @@ msgstr "" msgid "LOC Size" msgstr "Koko" +msgid "Size" +msgstr "Koko" + msgid "LOC Horizontal Precision" msgstr "" @@ -3300,10 +3024,16 @@ msgstr "" msgid "NAPTR Order" msgstr "Järjestys" +msgid "Order" +msgstr "Järjestys" + #, fuzzy msgid "NAPTR Preference" msgstr "Etusija" +msgid "Preference" +msgstr "Etusija" + msgid "NAPTR Flags" msgstr "" @@ -3314,6 +3044,9 @@ msgstr "" msgid "NAPTR Service" msgstr "Mikä tahansa palvelu" +msgid "Service" +msgstr "Palvelu" + msgid "NAPTR Regular Expression" msgstr "" @@ -3407,6 +3140,9 @@ msgstr "Merkinnät" msgid "SRV Priority" msgstr "Prioriteetti" +msgid "Priority" +msgstr "Prioriteetti" + #, fuzzy msgid "SRV Weight" msgstr "Oikeudet" @@ -3419,6 +3155,9 @@ msgstr "Oikeudet" msgid "SRV Port" msgstr "Portti" +msgid "Port" +msgstr "Portti" + #, fuzzy msgid "SRV Target" msgstr "Kohde" @@ -3449,6 +3188,9 @@ msgstr "Sormenjälki" msgid "SSHFP Fingerprint" msgstr "Sormenjälki" +msgid "Fingerprint" +msgstr "Sormenjälki" + #, fuzzy msgid "TA record" msgstr "Merkinnät" @@ -3722,6 +3464,319 @@ msgstr "" msgid "Display information about a DNS zone (SOA record)." msgstr "" +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "Group name" +msgstr "Ryhmän nimi" + +#, fuzzy +msgid "Group description" +msgstr "Verkkoryhmän kuvaus" + +msgid "GID" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "" + +#, fuzzy +msgid "Member users" +msgstr "Poista käyttäjiä" + +#, fuzzy +msgid "Member groups" +msgstr "Omistajaryhmät" + +#, fuzzy +msgid "Member of groups" +msgstr "Omistajaryhmät" + +msgid "Roles" +msgstr "Roolit" + +msgid "Member of netgroups" +msgstr "" + +msgid "Member of Sudo rule" +msgstr "" + +msgid "Member of HBAC rule" +msgstr "" + +msgid "Indirect Member users" +msgstr "" + +msgid "Indirect Member groups" +msgstr "" + +msgid "Indirect Member of group" +msgstr "" + +msgid "Indirect Member of netgroup" +msgstr "" + +msgid "Indirect Member of role" +msgstr "" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +msgid "Create a new group." +msgstr "" + +msgid "Create as a non-POSIX group" +msgstr "" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +msgid "Add members to a group." +msgstr "" + +#, fuzzy +msgid "External member" +msgstr "Ulkoinen" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +#, fuzzy +msgid "member user" +msgstr "Poista käyttäjiä" + +msgid "users to add" +msgstr "" + +#, fuzzy +msgid "member group" +msgstr "Omistajaryhmät" + +#, fuzzy +msgid "groups to add" +msgstr "ryhmät" + +msgid "Members that could not be added" +msgstr "" + +msgid "Number of members added" +msgstr "" + +#, fuzzy +msgid "Delete group." +msgstr "Poista moodi" + +msgid "Detach a managed group from a user." +msgstr "" + +#, fuzzy +msgid "Search for groups." +msgstr "Omistajaryhmät" + +msgid "search for private groups" +msgstr "" + +msgid "search for POSIX groups" +msgstr "" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +msgid "search for non-POSIX groups" +msgstr "" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "user" +msgstr "käyttäjä" + +msgid "Search for groups with these member users." +msgstr "" + +msgid "Search for groups without these member users." +msgstr "" + +msgid "group" +msgstr "ryhmä" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +#, fuzzy +msgid "netgroup" +msgstr "ryhmä" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "rooli" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +#, fuzzy +msgid "HBAC rule" +msgstr "Lisää sääntö" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +#, fuzzy +msgid "sudo rule" +msgstr "Lisää sääntö" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +msgid "Modify a group." +msgstr "Muokkaa ryhmää." + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +msgid "Remove members from a group." +msgstr "" + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "" + +msgid "Number of members removed" +msgstr "" + +msgid "Display information about a named group." +msgstr "" + msgid "" "\n" "Host-based access control\n" @@ -3803,6 +3858,9 @@ msgstr "Palvelun nimi" msgid "Service category the rule applies to" msgstr "" +msgid "Enabled" +msgstr "Käytössä" + #, fuzzy msgid "User Groups" msgstr "Ryhmät" @@ -3811,6 +3869,9 @@ msgstr "Ryhmät" msgid "Host Groups" msgstr "Ryhmät" +msgid "Services" +msgstr "Palvelut" + #, fuzzy msgid "Service Groups" msgstr "Palvelut" @@ -3822,9 +3883,6 @@ msgstr "Ulkoinen" msgid "Create a new HBAC rule." msgstr "" -msgid "Suppress processing of membership attributes." -msgstr "" - msgid "Add target hosts and hostgroups to an HBAC rule." msgstr "" @@ -3841,12 +3899,6 @@ msgstr "" msgid "host groups to add" msgstr "" -msgid "Members that could not be added" -msgstr "" - -msgid "Number of members added" -msgstr "" - msgid "Add services to an HBAC rule." msgstr "" @@ -3866,21 +3918,6 @@ msgstr "" msgid "Add users and groups to an HBAC rule." msgstr "" -#, fuzzy -msgid "member user" -msgstr "Poista käyttäjiä" - -msgid "users to add" -msgstr "" - -#, fuzzy -msgid "member group" -msgstr "Omistajaryhmät" - -#, fuzzy -msgid "groups to add" -msgstr "ryhmät" - #, fuzzy msgid "Delete an HBAC rule." msgstr "Poista käyttäjä" @@ -3907,12 +3944,6 @@ msgstr "" msgid "host groups to remove" msgstr "" -msgid "Members that could not be removed" -msgstr "" - -msgid "Number of members removed" -msgstr "" - msgid "Remove service and service groups from an HBAC rule." msgstr "" @@ -3925,12 +3956,6 @@ msgstr "" msgid "Remove users and groups from an HBAC rule." msgstr "" -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - msgid "Display the properties of an HBAC rule." msgstr "" @@ -3957,6 +3982,9 @@ msgid "" " ipa hbacsvc-del tftp\n" msgstr "" +msgid "Service name" +msgstr "Palvelun nimi" + #, fuzzy msgid "HBAC service" msgstr "Lisää palvelu" @@ -4043,6 +4071,243 @@ msgstr "" msgid "Display information about an HBAC service group." msgstr "" +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +msgid "User name" +msgstr "Käyttäjätunnus" + +#, fuzzy +msgid "Target host" +msgstr "Kohde" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +msgid "Warning" +msgstr "Varoitus" + +msgid "Matched rules" +msgstr "" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + msgid "" "\n" "Hosts/Machines\n" @@ -4107,6 +4372,9 @@ msgid "" " ipa host-allow-create-keytab test2 --users=tuser1\n" msgstr "" +msgid "Host name" +msgstr "Koneen nimi" + msgid "A description of this host" msgstr "" @@ -4120,12 +4388,21 @@ msgstr "" msgid "Host location (e.g. \"Lab 2\")" msgstr "" +msgid "Platform" +msgstr "Alusta" + msgid "Host hardware platform (e.g. \"Lenovo T61\")" msgstr "" +msgid "Operating system" +msgstr "Käyttöjärjestelmä" + msgid "Host operating system and version (e.g. \"Fedora 9\")" msgstr "" +msgid "User password" +msgstr "Käyttäjän salasana" + msgid "Password used in bulk enrollment" msgstr "" @@ -4146,9 +4423,18 @@ msgstr "" msgid "Principal name" msgstr "Näyttönimi" +msgid "MAC address" +msgstr "MAC-osoite" + msgid "Hardware MAC address(es) on this host" msgstr "" +msgid "SSH public key" +msgstr "Julkinen SSH-avain" + +msgid "Class" +msgstr "Luokka" + msgid "" "Host category (semantics placed on this attribute are for local " "interpretation)" @@ -4157,6 +4443,9 @@ msgstr "" msgid "Assigned ID View" msgstr "" +msgid "Requires pre-authentication" +msgstr "Vaatii ennakkotunnistautumisen" + msgid "Pre-authentication is required for the service" msgstr "" @@ -4169,30 +4458,9 @@ msgstr "" msgid "Member of host-groups" msgstr "" -msgid "Member of netgroups" -msgstr "" - -msgid "Member of Sudo rule" -msgstr "" - -msgid "Member of HBAC rule" -msgstr "" - -msgid "Indirect Member of netgroup" -msgstr "" - msgid "Indirect Member of host-group" msgstr "" -msgid "Indirect Member of role" -msgstr "" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - msgid "Keytab" msgstr "" @@ -4226,6 +4494,9 @@ msgstr "" msgid "Host Groups allowed to create keytab" msgstr "" +msgid "Add a new host." +msgstr "Lisää uusi isäntä." + msgid "force host name even if not in DNS" msgstr "" @@ -4282,10 +4553,6 @@ msgstr "" msgid "Search for hosts without these member of host groups." msgstr "" -#, fuzzy -msgid "netgroup" -msgstr "ryhmä" - msgid "Search for hosts with these member of netgroups." msgstr "" @@ -4298,20 +4565,12 @@ msgstr "" msgid "Search for hosts without these member of roles." msgstr "" -#, fuzzy -msgid "HBAC rule" -msgstr "Lisää sääntö" - msgid "Search for hosts with these member of HBAC rules." msgstr "" msgid "Search for hosts without these member of HBAC rules." msgstr "" -#, fuzzy -msgid "sudo rule" -msgstr "Lisää sääntö" - msgid "Search for hosts with these member of sudo rules." msgstr "" @@ -4324,6 +4583,9 @@ msgstr "" msgid "Search for hosts without these enrolled by users." msgstr "" +msgid "host" +msgstr "kone" + msgid "Search for hosts with these managed by hosts." msgstr "" @@ -4472,6 +4734,235 @@ msgstr "" msgid "Display information about a hostgroup." msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +#, fuzzy +msgid "Range name" +msgstr "Nimeä uudelleen" + +msgid "First Posix ID of the range" +msgstr "" + +msgid "Number of IDs in the range" +msgstr "" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +#, fuzzy +msgid "Domain SID of the trusted domain" +msgstr "toimialueseen ei luoteta" + +msgid "Name of the trusted domain" +msgstr "" + +msgid "Range type" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +#, fuzzy +msgid "Delete an ID range." +msgstr "Poista käyttäjä" + +msgid "Search for ranges." +msgstr "" + +#, fuzzy +msgid "Modify ID range." +msgstr "Muokkaa ryhmää." + +msgid "Display information about a range." +msgstr "" + msgid "" "\n" "ID Views\n" @@ -4488,9 +4979,6 @@ msgstr "" msgid "Anchor to override" msgstr "" -msgid "GID" -msgstr "" - #, fuzzy msgid "Group ID Number" msgstr "Ryhmän nimi" @@ -4510,6 +4998,9 @@ msgstr "Sarjanumero" msgid "GECOS" msgstr "" +msgid "Home directory" +msgstr "Kotihakemisto" + msgid "Login shell" msgstr "" @@ -4566,6 +5057,9 @@ msgid "" "hostgroups. If any other ID View is applied to the host, it is overriden." msgstr "" +msgid "hosts" +msgstr "koneet" + msgid "Hosts to apply the ID View to" msgstr "" @@ -4921,6 +5415,9 @@ msgid "" "RFC2307bis. The default is RFC2307bis" msgstr "" +msgid "Continue" +msgstr "Jatka" + msgid "" "Continuous operation mode. Errors are reported but the process continues" msgstr "" @@ -4976,9 +5473,6 @@ msgid "" "retrieve and print all attributes from the server. Affects command output." msgstr "" -msgid "Dictionary mapping variable name to value" -msgstr "" - msgid "Total number of variables env (>= count)" msgstr "" @@ -5023,6 +5517,9 @@ msgstr "" msgid "Netgroup name" msgstr "Ryhmän nimi" +msgid "Netgroup description" +msgstr "Verkkoryhmän kuvaus" + #, fuzzy msgid "NIS domain name" msgstr "Toimialueen nimi" @@ -5188,6 +5685,152 @@ msgstr "Kertakäyttöisen salasanan määritykset" msgid "Show the current OTP configuration." msgstr "Kertakäyttöisen salasanan määritykset" +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "Omistaja" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Manager" +msgstr "" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +msgid "Disabled" +msgstr "Ei käytössä" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +msgid "Validity start" +msgstr "" + +msgid "First date/time the token can be used" +msgstr "" + +msgid "Validity end" +msgstr "" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "Toimittaja" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "Malli" + +msgid "Token model (informational only)" +msgstr "" + +msgid "Serial" +msgstr "Sarjanumero" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +#, fuzzy +msgid "Add a new OTP token." +msgstr "Lisää OTP-tunnus" + +msgid "(deprecated)" +msgstr "" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +#, fuzzy +msgid "Delete an OTP token." +msgstr "Synkronoi OTP-tunnus." + +#, fuzzy +msgid "Search for OTP token." +msgstr "Synkronoi OTP-tunnus." + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +#, fuzzy +msgid "Modify a OTP token." +msgstr "Lisää OTP-tunnus" + +msgid "Rename the OTP token object" +msgstr "" + +msgid "Display information about an OTP token." +msgstr "" + msgid "" "\n" "YubiKey Tokens\n" @@ -5227,6 +5870,18 @@ msgstr "" msgid "Set a user's password." msgstr "Käyttäjän salasana" +msgid "New Password" +msgstr "Uusi salasana" + +msgid "Current Password" +msgstr "Nykyinen salasana" + +msgid "OTP" +msgstr "Kertakäyttöinen salasana" + +msgid "One Time Password" +msgstr "Kertakäyttöinen salasana" + msgid "" "\n" "Permissions\n" @@ -5622,6 +6277,9 @@ msgid "" " ipa pwpolicy-mod --minclasses=2 localadmins\n" msgstr "" +msgid "Group" +msgstr "Ryhmä" + msgid "Manage password policy for specific group" msgstr "" @@ -5700,6 +6358,9 @@ msgstr "Muokkaa ryhmää." msgid "Display information about password policy." msgstr "" +msgid "User" +msgstr "Käyttäjä" + msgid "Display effective policy for a specific user" msgstr "" @@ -5738,12 +6399,21 @@ msgstr "Palvelimen nimi" msgid "A description of this RADIUS proxy server" msgstr "" +msgid "Server" +msgstr "Palvelin" + msgid "The hostname or IP (with or without port)" msgstr "" +msgid "Secret" +msgstr "Salainen" + msgid "The secret used to encrypt data" msgstr "" +msgid "Timeout" +msgstr "Aikakatkaisu" + msgid "The total timeout across all retries (in seconds)" msgstr "" @@ -5802,6 +6472,9 @@ msgid "" " ipa realmdomains-mod --del-domain=olddomain.com\n" msgstr "" +msgid "Domain" +msgstr "Toimialue" + #, fuzzy msgid "Add domain" msgstr "toimialue" @@ -5865,14 +6538,6 @@ msgstr "Nimeä uudelleen" msgid "A description of this role-group" msgstr "" -#, fuzzy -msgid "Member users" -msgstr "Poista käyttäjiä" - -#, fuzzy -msgid "Member groups" -msgstr "Omistajaryhmät" - msgid "Privileges" msgstr "" @@ -6041,6 +6706,9 @@ msgid "" " and the default SELinux user are available in the config-show command.\n" msgstr "" +msgid "SELinux User" +msgstr "SELinux-käyttäjä" + msgid "HBAC Rule" msgstr "" @@ -6150,9 +6818,6 @@ msgid "" "httpd.keytab\n" msgstr "" -msgid "Principal" -msgstr "" - #, fuzzy msgid "Service principal" msgstr "Palvelun nimi" @@ -6890,9 +7555,8 @@ msgstr "" msgid "Sudo Command Group" msgstr "" -#, fuzzy -msgid "Group description" -msgstr "Verkkoryhmän kuvaus" +msgid "Commands" +msgstr "Komennot" msgid "Member Sudo commands" msgstr "" @@ -6932,1671 +7596,6 @@ msgstr "" msgid "Display Sudo Command Group." msgstr "" -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -msgid "Initials" -msgstr "" - -msgid "Kerberos principal" -msgstr "" - -msgid "Kerberos principal expiration" -msgstr "" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -#, fuzzy -msgid "Street address" -msgstr "MAC-osoite" - -msgid "State/Province" -msgstr "" - -msgid "ZIP" -msgstr "" - -#, fuzzy -msgid "Telephone Number" -msgstr "Sarjanumero" - -msgid "Mobile Telephone Number" -msgstr "" - -#, fuzzy -msgid "Pager Number" -msgstr "Sarjanumero" - -#, fuzzy -msgid "Fax Number" -msgstr "Sarjanumero" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "" - -msgid "Manager" -msgstr "" - -msgid "Car License" -msgstr "" - -#, fuzzy -msgid "Account disabled" -msgstr "Tilin asetukset" - -#, fuzzy -msgid "User authentication types" -msgstr "Tunnistatuminen" - -#, fuzzy -msgid "Types of supported user authentication" -msgstr "Vaatii ennakkotunnistautumisen" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -#, fuzzy -msgid "RADIUS proxy configuration" -msgstr "Asetukset" - -msgid "RADIUS proxy username" -msgstr "" - -#, fuzzy -msgid "Department Number" -msgstr "Sarjanumero" - -msgid "Employee Number" -msgstr "" - -msgid "Employee Type" -msgstr "" - -#, fuzzy -msgid "Preferred Language" -msgstr "Etusija" - -#, fuzzy -msgid "Member of groups" -msgstr "Omistajaryhmät" - -msgid "Indirect Member of group" -msgstr "" - -msgid "Kerberos keys available" -msgstr "" - -#, fuzzy -msgid "Add a new user." -msgstr "Lisää uusi isäntä." - -msgid "Don't create user private group" -msgstr "" - -#, fuzzy -msgid "Delete a user." -msgstr "Poista käyttäjä" - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -msgid "Search for users." -msgstr "" - -msgid "Self" -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -#, fuzzy -msgid "Modify a user." -msgstr "Muokkaa ryhmää." - -msgid "Rename the user object" -msgstr "" - -msgid "Display information about a user." -msgstr "" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "A description of this auto member rule" -msgstr "" - -msgid "Default (fallback) Group" -msgstr "" - -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -msgid "Automember Rule" -msgstr "" - -#, fuzzy -msgid "Grouping Type" -msgstr "Ryhmän nimi" - -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -#, fuzzy -msgid "Exclusive Regex" -msgstr "Poissulkeva" - -msgid "Attribute Key" -msgstr "" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -#, fuzzy -msgid "Delete an automember rule." -msgstr "Poista käyttäjä" - -msgid "Search for automember rules." -msgstr "" - -msgid "Modify an automember rule." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -msgid "Number of conditions removed" -msgstr "" - -msgid "Display information about an automember rule." -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -msgid "Search for existing certificates." -msgstr "" - -msgid "Match cn attribute in subject" -msgstr "" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -#, fuzzy -msgid "minimum serial number" -msgstr "Sarjanumero" - -#, fuzzy -msgid "maximum serial number" -msgstr "Sarjanumero" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -msgid "Submit a certificate signing request." -msgstr "" - -msgid "CSR" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -msgid "Revoke a certificate." -msgstr "" - -msgid "Retrieve an existing certificate." -msgstr "" - -#, fuzzy -msgid "Output filename" -msgstr "tiedostonimi" - -msgid "File to store the certificate in." -msgstr "" - -msgid "Check the status of a certificate signing request." -msgstr "" - -#, fuzzy -msgid "Request id" -msgstr "Vaaditaan" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "GID (use this option to set it manually)" -msgstr "" - -msgid "Indirect Member users" -msgstr "" - -msgid "Indirect Member groups" -msgstr "" - -msgid "Create a new group." -msgstr "" - -msgid "Create as a non-POSIX group" -msgstr "" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Add members to a group." -msgstr "" - -#, fuzzy -msgid "External member" -msgstr "Ulkoinen" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -#, fuzzy -msgid "Delete group." -msgstr "Poista moodi" - -msgid "Detach a managed group from a user." -msgstr "" - -#, fuzzy -msgid "Search for groups." -msgstr "Omistajaryhmät" - -msgid "search for private groups" -msgstr "" - -msgid "search for POSIX groups" -msgstr "" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -msgid "search for non-POSIX groups" -msgstr "" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -msgid "Remove members from a group." -msgstr "" - -msgid "Display information about a named group." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -#, fuzzy -msgid "Target host" -msgstr "Kohde" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Matched rules" -msgstr "" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, fuzzy -msgid "Domain NetBIOS name" -msgstr "Toimialueen nimi" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -msgid "NetBIOS name" -msgstr "" - -#, fuzzy -msgid "Domain GUID" -msgstr "Toimialue" - -msgid "Fallback primary group" -msgstr "" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -msgid "Active Directory domain administrator" -msgstr "" - -msgid "Active Directory domain administrator's password" -msgstr "" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "Range type" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -#, fuzzy -msgid "Delete a trust." -msgstr "Poista käyttäjä" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -msgid "Search for trusts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -msgid "Display information about a trust." -msgstr "" - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -#, fuzzy -msgid "Search domains of the trust" -msgstr "toimialueseen ei luoteta" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -#, fuzzy -msgid "Range name" -msgstr "Nimeä uudelleen" - -msgid "First Posix ID of the range" -msgstr "" - -msgid "Number of IDs in the range" -msgstr "" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -#, fuzzy -msgid "Domain SID of the trusted domain" -msgstr "toimialueseen ei luoteta" - -msgid "Name of the trusted domain" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -#, fuzzy -msgid "Delete an ID range." -msgstr "Poista käyttäjä" - -msgid "Search for ranges." -msgstr "" - -#, fuzzy -msgid "Modify ID range." -msgstr "Muokkaa ryhmää." - -msgid "Display information about a range." -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -msgid "Validity start" -msgstr "" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Validity end" -msgstr "" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -#, fuzzy -msgid "Add a new OTP token." -msgstr "Lisää OTP-tunnus" - -msgid "(deprecated)" -msgstr "" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -#, fuzzy -msgid "Delete an OTP token." -msgstr "Synkronoi OTP-tunnus." - -#, fuzzy -msgid "Search for OTP token." -msgstr "Synkronoi OTP-tunnus." - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -#, fuzzy -msgid "Modify a OTP token." -msgstr "Lisää OTP-tunnus" - -msgid "Rename the OTP token object" -msgstr "" - -msgid "Display information about an OTP token." -msgstr "" - msgid "" "\n" "Sudo Rules\n" @@ -8816,6 +7815,515 @@ msgstr "" msgid "Display Sudo Rule." msgstr "Näyttönimi" +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, fuzzy +msgid "Domain NetBIOS name" +msgstr "Toimialueen nimi" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +msgid "NetBIOS name" +msgstr "" + +#, fuzzy +msgid "Domain GUID" +msgstr "Toimialue" + +msgid "Fallback primary group" +msgstr "" + +msgid "Domain name" +msgstr "Toimialueen nimi" + +msgid "Trusted domain partner" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +msgid "Active Directory domain administrator" +msgstr "" + +msgid "Active Directory domain administrator's password" +msgstr "" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +#, fuzzy +msgid "Delete a trust." +msgstr "Poista käyttäjä" + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +msgid "Search for trusts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +msgid "Display information about a trust." +msgstr "" + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +#, fuzzy +msgid "Search domains of the trust" +msgstr "toimialueseen ei luoteta" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "Etunimi" + +msgid "Last name" +msgstr "Sukunimi" + +msgid "Full name" +msgstr "Koko nimi" + +msgid "Display name" +msgstr "Näyttönimi" + +msgid "Initials" +msgstr "" + +msgid "Kerberos principal" +msgstr "" + +msgid "Kerberos principal expiration" +msgstr "" + +msgid "Email address" +msgstr "Sähköpostiosoite" + +msgid "Prompt to set the user password" +msgstr "" + +msgid "Generate a random user password" +msgstr "" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" + +#, fuzzy +msgid "Street address" +msgstr "MAC-osoite" + +msgid "City" +msgstr "Kaupunki" + +msgid "State/Province" +msgstr "" + +msgid "ZIP" +msgstr "" + +#, fuzzy +msgid "Telephone Number" +msgstr "Sarjanumero" + +msgid "Mobile Telephone Number" +msgstr "" + +#, fuzzy +msgid "Pager Number" +msgstr "Sarjanumero" + +#, fuzzy +msgid "Fax Number" +msgstr "Sarjanumero" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "" + +msgid "Car License" +msgstr "" + +#, fuzzy +msgid "Account disabled" +msgstr "Tilin asetukset" + +#, fuzzy +msgid "User authentication types" +msgstr "Tunnistatuminen" + +#, fuzzy +msgid "Types of supported user authentication" +msgstr "Vaatii ennakkotunnistautumisen" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +#, fuzzy +msgid "RADIUS proxy configuration" +msgstr "Asetukset" + +msgid "RADIUS proxy username" +msgstr "" + +#, fuzzy +msgid "Department Number" +msgstr "Sarjanumero" + +msgid "Employee Number" +msgstr "" + +msgid "Employee Type" +msgstr "" + +#, fuzzy +msgid "Preferred Language" +msgstr "Etusija" + +msgid "Kerberos keys available" +msgstr "" + +#, fuzzy +msgid "Add a new user." +msgstr "Lisää uusi isäntä." + +msgid "Don't create user private group" +msgstr "" + +#, fuzzy +msgid "Delete a user." +msgstr "Poista käyttäjä" + +msgid "Disable a user account." +msgstr "" + +msgid "Enable a user account." +msgstr "" + +msgid "Search for users." +msgstr "" + +msgid "Self" +msgstr "" + +msgid "Display user record for current Kerberos principal" +msgstr "" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +msgid "Search for users with these member of HBAC rules." +msgstr "" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +#, fuzzy +msgid "Modify a user." +msgstr "Muokkaa ryhmää." + +msgid "Rename the user object" +msgstr "" + +msgid "Display information about a user." +msgstr "" + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + msgid "Time limit of search in seconds (0 is unlimited)" msgstr "" @@ -8877,6 +8385,9 @@ msgstr "" msgid "Service category the ACL applies to" msgstr "" +msgid "Profiles" +msgstr "Profiilit" + msgid "Create a new CA ACL." msgstr "" @@ -8935,6 +8446,111 @@ msgstr "" msgid "Display the properties of a CA ACL." msgstr "" +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +#, fuzzy +msgid "Profile ID" +msgstr "Profiili" + +msgid "Certificate Profile to use" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +msgid "Profile description" +msgstr "Profiilin kuvaus" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +msgid "Search for Certificate Profiles." +msgstr "" + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" msgstr "" @@ -8965,6 +8581,218 @@ msgstr "" msgid "Remove certificates from host entry" msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + msgid "Fallback to AD DC LDAP" msgstr "" @@ -8993,6 +8821,9 @@ msgid "" "to onelevel" msgstr "" +msgid "Remove users that can manage this token." +msgstr "" + msgid "Target DN subtree" msgstr "" @@ -9024,6 +8855,9 @@ msgid "" " ipa server-show ipa.example.com\n" msgstr "" +msgid "Server name" +msgstr "Palvelimen nimi" + #, fuzzy msgid "IPA server hostname" msgstr "Käytettävä IPA-palvelin" @@ -9434,6 +9268,13 @@ msgid "" " " msgstr "" +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + #, fuzzy msgid "Preserved user" msgstr "säilytä" @@ -9619,6 +9460,9 @@ msgstr "" msgid "Vault salt" msgstr "" +msgid "Public key" +msgstr "Julkinen avain" + #, fuzzy msgid "Vault public key" msgstr "Julkinen SSH-avain" @@ -9627,6 +9471,9 @@ msgstr "Julkinen SSH-avain" msgid "Owner users" msgstr "Omistajaryhmät" +msgid "Owner groups" +msgstr "Omistajaryhmät" + #, fuzzy msgid "Owner services" msgstr "palvelut" @@ -9734,330 +9581,6 @@ msgstr "" msgid "Display information about a vault container." msgstr "" -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -#, fuzzy -msgid "Profile ID" -msgstr "Profiili" - -msgid "Certificate Profile to use" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -msgid "Search for Certificate Profiles." -msgstr "" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - msgid "Resolve a host name in DNS. (Deprecated)" msgstr "" @@ -11054,6 +10577,9 @@ msgstr "" msgid "KEY Protocol" msgstr "Protokolla" +msgid "Protocol" +msgstr "Protokolla" + msgid "KEY Algorithm" msgstr "" @@ -11061,6 +10587,9 @@ msgstr "" msgid "KEY Public Key" msgstr "Julkinen avain" +msgid "Public Key" +msgstr "Julkinen avain" + msgid "Comma-separated list of raw KX records" msgstr "" @@ -11119,6 +10648,9 @@ msgstr "" msgid "RRSIG Labels" msgstr "Nimiöt" +msgid "Labels" +msgstr "Nimiöt" + msgid "RRSIG Original TTL" msgstr "" @@ -11153,6 +10685,9 @@ msgstr "Palvelimen nimi" msgid "RRSIG Signature" msgstr "Allekirjoitus" +msgid "Signature" +msgstr "Allekirjoitus" + msgid "Comma-separated list of raw RP records" msgstr "" @@ -11281,12 +10816,18 @@ msgstr "" msgid "Import an entitlement certificate." msgstr "" +msgid "UUID" +msgstr "UUID" + msgid "Enrollment UUID" msgstr "" msgid "Register to the entitlement system." msgstr "" +msgid "Username" +msgstr "Käyttäjätunnus" + msgid "Enrollment UUID (not implemented)" msgstr "" @@ -11465,6 +11006,9 @@ msgstr "Lähde kone" msgid "Source host category the rule applies to" msgstr "" +msgid "Source Hosts" +msgstr "Lähde koneet" + #, fuzzy msgid "Source Host Groups" msgstr "Lähde koneet" @@ -11641,6 +11185,9 @@ msgid "" " matched: allow_all\n" msgstr "" +msgid "Source host" +msgstr "Lähde kone" + msgid "" "\n" "Hosts/Machines\n" @@ -11731,6 +11278,192 @@ msgid "" " ipa hostgroup-del baltimore\n" msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + msgid "" "Comma-separated list of objectclasses used to search for user entries in DS" msgstr "" @@ -12038,198 +11771,6 @@ msgstr "" msgid "comma-separated list of sudo commands to remove" msgstr "" -msgid "Active directory domain administrator's password" -msgstr "" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - msgid "" "\n" "Sudo Rules\n" @@ -12271,19 +11812,22 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" -msgid "A dictionary representing an LDAP entry" +msgid "Active directory domain administrator's password" msgstr "" -msgid "A list of LDAP entries" -msgstr "" - -msgid "All commands should at least have a result" +msgid "GECOS field" msgstr "" #, python-format msgid "Enter %(label)s again to verify: " msgstr "" +msgid "Passwords do not match!" +msgstr "Salasanat eivät täsmää!" + +msgid "No matching entries found" +msgstr "Vastaavia tietueita ei löytynyt" + #, fuzzy msgid "Topic or Command" msgstr "komento" @@ -12305,6 +11849,9 @@ msgstr "" msgid "Command name" msgstr "Toimialueen nimi" +msgid "Positional arguments" +msgstr "Sijainnilliset parametrit" + #, python-format msgid "Same as --%s" msgstr "" @@ -12316,271 +11863,6 @@ msgstr "Palveluvalinnat" msgid "No file to read" msgstr "" -#, python-format -msgid "%(filename)s: file not found" -msgstr "" - -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -msgid "Filename is empty" -msgstr "" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "" - -msgid "empty DNS label" -msgstr "" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "" - -#, fuzzy -msgid "invalid SSH public key" -msgstr "Julkinen SSH-avain" - -msgid "options are not allowed" -msgstr "" - -#, fuzzy -msgid "invalid hostmask" -msgstr "virheellinen porttinumero" - -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" - -msgid "invalid escape code in domain name" -msgstr "" - -#, fuzzy -msgid "domain name cannot be longer than 255 characters" -msgstr "DNS-nimi voi sisältää enintään 63 merkkiä" - -#, fuzzy -msgid "invalid domain name" -msgstr "virheellinen porttinumero" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -msgid "invalid IP address format" -msgstr "" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" - -msgid "Additional instructions:" -msgstr "" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "" - -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." -msgstr "" - #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" @@ -12694,6 +11976,9 @@ msgstr "" msgid "api has no such namespace: '%(name)s'" msgstr "" +msgid "Passwords do not match" +msgstr "Salasanat eivät täsmää" + msgid "Command not implemented" msgstr "" @@ -12942,6 +12227,192 @@ msgid "" "prevents a trust to '%(conflict)s'" msgstr "" +msgid "Results are truncated, try a more specific search" +msgstr "" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "" + +msgid "Client version. Used to determine if server will accept request." +msgstr "" + +msgid "Additional instructions:" +msgstr "" + +#, python-format +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" + +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "%(line)s" +msgstr "" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "" + +#, python-format +msgid "%(count)d variables" +msgstr "" + +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "" +msgstr[1] "" + +msgid "A dictionary representing an LDAP entry" +msgstr "" + +msgid "A list of LDAP entries" +msgstr "" + +msgid "All commands should at least have a result" +msgstr "" + msgid "incorrect type" msgstr "" @@ -13076,27 +12547,120 @@ msgid "Service principal is required" msgstr "" #, python-format -msgid "%(count)d variables" +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +msgid "any of the configured servers" +msgstr "" + +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" msgstr "" #, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "" -msgstr[1] "" +msgid "Permission denied: %(file)s" +msgstr "" -msgid "Results are truncated, try a more specific search" +msgid "empty DNS label" +msgstr "" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "DNS-nimi voi sisältää enintään 63 merkkiä" + +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" + +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "" + +msgid "cannot be longer that {} characters" +msgstr "voi sisältää enintään {} merkkiä" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "" + +#, fuzzy +msgid "invalid SSH public key" +msgstr "Julkinen SSH-avain" + +msgid "options are not allowed" +msgstr "" + +#, fuzzy +msgid "invalid hostmask" +msgstr "virheellinen porttinumero" + +#, python-format +msgid "query '%(owner)s %(rtype)s': %(error)s" msgstr "" #, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -msgid "Client version. Used to determine if server will accept request." +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" msgstr "" #, python-format -msgid "objectclass %s not found" +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +msgid "invalid escape code in domain name" +msgstr "" + +#, fuzzy +msgid "domain name cannot be longer than 255 characters" +msgstr "DNS-nimi voi sisältää enintään 63 merkkiä" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "DNS-nimi voi sisältää enintään 63 merkkiä" + +#, fuzzy +msgid "invalid domain name" +msgstr "virheellinen porttinumero" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +msgid "invalid IP address format" +msgstr "" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" #, python-format @@ -13115,5882 +12679,52 @@ msgstr "" msgid "Retrieving CA status failed with status %d" msgstr "" -#, fuzzy, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "Kommunikaatio CMS:n kanssa epäonnistui" - -#, python-format -msgid "Replication agreement for %(hostname)s not found" -msgstr "" - -msgid "Failed to authenticate to CA REST API" -msgstr "" - -#, fuzzy -msgid "One time password commands" -msgstr "Kertakäyttöinen salasana" - -#, fuzzy -msgid "OTP configuration options" -msgstr "Kertakäyttöisen salasanan määritykset" - -#, fuzzy -msgid "" -"\n" -"IPA server roles\n" -msgstr "Käytettävä IPA-palvelin" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -#, fuzzy -msgid "server role" -msgstr "palvelin" - -#, fuzzy -msgid "server roles" -msgstr "Poista rooleja" - -#, fuzzy -msgid "IPA Server Roles" -msgstr "Käytettävä IPA-palvelin" - -#, fuzzy -msgid "IPA Server Role" -msgstr "Käytettävä IPA-palvelin" - -#, fuzzy -msgid "IPA server role name" -msgstr "Käytettävä IPA-palvelin" - -#, fuzzy -msgid "Role status" -msgstr "Roolit" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include IPA master entries" -msgstr "" - -#, fuzzy -msgid "IPA role name" -msgstr "Ryhmän nimi" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -#, fuzzy -msgid "password policy" -msgstr "salasana" - -#, fuzzy -msgid "password policies" -msgstr "salasana" - -#, fuzzy -msgid "Password Policies" -msgstr "Salasana" - -#, fuzzy -msgid "Password Policy" -msgstr "Salasana" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -#, fuzzy -msgid "User check" -msgstr "Käyttäjätunnus" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -#, fuzzy -msgid "Realm domains" -msgstr "toimialue" - -#, fuzzy -msgid "Realm Domains" -msgstr "Toimialue" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -msgid "Help topic" -msgstr "" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -msgid "Method name" -msgstr "koneen nimi" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -msgid "Search for classes." -msgstr "" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -#, fuzzy -msgid "Multi-value" -msgstr "arvo" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -msgid "CLI name" -msgstr "Sukunimi" - -#, fuzzy -msgid "Default from" -msgstr "Oletus" - -#, fuzzy -msgid "Convert on server" -msgstr "Palvelimen isäntänimi" - -#, fuzzy -msgid "Option group" -msgstr "Omistajaryhmät" - -msgid "Sensitive" -msgstr "" - -#, fuzzy -msgid "Positional argument" -msgstr "Sijainnilliset parametrit" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command output." -msgstr "" - -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" -msgstr "" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, fuzzy, python-format -msgid "member %s" -msgstr "Jäsenet" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -#, fuzzy -msgid "service delegation rules" -msgstr "Palveluvalinnat" - -#, fuzzy -msgid "Service delegation rules" -msgstr "Palveluvalinnat" - -#, fuzzy -msgid "Service delegation rule" -msgstr "Palveluvalinnat" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "" - #, python-format -msgid "Deleted service delegation \"%(value)s\"" +msgid "objectclass %s not found" msgstr "" -msgid "privileged service delegation rule" +msgid "Trusting forest" msgstr "" -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -#, fuzzy -msgid "service delegation targets" -msgstr "Palvelun asetukset" - -#, fuzzy -msgid "Service delegation targets" -msgstr "Palvelun asetukset" - -#, fuzzy -msgid "Service delegation target" -msgstr "Palvelun asetukset" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" - -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -msgid "Malformed principal" -msgstr "" - -msgid "{} is required by the IPA master" -msgstr "" - -msgid "Principal alias" -msgstr "" - -#, fuzzy -msgid "Service principal alias" -msgstr "Palveluvalinnat" - -msgid "Base-64 encoded service certificate" -msgstr "" - -#, fuzzy -msgid "Serial Number (hex)" -msgstr "Sarjanumero" - -msgid "Issuer" -msgstr "" - -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -#, fuzzy -msgid "Fingerprint (SHA1)" -msgstr "Sormenjälki" - -#, fuzzy -msgid "Fingerprint (SHA256)" -msgstr "Sormenjälki" - -msgid "Revocation reason" -msgstr "" - -#, fuzzy -msgid "Authentication Indicators" -msgstr "Tunnistatuminen" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgid "Trusted forest" msgstr "" -msgid "NONE value cannot be combined with other PAC types" +msgid "Established and verified" msgstr "" -#, fuzzy -msgid "Add a new IPA service." -msgstr "Lisää palvelu" - -#, fuzzy, python-format -msgid "Added service \"%(value)s\"" -msgstr "Lisää palvelu" - -msgid "force principal name even if host not in DNS" -msgstr "" - -msgid "Skip host check" -msgstr "" - -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" - -#, python-format -msgid "The host '%s' does not exist to add a service to." +msgid "Waiting for confirmation by remote side" msgstr "" -#, fuzzy -msgid "Add a new SMB service." -msgstr "Lisää palvelu" - -#, fuzzy -msgid "SMB service NetBIOS name" -msgstr "Palvelun nimi" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "" +msgid "Unknown" +msgstr "Tuntematon" -#, python-format -msgid "Modified service \"%(value)s\"" +msgid "Non-Active Directory domain" msgstr "" -#, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to a service" -msgstr "" - -#, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a service" -msgstr "" - -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -#, fuzzy -msgid "sudo rules" -msgstr "Lisää sääntö" - -#, fuzzy -msgid "Sudo Rules" -msgstr "Säännöt" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -#, fuzzy -msgid "runAs user" -msgstr "Lisää käyttäjä" - -#, fuzzy -msgid "runAs users" -msgstr "Lisää käyttäjä" - -#, fuzzy -msgid "group runAs" -msgstr "ryhmät" - -#, fuzzy -msgid "runAs groups" -msgstr "Omistajaryhmät" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when user category='all'" -msgstr "" - -msgid "hosts cannot be added when host category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -msgid "pyhbac is not installed." -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Base-64 encoded certificate." -msgstr "" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - -#, fuzzy -msgid "Subject email address" -msgstr "Sähköpostiosoite" - -#, fuzzy -msgid "Subject DNS name" -msgstr "Aihe" - -msgid "Subject X.400 address" -msgstr "" - -#, fuzzy -msgid "Subject directory name" -msgstr "Kotihakemisto" - -msgid "Subject EDI Party name" -msgstr "" - -#, fuzzy -msgid "Subject URI" -msgstr "Aihe" - -#, fuzzy -msgid "Subject IP Address" -msgstr "IP-osoite" - -#, fuzzy -msgid "Subject OID" -msgstr "Aihe" - -#, fuzzy -msgid "Subject UPN" -msgstr "Aihe" - -msgid "Subject Kerberos principal name" -msgstr "" - -#, fuzzy -msgid "Subject Other Name" -msgstr "Palvelimen nimi" - -msgid "Issuer DN" -msgstr "" - -#, fuzzy -msgid "Serial number (hex)" -msgstr "Sarjanumero" - -msgid "Request status" -msgstr "" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -msgid "'add' option" -msgstr "" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Revoked" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, fuzzy, python-format -msgid "Owner %s" -msgstr "Omistaja" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -#, fuzzy -msgid "User logins" -msgstr "Käyttäjät" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Base-64 encoded user certificate" -msgstr "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "must be at least 10" -msgstr "" - -#, fuzzy -msgid "configuration options" -msgstr "Asetukset" - -msgid "Maximum hostname length" -msgstr "" - -msgid "IPA masters" -msgstr "" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -#, fuzzy -msgid "IPA CA servers" -msgstr "palvelimet" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -#, fuzzy -msgid "IPA KRA servers" -msgstr "palvelimet" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" - -msgid "Domain resolution order" -msgstr "" - -msgid "colon-separated list of domains used for short name qualification" -msgstr "" - -#, fuzzy -msgid "IPA DNS servers" -msgstr "Käytettävä IPA-palvelin" - -msgid "IPA servers configured as domain name server" -msgstr "" - -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "IPA DNSSec key master" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -#, fuzzy -msgid "Empty domain is not allowed" -msgstr "toimialueseen ei luoteta" - -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -#, fuzzy -msgid "The group doesn't exist" -msgstr "Ryhmää '%s' ei ole olemassa" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" - -msgid "SELinux user map default user not in order list" -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "" - -msgid "sudo command groups" -msgstr "" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -#, fuzzy -msgid "host groups" -msgstr "ryhmät" - -#, fuzzy -msgid "Host Group" -msgstr "Ryhmä" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "hostgroup" -msgstr "ryhmä" - -msgid "privileged hostgroup" -msgstr "" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "The OTP if the user has a token configured" -msgstr "" - -#, fuzzy, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "Vaihda salasana" - -#, fuzzy -msgid "" -"\n" -"Permissions\n" -msgstr "Käyttöoikeus" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Managed permissions\n" -msgstr "ipa-getkeytabilla on väärät käyttöoikeudet?\n" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "must be enclosed in parentheses" -msgstr "" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -#, python-format -msgid "Deprecated; use %s" -msgstr "" - -msgid "ACI" -msgstr "" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, fuzzy, python-format -msgid "Entry %s not found" -msgstr "ei löytynyt" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, fuzzy, python-format -msgid "%s: group not found" -msgstr "ei löytynyt" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" -msgstr "" - -msgid "Bad search filter" -msgstr "" - -#, fuzzy, python-format -msgid "Entry %s does not exist" -msgstr "Ryhmää '%s' ei ole olemassa" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, python-format -msgid "Added permission \"%(value)s\"" -msgstr "" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "" - -msgid "cannot delete managed permissions" -msgstr "" - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "" - -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "" -msgstr[1] "" - -#, python-brace-format -msgid "{role}: role not found" -msgstr "" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -msgid "Internationalization messages" -msgstr "" - -msgid "Rebuild auto membership" -msgstr "" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -msgid "Are you sure you want to proceed with the action?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) added" -msgstr "" - -msgid "Direct Membership" -msgstr "" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "" - -msgid "Indirect Membership" -msgstr "" - -#, fuzzy -msgid "No entries." -msgstr "tietueet" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "" - -msgid "Show Results" -msgstr "" - -#, fuzzy -msgid "Authentication indicators" -msgstr "Tunnistatuminen" - -#, fuzzy -msgid "Authentication indicator" -msgstr "Tunnistatuminen" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "Add Custom Authentication Indicator" -msgstr "" - -msgid "Two factor authentication (password + OTP)" -msgstr "" - -msgid "RADIUS" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -msgid "Disable per-user override" -msgstr "" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "Add and Add Another" -msgstr "" - -#, fuzzy -msgid "Add and Close" -msgstr "Lisää uusi isäntä." - -msgid "Add and Edit" -msgstr "" - -msgid "Add Many" -msgstr "" - -msgid "Clear" -msgstr "" - -msgid "Clear all fields on the page." -msgstr "" - -msgid "Download certificate as PEM formatted file." -msgstr "" - -msgid "Get" -msgstr "" - -msgid "Issue" -msgstr "" - -msgid "Match" -msgstr "" - -msgid "Match users according to certificate." -msgstr "" - -msgid "Reload current settings from the server." -msgstr "" - -#, fuzzy -msgid "Remove hold" -msgstr "Poista rooleja" - -#, fuzzy -msgid "Reset Password" -msgstr "Uusi salasana" - -msgid "Reset Password and Log in" -msgstr "" - -msgid "Revoke" -msgstr "" - -#, fuzzy -msgid "Set" -msgstr "Salainen" - -#, fuzzy -msgid "Customization" -msgstr "Asetukset" - -msgid "Pagination Size" -msgstr "" - -msgid "Collapse All" -msgstr "" - -msgid "Expand All" -msgstr "" - -#, fuzzy -msgid "Identity Settings" -msgstr "Tilin asetukset" - -#, fuzzy -msgid "Record Settings" -msgstr "Tilin asetukset" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "" - -msgid "Back to Top" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "" - -msgid "Add custom value" -msgstr "" - -#, fuzzy -msgid "Some operations failed." -msgstr "Toimenpide epäonnistui: %s\n" - -#, fuzzy -msgid "Operations Error" -msgstr "Valinnat" - -#, fuzzy -msgid "Confirmation" -msgstr "Asetukset" - -msgid "Custom value" -msgstr "" - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" - -msgid "Unsaved Changes" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Edit ${entity}" -msgstr "Identiteetti" - -msgid "Hide details" -msgstr "" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "" - -msgid "Prospective" -msgstr "" - -msgid "Select entries to be removed." -msgstr "" - -msgid "Result" -msgstr "" - -msgid "Show details" -msgstr "" - -msgid "Validation error" -msgstr "" - -msgid "Input form contains invalid or missing values." -msgstr "" - -msgid "Please try the following options:" -msgstr "" - -msgid "If the problem persists please contact the system administrator." -msgstr "" - -msgid "Refresh the page." -msgstr "" - -msgid "Reload the browser." -msgstr "" - -msgid "Return to the main page and retry the operation" -msgstr "" - -#, python-brace-format -msgid "An error has occurred (${error})" -msgstr "" - -#, fuzzy -msgid "HTTP Error" -msgstr "Virhe" - -#, fuzzy -msgid "IPA Error" -msgstr "Virhe" - -#, fuzzy -msgid "No response" -msgstr "" -"JSON-RPC vastaus:\n" -"%s\n" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} member managers:" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Allowed to create keytab" -msgstr "Tarkistuksen luominen epäonnistui!\n" - -msgid "Allowed to retrieve keytab" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Add Kerberos Principal Alias" -msgstr "" - -msgid "New kerberos principal alias" -msgstr "" - -#, fuzzy -msgid "Remove Kerberos Alias" -msgstr "Poista rooleja" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "" - -msgid "Inherited from server configuration" -msgstr "" - -msgid "MS-PAC" -msgstr "" - -msgid "Override inherited settings" -msgstr "" - -msgid "PAD" -msgstr "" - -msgid "Authentication with personal certificate failed" -msgstr "" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" - -msgid "Continue to next page" -msgstr "" - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" - -msgid "Login failed due to an unknown reason" -msgstr "" - -msgid "Logged In As" -msgstr "" - -msgid "Authentication with Kerberos failed" -msgstr "" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -msgid "Loading" -msgstr "" - -msgid "Kerberos Principal you entered is expired" -msgstr "" - -msgid "Loading data" -msgstr "" - -msgid "Log In Using Certificate" -msgstr "" - -msgid "Log in using personal certificate" -msgstr "" - -#, fuzzy -msgid "Log out error" -msgstr "Kirjaudu ulos" - -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "" - -msgid "The user account you entered is locked" -msgstr "" - -#, fuzzy -msgid "number of passwords" -msgstr "Käyttäjän salasana" - -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -msgid "Password migration was not successful" -msgstr "" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -msgid "The password or username you entered is incorrect" -msgstr "" - -#, fuzzy -msgid "Password migration was successful" -msgstr "Salasanan vanheneminen" - -msgid "Attribute" -msgstr "" - -msgid "Add delegation" -msgstr "" - -#, fuzzy -msgid "Remove delegations" -msgstr "Poista rooleja" - -#, fuzzy -msgid "Add permission" -msgstr "Käyttöoikeus" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove permissions" -msgstr "Poista rooleja" - -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Add privilege" -msgstr "Lisää rooli" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove privileges" -msgstr "Poista rooleja" - -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "" - -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Role Settings" -msgstr "Asetukset" - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "" - -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "" - -msgid "Add self service permission" -msgstr "" - -#, fuzzy -msgid "Remove self service permissions" -msgstr "Poista palveluita" - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to change default group?" -msgstr "" - -msgid "Default host group" -msgstr "" - -msgid "Default user group" -msgstr "" - -#, fuzzy -msgid "Expression" -msgstr "Käyttöoikeus" - -msgid "Host group rule" -msgstr "" - -msgid "Host group rules" -msgstr "" - -#, fuzzy -msgid "Inclusive" -msgstr "Poissulkeva" - -msgid "Remove auto membership rules" -msgstr "" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -msgid "User group rule" -msgstr "" - -#, fuzzy -msgid "User group rules" -msgstr "Omistajaryhmät" - -msgid "Add automount key" -msgstr "" - -#, fuzzy -msgid "Remove automount keys" -msgstr "Poista rooleja" - -#, fuzzy -msgid "Add automount location" -msgstr "Tunnistatuminen" - -#, fuzzy -msgid "Automount Location Settings" -msgstr "Tilin asetukset" - -msgid "Remove automount locations" -msgstr "" - -msgid "Add automount map" -msgstr "" - -#, fuzzy -msgid "Map Type" -msgstr "Tyyppi" - -#, fuzzy -msgid "Indirect" -msgstr "Suora" - -msgid "Remove automount maps" -msgstr "" - -msgid "Add certificate authority" -msgstr "" - -msgid "Remove certificate authorities" -msgstr "" - -msgid "Add CA ACL" -msgstr "" - -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -msgid "Any CA" -msgstr "" - -#, fuzzy -msgid "Any Host" -msgstr "Kone" - -#, fuzzy -msgid "Any Profile" -msgstr "Profiili" - -msgid "Anyone" -msgstr "" - -#, fuzzy -msgid "Rule status" -msgstr "Säännöt" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" - -#, fuzzy -msgid "Remove CA ACLs" -msgstr "Poista rooleja" - -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "" - -msgid "Specified CAs" -msgstr "" - -msgid "Specified Hosts and Groups" -msgstr "" - -#, fuzzy -msgid "Specified Profiles" -msgstr "Profiilit" - -msgid "Specified Services and Groups" -msgstr "" - -msgid "Specified Users and Groups" -msgstr "" - -msgid "Permitted to have certificates issued" -msgstr "" - -#, fuzzy -msgid "Remove certificate profiles" -msgstr "Poista palveluita" - -msgid "AA Compromise" -msgstr "" - -msgid "Add principal" -msgstr "" - -msgid "Affiliation Changed" -msgstr "" - -msgid "CA" -msgstr "" - -msgid "CA Compromise" -msgstr "" - -msgid "Certificates" -msgstr "" - -msgid "Certificate Hold" -msgstr "" - -msgid "Cessation of Operation" -msgstr "" - -#, fuzzy -msgid "Common Name" -msgstr "Koneen nimi" - -msgid "the certificate with serial number " -msgstr "" - -msgid "Expires On" -msgstr "" - -msgid "Issued on from" -msgstr "" - -msgid "Issued on to" -msgstr "" - -#, fuzzy -msgid "Maximum serial number" -msgstr "Sarjanumero" - -#, fuzzy -msgid "Minimum serial number" -msgstr "Sarjanumero" - -msgid "Revoked on from" -msgstr "" - -msgid "Revoked on to" -msgstr "" - -msgid "Valid not after from" -msgstr "" - -msgid "Valid not after to" -msgstr "" - -msgid "Valid not before from" -msgstr "" - -msgid "Valid not before to" -msgstr "" - -msgid "Get Certificate" -msgstr "" - -msgid "Certificate Hold Removed" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "" - -msgid "Issue new certificate" -msgstr "" - -msgid "Issued By" -msgstr "" - -msgid "Issued On" -msgstr "" - -msgid "Issued To" -msgstr "" - -msgid "Key Compromise" -msgstr "" - -msgid "No Valid Certificate" -msgstr "" - -msgid "New Certificate" -msgstr "" - -msgid "Certificate in base64 or PEM format" -msgstr "" - -#, fuzzy -msgid "Organizational Unit" -msgstr "Organisaatio" - -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "" - -msgid "Privilege Withdrawn" -msgstr "" - -msgid "Reason for Revocation" -msgstr "" - -#, fuzzy -msgid "Remove certificate hold" -msgstr "Poista palveluita" - -msgid "Do you want to remove the certificate hold?" -msgstr "" - -#, fuzzy -msgid "Remove from CRL" -msgstr "Poista rooleja" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" - -msgid "Certificate requested" -msgstr "" - -msgid "Revoke certificate" -msgstr "" - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" - -msgid "Certificate Revoked" -msgstr "" - -msgid "REVOKED" -msgstr "" - -#, fuzzy -msgid "SHA1 Fingerprint" -msgstr "Sormenjälki" - -#, fuzzy -msgid "SHA256 Fingerprint" -msgstr "Sormenjälki" - -msgid "Superseded" -msgstr "" - -msgid "Unspecified" -msgstr "" - -msgid "Valid Certificate Present" -msgstr "" - -msgid "Valid from" -msgstr "" - -msgid "Valid to" -msgstr "" - -msgid "Validity" -msgstr "" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "" - -msgid "View Certificate" -msgstr "" - -msgid "Certificate Data" -msgstr "" - -msgid "Certificate For Match" -msgstr "" - -msgid "Certificate Mapping Match" -msgstr "" - -msgid "Matched Users" -msgstr "" - -#, fuzzy -msgid "User Login" -msgstr "Käyttäjätunnus" - -msgid "Add certificate identity mapping rule" -msgstr "" - -msgid "Add certificate mapping data" -msgstr "" - -msgid "Certificate mapping data" -msgstr "" - -#, fuzzy -msgid "Configuration string" -msgstr "Asetukset" - -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "" - -msgid "Remove certificate mapping data" -msgstr "" - -msgid "Issuer and subject" -msgstr "" - -msgid "Remove certificate identity mapping rules" -msgstr "" - -#, fuzzy -msgid "Group Options" -msgstr "Valinnat" - -#, fuzzy -msgid "Search Options" -msgstr "Palveluvalinnat" - -#, fuzzy -msgid "SELinux Options" -msgstr "SELinux-käyttäjä" - -#, fuzzy -msgid "Server Options" -msgstr "Palveluvalinnat" - -#, fuzzy -msgid "User Options" -msgstr "Palveluvalinnat" - -msgid "Forward first" -msgstr "" - -msgid "Forwarding disabled" -msgstr "" - -msgid "Forward only" -msgstr "" - -msgid "Update System DNS Records" -msgstr "" - -msgid "Do you want to update system DNS records?" -msgstr "" - -msgid "System DNS records updated" -msgstr "" - -msgid "Add DNS forward zone" -msgstr "" - -#, fuzzy -msgid "Remove DNS forward zones" -msgstr "Poista rooleja" - -msgid "Add DNS resource record" -msgstr "" - -msgid "DNS record was deleted because it contained no data." -msgstr "" - -msgid "Other Record Types" -msgstr "" - -msgid "Address not valid, can't redirect" -msgstr "" - -msgid "Create dns record" -msgstr "" - -msgid "Creating record." -msgstr "" - -#, fuzzy -msgid "Record creation failed." -msgstr "Toimenpide epäonnistui: %s\n" - -msgid "Checking if record exists." -msgstr "" - -#, fuzzy -msgid "Record not found." -msgstr "ei löytynyt" - -#, fuzzy -msgid "Redirection to PTR record" -msgstr "Uudelleenohjeus" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "" - -msgid "Target reverse zone not found." -msgstr "" - -msgid "Fetching DNS zones." -msgstr "" - -msgid "An error occurred while fetching dns zones." -msgstr "" - -msgid "You will be redirected to DNS Zone." -msgstr "" - -msgid "Remove DNS resource records" -msgstr "" - -msgid "Standard Record Types" -msgstr "" - -msgid "Records for DNS Zone" -msgstr "" - -#, fuzzy -msgid "Record Type" -msgstr "Merkinnät" - -#, fuzzy -msgid "Add DNS zone" -msgstr "Lisää rooli" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "" - -#, fuzzy -msgid "DNS Zone Settings" -msgstr "Palvelun asetukset" - -#, fuzzy -msgid "Remove DNS zones" -msgstr "Poista rooleja" - -#, fuzzy -msgid "Remove Permission" -msgstr "Käyttöoikeus" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "" - -msgid "Skip DNS check" -msgstr "" - -msgid "Skip overlap check" -msgstr "" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" - -msgid "Authoritative nameserver change" -msgstr "" - -msgid "Set Domain Level" -msgstr "" - -#, fuzzy -msgid "Add user group" -msgstr "Lisää käyttäjä" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Group Settings" -msgstr "Tilin asetukset" - -#, fuzzy -msgid "Group categories" -msgstr "Ryhmän nimi" - -msgid "Change to external group" -msgstr "" - -msgid "Change to POSIX group" -msgstr "" - -msgid "Non-POSIX" -msgstr "" - -msgid "POSIX" -msgstr "" - -#, fuzzy -msgid "Remove user groups" -msgstr "Poista käyttäjiä" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Group Type" -msgstr "Ryhmän nimi" - -#, fuzzy -msgid "Add HBAC rule" -msgstr "Lisää sääntö" - -#, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Accessing" -msgstr "Pääsy evätty" - -#, fuzzy -msgid "Remove HBAC rules" -msgstr "Poista rooleja" - -#, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Via Service" -msgstr "Palvelu" - -msgid "Who" -msgstr "" - -#, fuzzy -msgid "Add HBAC service" -msgstr "Lisää palvelu" - -#, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "" - -#, fuzzy -msgid "Remove HBAC services" -msgstr "Poista palveluita" - -#, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "" - -#, fuzzy -msgid "Add HBAC service group" -msgstr "Lisää palvelu" - -#, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove HBAC service groups" -msgstr "Poista palveluita" - -#, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Access Granted" -msgstr "Pääsy evätty" - -#, fuzzy -msgid "Include Disabled" -msgstr "Ei käytössä" - -#, fuzzy -msgid "Include Enabled" -msgstr "Käytössä" - -msgid "HBAC Test" -msgstr "" - -msgid "Matched" -msgstr "" - -msgid "Missing values: " -msgstr "" - -msgid "New Test" -msgstr "" - -msgid "Run Test" -msgstr "" - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "" - -msgid "Unmatched" -msgstr "" - -#, fuzzy -msgid "Add host" -msgstr "Lisää uusi isäntä." - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -msgid "Host Certificate" -msgstr "" - -msgid "Delete Key, Unprovision" -msgstr "" - -#, fuzzy -msgid "Host Settings" -msgstr "Asetukset" - -msgid "Enrolled" -msgstr "" - -#, fuzzy -msgid "Enrollment" -msgstr "Rekisteröinti epäonnistui. %s\n" - -msgid "Fully Qualified Host Name" -msgstr "" - -#, fuzzy -msgid "Generate OTP" -msgstr "Yleinen" - -#, fuzzy -msgid "Generated OTP" -msgstr "Toinen OTP" - -msgid "Kerberos Key" -msgstr "" - -msgid "Kerberos Key Not Present" -msgstr "" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "" - -#, fuzzy -msgid "One-Time Password Not Present" -msgstr "Kertakäyttöinen salasana" - -#, fuzzy -msgid "One-Time Password Present" -msgstr "Kertakäyttöinen salasana" - -#, fuzzy -msgid "Reset OTP" -msgstr "Nollaa" - -#, fuzzy -msgid "Reset One-Time Password" -msgstr "Kertakäyttöinen salasana" - -#, fuzzy -msgid "Set OTP" -msgstr "Toinen OTP" - -#, fuzzy -msgid "OTP set" -msgstr "OTP-tunnus" - -#, fuzzy -msgid "Set One-Time Password" -msgstr "Kertakäyttöinen salasana" - -#, fuzzy -msgid "Remove hosts" -msgstr "Poista rooleja" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "" - -msgid "Unprovision" -msgstr "" - -msgid "Are you sure you want to unprovision this host?" -msgstr "" - -msgid "Unprovisioning host" -msgstr "" - -msgid "Host unprovisioned" -msgstr "" - -msgid "Add host group" -msgstr "" - -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Host Group Settings" -msgstr "Tilin asetukset" - -#, fuzzy -msgid "Remove host groups" -msgstr "Poista rooleja" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -msgid "User to override" -msgstr "" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" - -msgid "Enter trusted user login." -msgstr "" - -msgid "Group to override" -msgstr "" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" - -msgid "Enter trusted group name." -msgstr "" - -#, fuzzy -msgid "Add ID view" -msgstr "Lisää palvelu" - -msgid "Add group ID override" -msgstr "" - -#, fuzzy -msgid "Add user ID override" -msgstr "Lisää palvelu" - -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "" - -msgid "Applied to hosts" -msgstr "" - -msgid "Apply to host groups" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" - -msgid "Apply to hosts" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "" - -#, fuzzy -msgid "Remove ID views" -msgstr "Poista palveluita" - -#, fuzzy -msgid "Remove user ID overrides" -msgstr "Poista palveluita" - -#, fuzzy -msgid "Remove group ID overrides" -msgstr "Poista palveluita" - -msgid "Un-apply from host groups" -msgstr "" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" - -#, fuzzy -msgid "Un-apply" -msgstr "Toteuta" - -msgid "Un-apply from hosts" -msgstr "" - -msgid "Un-apply ID Views from hosts" -msgstr "" - -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "" - -#, fuzzy -msgid "Add netgroup" -msgstr "Lisää rooli" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Netgroup Settings" -msgstr "Verkkoryhmän kuvaus" - -#, fuzzy -msgid "Netgroups" -msgstr "ryhmät" - -#, fuzzy -msgid "Remove netgroups" -msgstr "Poista rooleja" - -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" - -#, fuzzy -msgid "Configure your token" -msgstr "Asetukset" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" - -#, fuzzy -msgid "OTP Token Settings" -msgstr "OTP-tunnukset" - -#, fuzzy -msgid "Disable token" -msgstr "Poista käytöstä" - -#, fuzzy -msgid "Enable token" -msgstr "Ota käyttöön" - -#, fuzzy -msgid "Remove OTP tokens" -msgstr "OTP-tunnukset" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" - -msgid "Show QR code" -msgstr "" - -#, fuzzy -msgid "Show configuration uri" -msgstr "Asetukset" - -msgid "Counter-based (HOTP)" -msgstr "" - -msgid "Time-based (TOTP)" -msgstr "" - -msgid "Add Custom Attribute" -msgstr "" - -#, fuzzy -msgid "Permission settings" -msgstr "Käyttöoikeus" - -msgid "Attribute breakdown" -msgstr "" - -#, fuzzy -msgid "Privilege Settings" -msgstr "Palvelun asetukset" - -#, fuzzy -msgid "Set public key" -msgstr "Julkinen SSH-avain" - -msgid "Show/Set key" -msgstr "" - -msgid "Modified: key not set" -msgstr "" - -msgid "Modified" -msgstr "" - -msgid "New: key not set" -msgstr "" - -msgid "New: key set" -msgstr "" - -msgid "Add password policy" -msgstr "" - -#, fuzzy -msgid "Remove password policies" -msgstr "Poista rooleja" - -#, fuzzy -msgid "Add ID range" -msgstr "Lisää rooli" - -#, fuzzy -msgid "Range Settings" -msgstr "Asetukset" - -msgid "Base ID" -msgstr "" - -msgid "Primary RID base" -msgstr "" - -msgid "Range size" -msgstr "" - -#, fuzzy -msgid "Domain SID" -msgstr "Toimialue" - -msgid "Secondary RID base" -msgstr "" - -#, fuzzy -msgid "Remove ID ranges" -msgstr "Poista rooleja" - msgid "Active Directory domain" msgstr "" -msgid "Active Directory domain with POSIX attributes" -msgstr "" - -msgid "Detect" -msgstr "" - -#, fuzzy -msgid "Local domain" -msgstr "toimialue" - -msgid "IPA trust" -msgstr "" - -msgid "Active Directory winsync" -msgstr "" - -#, fuzzy -msgid "Add RADIUS server" -msgstr "Lisää palvelu" - -#, fuzzy -msgid "RADIUS Proxy Server Settings" -msgstr "Palvelun asetukset" - -#, fuzzy -msgid "Remove RADIUS servers" -msgstr "Poista palveluita" - -msgid "Check DNS" -msgstr "" - -msgid "Do you also want to perform DNS check?" -msgstr "" - -#, fuzzy -msgid "Force Update" -msgstr "Päivitä" - -#, fuzzy -msgid "Add SELinux user map" -msgstr "SELinux-käyttäjäkartta" - -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove selinux user maps" -msgstr "Poista käyttäjiä" - -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Server Roles" -msgstr "Palvelimet" - -#, fuzzy -msgid "Server Role" -msgstr "Palvelimen nimi" - -msgid "Warning: Consider service replication" +msgid "RFC4120-compliant Kerberos realm" msgstr "" msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" +"Non-transitive external trust to a domain in another Active Directory forest" msgstr "" -#, fuzzy -msgid "Delete Server" -msgstr "Poista käyttäjä" - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -#, fuzzy -msgid "Service Certificate" -msgstr "Palvelun nimi" - -#, fuzzy -msgid "Provisioning" -msgstr "Käyttöoikeus" - -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to unprovision this service?" -msgstr "" - -msgid "Unprovisioning service" -msgstr "" - -#, fuzzy -msgid "Service unprovisioned" -msgstr "Palveluvalinnat" - -msgid "Kerberos Key Present, Service Provisioned" -msgstr "" - -msgid "Set SSH key" -msgstr "" - -msgid "Are you sure you want to activate selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "" - -#, fuzzy -msgid "Add stage user" -msgstr "Lisää käyttäjä" - -#, fuzzy -msgid "Stage users" -msgstr "Vaihe" - -#, fuzzy -msgid "Preserved users" -msgstr "Poista käyttäjiä" - -#, fuzzy -msgid "Remove preserved users" -msgstr "Poista käyttäjiä" - -#, fuzzy -msgid "Remove stage users" -msgstr "Poista käyttäjiä" - -msgid "Are you sure you want to stage selected users?" -msgstr "" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "" - -msgid "Are you sure you want to restore selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "" - -msgid "User categories" -msgstr "" - -#, fuzzy -msgid "Add sudo command" -msgstr "komento" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "" - -msgid "Remove sudo commands" -msgstr "" - -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "" - -msgid "Add sudo command group" -msgstr "" - -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "" - -msgid "Remove sudo command groups" -msgstr "" - -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Add sudo rule" -msgstr "Lisää sääntö" - -msgid "Add sudo option" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -msgid "Allow" -msgstr "" - -#, fuzzy -msgid "Any Command" -msgstr "Komennot" - -#, fuzzy -msgid "Any Group" -msgstr "Ryhmä" - -#, fuzzy -msgid "Run Commands" -msgstr "Komennot" - -msgid "Deny" -msgstr "" - -msgid "Access this host" -msgstr "" - -#, fuzzy -msgid "Option added" -msgstr "Valinnat" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "" - -#, fuzzy -msgid "Remove sudo rules" -msgstr "Poista rooleja" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -msgid "As Whom" -msgstr "" - -msgid "Specified Commands and Groups" -msgstr "" - -msgid "Specified Groups" -msgstr "" - -msgid "Remove sudo options" -msgstr "" - -msgid "Autogenerated" -msgstr "" - -msgid "Segment details" -msgstr "" - -#, fuzzy -msgid "Replication configuration" -msgstr "Asetukset" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" - -#, fuzzy -msgid "Add IPA location" -msgstr "sijainti" - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -msgid "Remove IPA locations" -msgstr "" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -msgid "Add topology segment" -msgstr "" - -#, fuzzy -msgid "Remove topology segments" -msgstr "Poista rooleja" - -#, fuzzy -msgid "Add trust" -msgstr "Lisää sääntö" - -msgid "SID blocklists" -msgstr "" - -#, fuzzy -msgid "Trust Settings" -msgstr "Tilin asetukset" - -msgid "Establish using" -msgstr "" - -#, fuzzy -msgid "Fetch domains" -msgstr "toimialue" - -#, fuzzy -msgid "Pre-shared password" -msgstr "Vaihda salasana" - -#, fuzzy -msgid "Remove trusts" -msgstr "Poista käyttäjiä" - -#, fuzzy -msgid "Remove domains" -msgstr "Poista rooleja" - -#, fuzzy -msgid "Trust direction" -msgstr "Uudelleenohjeus" - -msgid "Trust status" -msgstr "" - -msgid "Trust type" -msgstr "" - -msgid "Alternative UPN suffixes" -msgstr "" - -msgid "User attributes for SMB services" -msgstr "" - -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -msgid "Path to a user home directory, in UNC format" -msgstr "" - -msgid "Drive to mount a home directory" -msgstr "" - -#, fuzzy -msgid "Account Status" -msgstr "Tilin asetukset" - -#, fuzzy -msgid "Active users" -msgstr "Poista käyttäjiä" - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -#, fuzzy -msgid "Contact Settings" -msgstr "Tilin asetukset" - -#, fuzzy -msgid "Employee Information" -msgstr "Tietoja liitoksesta" - -msgid "Error changing account status" -msgstr "" - -#, fuzzy -msgid "Mailing Address" -msgstr "Sähköpostiosoite" - -#, fuzzy -msgid "Misc. Information" -msgstr "Tietoja liitoksesta" - -msgid "No private group" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" - -#, python-brace-format -msgid "Click to ${action}" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "" - -#, fuzzy -msgid "Add vault" -msgstr "Lisää sääntö" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -msgid "Asymmetric" -msgstr "" - -msgid "Vaults Config" -msgstr "" - -msgid "My User Vaults" -msgstr "" - -#, fuzzy -msgid "Owners" -msgstr "Omistaja" - -#, fuzzy -msgid "Remove vaults" -msgstr "Poista rooleja" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Service Vaults" -msgstr "Palvelut" - -#, fuzzy -msgid "Shared Vaults" -msgstr "Jaettu" - -msgid "Symmetric" -msgstr "" - -msgid "Vault Type" -msgstr "" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -#, fuzzy -msgid "User Vaults" -msgstr "Käyttäjät" - -#, fuzzy -msgid "Current password is required" -msgstr "Nykyinen salasana" - -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "" - -#, fuzzy -msgid "New password is required" -msgstr "Uusi salasana" - -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" - -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" - -msgid "Token synchronization failed" -msgstr "" - -msgid "The username, password or token codes are not correct" -msgstr "" - -msgid "Token was synchronized" -msgstr "" - -msgid "Password change complete" -msgstr "" - -#, fuzzy -msgid "Your password has expired. Please enter a new password." -msgstr "Istuntosi on vahventunut. Ole hyvä ja kirjaudu uudelleen sisään." - -msgid "Password reset was not successful." -msgstr "" - -#, fuzzy -msgid "Reset your password." -msgstr "Käyttäjän salasana" - -#, fuzzy -msgid "Verify Password" -msgstr "Uusi salasana" - -msgid "Are you sure you want to delete selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "" - -msgid "Are you sure you want to disable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "" - -msgid "Are you sure you want to enable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "" - -msgid "Some entries were not deleted" -msgstr "" - -msgid "Quick Links" -msgstr "" - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" - -#, fuzzy -msgid "Unselect All" -msgstr "Valitse kaikki" - -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" - -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" - -msgid "Automember" -msgstr "" - -#, fuzzy -msgid "Automount" -msgstr "Tili" - -msgid "Host-Based Access Control" -msgstr "" - -#, fuzzy -msgid "IPA Server" -msgstr "Palvelin" - -msgid "Policy" -msgstr "" - -msgid "Role-Based Access Control" -msgstr "" - -msgid "Sudo" -msgstr "" - -msgid "Trusts" -msgstr "" - -msgid "True" -msgstr "" - -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" - -msgid "API Browser" -msgstr "" - -#, fuzzy -msgid "First" -msgstr "Ensimmäinen OTP" - -#, fuzzy -msgid "Last" -msgstr "Sukunimi" - -msgid "Page" -msgstr "" - -msgid "Prev" -msgstr "" - -msgid "Undo" -msgstr "" - -msgid "Undo this change." -msgstr "" - -msgid "Undo All" -msgstr "" - -msgid "Undo all changes in this field." -msgstr "" - -msgid "Text does not match field pattern" -msgstr "" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" - -#, fuzzy -msgid "Must be a decimal number" -msgstr "Tulee olla positiivinen numero" - -#, fuzzy -msgid "Format error" -msgstr "Jäsennysvirhe" - -#, fuzzy -msgid "Must be an integer" -msgstr "Tulee olla positiivinen numero" - -msgid "Not a valid IP address" -msgstr "" - -msgid "Not a valid IPv4 address" -msgstr "" - -msgid "Not a valid IPv6 address" -msgstr "" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "" - -#, fuzzy -msgid "Required field" -msgstr "Vaaditaan" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -#, fuzzy -msgid "invalid attribute name" -msgstr "virheellinen porttinumero" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -#, fuzzy -msgid "RADIUS Servers" -msgstr "Palvelimet" - -#, fuzzy -msgid "RADIUS Server" -msgstr "Palvelin" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" msgstr "" #, fuzzy, python-format -msgid "Access granted: %s" -msgstr "Pääsy evätty" +msgid "Unable to communicate with CMS (status %d)" +msgstr "Kommunikaatio CMS:n kanssa epäonnistui" -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" +msgid "Failed to authenticate to CA REST API" msgstr "" #, python-format -msgid "Ticket policy for %s could not be read" +msgid "Replication agreement for %(hostname)s not found" msgstr "" -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -#, fuzzy -msgid "" -"\n" -"IPA locations\n" -msgstr "sijainti" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -#, fuzzy -msgid "locations" -msgstr "sijainti" - -#, fuzzy -msgid "IPA Locations" -msgstr "Sijainti" - -#, fuzzy -msgid "IPA Location" -msgstr "Sijainti" - -#, fuzzy -msgid "Location name" -msgstr "Sijainti" - -#, fuzzy -msgid "IPA location name" -msgstr "Toimialueen nimi" - -#, fuzzy -msgid "IPA Location description" -msgstr "Profiilin kuvaus" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -#, fuzzy -msgid "Add a new IPA location." -msgstr "Lisää uusi isäntä." - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "" - -msgid "Delete an IPA location." -msgstr "" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "" - -msgid "Modify information about an IPA location." -msgstr "" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "" - -msgid "Search for IPA locations." -msgstr "" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an IPA location." -msgstr "" - -#, fuzzy -msgid "Servers in location" -msgstr "Palvelimen nimi" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -#, fuzzy -msgid "Topology Segments" -msgstr "Topologia" - -#, fuzzy -msgid "Topology Segment" -msgstr "Topologia" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "%(value)s" -msgstr "arvo" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -#, fuzzy -msgid "Topology suffixes" -msgstr "Topologia" - -#, fuzzy -msgid "Topology suffix" -msgstr "Topologia" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -#, fuzzy -msgid "sudo command" -msgstr "komento" - -#, fuzzy -msgid "sudo commands" -msgstr "komennot" - -#, fuzzy -msgid "Sudo Commands" -msgstr "Komennot" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -msgid "self service permission" -msgstr "" - -#, fuzzy -msgid "self service permissions" -msgstr "Palveluvalinnat" - -#, fuzzy -msgid "Self Service Permissions" -msgstr "Palveluvalinnat" - -#, fuzzy -msgid "Self Service Permission" -msgstr "Käyttöoikeus" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - msgid "A list of ACI values" msgstr "" @@ -19014,6 +12748,10 @@ msgstr "" msgid "One of group, permission or self is required" msgstr "" +#, python-format +msgid "Group '%s' does not exist" +msgstr "Ryhmää '%s' ei ole olemassa" + #, fuzzy msgid "empty filter" msgstr "Syötetiedosto" @@ -19036,6 +12774,9 @@ msgstr "" msgid "ACIs" msgstr "" +msgid "ACI" +msgstr "" + #, python-format msgid "Created ACI \"%(value)s\"" msgstr "" @@ -19058,2278 +12799,6 @@ msgstr[1] "" msgid "Renamed ACI to \"%(value)s\"" msgstr "" -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -#, fuzzy -msgid "User Group" -msgstr "Ryhmä" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "" - -msgid "privileged group" -msgstr "" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -msgid "Not a managed group" -msgstr "" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -#, fuzzy -msgid "automount location" -msgstr "Tietoja liitoksesta" - -#, fuzzy -msgid "automount locations" -msgstr "Tietoja liitoksesta" - -#, fuzzy -msgid "Automount Locations" -msgstr "Tunnistatuminen" - -#, fuzzy -msgid "Automount Location" -msgstr "Tunnistatuminen" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "automount map" -msgstr "" - -msgid "automount maps" -msgstr "" - -msgid "Automount Maps" -msgstr "" - -msgid "Automount Map" -msgstr "" - -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Automount key object." -msgstr "" - -msgid "automount key" -msgstr "" - -msgid "automount keys" -msgstr "" - -msgid "Automount Keys" -msgstr "" - -msgid "Automount Key" -msgstr "" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, python-format -msgid "key named %(key)s already exists" -msgstr "" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "ID View" -msgstr "Näytä" - -msgid "system ID View" -msgstr "" - -#, fuzzy -msgid "ID Views" -msgstr "Näytä" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -#, fuzzy -msgid "Add a new ID override." -msgstr "Lisää uusi isäntä." - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Delete an ID override." -msgstr "Poista käyttäjä" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -msgid "Modify an ID override." -msgstr "" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an ID override." -msgstr "" - -#, fuzzy -msgid "User ID override" -msgstr "Käyttäjä ID" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -msgid "CA category" -msgstr "" - -msgid "CA category the ACL applies to" -msgstr "" - -msgid "CAs" -msgstr "" - -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, python-format -msgid "%i users or groups added." -msgstr "" - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, fuzzy, python-format -msgid "%i service added." -msgstr "Palvelun nimi" - -#, fuzzy, python-format -msgid "%i services added." -msgstr "palvelut" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -#, fuzzy -msgid "operation not defined" -msgstr "Toimenpide epäonnistui: %s\n" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -#, fuzzy -msgid "External trust" -msgstr "Ulkoinen" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -#, fuzzy -msgid "trust type" -msgstr "luottamustyyppi, jota ei tueta" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "trust configuration" -msgstr "Asetukset" - -#, fuzzy -msgid "Global Trust Configuration" -msgstr "Kertakäyttöisen salasanan määritykset" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -msgid "SID" -msgstr "" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -#, fuzzy -msgid "trust domain" -msgstr "toimialue" - -#, fuzzy -msgid "trust domains" -msgstr "toimialue" - -msgid "Trusted domains" -msgstr "" - -#, fuzzy -msgid "Trusted domain" -msgstr "toimialue" - -#, fuzzy -msgid "Domain enabled" -msgstr "Toimialueen nimi" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"DNS server configuration\n" -msgstr "Asetukset" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -#, fuzzy -msgid "DNS server" -msgstr "palvelin" - -#, fuzzy -msgid "DNS servers" -msgstr "palvelimet" - -#, fuzzy -msgid "DNS Servers" -msgstr "Palvelimet" - -#, fuzzy -msgid "DNS Server" -msgstr "Palvelin" - -#, fuzzy -msgid "DNS Server name" -msgstr "Palvelimen nimi" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "" - -msgid "Search for DNS servers." -msgstr "" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "IPA DNS Server is not installed" -msgstr "Käytettävä IPA-palvelin" - -msgid "Display configuration of a DNS server." -msgstr "" - -#, fuzzy -msgid "Add a new DNS server." -msgstr "Lisää uusi isäntä." - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Delete a DNS server" -msgstr "Poista käyttäjä" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -#, fuzzy -msgid "SSH public key fingerprint" -msgstr "Julkinen SSH-avain" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "can be at most %(len)d characters" -msgstr "voi sisältää enintään {} merkkiä" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -#, fuzzy -msgid "HBAC services" -msgstr "palvelut" - -#, fuzzy -msgid "HBAC Services" -msgstr "Palvelut" - -#, fuzzy -msgid "HBAC Service" -msgstr "Mikä tahansa palvelu" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "HBAC service group" -msgstr "Lisää palvelu" - -#, fuzzy -msgid "HBAC service groups" -msgstr "Lisää palvelu" - -#, fuzzy -msgid "HBAC Service Groups" -msgstr "Käytettävä IPA-palvelin" - -#, fuzzy -msgid "HBAC Service Group" -msgstr "Mikä tahansa palvelu" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "delegation" -msgstr "sijainti" - -#, fuzzy -msgid "delegations" -msgstr "sijainti" - -#, fuzzy -msgid "Delegations" -msgstr "sijainti" - -#, fuzzy -msgid "Delegation" -msgstr "sijainti" - -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "" -"Modify ID range.\n" -"\n" -msgstr "Muokkaa ryhmää." - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, fuzzy -msgid "netgroups" -msgstr "ryhmät" - -#, fuzzy -msgid "Netgroup" -msgstr "ryhmä" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "" - -msgid "Failed logins" -msgstr "" - -#, fuzzy -msgid "Last successful authentication" -msgstr "Vaatii ennakkotunnistautumisen" - -#, fuzzy -msgid "Last failed authentication" -msgstr "Tunnistatuminen" - -#, fuzzy -msgid "Time now" -msgstr "Aikakatkaisu" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, fuzzy, python-format -msgid "%(host)s failed" -msgstr "fork() epäonnistui\n" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" -msgstr[1] "" - msgid "" "\n" "Auto Membership Rule.\n" @@ -21664,10 +13133,16 @@ msgstr "" msgid "Automember rebuild membership task started" msgstr "" +msgid "Automember rebuild membership task completed" +msgstr "" + #, python-format msgid "Task DN = '%s'" msgstr "" +msgid "Automember" +msgstr "" + msgid "" "\n" " Search for orphan automember rules. The command might need to be run as\n" @@ -21678,416 +13153,126 @@ msgstr "" msgid "Remove orphan automember rules" msgstr "" -msgid "HBAC rule and local members cannot both be set" -msgstr "" +#, fuzzy +msgid "automount location" +msgstr "Tietoja liitoksesta" -msgid "Invalid SELinux user name, must match {}" -msgstr "" +#, fuzzy +msgid "automount locations" +msgstr "Tietoja liitoksesta" -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" +#, fuzzy +msgid "Automount Locations" +msgstr "Tunnistatuminen" -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" +#, fuzzy +msgid "Automount Location" +msgstr "Tunnistatuminen" -msgid "SELinux user map list not found in configuration" +#, python-format +msgid "Added automount location \"%(value)s\"" msgstr "" #, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -#, fuzzy -msgid "SELinux User Map rule" -msgstr "SELinux-käyttäjäkartta" - -#, fuzzy -msgid "SELinux User Map rules" -msgstr "SELinux-käyttäjäkartat" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "" - -#, fuzzy, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "SELinux-käyttäjäkartat" - -#, fuzzy, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "SELinux-käyttäjäkartat" - -#, fuzzy, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "SELinux-käyttäjäkartat" - -#, fuzzy, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "SELinux-käyttäjäkartta" -msgstr[1] "SELinux-käyttäjäkartta" - -#, fuzzy, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "SELinux-käyttäjäkartat" - -#, fuzzy, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "SELinux-käyttäjäkartat" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -#, fuzzy -msgid "Vault Container" -msgstr "Jatka" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -#, fuzzy -msgid "Host is not supported" -msgstr "toimialueseen ei luoteta" - -msgid "KRA service is not enabled" -msgstr "" - -#, fuzzy -msgid "Deleted vault container" -msgstr "Poista käyttäjä" - -#, fuzzy, python-format -msgid "owner %s" -msgstr "Omistaja" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -#, fuzzy -msgid "vault" -msgstr "Oletus" - -#, fuzzy -msgid "vaults" -msgstr "Oletus" - -#, fuzzy -msgid "Vaults" -msgstr "Oletus" - -#, fuzzy -msgid "Vault" -msgstr "Oletus" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -#, fuzzy -msgid "Add a vault." -msgstr "Lisää sääntö" - -#, python-format -msgid "Added vault \"%(value)s\"" +msgid "Deleted automount location \"%(value)s\"" msgstr "" #, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" msgstr[0] "" msgstr[1] "" +msgid "automount map" +msgstr "" + +msgid "automount maps" +msgstr "" + +msgid "Automount Maps" +msgstr "" + +msgid "Automount Map" +msgstr "" + +#, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Automount key object." +msgstr "" + +msgid "automount key" +msgstr "" + +msgid "automount keys" +msgstr "" + +msgid "Automount Keys" +msgstr "" + +msgid "Automount Key" +msgstr "" + +#, python-format msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" msgstr "" #, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Vault configuration" -msgstr "Asetukset" - -msgid "IPA servers configured as key recovery agents" +msgid "key named %(key)s already exists" msgstr "" #, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "" - -msgid "Retrieve data from a vault." +msgid "The automount key %(key)s with info %(info)s does not exist" msgstr "" #, python-format -msgid "Retrieved data from vault \"%(value)s\"" +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." msgstr "" -msgid "No archived data." +#, python-format +msgid "Added automount key \"%(value)s\"" msgstr "" -msgid "Checks if any of the servers has the KRA service enabled" +#, python-format +msgid "Added automount indirect map \"%(value)s\"" msgstr "" +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "" +msgstr[1] "" + #, fuzzy msgid "Member service groups" msgstr "Poista palveluita" @@ -22116,6 +13301,15 @@ msgstr "" msgid "An IPA master host cannot be deleted or disabled" msgstr "" +msgid "entry" +msgstr "tietue" + +msgid "entries" +msgstr "tietueet" + +msgid "Entry" +msgstr "Tietue" + #, python-format msgid "container entry (%(container)s) not found" msgstr "" @@ -22124,6 +13318,10 @@ msgstr "" msgid "%(parent)s: %(oname)s not found" msgstr "" +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "" + #, python-format msgid "%(oname)s with name \"%(pkey)s\" already exists" msgstr "" @@ -22149,6 +13347,14 @@ msgstr "" msgid "the entry was deleted while being modified" msgstr "" +#, python-format +msgid "%s" +msgstr "%s" + +#, fuzzy, python-format +msgid "member %s" +msgstr "Jäsenet" + #, python-format msgid "%s to add" msgstr "" @@ -22157,6 +13363,10 @@ msgstr "" msgid "%s to remove" msgstr "" +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + #, python-format msgid "" "Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." @@ -22179,181 +13389,135 @@ msgstr "" msgid "one or more values to remove" msgstr "" -#, fuzzy msgid "" "\n" -"IPA servers\n" -msgstr "palvelimet" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" +msgstr "" msgid "" -"\n" -"Get information about installed IPA servers.\n" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "Principal alias" +msgstr "" + +#, fuzzy +msgid "User password expiration" +msgstr "Salasanan vanheneminen" + +#, fuzzy +msgid "SSH public key fingerprint" +msgstr "Julkinen SSH-avain" + +msgid "Base-64 encoded user certificate" +msgstr "" + +msgid "Certificate mapping data" +msgstr "" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +#, fuzzy +msgid "SMB Home Directory" +msgstr "Kotihakemisto" + +#, fuzzy +msgid "SMB Home Directory Drive" +msgstr "Kotihakemisto" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +#, fuzzy, python-format +msgid "can be at most %(len)d characters" +msgstr "voi sisältää enintään {} merkkiä" + +msgid "Issuer" +msgstr "" + +msgid "Issuer of the certificate" +msgstr "" + +msgid "Subject" +msgstr "Aihe" + +msgid "Subject of the certificate" +msgstr "" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" msgstr "" msgid "" "\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" "\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" msgstr "" -#, fuzzy -msgid "IPA Servers" -msgstr "Käytettävä IPA-palvelin" - -#, fuzzy -msgid "Server location" -msgstr "sijainti" - -#, fuzzy -msgid "Service weight" -msgstr "Palvelun asetukset" - -#, fuzzy -msgid "Weight for server services" -msgstr "Poista palveluita" - -#, fuzzy -msgid "Service relative weight" -msgstr "Palvelun asetukset" - -msgid "Relative weight for server services (counts per location)" +msgid "Make multiple ipa calls via one remote procedure call" msgstr "" -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "" - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -#, fuzzy -msgid "Server state" -msgstr "Palvelimen nimi" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." +msgid "must contain a tuple (list, dict)" msgstr "" msgid "" @@ -22426,6 +13590,9 @@ msgstr "" msgid "Certificate Authorities" msgstr "" +msgid "Name" +msgstr "Nimi" + msgid "Name for referencing the CA" msgstr "" @@ -22445,9 +13612,21 @@ msgstr "Aihe" msgid "Subject Distinguished Name" msgstr "" +msgid "Issuer DN" +msgstr "" + msgid "Issuer Distinguished Name" msgstr "" +msgid "Base-64 encoded certificate." +msgstr "" + +msgid "Certificate chain" +msgstr "" + +msgid "X.509 certificate chain" +msgstr "" + msgid "Search for CAs." msgstr "" @@ -22457,6 +13636,9 @@ msgid_plural "%(count)d CAs matched" msgstr[0] "" msgstr[1] "" +msgid "Include certificate chain in output" +msgstr "" + msgid "Display the properties of a CA." msgstr "" @@ -22489,6 +13671,9 @@ msgstr "" msgid "Insufficient privilege to delete a CA." msgstr "" +msgid "CA" +msgstr "" + msgid "IPA CA cannot be deleted" msgstr "" @@ -22527,307 +13712,1214 @@ msgstr "" msgid "" "\n" -"Stageusers\n" +"Manage CA ACL rules.\n" "\n" -"Manage stage user entries.\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" "\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" +"SUBJECT PRINCIPAL SCOPE:\n" "\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" "\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" "\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" +"CERTIFICATE AUTHORITY SCOPE:\n" "\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" "\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"PROFILE SCOPE:\n" "\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" "\n" "EXAMPLES:\n" "\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" "\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" "\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" msgstr "" -#, fuzzy -msgid "Stage Users" -msgstr "Vaihe" +msgid "CA ACL" +msgstr "" -#, fuzzy -msgid "Stage User" -msgstr "Vaihe" +msgid "CA ACLs" +msgstr "" -#, fuzzy -msgid "stage user" -msgstr "Poista käyttäjä" +msgid "CA category" +msgstr "" -#, fuzzy -msgid "stage users" -msgstr "käyttäjät" +msgid "CA category the ACL applies to" +msgstr "" + +msgid "CAs" +msgstr "" #, python-format -msgid "Added stage user \"%(value)s\"" +msgid "Added CA ACL \"%(value)s\"" msgstr "" -msgid "givenname is required" +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" msgstr "" -#, fuzzy -msgid "sn is required" -msgstr "Vaaditaan" +msgid "default CA ACL can be only disabled" +msgstr "" + +#, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" + +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%i user or group added." +msgstr "" + +#, python-format +msgid "%i users or groups added." +msgstr "" + +msgid "users cannot be added when user category='all'" +msgstr "" + +#, python-format +msgid "%i user or group removed." +msgstr "" + +#, python-format +msgid "%i users or groups removed." +msgstr "" + +#, python-format +msgid "%i host or hostgroup added." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "" + +msgid "hosts cannot be added when host category='all'" +msgstr "" + +#, python-format +msgid "%i host or hostgroup removed." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups removed." +msgstr "" #, fuzzy, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "Poista käyttäjä" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -#, fuzzy -msgid "User password expiration" -msgstr "Salasanan vanheneminen" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -#, fuzzy -msgid "SMB Home Directory" -msgstr "Kotihakemisto" - -#, fuzzy -msgid "SMB Home Directory Drive" -msgstr "Kotihakemisto" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" -"\n" -"OTP-tunnukset\n" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -#, fuzzy -msgid "URI" -msgstr "URL" +msgid "%i service added." +msgstr "Palvelun nimi" #, fuzzy, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "Lisää OTP-tunnus" +msgid "%i services added." +msgstr "palvelut" -msgid "cannot be empty" +msgid "services cannot be added when service category='all'" msgstr "" #, python-format -msgid "Deleted OTP token \"%(value)s\"" +msgid "%i service removed." msgstr "" #, python-format -msgid "Modified OTP token \"%(value)s\"" +msgid "%i services removed." msgstr "" #, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, python-format +msgid "%i profiles removed." +msgstr "" + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +msgid " * 0 - unspecified\n" +msgstr "" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +#, fuzzy +msgid "Subject email address" +msgstr "Sähköpostiosoite" + +#, fuzzy +msgid "Subject DNS name" +msgstr "Aihe" + +msgid "Subject X.400 address" +msgstr "" + +#, fuzzy +msgid "Subject directory name" +msgstr "Kotihakemisto" + +msgid "Subject EDI Party name" +msgstr "" + +#, fuzzy +msgid "Subject URI" +msgstr "Aihe" + +#, fuzzy +msgid "Subject IP Address" +msgstr "IP-osoite" + +#, fuzzy +msgid "Subject OID" +msgstr "Aihe" + +#, fuzzy +msgid "Subject UPN" +msgstr "Aihe" + +msgid "Subject Kerberos principal name" +msgstr "" + +#, fuzzy +msgid "Subject Other Name" +msgstr "Palvelimen nimi" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +#, fuzzy +msgid "Fingerprint (SHA1)" +msgstr "Sormenjälki" + +#, fuzzy +msgid "Fingerprint (SHA256)" +msgstr "Sormenjälki" + +#, fuzzy +msgid "Serial number (hex)" +msgstr "Sarjanumero" + +msgid "Request status" +msgstr "" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +msgid "'add' option" +msgstr "" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "Tila" + +msgid "Revoked" +msgstr "" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, fuzzy, python-format +msgid "Owner %s" +msgstr "Omistaja" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "" + +msgid "Status of the certificate" +msgstr "" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +msgid "domain" +msgstr "toimialue" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +#, fuzzy +msgid "User logins" +msgstr "Käyttäjät" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" msgstr[0] "" msgstr[1] "" msgid "" "\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" +"Manage Certificate Profiles\n" "\n" -"To run this code in the lite-server\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" "\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" "\n" -"where the contents of the file batch_request.json follow the below example\n" +"PROFILE ID SYNTAX:\n" "\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" "\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" +"EXAMPLES:\n" "\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" "\n" -"And then a nested response for each IPA command method sent in the request\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" "\n" msgstr "" -msgid "Make multiple ipa calls via one remote procedure call" +msgid "invalid Profile ID" msgstr "" -msgid "must contain a tuple (list, dict)" +msgid "Certificate Profile" msgstr "" +msgid "Certificate Profiles" +msgstr "" + +#, fuzzy +msgid "Profile configuration" +msgstr "Kertakäyttöisen salasanan määritykset" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "must be at least 10" +msgstr "" + +#, fuzzy +msgid "configuration options" +msgstr "Asetukset" + +msgid "Configuration" +msgstr "Asetukset" + +msgid "Maximum hostname length" +msgstr "" + +msgid "Enable adding subids to new users" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +#, fuzzy +msgid "IPA CA servers" +msgstr "palvelimet" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +#, fuzzy +msgid "IPA KRA servers" +msgstr "palvelimet" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "Domain resolution order" +msgstr "" + +msgid "colon-separated list of domains used for short name qualification" +msgstr "" + +#, fuzzy +msgid "IPA DNS servers" +msgstr "Käytettävä IPA-palvelin" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "IPA DNSSec key master" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +#, fuzzy +msgid "Setup SID configuration" +msgstr "Asetukset" + +msgid "New users and groups automatically get a SID assigned" +msgstr "" + +#, fuzzy +msgid "Add SIDs" +msgstr "Lisää palvelu" + +msgid "Add SIDs for existing users and groups" +msgstr "" + +msgid "NetBIOS name of the IPA domain" +msgstr "" + +#, fuzzy +msgid "Empty domain is not allowed" +msgstr "toimialueseen ei luoteta" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "not allowed to enable SID generation" +msgstr "" + +msgid "" +"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " +"allowed. Empty string is not allowed." +msgstr "" + +#, fuzzy +msgid "Failed to call DBus" +msgstr "Tarkistuksen luominen epäonnistui!\n" + +msgid "Configuration of SID failed. See details in the error log" +msgstr "" + +#, fuzzy +msgid "The group doesn't exist" +msgstr "Ryhmää '%s' ei ole olemassa" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" + +msgid "SELinux user map default user not in order list" +msgstr "" + +#, python-format +msgid "You cannot specify %s without the --enable-sid option" +msgstr "" + +#, fuzzy +msgid "delegation" +msgstr "sijainti" + +#, fuzzy +msgid "delegations" +msgstr "sijainti" + +#, fuzzy +msgid "Delegations" +msgstr "sijainti" + +#, fuzzy +msgid "Delegation" +msgstr "sijainti" + +#, python-format +msgid "Added delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "" +msgstr[1] "" + msgid "" "\n" "Domain Name System (DNS)\n" @@ -23259,6 +15351,12 @@ msgid "" "All nameservers failed to answer the query for DNS reverse zone %(revdns)s" msgstr "" +#, python-format +msgid "" +"No answers could be found in the specified lifetime for DNS reverse zone " +"%(revdns)s" +msgstr "" + #, python-format msgid "" "DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " @@ -23298,6 +15396,9 @@ msgstr "" msgid "'%s' is a required part of DNS record" msgstr "" +msgid "Invalid number of parts!" +msgstr "Virheellinen osien lukumäärä!" + #, python-format msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" msgstr "" @@ -23371,6 +15472,9 @@ msgstr "" msgid "Managedby permission" msgstr "Käyttöoikeus" +msgid "DNS is not configured" +msgstr "" + msgid "cannot be used when a zone is specified" msgstr "" @@ -23586,6 +15690,315 @@ msgstr "" msgid "Do not update records only return expected records" msgstr "" +#, fuzzy +msgid "" +"\n" +"DNS server configuration\n" +msgstr "Asetukset" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +#, fuzzy +msgid "DNS server" +msgstr "palvelin" + +#, fuzzy +msgid "DNS servers" +msgstr "palvelimet" + +#, fuzzy +msgid "DNS Servers" +msgstr "Palvelimet" + +#, fuzzy +msgid "DNS Server" +msgstr "Palvelin" + +#, fuzzy +msgid "DNS Server name" +msgstr "Palvelimen nimi" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +msgid "Search for DNS servers." +msgstr "" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +msgid "IPA DNS Server is not installed" +msgstr "Käytettävä IPA-palvelin" + +msgid "Display configuration of a DNS server." +msgstr "" + +#, fuzzy +msgid "Add a new DNS server." +msgstr "Lisää uusi isäntä." + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "Delete a DNS server" +msgstr "Poista käyttäjä" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "Kommunikaatio CMS:n kanssa epäonnistui" + +msgid "Response from CA was not valid JSON" +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "groups" +msgstr "ryhmät" + +#, fuzzy +msgid "User Group" +msgstr "Ryhmä" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "" + +msgid "gid cannot be set for external group" +msgstr "" + +msgid "attribute \"gidNumber\" not allowed with --nonposix" +msgstr "" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "" + +msgid "privileged group" +msgstr "" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + msgid "The deny type has been deprecated." msgstr "" @@ -23597,6 +16010,14 @@ msgstr "Lisää sääntö" msgid "HBAC Rules" msgstr "Säännöt" +#, fuzzy +msgid "HBAC Services" +msgstr "Palvelut" + +#, fuzzy +msgid "HBAC Service Groups" +msgstr "Käytettävä IPA-palvelin" + #, python-format msgid "Added HBAC rule \"%(value)s\"" msgstr "" @@ -23632,120 +16053,7981 @@ msgstr "" msgid "" "\n" -"Manage Certificate Profiles\n" +"HBAC Services\n" "\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" "\n" "EXAMPLES:\n" "\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" "\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" "\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" "\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" "\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -msgid "Certificate Profile" -msgstr "" - -msgid "Certificate Profiles" msgstr "" #, fuzzy -msgid "Profile configuration" -msgstr "Kertakäyttöisen salasanan määritykset" +msgid "HBAC services" +msgstr "palvelut" + +#, fuzzy +msgid "HBAC Service" +msgstr "Mikä tahansa palvelu" #, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" +msgid "Added HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +msgid "HBAC service group" +msgstr "Lisää palvelu" + +#, fuzzy +msgid "HBAC service groups" +msgstr "Lisää palvelu" + +#, fuzzy +msgid "HBAC Service Group" +msgstr "Mikä tahansa palvelu" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, fuzzy, python-format +msgid "Access granted: %s" +msgstr "Pääsy evätty" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host" +msgstr "Kone" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Serial Number" +msgstr "Sarjanumero" + +#, fuzzy +msgid "Serial Number (hex)" +msgstr "Sarjanumero" + +#, fuzzy +msgid "Authentication Indicators" +msgstr "Tunnistatuminen" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" msgstr[0] "" msgstr[1] "" #, python-format -msgid "Imported profile \"%(value)s\"" +msgid "Disabled host \"%(value)s\"" msgstr "" #, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" +msgid "Added certificates to host \"%(value)s\"" msgstr "" #, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" msgstr "" #, python-format -msgid "Deleted profile \"%(value)s\"" +msgid "Added new aliases to host \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a host entry" msgstr "" #, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#, fuzzy +msgid "host groups" +msgstr "ryhmät" + +#, fuzzy +msgid "Host Group" +msgstr "Ryhmä" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" msgstr "" #, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" msgstr "" #, python-format -msgid "all masters must have %(role)s role enabled" +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "hostgroup" +msgstr "ryhmä" + +msgid "privileged hostgroup" msgstr "" #, python-format -msgid "must have %(role)s role enabled" +msgid "Modified hostgroup \"%(value)s\"" msgstr "" -msgid "must be enabled only on a single master" +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"and an ID range of a trusted domain may set\n" +" - auto-private-groups: [true|false|hybrid] automatic creation of private " +"groups\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +#, fuzzy +msgid "Auto private groups" +msgstr "Lisää palvelu" + +msgid "Auto creation of private groups, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --auto-private-groups\n" +"\n" +" may be given for a new ID range for a trusted AD domain and\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" +"private-groups is specified" +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +msgid "" +"Modify ID range.\n" +"\n" +msgstr "Muokkaa ryhmää." + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +#, fuzzy +msgid "ID View" +msgstr "Näytä" + +msgid "system ID View" +msgstr "" + +#, fuzzy +msgid "ID Views" +msgstr "Näytä" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +msgid "Hosts the view applies to" +msgstr "" + +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +msgid "not found" +msgstr "ei löytynyt" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "arvo" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +#, fuzzy +msgid "Add a new ID override." +msgstr "Lisää uusi isäntä." + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "Delete an ID override." +msgstr "Poista käyttäjä" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "" + +msgid "Modify an ID override." +msgstr "" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an ID override." +msgstr "" + +#, fuzzy +msgid "User ID override" +msgstr "Käyttäjä ID" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Internationalization messages" +msgstr "" + +msgid "Your session has expired. Please log in again." +msgstr "Istuntosi on vahventunut. Ole hyvä ja kirjaudu uudelleen sisään." + +msgid "Apply" +msgstr "Toteuta" + +msgid "Rebuild auto membership" +msgstr "" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "" + +msgid "Are you sure you want to proceed with the action?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "" + +msgid "Actions" +msgstr "Toimet" + +msgid "Add" +msgstr "Lisää" + +#, python-brace-format +msgid "${count} item(s) added" +msgstr "" + +msgid "Direct Membership" +msgstr "" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "" + +msgid "Indirect Membership" +msgstr "" + +#, fuzzy +msgid "No entries." +msgstr "tietueet" + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "" + +msgid "Remove" +msgstr "Poista" + +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "" + +msgid "Show Results" +msgstr "" + +#, fuzzy +msgid "Authentication indicators" +msgstr "Tunnistatuminen" + +#, fuzzy +msgid "Authentication indicator" +msgstr "Tunnistatuminen" + +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "Add Custom Authentication Indicator" +msgstr "" + +msgid "Two factor authentication (password + OTP)" +msgstr "" + +msgid "RADIUS" +msgstr "" + +msgid "PKINIT" +msgstr "" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "" + +msgid "Disable per-user override" +msgstr "" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "About" +msgstr "Tietoja" + +msgid "Activate" +msgstr "Aktivoi" + +msgid "Add and Add Another" +msgstr "" + +#, fuzzy +msgid "Add and Close" +msgstr "Lisää uusi isäntä." + +msgid "Add and Edit" +msgstr "" + +msgid "Add Many" +msgstr "" + +msgid "Back" +msgstr "Takaisin" + +msgid "Cancel" +msgstr "Peru" + +msgid "Clear" +msgstr "" + +msgid "Clear all fields on the page." +msgstr "" + +msgid "Close" +msgstr "Sulje" + +msgid "Disable" +msgstr "Poista käytöstä" + +msgid "Download" +msgstr "Lataa" + +msgid "Download certificate as PEM formatted file." +msgstr "" + +msgid "Edit" +msgstr "Muokkaa" + +msgid "Enable" +msgstr "Ota käyttöön" + +msgid "Find" +msgstr "Etsi" + +msgid "Get" +msgstr "" + +msgid "Hide" +msgstr "Piilota" + +msgid "Issue" +msgstr "" + +msgid "Match" +msgstr "" + +msgid "Match users according to certificate." +msgstr "" + +msgid "Migrate" +msgstr "Suorita migraatio" + +msgid "OK" +msgstr "OK" + +msgid "Refresh" +msgstr "Päivitä" + +msgid "Reload current settings from the server." +msgstr "" + +msgid "Delete" +msgstr "Poista" + +#, fuzzy +msgid "Remove hold" +msgstr "Poista rooleja" + +msgid "Reset" +msgstr "Nollaa" + +#, fuzzy +msgid "Reset Password" +msgstr "Uusi salasana" + +msgid "Reset Password and Log in" +msgstr "" + +msgid "Restore" +msgstr "Palauta" + +msgid "Retry" +msgstr "Yritä uudelleen" + +msgid "Revert" +msgstr "Palaa takaisin" + +msgid "Revoke" +msgstr "" + +msgid "Save" +msgstr "Tallenna" + +#, fuzzy +msgid "Set" +msgstr "Salainen" + +msgid "Show" +msgstr "Näytä" + +msgid "Stage" +msgstr "Vaihe" + +msgid "Update" +msgstr "Päivitä" + +msgid "View" +msgstr "Näytä" + +#, fuzzy +msgid "Customization" +msgstr "Asetukset" + +msgid "Pagination Size" +msgstr "" + +msgid "Collapse All" +msgstr "" + +msgid "Expand All" +msgstr "" + +msgid "General" +msgstr "Yleinen" + +#, fuzzy +msgid "Identity Settings" +msgstr "Tilin asetukset" + +#, fuzzy +msgid "Record Settings" +msgstr "Tilin asetukset" + +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "" + +msgid "Back to Top" +msgstr "" + +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "" + +msgid "Add custom value" +msgstr "" + +msgid "Available" +msgstr "Saatavilla" + +#, fuzzy +msgid "Some operations failed." +msgstr "Toimenpide epäonnistui: %s\n" + +#, fuzzy +msgid "Operations Error" +msgstr "Valinnat" + +#, fuzzy +msgid "Confirmation" +msgstr "Asetukset" + +msgid "Custom value" +msgstr "" + +msgid "This page has unsaved changes. Please save or revert." +msgstr "" + +msgid "Unsaved Changes" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Edit ${entity}" +msgstr "Identiteetti" + +msgid "Hide details" +msgstr "" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "" + +msgid "Prospective" +msgstr "" + +msgid "Redirection" +msgstr "Uudelleenohjeus" + +msgid "Select entries to be removed." +msgstr "" + +msgid "Result" +msgstr "" + +msgid "Show details" +msgstr "" + +msgid "Success" +msgstr "Onnistui" + +msgid "Validation error" +msgstr "" + +msgid "Input form contains invalid or missing values." +msgstr "" + +msgid "Please try the following options:" +msgstr "" + +msgid "If the problem persists please contact the system administrator." +msgstr "" + +msgid "Refresh the page." +msgstr "" + +msgid "Reload the browser." +msgstr "" + +msgid "Return to the main page and retry the operation" +msgstr "" + +#, python-brace-format +msgid "An error has occurred (${error})" +msgstr "" + +#, fuzzy +msgid "HTTP Error" +msgstr "Virhe" + +msgid "Internal Error" +msgstr "Sisäinen virhe" + +#, fuzzy +msgid "IPA Error" +msgstr "Virhe" + +#, fuzzy +msgid "No response" +msgstr "" +"JSON-RPC vastaus:\n" +"%s\n" + +msgid "Unknown Error" +msgstr "Tuntematon virhe" + +msgid "URL" +msgstr "URL" + +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} members:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} member managers:" +msgstr "" + +msgid "Settings" +msgstr "Asetukset" + +msgid "Search" +msgstr "Haku" + +msgid "False" +msgstr "Epätosi" + +#, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Allowed to create keytab" +msgstr "Tarkistuksen luominen epäonnistui!\n" + +msgid "Allowed to retrieve keytab" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Add Kerberos Principal Alias" +msgstr "" + +msgid "New kerberos principal alias" +msgstr "" + +#, fuzzy +msgid "Remove Kerberos Alias" +msgstr "Poista rooleja" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "" + +msgid "Inherited from server configuration" +msgstr "" + +msgid "MS-PAC" +msgstr "" + +msgid "Override inherited settings" +msgstr "" + +msgid "PAD" +msgstr "" + +msgid "Authenticating" +msgstr "Tunnistaudutaan" + +msgid "Authentication with personal certificate failed" +msgstr "" + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" + +msgid "Continue to next page" +msgstr "" + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" + +msgid "Login failed due to an unknown reason" +msgstr "" + +msgid "Logged In As" +msgstr "" + +msgid "Authentication with Kerberos failed" +msgstr "" + +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" + +msgid "Loading" +msgstr "" + +msgid "Kerberos Principal you entered is expired" +msgstr "" + +msgid "Loading data" +msgstr "" + +msgid "Log in" +msgstr "Kirjaudu sisään" + +msgid "Log In Using Certificate" +msgstr "" + +msgid "Log in using personal certificate" +msgstr "" + +msgid "Log out" +msgstr "Kirjaudu ulos" + +#, fuzzy +msgid "Log out error" +msgstr "Kirjaudu ulos" + +msgid "Password or Password+One-Time Password" +msgstr "Salasana tai salasana + Kertakäyttöinen salasana (eng. OTP)" + +#, python-brace-format +msgid "You will be redirected in ${count}s" +msgstr "" + +msgid "Sync OTP Token" +msgstr "Synkronointi-OTP-tunnus" + +msgid "Synchronizing" +msgstr "Synkronoidaan" + +msgid "The user account you entered is locked" +msgstr "" + +#, fuzzy +msgid "number of passwords" +msgstr "Käyttäjän salasana" + +msgid "seconds" +msgstr "sekuntia" + +msgid "Migrating" +msgstr "Suoritetaan migraatiota" + +msgid "There was a problem with your request. Please, try again later." +msgstr "" + +msgid "Password migration was not successful" +msgstr "" + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" + +msgid "The password or username you entered is incorrect" +msgstr "" + +#, fuzzy +msgid "Password migration was successful" +msgstr "Salasanan vanheneminen" + +msgid "Attribute" +msgstr "" + +msgid "Add delegation" +msgstr "" + +#, fuzzy +msgid "Remove delegations" +msgstr "Poista rooleja" + +#, fuzzy +msgid "Add permission" +msgstr "Käyttöoikeus" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Remove permissions" +msgstr "Poista rooleja" + +#, python-brace-format +msgid "Remove privileges from permission '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Add privilege" +msgstr "Lisää rooli" + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "" + +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Remove privileges" +msgstr "Poista rooleja" + +#, python-brace-format +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "" + +#, python-brace-format +msgid "Remove roles from privilege '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Role Settings" +msgstr "Asetukset" + +msgid "Add role" +msgstr "Lisää rooli" + +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "" + +#, python-brace-format +msgid "Add services into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "" + +msgid "Remove roles" +msgstr "Poista rooleja" + +#, python-brace-format +msgid "Remove role '${primary_key}' from privileges" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from role '${primary_key}'" +msgstr "" + +msgid "Add self service permission" +msgstr "" + +#, fuzzy +msgid "Remove self service permissions" +msgstr "Poista palveluita" + +msgid "Add rule" +msgstr "Lisää sääntö" + +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to change default group?" +msgstr "" + +msgid "Default host group" +msgstr "" + +msgid "Default user group" +msgstr "" + +msgid "Exclusive" +msgstr "Poissulkeva" + +#, fuzzy +msgid "Expression" +msgstr "Käyttöoikeus" + +msgid "Host group rule" +msgstr "" + +msgid "Host group rules" +msgstr "" + +#, fuzzy +msgid "Inclusive" +msgstr "Poissulkeva" + +msgid "Remove auto membership rules" +msgstr "" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "" + +msgid "User group rule" +msgstr "" + +#, fuzzy +msgid "User group rules" +msgstr "Omistajaryhmät" + +msgid "Add automount key" +msgstr "" + +#, fuzzy +msgid "Remove automount keys" +msgstr "Poista rooleja" + +#, fuzzy +msgid "Add automount location" +msgstr "Tunnistatuminen" + +#, fuzzy +msgid "Automount Location Settings" +msgstr "Tilin asetukset" + +msgid "Remove automount locations" +msgstr "" + +msgid "Add automount map" +msgstr "" + +#, fuzzy +msgid "Map Type" +msgstr "Tyyppi" + +msgid "Direct" +msgstr "Suora" + +#, fuzzy +msgid "Indirect" +msgstr "Suora" + +msgid "Remove automount maps" +msgstr "" + +msgid "Add certificate authority" +msgstr "" + +msgid "Remove certificate authorities" +msgstr "" + +msgid "Add CA ACL" +msgstr "" + +#, python-brace-format +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "" + +msgid "All" +msgstr "Kaikki" + +msgid "Any CA" +msgstr "" + +#, fuzzy +msgid "Any Host" +msgstr "Kone" + +msgid "Any Service" +msgstr "Mikä tahansa palvelu" + +#, fuzzy +msgid "Any Profile" +msgstr "Profiili" + +msgid "Anyone" +msgstr "" + +#, fuzzy +msgid "Rule status" +msgstr "Säännöt" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "" + +#, fuzzy +msgid "Remove CA ACLs" +msgstr "Poista rooleja" + +#, python-brace-format +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "" + +msgid "Specified CAs" +msgstr "" + +msgid "Specified Hosts and Groups" +msgstr "" + +#, fuzzy +msgid "Specified Profiles" +msgstr "Profiilit" + +msgid "Specified Services and Groups" +msgstr "" + +msgid "Specified Users and Groups" +msgstr "" + +msgid "Permitted to have certificates issued" +msgstr "" + +#, fuzzy +msgid "Remove certificate profiles" +msgstr "Poista palveluita" + +msgid "AA Compromise" +msgstr "" + +msgid "Add principal" +msgstr "" + +msgid "Affiliation Changed" +msgstr "" + +msgid "CA Compromise" +msgstr "" + +msgid "Certificates" +msgstr "" + +msgid "Certificate Hold" +msgstr "" + +msgid "Cessation of Operation" +msgstr "" + +#, fuzzy +msgid "Common Name" +msgstr "Koneen nimi" + +msgid "the certificate with serial number " +msgstr "" + +msgid "Expires On" +msgstr "" + +msgid "Issued on from" +msgstr "" + +msgid "Issued on to" +msgstr "" + +#, fuzzy +msgid "Maximum serial number" +msgstr "Sarjanumero" + +#, fuzzy +msgid "Minimum serial number" +msgstr "Sarjanumero" + +msgid "Revoked on from" +msgstr "" + +msgid "Revoked on to" +msgstr "" + +msgid "Valid not after from" +msgstr "" + +msgid "Valid not after to" +msgstr "" + +msgid "Valid not before from" +msgstr "" + +msgid "Valid not before to" +msgstr "" + +msgid "Fingerprints" +msgstr "Sormenjäljet" + +msgid "Get Certificate" +msgstr "" + +msgid "Certificate Hold Removed" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for user '${primary_key}'" +msgstr "" + +msgid "Issue new certificate" +msgstr "" + +msgid "Issued By" +msgstr "" + +msgid "Issued On" +msgstr "" + +msgid "Issued To" +msgstr "" + +msgid "Key Compromise" +msgstr "" + +msgid "No Valid Certificate" +msgstr "" + +msgid "New Certificate" +msgstr "" + +msgid "Certificate in base64 or PEM format" +msgstr "" + +msgid "Note" +msgstr "Huomautus" + +msgid "Organization" +msgstr "Organisaatio" + +#, fuzzy +msgid "Organizational Unit" +msgstr "Organisaatio" + +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "" + +msgid "Privilege Withdrawn" +msgstr "" + +msgid "Reason for Revocation" +msgstr "" + +#, fuzzy +msgid "Remove certificate hold" +msgstr "Poista palveluita" + +msgid "Do you want to remove the certificate hold?" +msgstr "" + +#, fuzzy +msgid "Remove from CRL" +msgstr "Poista rooleja" + +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" + +#, python-brace-format +msgid " -8 '${cn}'" +msgstr "" + +msgid "Certificate requested" +msgstr "" + +msgid "Revoke certificate" +msgstr "" + +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "" + +msgid "Certificate Revoked" +msgstr "" + +msgid "REVOKED" +msgstr "" + +#, fuzzy +msgid "SHA1 Fingerprint" +msgstr "Sormenjälki" + +#, fuzzy +msgid "SHA256 Fingerprint" +msgstr "Sormenjälki" + +msgid "Superseded" +msgstr "" + +msgid "Unspecified" +msgstr "" + +msgid "Valid Certificate Present" +msgstr "" + +msgid "Valid from" +msgstr "" + +msgid "Valid to" +msgstr "" + +msgid "Validity" +msgstr "" + +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "" + +msgid "View Certificate" +msgstr "" + +msgid "Certificate Data" +msgstr "" + +msgid "Certificate For Match" +msgstr "" + +msgid "Certificate Mapping Match" +msgstr "" + +msgid "Matched Users" +msgstr "" + +#, fuzzy +msgid "User Login" +msgstr "Käyttäjätunnus" + +msgid "Add certificate identity mapping rule" +msgstr "" + +msgid "Add certificate mapping data" +msgstr "" + +#, fuzzy +msgid "Configuration string" +msgstr "Asetukset" + +#, python-brace-format +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "" + +msgid "Remove certificate mapping data" +msgstr "" + +msgid "Issuer and subject" +msgstr "" + +msgid "Remove certificate identity mapping rules" +msgstr "" + +msgid "Version" +msgstr "Versio" + +#, fuzzy +msgid "Group Options" +msgstr "Valinnat" + +#, fuzzy +msgid "Search Options" +msgstr "Palveluvalinnat" + +#, fuzzy +msgid "SELinux Options" +msgstr "SELinux-käyttäjä" + +#, fuzzy +msgid "Server Options" +msgstr "Palveluvalinnat" + +msgid "Service Options" +msgstr "Palveluvalinnat" + +#, fuzzy +msgid "User Options" +msgstr "Palveluvalinnat" + +msgid "Forward first" +msgstr "" + +msgid "Forwarding disabled" +msgstr "" + +msgid "Forward only" +msgstr "" + +msgid "Options" +msgstr "Valinnat" + +msgid "Update System DNS Records" +msgstr "" + +msgid "Do you want to update system DNS records?" +msgstr "" + +msgid "System DNS records updated" +msgstr "" + +msgid "Add DNS forward zone" +msgstr "" + +#, fuzzy +msgid "Remove DNS forward zones" +msgstr "Poista rooleja" + +msgid "Add DNS resource record" +msgstr "" + +msgid "DNS record was deleted because it contained no data." +msgstr "" + +msgid "Other Record Types" +msgstr "" + +msgid "Address not valid, can't redirect" +msgstr "" + +msgid "Create dns record" +msgstr "" + +msgid "Creating record." +msgstr "" + +#, fuzzy +msgid "Record creation failed." +msgstr "Toimenpide epäonnistui: %s\n" + +msgid "Checking if record exists." +msgstr "" + +#, fuzzy +msgid "Record not found." +msgstr "ei löytynyt" + +#, fuzzy +msgid "Redirection to PTR record" +msgstr "Uudelleenohjeus" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "" + +msgid "Target reverse zone not found." +msgstr "" + +msgid "Fetching DNS zones." +msgstr "" + +msgid "An error occurred while fetching dns zones." +msgstr "" + +msgid "You will be redirected to DNS Zone." +msgstr "" + +msgid "Remove DNS resource records" +msgstr "" + +msgid "Standard Record Types" +msgstr "" + +msgid "Records for DNS Zone" +msgstr "" + +#, fuzzy +msgid "Record Type" +msgstr "Merkinnät" + +#, fuzzy +msgid "Add DNS zone" +msgstr "Lisää rooli" + +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "" + +#, fuzzy +msgid "DNS Zone Settings" +msgstr "Palvelun asetukset" + +#, fuzzy +msgid "Remove DNS zones" +msgstr "Poista rooleja" + +#, fuzzy +msgid "Remove Permission" +msgstr "Käyttöoikeus" + +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "" + +msgid "Skip DNS check" +msgstr "" + +msgid "Skip overlap check" +msgstr "" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" + +msgid "Authoritative nameserver change" +msgstr "" + +msgid "Level" +msgstr "Taso" + +msgid "Set Domain Level" +msgstr "" + +#, fuzzy +msgid "Add user group" +msgstr "Lisää käyttäjä" + +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user ID override into user group '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Group Settings" +msgstr "Tilin asetukset" + +msgid "External" +msgstr "Ulkoinen" + +msgid "Groups" +msgstr "Ryhmät" + +#, fuzzy +msgid "Group categories" +msgstr "Ryhmän nimi" + +msgid "Change to external group" +msgstr "" + +msgid "Change to POSIX group" +msgstr "" + +msgid "Non-POSIX" +msgstr "" + +msgid "POSIX" +msgstr "" + +#, fuzzy +msgid "Remove user groups" +msgstr "Poista käyttäjiä" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Group Type" +msgstr "Ryhmän nimi" + +#, fuzzy +msgid "Add HBAC rule" +msgstr "Lisää sääntö" + +#, python-brace-format +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Accessing" +msgstr "Pääsy evätty" + +#, fuzzy +msgid "Remove HBAC rules" +msgstr "Poista rooleja" + +#, python-brace-format +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Via Service" +msgstr "Palvelu" + +msgid "Who" +msgstr "" + +#, fuzzy +msgid "Add HBAC service" +msgstr "Lisää palvelu" + +#, python-brace-format +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "" + +#, fuzzy +msgid "Remove HBAC services" +msgstr "Poista palveluita" + +#, python-brace-format +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "" + +#, fuzzy +msgid "Add HBAC service group" +msgstr "Lisää palvelu" + +#, python-brace-format +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Remove HBAC service groups" +msgstr "Poista palveluita" + +#, python-brace-format +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "" + +msgid "Access Denied" +msgstr "Pääsy evätty" + +#, fuzzy +msgid "Access Granted" +msgstr "Pääsy evätty" + +#, fuzzy +msgid "Include Disabled" +msgstr "Ei käytössä" + +#, fuzzy +msgid "Include Enabled" +msgstr "Käytössä" + +msgid "HBAC Test" +msgstr "" + +msgid "Matched" +msgstr "" + +msgid "Missing values: " +msgstr "" + +msgid "New Test" +msgstr "" + +msgid "Rules" +msgstr "Säännöt" + +msgid "Run Test" +msgstr "" + +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "" + +msgid "Unmatched" +msgstr "" + +#, fuzzy +msgid "Add host" +msgstr "Lisää uusi isäntä." + +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "" + +msgid "Host Certificate" +msgstr "" + +msgid "Host Name" +msgstr "Koneen nimi" + +msgid "Delete Key, Unprovision" +msgstr "" + +#, fuzzy +msgid "Host Settings" +msgstr "Asetukset" + +msgid "Enrolled" +msgstr "" + +#, fuzzy +msgid "Enrollment" +msgstr "Rekisteröinti epäonnistui. %s\n" + +msgid "Fully Qualified Host Name" +msgstr "" + +#, fuzzy +msgid "Generate OTP" +msgstr "Yleinen" + +#, fuzzy +msgid "Generated OTP" +msgstr "Toinen OTP" + +msgid "Kerberos Key" +msgstr "" + +msgid "Kerberos Key Not Present" +msgstr "" + +msgid "Kerberos Key Present, Host Provisioned" +msgstr "" + +msgid "One-Time Password" +msgstr "Kertakäyttöinen salasana" + +#, fuzzy +msgid "One-Time Password Not Present" +msgstr "Kertakäyttöinen salasana" + +#, fuzzy +msgid "One-Time Password Present" +msgstr "Kertakäyttöinen salasana" + +#, fuzzy +msgid "Reset OTP" +msgstr "Nollaa" + +#, fuzzy +msgid "Reset One-Time Password" +msgstr "Kertakäyttöinen salasana" + +#, fuzzy +msgid "Set OTP" +msgstr "Toinen OTP" + +#, fuzzy +msgid "OTP set" +msgstr "OTP-tunnus" + +#, fuzzy +msgid "Set One-Time Password" +msgstr "Kertakäyttöinen salasana" + +#, fuzzy +msgid "Remove hosts" +msgstr "Poista rooleja" + +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "" + +msgid "Unprovision" +msgstr "" + +msgid "Are you sure you want to unprovision this host?" +msgstr "" + +msgid "Unprovisioning host" +msgstr "" + +msgid "Host unprovisioned" +msgstr "" + +msgid "Add host group" +msgstr "" + +#, python-brace-format +msgid "Add hosts into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Host Group Settings" +msgstr "Tilin asetukset" + +#, fuzzy +msgid "Remove host groups" +msgstr "Poista rooleja" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "" + +msgid "User to override" +msgstr "" + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" + +msgid "Enter trusted user login." +msgstr "" + +msgid "Profile" +msgstr "Profiili" + +msgid "Group to override" +msgstr "" + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" + +msgid "Enter trusted group name." +msgstr "" + +#, fuzzy +msgid "Add ID view" +msgstr "Lisää palvelu" + +msgid "Add group ID override" +msgstr "" + +#, fuzzy +msgid "Add user ID override" +msgstr "Lisää palvelu" + +#, python-brace-format +msgid "${primary_key} applies to:" +msgstr "" + +msgid "Applied to hosts" +msgstr "" + +msgid "Apply to host groups" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "" + +msgid "Apply to hosts" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "" + +#, python-brace-format +msgid "${primary_key} overrides:" +msgstr "" + +#, fuzzy +msgid "Remove ID views" +msgstr "Poista palveluita" + +#, fuzzy +msgid "Remove user ID overrides" +msgstr "Poista palveluita" + +#, fuzzy +msgid "Remove group ID overrides" +msgstr "Poista palveluita" + +msgid "Un-apply from host groups" +msgstr "" + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" + +#, fuzzy +msgid "Un-apply" +msgstr "Toteuta" + +msgid "Un-apply from hosts" +msgstr "" + +msgid "Un-apply ID Views from hosts" +msgstr "" + +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "" + +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "" + +#, fuzzy +msgid "Add netgroup" +msgstr "Lisää rooli" + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Netgroup Settings" +msgstr "Verkkoryhmän kuvaus" + +#, fuzzy +msgid "Netgroups" +msgstr "ryhmät" + +#, fuzzy +msgid "Remove netgroups" +msgstr "Poista rooleja" + +#, python-brace-format +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from netgroup '${primary_key}'" +msgstr "" + +msgid "Add OTP token" +msgstr "Lisää OTP-tunnus" + +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" + +#, fuzzy +msgid "Configure your token" +msgstr "Asetukset" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" + +#, fuzzy +msgid "OTP Token Settings" +msgstr "OTP-tunnukset" + +#, fuzzy +msgid "Disable token" +msgstr "Poista käytöstä" + +#, fuzzy +msgid "Enable token" +msgstr "Ota käyttöön" + +#, fuzzy +msgid "Remove OTP tokens" +msgstr "OTP-tunnukset" + +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "" + +msgid "Show QR code" +msgstr "" + +#, fuzzy +msgid "Show configuration uri" +msgstr "Asetukset" + +msgid "Counter-based (HOTP)" +msgstr "" + +msgid "Time-based (TOTP)" +msgstr "" + +msgid "Add Custom Attribute" +msgstr "" + +#, fuzzy +msgid "Permission settings" +msgstr "Käyttöoikeus" + +msgid "Attribute breakdown" +msgstr "" + +#, fuzzy +msgid "Privilege Settings" +msgstr "Palvelun asetukset" + +msgid "Public key:" +msgstr "Julkinen avain:" + +#, fuzzy +msgid "Set public key" +msgstr "Julkinen SSH-avain" + +msgid "Show/Set key" +msgstr "" + +msgid "Modified: key not set" +msgstr "" + +msgid "Modified" +msgstr "" + +msgid "New: key not set" +msgstr "" + +msgid "New: key set" +msgstr "" + +msgid "Add password policy" +msgstr "" + +#, fuzzy +msgid "Password Policy" +msgstr "Salasana" + +#, fuzzy +msgid "Remove password policies" +msgstr "Poista rooleja" + +#, fuzzy +msgid "Add ID range" +msgstr "Lisää rooli" + +#, fuzzy +msgid "Range Settings" +msgstr "Asetukset" + +msgid "Base ID" +msgstr "" + +msgid "Primary RID base" +msgstr "" + +msgid "Range size" +msgstr "" + +#, fuzzy +msgid "Domain SID" +msgstr "Toimialue" + +msgid "Secondary RID base" +msgstr "" + +#, fuzzy +msgid "Remove ID ranges" +msgstr "Poista rooleja" + +msgid "Active Directory domain with POSIX attributes" +msgstr "" + +msgid "Detect" +msgstr "" + +#, fuzzy +msgid "Local domain" +msgstr "toimialue" + +msgid "IPA trust" +msgstr "" + +msgid "Active Directory winsync" +msgstr "" + +#, fuzzy +msgid "Add RADIUS server" +msgstr "Lisää palvelu" + +#, fuzzy +msgid "RADIUS Proxy Server Settings" +msgstr "Palvelun asetukset" + +#, fuzzy +msgid "Remove RADIUS servers" +msgstr "Poista palveluita" + +#, fuzzy +msgid "Realm Domains" +msgstr "Toimialue" + +msgid "Check DNS" +msgstr "" + +msgid "Do you also want to perform DNS check?" +msgstr "" + +#, fuzzy +msgid "Force Update" +msgstr "Päivitä" + +#, fuzzy +msgid "Add SELinux user map" +msgstr "SELinux-käyttäjäkartta" + +#, python-brace-format +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Remove selinux user maps" +msgstr "Poista käyttäjiä" + +#, python-brace-format +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Server Roles" +msgstr "Palvelimet" + +#, fuzzy +msgid "Server Role" +msgstr "Palvelimen nimi" + +msgid "Warning: Consider service replication" +msgstr "" + +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" + +#, fuzzy +msgid "Delete Server" +msgstr "Poista käyttäjä" + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" + +msgid "Add service" +msgstr "Lisää palvelu" + +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "" + +#, fuzzy +msgid "Service Certificate" +msgstr "Palvelun nimi" + +msgid "Service Settings" +msgstr "Palvelun asetukset" + +#, fuzzy +msgid "Provisioning" +msgstr "Käyttöoikeus" + +msgid "Remove services" +msgstr "Poista palveluita" + +#, python-brace-format +msgid "Remove service '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing service '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to unprovision this service?" +msgstr "" + +msgid "Unprovisioning service" +msgstr "" + +#, fuzzy +msgid "Service unprovisioned" +msgstr "Palveluvalinnat" + +msgid "Kerberos Key Present, Service Provisioned" +msgstr "" + +msgid "SSH public keys" +msgstr "Julkisia SSH-avaimia" + +msgid "SSH public key:" +msgstr "Julkinen SSH-avain:" + +msgid "Set SSH key" +msgstr "" + +msgid "Are you sure you want to activate selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "" + +#, fuzzy +msgid "Add stage user" +msgstr "Lisää käyttäjä" + +#, fuzzy +msgid "Stage users" +msgstr "Vaihe" + +#, fuzzy +msgid "Preserved users" +msgstr "Poista käyttäjiä" + +#, fuzzy +msgid "Remove preserved users" +msgstr "Poista käyttäjiä" + +#, fuzzy +msgid "Remove stage users" +msgstr "Poista käyttäjiä" + +msgid "Are you sure you want to stage selected users?" +msgstr "" + +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "" + +msgid "Are you sure you want to restore selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "" + +msgid "User categories" +msgstr "" + +#, fuzzy +msgid "Add subid" +msgstr "Lisää sääntö" + +msgid "Assigned subids" +msgstr "" + +msgid "DNA remaining" +msgstr "" + +msgid "SubGID range size" +msgstr "" + +msgid "SubGID range start" +msgstr "" + +msgid "SubUID range size" +msgstr "" + +msgid "SubUID range start" +msgstr "" + +msgid "Remaining subids" +msgstr "" + +msgid "Subordinate ID Statistics" +msgstr "" + +#, fuzzy +msgid "Add sudo command" +msgstr "komento" + +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "" + +msgid "Remove sudo commands" +msgstr "" + +#, python-brace-format +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "" + +msgid "Add sudo command group" +msgstr "" + +#, python-brace-format +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "" + +msgid "Remove sudo command groups" +msgstr "" + +#, python-brace-format +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Add sudo rule" +msgstr "Lisää sääntö" + +msgid "Add sudo option" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "" + +msgid "Allow" +msgstr "" + +#, fuzzy +msgid "Any Command" +msgstr "Komennot" + +#, fuzzy +msgid "Any Group" +msgstr "Ryhmä" + +#, fuzzy +msgid "Run Commands" +msgstr "Komennot" + +msgid "Deny" +msgstr "" + +msgid "Access this host" +msgstr "" + +#, fuzzy +msgid "Option added" +msgstr "Valinnat" + +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "" + +#, fuzzy +msgid "Remove sudo rules" +msgstr "Poista rooleja" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "" + +msgid "As Whom" +msgstr "" + +msgid "Specified Commands and Groups" +msgstr "" + +msgid "Specified Groups" +msgstr "" + +msgid "Remove sudo options" +msgstr "" + +msgid "Autogenerated" +msgstr "" + +msgid "Segment details" +msgstr "" + +#, fuzzy +msgid "Replication configuration" +msgstr "Asetukset" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" + +#, fuzzy +msgid "Add IPA location" +msgstr "sijainti" + +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "" + +msgid "Remove IPA locations" +msgstr "" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "" + +msgid "Add topology segment" +msgstr "" + +#, fuzzy +msgid "Remove topology segments" +msgstr "Poista rooleja" + +msgid "Account" +msgstr "Tili" + +#, fuzzy +msgid "Add trust" +msgstr "Lisää sääntö" + +msgid "Administrative account" +msgstr "Hallinnollinen tili" + +msgid "SID blocklists" +msgstr "" + +#, fuzzy +msgid "Trust Settings" +msgstr "Tilin asetukset" + +msgid "Establish using" +msgstr "" + +#, fuzzy +msgid "Fetch domains" +msgstr "toimialue" + +#, fuzzy +msgid "Pre-shared password" +msgstr "Vaihda salasana" + +#, fuzzy +msgid "Remove trusts" +msgstr "Poista käyttäjiä" + +#, fuzzy +msgid "Remove domains" +msgstr "Poista rooleja" + +#, fuzzy +msgid "Trust direction" +msgstr "Uudelleenohjeus" + +msgid "Trust status" +msgstr "" + +msgid "Trust type" +msgstr "" + +msgid "Alternative UPN suffixes" +msgstr "" + +msgid "User attributes for SMB services" +msgstr "" + +msgid "Path to a script executed on a Windows system at logon" +msgstr "" + +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "" + +msgid "Path to a user home directory, in UNC format" +msgstr "" + +msgid "Drive to mount a home directory" +msgstr "" + +msgid "Account Settings" +msgstr "Tilin asetukset" + +#, fuzzy +msgid "Account Status" +msgstr "Tilin asetukset" + +#, fuzzy +msgid "Active users" +msgstr "Poista käyttäjiä" + +msgid "Add user" +msgstr "Lisää käyttäjä" + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "" + +msgid "Auto assign subordinate ids" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to auto-assign a subordinate id to user ${object}?" +msgstr "" + +#, fuzzy +msgid "Contact Settings" +msgstr "Tilin asetukset" + +msgid "Delete mode" +msgstr "Poista moodi" + +#, fuzzy +msgid "Employee Information" +msgstr "Tietoja liitoksesta" + +msgid "Error changing account status" +msgstr "" + +msgid "Password expiration" +msgstr "Salasanan vanheneminen" + +#, fuzzy +msgid "Mailing Address" +msgstr "Sähköpostiosoite" + +#, fuzzy +msgid "Misc. Information" +msgstr "Tietoja liitoksesta" + +msgid "delete" +msgstr "poista" + +msgid "preserve" +msgstr "säilytä" + +msgid "No private group" +msgstr "" + +msgid "Remove users" +msgstr "Poista käyttäjiä" + +#, python-brace-format +msgid "Remove user '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" + +#, python-brace-format +msgid "Click to ${action}" +msgstr "" + +msgid "Unlock" +msgstr "Avaa" + +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "" + +#, fuzzy +msgid "Add vault" +msgstr "Lisää sääntö" + +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "" + +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" + +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" + +msgid "Asymmetric" +msgstr "" + +msgid "Vaults Config" +msgstr "" + +msgid "Members" +msgstr "Jäsenet" + +msgid "My User Vaults" +msgstr "" + +#, fuzzy +msgid "Owners" +msgstr "Omistaja" + +#, fuzzy +msgid "Remove vaults" +msgstr "Poista rooleja" + +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Service Vaults" +msgstr "Palvelut" + +msgid "Shared" +msgstr "Jaettu" + +#, fuzzy +msgid "Shared Vaults" +msgstr "Jaettu" + +msgid "Standard" +msgstr "Tavallinen" + +msgid "Symmetric" +msgstr "" + +msgid "Vault Type" +msgstr "" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" + +#, fuzzy +msgid "User Vaults" +msgstr "Käyttäjät" + +#, fuzzy +msgid "Current password is required" +msgstr "Nykyinen salasana" + +#, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "" + +msgid "First OTP" +msgstr "Ensimmäinen OTP" + +#, fuzzy +msgid "New password is required" +msgstr "Uusi salasana" + +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" + +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" + +msgid "Token synchronization failed" +msgstr "" + +msgid "The username, password or token codes are not correct" +msgstr "" + +msgid "Token was synchronized" +msgstr "" + +msgid "Password change complete" +msgstr "" + +#, fuzzy +msgid "Your password has expired. Please enter a new password." +msgstr "Istuntosi on vahventunut. Ole hyvä ja kirjaudu uudelleen sisään." + +msgid "Passwords must match" +msgstr "Salasanojen täytyy täsmätä" + +msgid "Password reset was not successful." +msgstr "" + +#, fuzzy +msgid "Reset your password." +msgstr "Käyttäjän salasana" + +msgid "Second OTP" +msgstr "Toinen OTP" + +#, fuzzy +msgid "Verify Password" +msgstr "Uusi salasana" + +msgid "Are you sure you want to delete selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "" + +msgid "Are you sure you want to disable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "" + +msgid "Are you sure you want to enable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "" + +msgid "Some entries were not deleted" +msgstr "" + +msgid "Quick Links" +msgstr "" + +msgid "Select All" +msgstr "Valitse kaikki" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" + +#, fuzzy +msgid "Unselect All" +msgstr "Valitse kaikki" + +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" + +msgid "Working" +msgstr "Toimii" + +msgid "Audit" +msgstr "Auditointi" + +msgid "Authentication" +msgstr "Tunnistatuminen" + +#, fuzzy +msgid "Automount" +msgstr "Tili" + +msgid "DNS" +msgstr "DNS" + +msgid "Host-Based Access Control" +msgstr "" + +msgid "Identity" +msgstr "Identiteetti" + +#, fuzzy +msgid "IPA Server" +msgstr "Palvelin" + +msgid "Network Services" +msgstr "Verkon palvelut" + +msgid "Policy" +msgstr "" + +msgid "Role-Based Access Control" +msgstr "" + +msgid "Subordinate IDs" +msgstr "" + +msgid "Sudo" +msgstr "" + +msgid "Topology" +msgstr "Topologia" + +msgid "Trusts" +msgstr "" + +msgid "True" +msgstr "" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" + +msgid "API Browser" +msgstr "" + +#, fuzzy +msgid "First" +msgstr "Ensimmäinen OTP" + +#, fuzzy +msgid "Last" +msgstr "Sukunimi" + +msgid "Next" +msgstr "Seuraava" + +msgid "Page" +msgstr "" + +msgid "Prev" +msgstr "" + +msgid "Undo" +msgstr "" + +msgid "Undo this change." +msgstr "" + +msgid "Undo All" +msgstr "" + +msgid "Undo all changes in this field." +msgstr "" + +msgid "Text does not match field pattern" +msgstr "" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" + +#, fuzzy +msgid "Must be a decimal number" +msgstr "Tulee olla positiivinen numero" + +#, fuzzy +msgid "Format error" +msgstr "Jäsennysvirhe" + +#, fuzzy +msgid "Must be an integer" +msgstr "Tulee olla positiivinen numero" + +msgid "Not a valid IP address" +msgstr "" + +msgid "Not a valid IPv4 address" +msgstr "" + +msgid "Not a valid IPv6 address" +msgstr "" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "" + +msgid "Parse error" +msgstr "Jäsennysvirhe" + +msgid "Must be a positive number" +msgstr "Tulee olla positiivinen numero" + +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "" + +#, fuzzy +msgid "Required field" +msgstr "Vaaditaan" + +msgid "Unsupported value" +msgstr "Ei tuettu arvo" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +#, fuzzy +msgid "" +"\n" +"IPA locations\n" +msgstr "sijainti" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +msgid "location" +msgstr "sijainti" + +#, fuzzy +msgid "locations" +msgstr "sijainti" + +#, fuzzy +msgid "IPA Locations" +msgstr "Sijainti" + +#, fuzzy +msgid "IPA Location" +msgstr "Sijainti" + +#, fuzzy +msgid "Location name" +msgstr "Sijainti" + +#, fuzzy +msgid "IPA location name" +msgstr "Toimialueen nimi" + +#, fuzzy +msgid "IPA Location description" +msgstr "Profiilin kuvaus" + +msgid "Servers" +msgstr "Palvelimet" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +#, fuzzy +msgid "Add a new IPA location." +msgstr "Lisää uusi isäntä." + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "" + +msgid "Delete an IPA location." +msgstr "" + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "" + +msgid "Modify information about an IPA location." +msgstr "" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "" + +msgid "Search for IPA locations." +msgstr "" + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an IPA location." +msgstr "" + +#, fuzzy +msgid "Servers in location" +msgstr "Palvelimen nimi" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +#, fuzzy +msgid "netgroups" +msgstr "ryhmät" + +#, fuzzy +msgid "Netgroup" +msgstr "ryhmä" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +msgid "One time password commands" +msgstr "Kertakäyttöinen salasana" + +#, fuzzy +msgid "OTP configuration options" +msgstr "Kertakäyttöisen salasanan määritykset" + +msgid "OTP Configuration" +msgstr "Kertakäyttöisen salasanan määritykset" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" +"\n" +"OTP-tunnukset\n" + +#, fuzzy +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" +"\n" +"OTP-tunnukset\n" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "OTP-tunnus" + +msgid "OTP tokens" +msgstr "OTP-tunnukset" + +msgid "OTP Tokens" +msgstr "OTP-tunnukset" + +msgid "OTP Token" +msgstr "OTP-tunnus" + +#, fuzzy +msgid "URI" +msgstr "URL" + +#, fuzzy, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "Lisää OTP-tunnus" + +msgid "cannot be empty" +msgstr "" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"If the user authentication method is set to password+OTP, the user should\n" +"pass the --otp option when resetting the password.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To reset your own password when password+OTP is set as authentication " +"method:\n" +" ipa passwd --otp\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +msgid "The OTP if the user has a token configured" +msgstr "" + +#, fuzzy, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "Vaihda salasana" + +#, fuzzy +msgid "" +"\n" +"Permissions\n" +msgstr "Käyttöoikeus" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +#, fuzzy +msgid "" +"\n" +"Managed permissions\n" +msgstr "ipa-getkeytabilla on väärät käyttöoikeudet?\n" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "must be enclosed in parentheses" +msgstr "" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "" + +#, python-format +msgid "Deprecated; use %s" +msgstr "" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, fuzzy, python-format +msgid "Entry %s not found" +msgstr "ei löytynyt" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, python-format +msgid "option was renamed; use %s" +msgstr "" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, fuzzy, python-format +msgid "%s: group not found" +msgstr "ei löytynyt" + +msgid "target and targetgroup are mutually exclusive" +msgstr "" + +msgid "subtree and type are mutually exclusive" +msgstr "" + +msgid "Bad search filter" +msgstr "" + +#, fuzzy, python-format +msgid "Entry %s does not exist" +msgstr "Ryhmää '%s' ei ole olemassa" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, python-format +msgid "Added permission \"%(value)s\"" +msgstr "" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "" + +msgid "cannot delete managed permissions" +msgstr "" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "" + +#, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +#, fuzzy +msgid "invalid attribute name" +msgstr "virheellinen porttinumero" + +msgid "invalid port number" +msgstr "virheellinen porttinumero" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +#, fuzzy +msgid "RADIUS Servers" +msgstr "Palvelimet" + +#, fuzzy +msgid "RADIUS Server" +msgstr "Palvelin" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +#, fuzzy +msgid "Realm domains" +msgstr "toimialue" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "roles" +msgstr "roolit" + +msgid "Role" +msgstr "Rooli" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"API Schema\n" +msgstr "" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +msgid "Documentation" +msgstr "Dokumentaatio" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +msgid "Help topic" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +#, fuzzy +msgid "Method name" +msgstr "koneen nimi" + +msgid "Display information about a command." +msgstr "" + +msgid "Search for commands." +msgstr "" + +msgid "Return command defaults" +msgstr "" + +#, python-brace-format +msgid "{oname}: {command_name} not found" +msgstr "" + +msgid "Display information about a class." +msgstr "" + +msgid "Search for classes." +msgstr "" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +msgid "Required" +msgstr "Vaaditaan" + +#, fuzzy +msgid "Multi-value" +msgstr "arvo" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +msgid "CLI name" +msgstr "Sukunimi" + +msgid "Confirm (password)" +msgstr "Vahvista (salasana)" + +msgid "Default" +msgstr "Oletus" + +#, fuzzy +msgid "Default from" +msgstr "Oletus" + +msgid "Label" +msgstr "Nimiö" + +#, fuzzy +msgid "Convert on server" +msgstr "Palvelimen isäntänimi" + +#, fuzzy +msgid "Option group" +msgstr "Omistajaryhmät" + +msgid "Sensitive" +msgstr "" + +#, fuzzy +msgid "Positional argument" +msgstr "Sijainnilliset parametrit" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command output." +msgstr "" + +msgid "Search for command outputs." +msgstr "" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "self service permission" +msgstr "" + +#, fuzzy +msgid "self service permissions" +msgstr "Palveluvalinnat" + +#, fuzzy +msgid "Self Service Permissions" +msgstr "Palveluvalinnat" + +#, fuzzy +msgid "Self Service Permission" +msgstr "Käyttöoikeus" + +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +#, fuzzy +msgid "SELinux User Map rule" +msgstr "SELinux-käyttäjäkartta" + +#, fuzzy +msgid "SELinux User Map rules" +msgstr "SELinux-käyttäjäkartat" + +msgid "SELinux User Maps" +msgstr "SELinux-käyttäjäkartat" + +msgid "SELinux User Map" +msgstr "SELinux-käyttäjäkartta" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "" + +#, fuzzy, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "SELinux-käyttäjäkartat" + +#, fuzzy, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "SELinux-käyttäjäkartat" + +#, fuzzy, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "SELinux-käyttäjäkartat" + +#, fuzzy, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "SELinux-käyttäjäkartta" +msgstr[1] "SELinux-käyttäjäkartta" + +#, fuzzy, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "SELinux-käyttäjäkartat" + +#, fuzzy, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "SELinux-käyttäjäkartat" + +#, fuzzy +msgid "" +"\n" +"IPA server roles\n" +msgstr "Käytettävä IPA-palvelin" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +#, fuzzy +msgid "server role" +msgstr "palvelin" + +#, fuzzy +msgid "server roles" +msgstr "Poista rooleja" + +#, fuzzy +msgid "IPA Server Roles" +msgstr "Käytettävä IPA-palvelin" + +#, fuzzy +msgid "IPA Server Role" +msgstr "Käytettävä IPA-palvelin" + +#, fuzzy +msgid "IPA server role name" +msgstr "Käytettävä IPA-palvelin" + +#, fuzzy +msgid "Role status" +msgstr "Roolit" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +#, fuzzy +msgid "IPA role name" +msgstr "Ryhmän nimi" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +#, fuzzy, python-format +msgid "authentication indicators not allowed in service \"%s\"" +msgstr "Tunnistatuminen" + +msgid "Malformed principal" +msgstr "" + +msgid "{} is required by the IPA master" +msgstr "" + +msgid "service" +msgstr "palvelu" + +msgid "services" +msgstr "palvelut" + +#, fuzzy +msgid "Service principal alias" +msgstr "Palveluvalinnat" + +msgid "Base-64 encoded service certificate" +msgstr "" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +#, fuzzy +msgid "Add a new IPA service." +msgstr "Lisää palvelu" + +#, fuzzy, python-format +msgid "Added service \"%(value)s\"" +msgstr "Lisää palvelu" + +msgid "force principal name even if host not in DNS" +msgstr "" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +#, fuzzy +msgid "Add a new SMB service." +msgstr "Lisää palvelu" + +#, fuzzy +msgid "SMB service NetBIOS name" +msgstr "Palvelun nimi" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to a service" +msgstr "" + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a service" +msgstr "" + +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +#, fuzzy +msgid "service delegation rules" +msgstr "Palveluvalinnat" + +#, fuzzy +msgid "Service delegation rules" +msgstr "Palveluvalinnat" + +#, fuzzy +msgid "Service delegation rule" +msgstr "Palveluvalinnat" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +#, fuzzy +msgid "service delegation targets" +msgstr "Palvelun asetukset" + +#, fuzzy +msgid "Service delegation targets" +msgstr "Palvelun asetukset" + +#, fuzzy +msgid "Service delegation target" +msgstr "Palvelun asetukset" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +#, fuzzy +msgid "Stage Users" +msgstr "Vaihe" + +#, fuzzy +msgid "Stage User" +msgstr "Vaihe" + +#, fuzzy +msgid "stage user" +msgstr "Poista käyttäjä" + +#, fuzzy +msgid "stage users" +msgstr "käyttäjät" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "" + +msgid "givenname is required" +msgstr "" + +#, fuzzy +msgid "sn is required" +msgstr "Vaaditaan" + +#, fuzzy, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "Poista käyttäjä" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Subordinate ids\n" +"\n" +"Manage subordinate user and group ids for users\n" +"\n" +"EXAMPLES:\n" +"\n" +" Auto-assign a subordinate id range to current user\n" +" ipa subid-generate\n" +"\n" +" Auto-assign a subordinate id range to user alice:\n" +" ipa subid-generate --owner=alice\n" +"\n" +" Find subordinate ids for user alice:\n" +" ipa subid-find --owner=alice\n" +"\n" +" Match entry by any subordinate uid in range:\n" +" ipa subid-match --subuid=2147483649\n" +msgstr "" + +msgid "Subordinate id" +msgstr "" + +msgid "Subordinate ids" +msgstr "" + +#, fuzzy +#| msgid "Profile description" +msgid "Subordinate id description" +msgstr "Profiilin kuvaus" + +msgid "Owning user of subordinate id entry" +msgstr "" + +msgid "Start value for subordinate user ID (subuid) range" +msgstr "" + +msgid "Subordinate user ID count" +msgstr "" + +msgid "Start value for subordinate group ID (subgid) range" +msgstr "" + +msgid "Subordinate group ID count" +msgstr "" + +#, python-format +msgid "" +"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." +msgstr "" + +#, python-format +msgid "'%(dn)s is not a valid user" +msgstr "" + +msgid "subgidnumber must be equal to subuidnumber" +msgstr "" + +#, fuzzy +msgid "Add a new subordinate id." +msgstr "Lisää uusi isäntä." + +#, fuzzy, python-format +msgid "Added subordinate id \"%(value)s\"" +msgstr "Lisää palvelu" + +#, fuzzy +msgid "Delete a subordinate id." +msgstr "Poista käyttäjä" + +#, fuzzy, python-format +msgid "Deleted subordinate id \"%(value)s\"" +msgstr "Poista käyttäjä" + +#, fuzzy +msgid "Modify a subordinate id." +msgstr "Muokkaa ryhmää." + +#, fuzzy, python-format +msgid "Modified subordinate id \"%(value)s\"" +msgstr "SELinux-käyttäjäkartat" + +msgid "Search for subordinate id." +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d subordinate id matched" +msgid_plural "%(count)d subordinate ids matched" +msgstr[0] "SELinux-käyttäjäkartta" +msgstr[1] "SELinux-käyttäjäkartta" + +msgid "Display information about a subordinate id." +msgstr "" + +msgid "Generate and auto-assign subuid and subgid range to user entry" +msgstr "" + +msgid "Match users by any subordinate uid in their range" +msgstr "" + +msgid "SubUID match" +msgstr "" + +msgid "Match value for subordinate user ID" +msgstr "" + +msgid "Subordinate id statistics" +msgstr "" + +#, python-format +msgid "%(remaining)i remaining subordinate id ranges" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +#, fuzzy +msgid "sudo command" +msgstr "komento" + +#, fuzzy +msgid "sudo commands" +msgstr "komennot" + +#, fuzzy +msgid "Sudo Commands" +msgstr "Komennot" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +#, fuzzy +msgid "Topology Segments" +msgstr "Topologia" + +#, fuzzy +msgid "Topology Segment" +msgstr "Topologia" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +msgid "%(value)s" +msgstr "arvo" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +#, fuzzy +msgid "Topology suffixes" +msgstr "Topologia" + +#, fuzzy +msgid "Topology suffix" +msgstr "Topologia" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +#, fuzzy +msgid "External trust" +msgstr "Ulkoinen" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +#, fuzzy +msgid "trust type" +msgstr "luottamustyyppi, jota ei tueta" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +msgid "trust configuration" +msgstr "Asetukset" + +#, fuzzy +msgid "Global Trust Configuration" +msgstr "Kertakäyttöisen salasanan määritykset" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "luottamustyyppi, jota ei tueta" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "" + +msgid "SID" +msgstr "" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +#, fuzzy +msgid "trust domain" +msgstr "toimialue" + +#, fuzzy +msgid "trust domains" +msgstr "toimialue" + +msgid "Trusted domains" +msgstr "" + +#, fuzzy +msgid "Trusted domain" +msgstr "toimialue" + +#, fuzzy +msgid "Domain enabled" +msgstr "Toimialueen nimi" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "users" +msgstr "käyttäjät" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "" + +msgid "Failed logins" +msgstr "" + +#, fuzzy +msgid "Last successful authentication" +msgstr "Vaatii ennakkotunnistautumisen" + +#, fuzzy +msgid "Last failed authentication" +msgstr "Tunnistatuminen" + +#, fuzzy +msgid "Time now" +msgstr "Aikakatkaisu" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, fuzzy, python-format +msgid "%(host)s failed" +msgstr "fork() epäonnistui\n" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the user entry" +msgstr "" + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +#, fuzzy +msgid "Vault Container" +msgstr "Jatka" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +#, fuzzy +msgid "Host is not supported" +msgstr "toimialueseen ei luoteta" + +msgid "KRA service is not enabled" +msgstr "" + +#, fuzzy +msgid "Deleted vault container" +msgstr "Poista käyttäjä" + +#, fuzzy, python-format +msgid "owner %s" +msgstr "Omistaja" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +#, fuzzy +msgid "vault" +msgstr "Oletus" + +#, fuzzy +msgid "vaults" +msgstr "Oletus" + +#, fuzzy +msgid "Vaults" +msgstr "Oletus" + +#, fuzzy +msgid "Vault" +msgstr "Oletus" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +#, fuzzy +msgid "Add a vault." +msgstr "Lisää sääntö" + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "Vault configuration" +msgstr "Asetukset" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "" + +msgid "Retrieve data from a vault." +msgstr "" + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +#, fuzzy +msgid "operation not defined" +msgstr "Toimenpide epäonnistui: %s\n" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +#, fuzzy +msgid "password policy" +msgstr "salasana" + +#, fuzzy +msgid "password policies" +msgstr "salasana" + +#, fuzzy +msgid "Password Policies" +msgstr "Salasana" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +#, fuzzy +msgid "User check" +msgstr "Käyttäjätunnus" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be equal to or greater than the minimum." +msgstr "" + +msgid "cannot delete global password policy" +msgstr "" + +msgid "priority cannot be set on global policy" +msgstr "" + +#, fuzzy +msgid "" +"\n" +"IPA servers\n" +msgstr "palvelimet" + +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "" + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +msgid "server" +msgstr "palvelin" + +msgid "servers" +msgstr "palvelimet" + +#, fuzzy +msgid "IPA Servers" +msgstr "Käytettävä IPA-palvelin" + +#, fuzzy +msgid "Server location" +msgstr "sijainti" + +#, fuzzy +msgid "Service weight" +msgstr "Palvelun asetukset" + +#, fuzzy +msgid "Weight for server services" +msgstr "Poista palveluita" + +#, fuzzy +msgid "Service relative weight" +msgstr "Palvelun asetukset" + +msgid "Relative weight for server services (counts per location)" +msgstr "" + +msgid "Enabled server roles" +msgstr "" + +msgid "List of enabled roles" +msgstr "" + +msgid "Modify information about an IPA server." +msgstr "" + +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +#, python-format +msgid "Failed to remove server from security domain: %s" +msgstr "" + +msgid "Server has already been deleted" +msgstr "" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +msgid "State" +msgstr "Tila" + +#, fuzzy +msgid "Server state" +msgstr "Palvelimen nimi" + +#, python-format +msgid "Changed server state of \"%(value)s\"." +msgstr "" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." +msgstr "" + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"Each option needs to be added separately and no validation is done whether\n" +"the option is known by sudo or is in a valid format. Environment variables\n" +"also need to be set individually. For example env_keep=\"FOO BAR\" in " +"sudoers\n" +"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" +"+=BAR.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set multiple default Sudo options:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate' --" +"sudooption mail_badpass\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +#, fuzzy +msgid "sudo rules" +msgstr "Lisää sääntö" + +#, fuzzy +msgid "Sudo Rules" +msgstr "Säännöt" + +msgid "Sudo Rule" +msgstr "" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +msgid "command" +msgstr "komento" + +msgid "commands" +msgstr "komennot" + +#, fuzzy +msgid "runAs user" +msgstr "Lisää käyttäjä" + +#, fuzzy +msgid "runAs users" +msgstr "Lisää käyttäjä" + +#, fuzzy +msgid "group runAs" +msgstr "ryhmät" + +#, fuzzy +msgid "runAs groups" +msgstr "Omistajaryhmät" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" msgstr "" msgid "Request must be a dict" @@ -23769,6 +24051,17 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + #, python-format msgid "" "\n" @@ -23788,31 +24081,6 @@ msgstr "" msgid "Topology does not allow server %(server)s to replicate with servers:" msgstr "" -msgid "Trusting forest" -msgstr "" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Non-Active Directory domain" -msgstr "" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - msgid "" "\n" "Classes to manage trust joins using DCE-RPC calls\n" @@ -23886,6 +24154,9 @@ msgstr "toimialueseen ei luoteta" msgid "trusted domain object" msgstr "" +msgid "domain is not trusted" +msgstr "toimialueseen ei luoteta" + msgid "no trusted domain matched the specified flat name" msgstr "" @@ -23975,6 +24246,37 @@ msgstr "" msgid "must be at least 1" msgstr "" +msgid "Out of memory\n" +msgstr "Muisti loppui\n" + +msgid "Warning unrecognized encryption type.\n" +msgstr "" + +msgid "Warning unrecognized salt type.\n" +msgstr "" + +msgid "Out of memory!?\n" +msgstr "Muisti loppui!?\n" + +msgid "Enctype comparison failed!\n" +msgstr "" + +#, fuzzy +msgid "Password is too long!\n" +msgstr "Salasanat eivät täsmää!\n" + +#, fuzzy +msgid "Failed to create random key!\n" +msgstr "Tarkistuksen luominen epäonnistui!\n" + +#, fuzzy +msgid "Failed to create key!\n" +msgstr "Tarkistuksen luominen epäonnistui!\n" + +#, fuzzy +msgid "Bad or unsupported salt type.\n" +msgstr "luottamustyyppi, jota ei tueta" + #, fuzzy, c-format msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" msgstr "LDAP-kirjaston alustaminen epäonnistui!\n" @@ -24002,28 +24304,3 @@ msgstr "" #, fuzzy msgid "Unable to initialize STARTTLS session\n" msgstr "LDAP-kirjaston alustaminen epäonnistui!\n" - -msgid "Warning unrecognized encryption type.\n" -msgstr "" - -msgid "Warning unrecognized salt type.\n" -msgstr "" - -msgid "Enctype comparison failed!\n" -msgstr "" - -#, fuzzy -msgid "Password is too long!\n" -msgstr "Salasanat eivät täsmää!\n" - -#, fuzzy -msgid "Failed to create random key!\n" -msgstr "Tarkistuksen luominen epäonnistui!\n" - -#, fuzzy -msgid "Failed to create key!\n" -msgstr "Tarkistuksen luominen epäonnistui!\n" - -#, fuzzy -msgid "Bad or unsupported salt type.\n" -msgstr "luottamustyyppi, jota ei tueta" diff --git a/po/fr.po b/po/fr.po index 3eec2f47d..be5f85772 100644 --- a/po/fr.po +++ b/po/fr.po @@ -974,13 +974,13 @@ msgstr "" msgid "" "\n" " Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red " -"Hat\"\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" msgstr "" "\n" " Modifier le fournisseur :\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red " -"Hat\"\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" msgid "" "\n" @@ -2374,8 +2374,8 @@ msgid "" "with\n" " posixGroup object class is allowed):\n" "\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB " -"Group\"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" msgstr "" "\n" "Relations d'approbation entre domaines\n" @@ -2474,8 +2474,8 @@ msgstr "" "3. Revenir au groupe caché par défaut comme groupe de recours principal\n" " (tout groupe de la classe objet « posixGroup » est autorisé) :\n" "\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB " -"Group\"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" msgid "" "\n" @@ -3085,8 +3085,8 @@ msgid "" "\n" "EXAMPLES:\n" "\n" -" Create a rule, \"test1\", that grants all users access to the host " -"\"server\" from\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" " anywhere:\n" " ipa hbacrule-add --usercat=all test1\n" " ipa hbacrule-add-host --hosts=server.example.com test1\n" @@ -4328,8 +4328,8 @@ msgid "" " ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" "\n" " Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red " -"Hat\"\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" "\n" " Delete a token:\n" " ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" @@ -4351,8 +4351,8 @@ msgstr "" " ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" "\n" " Modifier le fournisseur :\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red " -"Hat\"\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" "\n" " Supprimer un jeton :\n" " ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" @@ -15762,8 +15762,8 @@ msgid "" "The key,info pair must be unique. A key named %(key)s with info %(info)s " "already exists" msgstr "" -"La paire « key/info » doit être unique. Une clé nommée %(key)s avec " -"l'info%(info)s existe déjà." +"La paire « key/info » doit être unique. Une clé nommée %(key)s avec l'info" +"%(info)s existe déjà." msgid "The keytab file to remove the principcal(s) from" msgstr "" @@ -29496,6 +29496,515 @@ msgstr "Impossible d'initialiser la bibliothèque LDAP !\n" msgid "Password is too long!\n" msgstr "Taille de l'historique des mots de passe" +msgid "Output debug info" +msgstr "" + +#, c-format +msgid "DNS discovery for domain %s\n" +msgstr "" + +#, fuzzy, c-format +msgid "Discovered server %s\n" +msgstr "Publié par les serveurs" + +#, c-format +msgid "Using discovered server %s\n" +msgstr "" + +#, c-format +msgid "DNS Discovery failed\n" +msgstr "" + +#, c-format +msgid "Using server from config %s\n" +msgstr "" + +#, fuzzy, c-format +msgid "Using provided server %s\n" +msgstr "« Ping » sur un serveur distant." + +#, fuzzy +msgid "Status of the certificate" +msgstr "Fichier dans lequel stocker le certificat." + +msgid "Enable adding subids to new users" +msgstr "" + +#, fuzzy +msgid "Setup SID configuration" +msgstr "configuration des relations d'approbation" + +msgid "New users and groups automatically get a SID assigned" +msgstr "" + +#, fuzzy +msgid "Add SIDs" +msgstr "Ajouter une nouvelle vue d'identifiants" + +msgid "Add SIDs for existing users and groups" +msgstr "" + +#, fuzzy +msgid "NetBIOS name of the IPA domain" +msgstr "Nom du domaine approuvé" + +#, fuzzy +msgid "not allowed to enable SID generation" +msgstr "non autorisé à effectuer l'opération : %s" + +msgid "" +"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " +"allowed. Empty string is not allowed." +msgstr "" + +#, fuzzy +msgid "Failed to call DBus" +msgstr "Échec lors de l'ajout" + +#, fuzzy +msgid "Configuration of SID failed. See details in the error log" +msgstr "" +"Échec de la récupération des domaines depuis la forêt approuvée. Voir les " +"informations détaillées dans le journal d'erreur." + +#, python-format +msgid "You cannot specify %s without the --enable-sid option" +msgstr "" + +#, python-format +msgid "" +"No answers could be found in the specified lifetime for DNS reverse zone " +"%(revdns)s" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"and an ID range of a trusted domain may set\n" +" - auto-private-groups: [true|false|hybrid] automatic creation of private " +"groups\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +#, fuzzy +msgid "Auto private groups" +msgstr "Pas de groupe privé" + +msgid "Auto creation of private groups, one of allowed values" +msgstr "" + +#, fuzzy +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --auto-private-groups\n" +"\n" +" may be given for a new ID range for a trusted AD domain and\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" +"\n" +"Ajouter une nouvelle plage d'identifiants.\n" +"\n" +" Pour ajouter une nouvelle plage d'identifiants vous devez toujours " +"préciser\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" En outre,\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" seront indiqués pour une nouvelle plage d'ID dans le domaine local alors " +"que\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" doivent l'être pour ajouter une nouvelle plage pour un domaine AD de " +"confiance.\n" +"\n" +" AVERTISSEMENT :\n" +"\n" +" Le greffon DNA dans 389-ds alloue des ID selon les plages configurées au\n" +" titre du domaine local. Actuellement le greffon DNA *ne peut pas* être\n" +" lui-même reconfiguré selon les plages locales définies par " +"l'intermédiaire\n" +" de cette famille de commandes.\n" +"\n" +" Un changement manuel de configuration doit être opéré dans la " +"configuration\n" +" du greffon DNA pour cadrer avec la nouvelle plage locale. En particulier,\n" +" l'attribut « dnaNextRange » de « cn=Posix IDs »,^n« cn=Distributed Numeric " +"Assignment Plugin », « cn=plugins », « cn=config »\n" +" doivent être modifiés pour correspondre à cette nouvelle plage.\n" +" " + +#, fuzzy +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" +"private-groups is specified" +msgstr "" +"Le type de plage IPA doit être « ipa-ad-trust » ou « ipa-ad-trust-posix » " +"lorsque le SID du domaine approuvé est indiqué." + +#, fuzzy +msgid "Add subid" +msgstr "règle sudo" + +#, fuzzy +msgid "Assigned subids" +msgstr "Vue d'identifiants attribuée" + +msgid "DNA remaining" +msgstr "" + +#, fuzzy +msgid "SubGID range size" +msgstr "Taille de la plage" + +msgid "SubGID range start" +msgstr "" + +#, fuzzy +msgid "SubUID range size" +msgstr "Taille de la plage" + +msgid "SubUID range start" +msgstr "" + +msgid "Remaining subids" +msgstr "" + +msgid "Subordinate ID Statistics" +msgstr "" + +msgid "Auto assign subordinate ids" +msgstr "" + +#, fuzzy, python-brace-format +msgid "" +"Are you sure you want to auto-assign a subordinate id to user ${object}?" +msgstr "Êtes-sous sûr de vouloir déverrouiller l'utilisateur ${object} ?" + +msgid "Subordinate IDs" +msgstr "" + +#, fuzzy, python-brace-format +msgid "{oname}: {command_name} not found" +msgstr "{role} : rôle introuvable" + +#, fuzzy, python-format +msgid "authentication indicators not allowed in service \"%s\"" +msgstr "Indicateurs d'authentification" + +msgid "" +"\n" +"Subordinate ids\n" +"\n" +"Manage subordinate user and group ids for users\n" +"\n" +"EXAMPLES:\n" +"\n" +" Auto-assign a subordinate id range to current user\n" +" ipa subid-generate\n" +"\n" +" Auto-assign a subordinate id range to user alice:\n" +" ipa subid-generate --owner=alice\n" +"\n" +" Find subordinate ids for user alice:\n" +" ipa subid-find --owner=alice\n" +"\n" +" Match entry by any subordinate uid in range:\n" +" ipa subid-match --subuid=2147483649\n" +msgstr "" + +msgid "Subordinate id" +msgstr "" + +msgid "Subordinate ids" +msgstr "" + +#, fuzzy +msgid "Subordinate id description" +msgstr "Description de profil" + +msgid "Owning user of subordinate id entry" +msgstr "" + +msgid "Start value for subordinate user ID (subuid) range" +msgstr "" + +msgid "Subordinate user ID count" +msgstr "" + +msgid "Start value for subordinate group ID (subgid) range" +msgstr "" + +msgid "Subordinate group ID count" +msgstr "" + +#, fuzzy, python-format +msgid "" +"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." +msgstr "L'objet %(oname)s avec le nom « %(pkey)s » existe déjà" + +#, fuzzy, python-format +msgid "'%(dn)s is not a valid user" +msgstr "%(port)s n'est pas un port valide" + +msgid "subgidnumber must be equal to subuidnumber" +msgstr "" + +#, fuzzy +msgid "Add a new subordinate id." +msgstr "Ajouter un nouvel utilisateur en attente." + +#, fuzzy, python-format +msgid "Added subordinate id \"%(value)s\"" +msgstr "Service « %(value)s » ajouté" + +#, fuzzy +msgid "Delete a subordinate id." +msgstr "Supprimer un profil de certificat." + +#, fuzzy, python-format +msgid "Deleted subordinate id \"%(value)s\"" +msgstr "Service « %(value)s » supprimé" + +#, fuzzy +msgid "Modify a subordinate id." +msgstr "Modifier un utilisateur en attente." + +#, fuzzy, python-format +msgid "Modified subordinate id \"%(value)s\"" +msgstr "Service « %(value)s » modifié" + +#, fuzzy +msgid "Search for subordinate id." +msgstr "Rechercher des plages." + +#, fuzzy, python-format +msgid "%(count)d subordinate id matched" +msgid_plural "%(count)d subordinate ids matched" +msgstr[0] "%(count)d service correspondant" +msgstr[1] "%(count)d services correspondant" + +#, fuzzy +msgid "Display information about a subordinate id." +msgstr "Afficher les informations sur une plage." + +msgid "Generate and auto-assign subuid and subgid range to user entry" +msgstr "" + +msgid "Match users by any subordinate uid in their range" +msgstr "" + +msgid "SubUID match" +msgstr "" + +msgid "Match value for subordinate user ID" +msgstr "" + +msgid "Subordinate id statistics" +msgstr "" + +#, python-format +msgid "%(remaining)i remaining subordinate id ranges" +msgstr "" + +#, fuzzy +msgid "Maximum password life must be equal to or greater than the minimum." +msgstr "" +"La durée de vie maximale du mot de passe doit être supérieure au minimum." + +#, fuzzy, python-format +msgid "Failed to remove server from security domain: %s" +msgstr "" +"Échec de la suppression du serveur %(master)s de la liste de serveurs : " +"%(err)s" + +msgid "" +"\n" +"Each option needs to be added separately and no validation is done whether\n" +"the option is known by sudo or is in a valid format. Environment variables\n" +"also need to be set individually. For example env_keep=\"FOO BAR\" in " +"sudoers\n" +"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" +"+=BAR.\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" +"\n" +"Pour activer « binddn », exécuter la commande pour fixer le mot de passe :\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" + +#, fuzzy +msgid "" +"\n" +" Set multiple default Sudo options:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate' --" +"sudooption mail_badpass\n" +msgstr "" +"\n" +" Définition d'une option par défaut pour sudo :\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" + #~ msgid "Delete a CA." #~ msgstr "Supprimer une AC." diff --git a/po/hi.po b/po/hi.po index 83638aa99..dd9ba5077 100644 --- a/po/hi.po +++ b/po/hi.po @@ -18,64 +18,418 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" -msgid "A group may not be a member of itself" -msgstr "एक समूह खुद के ही सदस्य नहीं हो सकता" +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "" -msgid "A list of LDAP entries" -msgstr "LDAP प्रविष्टियों की सूची" +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "" -msgid "All commands should at least have a result" -msgstr "सभी आदेशों का कम से कम परिणाम होना चाहिए" +#, c-format +msgid "out of memory\n" +msgstr "" -msgid "Bad format in credentials cache" -msgstr "क्रेडेंशियल्स कैश में बुरा प्रारूप" +#, c-format +msgid "read error\n" +msgstr "" -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "बेस६४ डिकोडिंग विफल: %(reason)s" +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" -msgid "Cannot resolve KDC for requested realm" -msgstr "अनुरोधित दायरे के लिए KDC हल नहीं कर सकता" +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" -msgid "Credentials cache permissions incorrect" -msgstr "क्रेडेंशियल्स कैश अनुमतियाँ गलत" +#, c-format +msgid "Removing principal %s\n" +msgstr "" -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "सत्यापित करने के लिए फिर से %(label)s दर्ज करें:" +#, c-format +msgid "Failed to open keytab\n" +msgstr "" -msgid "No credentials cache found" -msgstr "कैश क्रेडेंशियल्स नहीं मिली" +#, c-format +msgid "principal not found\n" +msgstr "" -msgid "Only one value is allowed" -msgstr "केवल एक मान की अनुमति है" +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" -msgid "Passwords do not match" +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "realm not found\n" +msgstr "" + +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" +msgstr "" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "Kerberos Service Principal Name" +msgstr "" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +msgid "Realm name" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "" + +#, c-format +msgid "Out of memory \n" +msgstr "" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "" + +msgid "Simple bind failed\n" +msgstr "" + +msgid "SASL Bind failed\n" +msgstr "" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "" + +#, c-format +msgid "Failed to get result: %s\n" +msgstr "" + +#, c-format +msgid "Timeout exceeded." +msgstr "" + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "" + +#, c-format +msgid "Missing reply control!\n" +msgstr "" + +#, c-format +msgid "Out of Memory!\n" +msgstr "" + +#, c-format +msgid "Failed to create control!\n" +msgstr "" + +#, c-format +msgid "Failed to bind to server!\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab!\n" +msgstr "" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "" + +msgid "Failed to decode control reply!\n" +msgstr "" + +#, fuzzy, c-format +msgid "Passwords do not match!\n" msgstr "पासवर्ड मेल नहीं खाते" -msgid "Passwords do not match!" -msgstr "पासवर्ड मेल नहीं खाते" +#, c-format +msgid "Failed to open config file %s\n" +msgstr "" -msgid "This command requires root access" -msgstr "इस आदेश को रूट मूल अभिगम की आवश्यकता है" +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "" -msgid "This is already a posix group" -msgstr "यह पहले से ही एक पोसिक्स समूह है" +msgid "Failed to resolve symlink to keytab.\n" +msgstr "" -msgid "Ticket expired" -msgstr "टिकट समाप्त" +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" -msgid "an internal error has occurred" -msgstr "एक आंतरिक त्रुटि हुई है" +msgid "Print as little as possible" +msgstr "" -msgid "did not receive Kerberos credentials" -msgstr "कर्बेरॉस क्रेडेंशियल्स प्राप्त नहीं हुआ" +msgid "Output only on errors" +msgstr "" -msgid "incorrect type" -msgstr "गलत प्रकार" +msgid "Output debug info" +msgstr "" -msgid "must be True or False" -msgstr "सही या गलत होना चाहिए" +msgid "Contact this specific KDC Server" +msgstr "" + +msgid "Server Name" +msgstr "" + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" + +msgid "Encryption types to request" +msgstr "" + +msgid "Comma separated encryption types list" +msgstr "" + +msgid "Show the list of permitted encryption types and exit" +msgstr "" + +msgid "Permitted Encryption Types" +msgstr "" + +msgid "Asks for a non-random password to use for the principal" +msgstr "" + +msgid "LDAP DN" +msgstr "" + +msgid "DN to bind as if not using kerberos" +msgstr "" + +msgid "LDAP password" +msgstr "" + +msgid "password to use if not using kerberos" +msgstr "" + +msgid "Prompt for LDAP password" +msgstr "" + +msgid "Path to the IPA CA certificate" +msgstr "" + +msgid "IPA CA certificate" +msgstr "" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" + +msgid "url" +msgstr "" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" + +msgid "GSSAPI|EXTERNAL" +msgstr "" + +msgid "Retrieve current keys without changing them" +msgstr "" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +msgid "Enter LDAP password" +msgstr "" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "" + +#, c-format +msgid "DNS discovery for domain %s\n" +msgstr "" + +#, c-format +msgid "Discovered server %s\n" +msgstr "" + +#, c-format +msgid "Using discovered server %s\n" +msgstr "" + +#, c-format +msgid "DNS Discovery failed\n" +msgstr "" + +#, c-format +msgid "Using server from config %s\n" +msgstr "" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "" + +#, c-format +msgid "Using provided server %s\n" +msgstr "" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "" + +msgid "New Principal Password" +msgstr "" + +msgid "Verify Principal Password" +msgstr "" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" + +#, c-format +msgid "Failed to create key material\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "" #, c-format msgid "Out of memory!\n" @@ -101,9 +455,6 @@ msgstr "" msgid "Unable to enable SSL in LDAP\n" msgstr "" -msgid "SASL Bind failed\n" -msgstr "" - #, c-format msgid "Search for %1$s on rootdse failed with error %2$d\n" msgstr "" @@ -329,389 +680,6 @@ msgstr "" msgid "The hostname must not be: %s\n" msgstr "" -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "" - -#, c-format -msgid "Out of memory \n" -msgstr "" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "" - -msgid "Simple bind failed\n" -msgstr "" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -#, c-format -msgid "Out of Memory!\n" -msgstr "" - -#, c-format -msgid "Failed to create control!\n" -msgstr "" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "" - -msgid "Failed to decode control reply!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Passwords do not match!\n" -msgstr "पासवर्ड मेल नहीं खाते" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "" - -msgid "Failed to resolve symlink to keytab.\n" -msgstr "" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Output only on errors" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -msgid "Server Name" -msgstr "" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Encryption types to request" -msgstr "" - -msgid "Comma separated encryption types list" -msgstr "" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -msgid "Permitted Encryption Types" -msgstr "" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -msgid "LDAP DN" -msgstr "" - -msgid "DN to bind as if not using kerberos" -msgstr "" - -msgid "LDAP password" -msgstr "" - -msgid "password to use if not using kerberos" -msgstr "" - -msgid "Prompt for LDAP password" -msgstr "" - -msgid "Path to the IPA CA certificate" -msgstr "" - -msgid "IPA CA certificate" -msgstr "" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -msgid "Enter LDAP password" -msgstr "" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -msgid "New Principal Password" -msgstr "" - -msgid "Verify Principal Password" -msgstr "" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, c-format -msgid "Failed to create key material\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -msgid "Realm name" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "" - -#, c-format -msgid "out of memory\n" -msgstr "" - -#, c-format -msgid "read error\n" -msgstr "" - msgid "Failed members" msgstr "" @@ -826,132 +794,34 @@ msgstr "" msgid "Skipped %(key)s" msgstr "" +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +msgid "Unrevoked" +msgstr "" + +msgid "Error" +msgstr "" + +msgid "Input filename" +msgstr "" + +msgid "File to load the certificate from." +msgstr "" + +msgid "cannot specify both raw certificate and file" +msgstr "" + msgid "Input file" msgstr "" msgid "File to load the certificate from" msgstr "" -msgid "cannot specify both raw certificate and file" -msgstr "" - #, python-format msgid "Profile configuration stored in file '%(file)s'" msgstr "" -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -msgid "Servers details:" -msgstr "" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "Add a new YubiKey OTP token." -msgstr "" - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -msgid "Maximum number of agreements per replica" -msgstr "" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -msgid "Delete a user" -msgstr "" - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - msgid "Split DNS record to parts" msgstr "" @@ -1016,6 +886,131 @@ msgstr "" msgid "file to store DNS records in nsupdate format" msgstr "" +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "" + +msgid "Servers details:" +msgstr "" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "" + +msgid "User ID" +msgstr "" + +msgid "Password" +msgstr "" + +msgid "First Code" +msgstr "" + +msgid "Second Code" +msgstr "" + +msgid "Token ID" +msgstr "" + +msgid "python-yubico is not installed." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" + +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "Add a new YubiKey OTP token." +msgstr "" + +msgid "YubiKey slot" +msgstr "" + +msgid "No free YubiKey slot!" +msgstr "" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "" + +msgid "Topology is disconnected" +msgstr "" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "" + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "" + +msgid "Maximum number of agreements per replica" +msgstr "" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "" + +msgid "Delete a user" +msgstr "" + +msgid "preserve and no-preserve cannot be both set" +msgstr "" + #, python-format msgid "Cannot read file '%(filename)s': %(exc)s" msgstr "" @@ -1135,47 +1130,20 @@ msgstr "" msgid "Missing vault private key" msgstr "" -msgid "Write certificate (chain if --chain used) to file" +#, python-format +msgid "Enabled Sudo Rule \"%s\"" msgstr "" -msgid "Unrevoked" +#, python-format +msgid "Disabled Sudo Rule \"%s\"" msgstr "" -msgid "Error" +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" msgstr "" -msgid "Input filename" -msgstr "" - -msgid "File to load the certificate from." -msgstr "" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -msgid "User ID" -msgstr "" - -msgid "Password" -msgstr "" - -msgid "First Code" -msgstr "" - -msgid "Second Code" -msgstr "" - -msgid "Token ID" +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" msgstr "" msgid "" @@ -1447,6 +1415,243 @@ msgstr "" msgid "Location of the ACI" msgstr "" +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Description" +msgstr "" + +msgid "A description of this auto member rule" +msgstr "" + +msgid "Default (fallback) Group" +msgstr "" + +msgid "Default group for entries to land" +msgstr "" + +msgid "Add an automember rule." +msgstr "" + +msgid "Automember Rule" +msgstr "" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +msgid "Grouping Type" +msgstr "" + +msgid "Grouping to which the rule applies" +msgstr "" + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +msgid "Exclusive Regex" +msgstr "" + +msgid "Attribute Key" +msgstr "" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +msgid "Number of conditions added" +msgstr "" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +msgid "Display information about the default (fallback) automember groups." +msgstr "" + +msgid "Delete an automember rule." +msgstr "" + +msgid "List of deletions that failed" +msgstr "" + +msgid "Search for automember rules." +msgstr "" + +msgid "Modify an automember rule." +msgstr "" + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +msgid "Rights" +msgstr "" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Users" +msgstr "" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Hosts" +msgstr "" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +msgid "Conditions that could not be removed" +msgstr "" + +msgid "Number of conditions removed" +msgstr "" + +msgid "Display information about an automember rule." +msgstr "" + msgid "" "\n" "Automount\n" @@ -1578,31 +1783,15 @@ msgstr "" msgid "Automount map name." msgstr "" -msgid "Description" -msgstr "" - msgid "Create a new automount key." msgstr "" -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - msgid "Delete an automount key." msgstr "" msgid "Continuous mode: Don't stop on errors." msgstr "" -msgid "List of deletions that failed" -msgstr "" - msgid "Search for an automount key." msgstr "" @@ -1621,19 +1810,6 @@ msgstr "" msgid "Modify an automount key." msgstr "" -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "Rights" -msgstr "" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - msgid "New mount information" msgstr "" @@ -1728,6 +1904,184 @@ msgstr "" msgid "Nested Methods to execute" msgstr "" +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +msgid "Search for existing certificates." +msgstr "" + +msgid "Match cn attribute in subject" +msgstr "" + +msgid "Reason" +msgstr "" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "" + +msgid "minimum serial number" +msgstr "" + +msgid "maximum serial number" +msgstr "" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Maximum number of certs returned" +msgstr "" + +msgid "Take a revoked certificate off hold." +msgstr "" + +msgid "Serial number" +msgstr "" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +msgid "Submit a certificate signing request." +msgstr "" + +msgid "CSR" +msgstr "" + +msgid "Principal" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +msgid "Dictionary mapping variable name to value" +msgstr "" + +msgid "Revoke a certificate." +msgstr "" + +msgid "Retrieve an existing certificate." +msgstr "" + +msgid "Output filename" +msgstr "" + +msgid "File to store the certificate in." +msgstr "" + +msgid "Check the status of a certificate signing request." +msgstr "" + +msgid "Request id" +msgstr "" + msgid "" "\n" "Server configuration\n" @@ -2987,6 +3341,306 @@ msgstr "" msgid "Display information about a DNS zone (SOA record)." msgstr "" +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "Group name" +msgstr "" + +msgid "Group description" +msgstr "" + +msgid "GID" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "" + +msgid "Member users" +msgstr "" + +msgid "Member groups" +msgstr "" + +msgid "Member of groups" +msgstr "" + +msgid "Roles" +msgstr "" + +msgid "Member of netgroups" +msgstr "" + +msgid "Member of Sudo rule" +msgstr "" + +msgid "Member of HBAC rule" +msgstr "" + +msgid "Indirect Member users" +msgstr "" + +msgid "Indirect Member groups" +msgstr "" + +msgid "Indirect Member of group" +msgstr "" + +msgid "Indirect Member of netgroup" +msgstr "" + +msgid "Indirect Member of role" +msgstr "" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +msgid "Create a new group." +msgstr "" + +msgid "Create as a non-POSIX group" +msgstr "" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +msgid "Add members to a group." +msgstr "" + +msgid "External member" +msgstr "" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +msgid "member user" +msgstr "" + +msgid "users to add" +msgstr "" + +msgid "member group" +msgstr "" + +msgid "groups to add" +msgstr "" + +msgid "Members that could not be added" +msgstr "" + +msgid "Number of members added" +msgstr "" + +msgid "Delete group." +msgstr "" + +msgid "Detach a managed group from a user." +msgstr "" + +msgid "Search for groups." +msgstr "" + +msgid "search for private groups" +msgstr "" + +msgid "search for POSIX groups" +msgstr "" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +msgid "search for non-POSIX groups" +msgstr "" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "user" +msgstr "" + +msgid "Search for groups with these member users." +msgstr "" + +msgid "Search for groups without these member users." +msgstr "" + +msgid "group" +msgstr "" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +msgid "netgroup" +msgstr "" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +msgid "HBAC rule" +msgstr "" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +msgid "Modify a group." +msgstr "" + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +msgid "Remove members from a group." +msgstr "" + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "" + +msgid "Number of members removed" +msgstr "" + +msgid "Display information about a named group." +msgstr "" + msgid "" "\n" "Host-based access control\n" @@ -3067,15 +3721,9 @@ msgstr "" msgid "Enabled" msgstr "" -msgid "Users" -msgstr "" - msgid "User Groups" msgstr "" -msgid "Hosts" -msgstr "" - msgid "Host Groups" msgstr "" @@ -3091,9 +3739,6 @@ msgstr "" msgid "Create a new HBAC rule." msgstr "" -msgid "Suppress processing of membership attributes." -msgstr "" - msgid "Add target hosts and hostgroups to an HBAC rule." msgstr "" @@ -3109,12 +3754,6 @@ msgstr "" msgid "host groups to add" msgstr "" -msgid "Members that could not be added" -msgstr "" - -msgid "Number of members added" -msgstr "" - msgid "Add services to an HBAC rule." msgstr "" @@ -3133,18 +3772,6 @@ msgstr "" msgid "Add users and groups to an HBAC rule." msgstr "" -msgid "member user" -msgstr "" - -msgid "users to add" -msgstr "" - -msgid "member group" -msgstr "" - -msgid "groups to add" -msgstr "" - msgid "Delete an HBAC rule." msgstr "" @@ -3169,12 +3796,6 @@ msgstr "" msgid "host groups to remove" msgstr "" -msgid "Members that could not be removed" -msgstr "" - -msgid "Number of members removed" -msgstr "" - msgid "Remove service and service groups from an HBAC rule." msgstr "" @@ -3187,12 +3808,6 @@ msgstr "" msgid "Remove users and groups from an HBAC rule." msgstr "" -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - msgid "Display the properties of an HBAC rule." msgstr "" @@ -3301,6 +3916,242 @@ msgstr "" msgid "Display information about an HBAC service group." msgstr "" +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +msgid "User name" +msgstr "" + +msgid "Target host" +msgstr "" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +msgid "Warning" +msgstr "" + +msgid "Matched rules" +msgstr "" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + msgid "" "\n" "Hosts/Machines\n" @@ -3448,33 +4299,9 @@ msgstr "" msgid "Member of host-groups" msgstr "" -msgid "Roles" -msgstr "" - -msgid "Member of netgroups" -msgstr "" - -msgid "Member of Sudo rule" -msgstr "" - -msgid "Member of HBAC rule" -msgstr "" - -msgid "Indirect Member of netgroup" -msgstr "" - msgid "Indirect Member of host-group" msgstr "" -msgid "Indirect Member of role" -msgstr "" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - msgid "Keytab" msgstr "" @@ -3564,45 +4391,30 @@ msgstr "" msgid "Search for hosts without these member of host groups." msgstr "" -msgid "netgroup" -msgstr "" - msgid "Search for hosts with these member of netgroups." msgstr "" msgid "Search for hosts without these member of netgroups." msgstr "" -msgid "role" -msgstr "" - msgid "Search for hosts with these member of roles." msgstr "" msgid "Search for hosts without these member of roles." msgstr "" -msgid "HBAC rule" -msgstr "" - msgid "Search for hosts with these member of HBAC rules." msgstr "" msgid "Search for hosts without these member of HBAC rules." msgstr "" -msgid "sudo rule" -msgstr "" - msgid "Search for hosts with these member of sudo rules." msgstr "" msgid "Search for hosts without these member of sudo rules." msgstr "" -msgid "user" -msgstr "" - msgid "Search for hosts with these enrolled by users." msgstr "" @@ -3754,6 +4566,231 @@ msgstr "" msgid "Display information about a hostgroup." msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "Range name" +msgstr "" + +msgid "First Posix ID of the range" +msgstr "" + +msgid "Number of IDs in the range" +msgstr "" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +msgid "Range type" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "Delete an ID range." +msgstr "" + +msgid "Search for ranges." +msgstr "" + +msgid "Modify ID range." +msgstr "" + +msgid "Display information about a range." +msgstr "" + msgid "" "\n" "ID Views\n" @@ -3770,12 +4807,6 @@ msgstr "" msgid "Anchor to override" msgstr "" -msgid "Group name" -msgstr "" - -msgid "GID" -msgstr "" - msgid "Group ID Number" msgstr "" @@ -4000,9 +5031,6 @@ msgid "" " ipa krbtpolicy-mod admin --maxlife=3600\n" msgstr "" -msgid "User name" -msgstr "" - msgid "Manage ticket policy for specific user" msgstr "" @@ -4258,9 +5286,6 @@ msgid "" "retrieve and print all attributes from the server. Affects command output." msgstr "" -msgid "Dictionary mapping variable name to value" -msgstr "" - msgid "Total number of variables env (>= count)" msgstr "" @@ -4364,9 +5389,6 @@ msgstr "" msgid "Search for netgroups without these member users." msgstr "" -msgid "group" -msgstr "" - msgid "Search for netgroups with these member groups." msgstr "" @@ -4460,6 +5482,148 @@ msgstr "" msgid "Show the current OTP configuration." msgstr "" +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Manager" +msgstr "" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +msgid "Disabled" +msgstr "" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +msgid "Validity start" +msgstr "" + +msgid "First date/time the token can be used" +msgstr "" + +msgid "Validity end" +msgstr "" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "" + +msgid "Token model (informational only)" +msgstr "" + +msgid "Serial" +msgstr "" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +msgid "Add a new OTP token." +msgstr "" + +msgid "(deprecated)" +msgstr "" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +msgid "Delete an OTP token." +msgstr "" + +msgid "Search for OTP token." +msgstr "" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +msgid "Modify a OTP token." +msgstr "" + +msgid "Rename the OTP token object" +msgstr "" + +msgid "Display information about an OTP token." +msgstr "" + msgid "" "\n" "YubiKey Tokens\n" @@ -5142,12 +6306,6 @@ msgstr "" msgid "A description of this role-group" msgstr "" -msgid "Member users" -msgstr "" - -msgid "Member groups" -msgstr "" - msgid "Privileges" msgstr "" @@ -5414,9 +6572,6 @@ msgid "" "httpd.keytab\n" msgstr "" -msgid "Principal" -msgstr "" - msgid "Service principal" msgstr "" @@ -6151,9 +7306,6 @@ msgstr "" msgid "Sudo Command Group" msgstr "" -msgid "Group description" -msgstr "" - msgid "Commands" msgstr "" @@ -6194,1682 +7346,6 @@ msgstr "" msgid "Display Sudo Command Group." msgstr "" -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -msgid "First name" -msgstr "" - -msgid "Last name" -msgstr "" - -msgid "Full name" -msgstr "" - -msgid "Display name" -msgstr "" - -msgid "Initials" -msgstr "" - -msgid "Kerberos principal" -msgstr "" - -msgid "Kerberos principal expiration" -msgstr "" - -msgid "Email address" -msgstr "" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -msgid "Street address" -msgstr "" - -msgid "City" -msgstr "" - -msgid "State/Province" -msgstr "" - -msgid "ZIP" -msgstr "" - -msgid "Telephone Number" -msgstr "" - -msgid "Mobile Telephone Number" -msgstr "" - -msgid "Pager Number" -msgstr "" - -msgid "Fax Number" -msgstr "" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "" - -msgid "Manager" -msgstr "" - -msgid "Car License" -msgstr "" - -msgid "Account disabled" -msgstr "" - -msgid "User authentication types" -msgstr "" - -msgid "Types of supported user authentication" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "RADIUS proxy configuration" -msgstr "" - -msgid "RADIUS proxy username" -msgstr "" - -msgid "Department Number" -msgstr "" - -msgid "Employee Number" -msgstr "" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -msgid "Member of groups" -msgstr "" - -msgid "Indirect Member of group" -msgstr "" - -msgid "Kerberos keys available" -msgstr "" - -msgid "Add a new user." -msgstr "" - -msgid "Don't create user private group" -msgstr "" - -msgid "Delete a user." -msgstr "" - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -msgid "Search for users." -msgstr "" - -msgid "Self" -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -msgid "Modify a user." -msgstr "" - -msgid "Rename the user object" -msgstr "" - -msgid "Display information about a user." -msgstr "" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "A description of this auto member rule" -msgstr "" - -msgid "Default (fallback) Group" -msgstr "" - -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -msgid "Automember Rule" -msgstr "" - -msgid "Grouping Type" -msgstr "" - -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -msgid "Attribute Key" -msgstr "" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -msgid "Delete an automember rule." -msgstr "" - -msgid "Search for automember rules." -msgstr "" - -msgid "Modify an automember rule." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -msgid "Number of conditions removed" -msgstr "" - -msgid "Display information about an automember rule." -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -msgid "Search for existing certificates." -msgstr "" - -msgid "Match cn attribute in subject" -msgstr "" - -msgid "Reason" -msgstr "" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -msgid "minimum serial number" -msgstr "" - -msgid "maximum serial number" -msgstr "" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -msgid "Serial number" -msgstr "" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -msgid "Submit a certificate signing request." -msgstr "" - -msgid "CSR" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -msgid "Revoke a certificate." -msgstr "" - -msgid "Retrieve an existing certificate." -msgstr "" - -msgid "Output filename" -msgstr "" - -msgid "File to store the certificate in." -msgstr "" - -msgid "Check the status of a certificate signing request." -msgstr "" - -msgid "Request id" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "GID (use this option to set it manually)" -msgstr "" - -msgid "Indirect Member users" -msgstr "" - -msgid "Indirect Member groups" -msgstr "" - -msgid "Create a new group." -msgstr "" - -msgid "Create as a non-POSIX group" -msgstr "" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Add members to a group." -msgstr "" - -msgid "External member" -msgstr "" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -msgid "Delete group." -msgstr "" - -msgid "Detach a managed group from a user." -msgstr "" - -msgid "Search for groups." -msgstr "" - -msgid "search for private groups" -msgstr "" - -msgid "search for POSIX groups" -msgstr "" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -msgid "search for non-POSIX groups" -msgstr "" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "Modify a group." -msgstr "" - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -msgid "Remove members from a group." -msgstr "" - -msgid "Display information about a named group." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -msgid "Target host" -msgstr "" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Warning" -msgstr "" - -msgid "Matched rules" -msgstr "" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -msgid "NetBIOS name" -msgstr "" - -msgid "Domain GUID" -msgstr "" - -msgid "Fallback primary group" -msgstr "" - -msgid "Domain name" -msgstr "" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -msgid "Active Directory domain administrator" -msgstr "" - -msgid "Active Directory domain administrator's password" -msgstr "" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "Range type" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -msgid "Delete a trust." -msgstr "" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -msgid "Search for trusts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -msgid "Display information about a trust." -msgstr "" - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "Range name" -msgstr "" - -msgid "First Posix ID of the range" -msgstr "" - -msgid "Number of IDs in the range" -msgstr "" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "Delete an ID range." -msgstr "" - -msgid "Search for ranges." -msgstr "" - -msgid "Modify ID range." -msgstr "" - -msgid "Display information about a range." -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -msgid "Disabled" -msgstr "" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -msgid "Validity start" -msgstr "" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Validity end" -msgstr "" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -msgid "Serial" -msgstr "" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -msgid "Add a new OTP token." -msgstr "" - -msgid "(deprecated)" -msgstr "" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -msgid "Delete an OTP token." -msgstr "" - -msgid "Search for OTP token." -msgstr "" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -msgid "Modify a OTP token." -msgstr "" - -msgid "Rename the OTP token object" -msgstr "" - -msgid "Display information about an OTP token." -msgstr "" - msgid "" "\n" "Sudo Rules\n" @@ -8080,6 +7556,498 @@ msgstr "" msgid "Display Sudo Rule." msgstr "" +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +msgid "NetBIOS name" +msgstr "" + +msgid "Domain GUID" +msgstr "" + +msgid "Fallback primary group" +msgstr "" + +msgid "Domain name" +msgstr "" + +msgid "Trusted domain partner" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +msgid "Active Directory domain administrator" +msgstr "" + +msgid "Active Directory domain administrator's password" +msgstr "" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +msgid "Delete a trust." +msgstr "" + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +msgid "Search for trusts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +msgid "Display information about a trust." +msgstr "" + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "" + +msgid "Last name" +msgstr "" + +msgid "Full name" +msgstr "" + +msgid "Display name" +msgstr "" + +msgid "Initials" +msgstr "" + +msgid "Kerberos principal" +msgstr "" + +msgid "Kerberos principal expiration" +msgstr "" + +msgid "Email address" +msgstr "" + +msgid "Prompt to set the user password" +msgstr "" + +msgid "Generate a random user password" +msgstr "" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" + +msgid "Street address" +msgstr "" + +msgid "City" +msgstr "" + +msgid "State/Province" +msgstr "" + +msgid "ZIP" +msgstr "" + +msgid "Telephone Number" +msgstr "" + +msgid "Mobile Telephone Number" +msgstr "" + +msgid "Pager Number" +msgstr "" + +msgid "Fax Number" +msgstr "" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "" + +msgid "Car License" +msgstr "" + +msgid "Account disabled" +msgstr "" + +msgid "User authentication types" +msgstr "" + +msgid "Types of supported user authentication" +msgstr "" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "RADIUS proxy configuration" +msgstr "" + +msgid "RADIUS proxy username" +msgstr "" + +msgid "Department Number" +msgstr "" + +msgid "Employee Number" +msgstr "" + +msgid "Employee Type" +msgstr "" + +msgid "Preferred Language" +msgstr "" + +msgid "Kerberos keys available" +msgstr "" + +msgid "Add a new user." +msgstr "" + +msgid "Don't create user private group" +msgstr "" + +msgid "Delete a user." +msgstr "" + +msgid "Disable a user account." +msgstr "" + +msgid "Enable a user account." +msgstr "" + +msgid "Search for users." +msgstr "" + +msgid "Self" +msgstr "" + +msgid "Display user record for current Kerberos principal" +msgstr "" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +msgid "Search for users with these member of HBAC rules." +msgstr "" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +msgid "Modify a user." +msgstr "" + +msgid "Rename the user object" +msgstr "" + +msgid "Display information about a user." +msgstr "" + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + msgid "Time limit of search in seconds (0 is unlimited)" msgstr "" @@ -8196,6 +8164,110 @@ msgstr "" msgid "Display the properties of a CA ACL." msgstr "" +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "Profile ID" +msgstr "" + +msgid "Certificate Profile to use" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +msgid "Profile description" +msgstr "" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +msgid "Search for Certificate Profiles." +msgstr "" + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" msgstr "" @@ -8225,6 +8297,218 @@ msgstr "" msgid "Remove certificates from host entry" msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + msgid "Fallback to AD DC LDAP" msgstr "" @@ -8252,6 +8536,9 @@ msgid "" "to onelevel" msgstr "" +msgid "Remove users that can manage this token." +msgstr "" + msgid "Target DN subtree" msgstr "" @@ -8682,6 +8969,13 @@ msgid "" " " msgstr "" +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + msgid "Preserved user" msgstr "" @@ -8972,332 +9266,6 @@ msgstr "" msgid "Display information about a vault container." msgstr "" -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "Profile ID" -msgstr "" - -msgid "Certificate Profile to use" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -msgid "Profile description" -msgstr "" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -msgid "Search for Certificate Profiles." -msgstr "" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - msgid "Resolve a host name in DNS. (Deprecated)" msgstr "" @@ -10976,6 +10944,192 @@ msgid "" " ipa hostgroup-del baltimore\n" msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + msgid "" "Comma-separated list of objectclasses used to search for user entries in DS" msgstr "" @@ -11282,198 +11436,6 @@ msgstr "" msgid "comma-separated list of sudo commands to remove" msgstr "" -msgid "Active directory domain administrator's password" -msgstr "" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - msgid "" "\n" "Sudo Rules\n" @@ -11515,9 +11477,19 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" -msgid "A dictionary representing an LDAP entry" +msgid "Active directory domain administrator's password" msgstr "" +msgid "GECOS field" +msgstr "" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "सत्यापित करने के लिए फिर से %(label)s दर्ज करें:" + +msgid "Passwords do not match!" +msgstr "पासवर्ड मेल नहीं खाते" + msgid "No matching entries found" msgstr "" @@ -11552,276 +11524,6 @@ msgstr "" msgid "No file to read" msgstr "" -#, python-format -msgid "%(filename)s: file not found" -msgstr "" - -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -msgid "Filename is empty" -msgstr "" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "" - -msgid "empty DNS label" -msgstr "" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "" - -msgid "cannot be longer that {} characters" -msgstr "" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "" - -msgid "invalid SSH public key" -msgstr "" - -msgid "options are not allowed" -msgstr "" - -msgid "invalid hostmask" -msgstr "" - -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" - -msgid "invalid escape code in domain name" -msgstr "" - -msgid "domain name cannot be longer than 255 characters" -msgstr "" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "" - -msgid "invalid domain name" -msgstr "" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -msgid "invalid IP address format" -msgstr "" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" - -msgid "Additional instructions:" -msgstr "" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "" - -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." -msgstr "" - #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" @@ -11830,6 +11532,9 @@ msgstr "" msgid "unknown error %(code)d from %(server)s: %(error)s" msgstr "" +msgid "an internal error has occurred" +msgstr "एक आंतरिक त्रुटि हुई है" + #, fuzzy, python-format msgid "an internal error has occurred on server at '%(server)s'" msgstr "एक आंतरिक त्रुटि हुई है" @@ -11868,10 +11573,28 @@ msgstr "" msgid "Kerberos error: %(major)s/%(minor)s" msgstr "" +msgid "did not receive Kerberos credentials" +msgstr "कर्बेरॉस क्रेडेंशियल्स प्राप्त नहीं हुआ" + #, python-format msgid "Service '%(service)s' not found in Kerberos database" msgstr "" +msgid "No credentials cache found" +msgstr "कैश क्रेडेंशियल्स नहीं मिली" + +msgid "Ticket expired" +msgstr "टिकट समाप्त" + +msgid "Credentials cache permissions incorrect" +msgstr "क्रेडेंशियल्स कैश अनुमतियाँ गलत" + +msgid "Bad format in credentials cache" +msgstr "क्रेडेंशियल्स कैश में बुरा प्रारूप" + +msgid "Cannot resolve KDC for requested realm" +msgstr "अनुरोधित दायरे के लिए KDC हल नहीं कर सकता" + msgid "Session error" msgstr "" @@ -11909,6 +11632,9 @@ msgstr "" msgid "api has no such namespace: '%(name)s'" msgstr "" +msgid "Passwords do not match" +msgstr "पासवर्ड मेल नहीं खाते" + msgid "Command not implemented" msgstr "" @@ -11947,6 +11673,12 @@ msgid "" "The realm for the principal does not match the realm for this IPA server" msgstr "" +msgid "This command requires root access" +msgstr "इस आदेश को रूट मूल अभिगम की आवश्यकता है" + +msgid "This is already a posix group" +msgstr "यह पहले से ही एक पोसिक्स समूह है" + #, python-format msgid "Principal is not of the form user@REALM: '%(principal)s'" msgstr "" @@ -11963,10 +11695,17 @@ msgstr "" msgid "This entry is not a member" msgstr "" +msgid "A group may not be a member of itself" +msgstr "एक समूह खुद के ही सदस्य नहीं हो सकता" + #, fuzzy msgid "This entry is already a member" msgstr "यह पहले से ही एक पोसिक्स समूह है" +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "बेस६४ डिकोडिंग विफल: %(reason)s" + #, fuzzy msgid "A group may not be added as a member of itself" msgstr "एक समूह खुद के ही सदस्य नहीं हो सकता" @@ -12143,9 +11882,204 @@ msgid "" "prevents a trust to '%(conflict)s'" msgstr "" +msgid "Results are truncated, try a more specific search" +msgstr "" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "" + +msgid "Client version. Used to determine if server will accept request." +msgstr "" + +msgid "Additional instructions:" +msgstr "" + +#, python-format +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" + +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "%(line)s" +msgstr "" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "" + +#, python-format +msgid "%(count)d variables" +msgstr "" + +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "" +msgstr[1] "" + +msgid "A dictionary representing an LDAP entry" +msgstr "" + +msgid "A list of LDAP entries" +msgstr "LDAP प्रविष्टियों की सूची" + +msgid "All commands should at least have a result" +msgstr "सभी आदेशों का कम से कम परिणाम होना चाहिए" + +msgid "incorrect type" +msgstr "गलत प्रकार" + +msgid "Only one value is allowed" +msgstr "केवल एक मान की अनुमति है" + msgid "this option is deprecated" msgstr "" +msgid "must be True or False" +msgstr "सही या गलत होना चाहिए" + msgid "must be an integer" msgstr "" @@ -12267,27 +12201,116 @@ msgid "Service principal is required" msgstr "" #, python-format -msgid "%(count)d variables" +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +msgid "any of the configured servers" +msgstr "" + +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" msgstr "" #, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "" -msgstr[1] "" +msgid "Permission denied: %(file)s" +msgstr "" -msgid "Results are truncated, try a more specific search" +msgid "empty DNS label" +msgstr "" + +msgid "DNS label cannot be longer that 63 characters" msgstr "" #, python-format -msgid "Unknown option: %(option)s" +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" msgstr "" -msgid "Client version. Used to determine if server will accept request." +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "" + +msgid "cannot be longer that {} characters" +msgstr "" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "" + +msgid "invalid SSH public key" +msgstr "" + +msgid "options are not allowed" +msgstr "" + +msgid "invalid hostmask" msgstr "" #, python-format -msgid "objectclass %s not found" +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +msgid "invalid escape code in domain name" +msgstr "" + +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +msgid "invalid domain name" +msgstr "" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +msgid "invalid IP address format" +msgstr "" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" #, python-format @@ -12306,940 +12329,1244 @@ msgstr "" msgid "Retrieving CA status failed with status %d" msgstr "" +#, python-format +msgid "objectclass %s not found" +msgstr "" + +msgid "Trusting forest" +msgstr "" + +msgid "Trusted forest" +msgstr "" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +msgid "Unknown" +msgstr "" + +msgid "Non-Active Directory domain" +msgstr "" + +msgid "Active Directory domain" +msgstr "" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "" +msgid "Failed to authenticate to CA REST API" +msgstr "" + #, python-format msgid "Replication agreement for %(hostname)s not found" msgstr "" -msgid "Failed to authenticate to CA REST API" +#, fuzzy +msgid "A list of ACI values" +msgstr "LDAP प्रविष्टियों की सूची" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" msgstr "" -msgid "One time password commands" -msgstr "" - -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" +msgid "ACI prefix is required" msgstr "" msgid "" -"\n" -"IPA server roles\n" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" msgstr "" -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgid "filter and memberof are mutually exclusive" msgstr "" -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" +msgid "group, permission and self are mutually exclusive" msgstr "" -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" - -msgid "server roles" -msgstr "" - -msgid "IPA Server Roles" -msgstr "" - -msgid "IPA Server Role" -msgstr "" - -msgid "IPA server role name" -msgstr "" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" +msgid "One of group, permission or self is required" msgstr "" #, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" +msgid "Group '%s' does not exist" +msgstr "" + +msgid "empty filter" +msgstr "" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "" + +msgid "ACI" +msgstr "" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" msgstr[0] "" msgstr[1] "" -msgid "Include IPA master entries" +#, python-format +msgid "Renamed ACI to \"%(value)s\"" msgstr "" -msgid "roles" +msgid "" +"\n" +"Auto Membership Rule.\n" msgstr "" -msgid "IPA role name" +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" msgstr "" -msgid "Class of Service object used for linking policies with groups" +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" msgstr "" #, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgid "%(otype)s \"%(oname)s\" not found" msgstr "" -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -msgid "password policy" -msgstr "" - -msgid "password policies" -msgstr "" - -msgid "Password Policies" -msgstr "" - -msgid "Password Policy" -msgstr "" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" +#, python-format +msgid "%s is not a valid attribute." msgstr "" msgid "" "\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" +" Add an automember rule.\n" " " msgstr "" #, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "" + +msgid "Auto Membership is not configured" +msgstr "" + msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" +"\n" +" Add conditions to an automember rule.\n" +" " msgstr "" #, python-format -msgid "The following domains do not belong to this realm: %(domains)s" +msgid "Added condition(s) to \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "automount location" +msgstr "" + +msgid "automount locations" +msgstr "" + +msgid "Automount Locations" +msgstr "" + +msgid "Automount Location" +msgstr "" + +#, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "automount map" +msgstr "" + +msgid "automount maps" +msgstr "" + +msgid "Automount Maps" +msgstr "" + +msgid "Automount Map" +msgstr "" + +#, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Automount key object." +msgstr "" + +msgid "automount key" +msgstr "" + +msgid "automount keys" +msgstr "" + +msgid "Automount Keys" +msgstr "" + +msgid "Automount Key" msgstr "" #, python-format msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" msgstr "" #, python-format -msgid "Results should contain primary key attribute only (\"%s\")" +msgid "key named %(key)s already exists" msgstr "" -msgid "Help topic" +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" msgstr "" -msgid "Version" +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." msgstr "" -msgid "Parameters" +#, python-format +msgid "Added automount key \"%(value)s\"" msgstr "" -msgid "Method of" +#, python-format +msgid "Added automount indirect map \"%(value)s\"" msgstr "" -msgid "Method name" +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Member service groups" +msgstr "" + +msgid "Member HBAC service groups" +msgstr "" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" +msgstr "" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "" + +#, python-format +msgid "%(parent)s: %(oname)s not found" msgstr "" #, python-format msgid "%(pkey)s: %(oname)s not found" msgstr "" -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -msgid "Search for classes." -msgstr "" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -msgid "CLI name" -msgstr "" - -msgid "Confirm (password)" -msgstr "" - -msgid "Default" -msgstr "" - -msgid "Default from" -msgstr "" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" msgstr "" #, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." +msgid "attribute \"%(attribute)s\" not allowed" msgstr "" #, python-format -msgid "%(command_name)s: %(oname)s not found" +msgid "these attributes are not allowed: %(attrs)s" msgstr "" -msgid "Display information about a command output." +msgid "attribute is not configurable" msgstr "" -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" +msgid "No such attribute on this entry" msgstr "" #, python-format -msgid "Malformed principal: %(error)s" +msgid "Rename the %(ldap_obj_name)s object" msgstr "" -msgid "Add target to a named service delegation." +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" msgstr "" #, python-format msgid "member %s" msgstr "" -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" +#, python-format +msgid "%s to add" msgstr "" #, python-format -msgid "Added service delegation rule \"%(value)s\"" +msgid "%s to remove" msgstr "" #, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation rule" +msgid "Results should contain primary key attribute only (\"%s\")" msgstr "" #, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" msgstr "" msgid "" "\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" msgstr "" +#, fuzzy +msgid "must be TRUE or FALSE" +msgstr "सही या गलत होना चाहिए" + msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -msgid "Malformed principal" -msgstr "" - -msgid "{} is required by the IPA master" -msgstr "" - -msgid "service" -msgstr "" - -msgid "services" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." msgstr "" msgid "Principal alias" msgstr "" -msgid "Service principal alias" +msgid "User password expiration" msgstr "" -msgid "Base-64 encoded service certificate" +msgid "SSH public key fingerprint" msgstr "" -msgid "Subject" +msgid "Base-64 encoded user certificate" msgstr "" -msgid "Serial Number" +msgid "Certificate mapping data" msgstr "" -msgid "Serial Number (hex)" +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +#, python-format +msgid "can be at most %(len)d characters" msgstr "" msgid "Issuer" msgstr "" -msgid "Not Before" +msgid "Issuer of the certificate" msgstr "" -msgid "Not After" +msgid "Subject" msgstr "" -msgid "Fingerprint (SHA1)" +msgid "Subject of the certificate" msgstr "" -msgid "Fingerprint (SHA256)" +msgid "cannot have an empty subject" msgstr "" -msgid "Revocation reason" +msgid "cannot specify both subject/issuer and certificate" msgstr "" -msgid "Authentication Indicators" +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" msgstr "" msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" msgstr "" -msgid "NONE value cannot be combined with other PAC types" +msgid "Make multiple ipa calls via one remote procedure call" msgstr "" -msgid "Add a new IPA service." -msgstr "" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "" - -msgid "force principal name even if host not in DNS" -msgstr "" - -msgid "Skip host check" +msgid "must contain a tuple (list, dict)" msgstr "" msgid "" -"force service to be created even when host object does not exist to manage it" +"\n" +"Manage Certificate Authorities\n" +msgstr "" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +msgid "Certificate Authority" +msgstr "" + +msgid "Certificate Authorities" +msgstr "" + +msgid "Name" +msgstr "" + +msgid "Name for referencing the CA" +msgstr "" + +msgid "Description of the purpose of the CA" +msgstr "" + +msgid "Authority ID" +msgstr "" + +msgid "Dogtag Authority ID" +msgstr "" + +msgid "Subject DN" +msgstr "" + +msgid "Subject Distinguished Name" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Issuer Distinguished Name" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +msgid "Certificate chain" +msgstr "" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Search for CAs." msgstr "" #, python-format -msgid "The host '%s' does not exist to add a service to." +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include certificate chain in output" msgstr "" -msgid "Add a new SMB service." +msgid "Display the properties of a CA." msgstr "" -msgid "SMB service NetBIOS name" +msgid "Create a CA." msgstr "" #, python-format -msgid "Deleted service \"%(value)s\"" +msgid "Created CA \"%(value)s\"" msgstr "" #, python-format -msgid "Modified service \"%(value)s\"" +msgid "Insufficient 'add' privilege for entry '%s'." msgstr "" #, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" +msgid "Unrecognized attributes: %(attrs)s" +msgstr "" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "" + +msgid "Delete a CA (must be disabled first)." +msgstr "" + +#, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "" + +msgid "Insufficient privilege to delete a CA." +msgstr "" + +msgid "CA" +msgstr "" + +msgid "IPA CA cannot be deleted" +msgstr "" + +msgid "Must be disabled first" +msgstr "" + +msgid "Modify CA configuration." +msgstr "" + +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "" + +msgid "Insufficient privilege to modify a CA." +msgstr "" + +msgid "Disable a CA." +msgstr "" + +#, python-format +msgid "Disabled CA \"%(value)s\"" +msgstr "" + +msgid "IPA CA cannot be disabled" +msgstr "" + +msgid "Enable a CA." +msgstr "" + +#, python-format +msgid "Enabled CA \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "" + +msgid "CA ACLs" +msgstr "" + +msgid "CA category" +msgstr "" + +msgid "CA category the ACL applies to" +msgstr "" + +msgid "CAs" +msgstr "" + +#, python-format +msgid "Added CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "" + +msgid "default CA ACL can be only disabled" +msgstr "" + +#, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" + +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" msgstr[0] "" msgstr[1] "" #, python-format -msgid "Disabled service \"%(value)s\"" +msgid "Enabled CA ACL \"%(value)s\"" msgstr "" #, python-format -msgid "Added certificates to service principal \"%(value)s\"" +msgid "Disabled CA ACL \"%(value)s\"" msgstr "" #, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to a service" +msgid "%i user or group added." msgstr "" #, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a service" -msgstr "" - -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" -msgstr "" - -msgid "command" -msgstr "" - -msgid "commands" -msgstr "" - -msgid "runAs user" -msgstr "" - -msgid "runAs users" -msgstr "" - -msgid "group runAs" -msgstr "" - -msgid "runAs groups" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "commands cannot be added when command category='all'" +msgid "%i users or groups added." msgstr "" msgid "users cannot be added when user category='all'" msgstr "" +#, python-format +msgid "%i user or group removed." +msgstr "" + +#, python-format +msgid "%i users or groups removed." +msgstr "" + +#, python-format +msgid "%i host or hostgroup added." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "" + msgid "hosts cannot be added when host category='all'" msgstr "" -msgid "users cannot be added when runAs user or runAs group category='all'" +#, python-format +msgid "%i host or hostgroup removed." msgstr "" #, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" +msgid "%i hosts or hostgroups removed." msgstr "" #, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" +msgid "%i service added." msgstr "" #, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgid "%i services added." +msgstr "" + +msgid "services cannot be added when service category='all'" +msgstr "" + +#, python-format +msgid "%i service removed." +msgstr "" + +#, python-format +msgid "%i services removed." +msgstr "" + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, python-format +msgid "%i profiles removed." +msgstr "" + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." msgstr "" msgid "pyhbac is not installed." @@ -13455,15 +13782,6 @@ msgstr "" msgid "Name of issuing CA" msgstr "" -msgid "Base-64 encoded certificate." -msgstr "" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - msgid "Subject email address" msgstr "" @@ -13497,7 +13815,16 @@ msgstr "" msgid "Subject Other Name" msgstr "" -msgid "Issuer DN" +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" msgstr "" msgid "Serial number (hex)" @@ -13506,9 +13833,6 @@ msgstr "" msgid "Request status" msgstr "" -msgid "Include certificate chain in output" -msgstr "" - msgid "" "automatically add the principal if it doesn't exist (service principals only)" msgstr "" @@ -13602,6 +13926,9 @@ msgstr "" msgid "Revoked" msgstr "" +msgid "Revocation reason" +msgstr "" + msgid "" "Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " "revocation reason details. " @@ -13619,6 +13946,9 @@ msgstr "" msgid "7 is not a valid revocation reason" msgstr "" +msgid "Status of the certificate" +msgstr "" + msgid "Results should contain primary key attribute only (\"certificate\")" msgstr "" @@ -13849,7 +14179,110 @@ msgid_plural "%(count)s users matched" msgstr[0] "" msgstr[1] "" -msgid "Base-64 encoded user certificate" +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +msgid "Certificate Profile" +msgstr "" + +msgid "Certificate Profiles" +msgstr "" + +msgid "Profile configuration" +msgstr "" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." msgstr "" msgid "" @@ -13922,6 +14355,9 @@ msgstr "" msgid "Maximum hostname length" msgstr "" +msgid "Enable adding subids to new users" +msgstr "" + msgid "IPA masters" msgstr "" @@ -13994,6 +14430,21 @@ msgstr "" msgid "DNSec key master" msgstr "" +msgid "Setup SID configuration" +msgstr "" + +msgid "New users and groups automatically get a SID assigned" +msgstr "" + +msgid "Add SIDs" +msgstr "" + +msgid "Add SIDs for existing users and groups" +msgstr "" + +msgid "NetBIOS name of the IPA domain" +msgstr "" + msgid "Empty domain is not allowed" msgstr "" @@ -14009,6 +14460,20 @@ msgstr "" msgid "Disabled domain '%(domain)s' is not allowed" msgstr "" +msgid "not allowed to enable SID generation" +msgstr "" + +msgid "" +"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " +"allowed. Empty string is not allowed." +msgstr "" + +msgid "Failed to call DBus" +msgstr "" + +msgid "Configuration of SID failed. See details in the error log" +msgstr "" + msgid "The group doesn't exist" msgstr "" @@ -14033,55 +14498,1611 @@ msgstr "" msgid "SELinux user map default user not in order list" msgstr "" +#, python-format +msgid "You cannot specify %s without the --enable-sid option" +msgstr "" + +msgid "delegation" +msgstr "" + +msgid "delegations" +msgstr "" + +msgid "Delegations" +msgstr "" + +msgid "Delegation" +msgstr "" + +#, python-format +msgid "Added delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "" +msgstr[1] "" + msgid "" "\n" -"Groups of Sudo Commands\n" +"Domain Name System (DNS)\n" +msgstr "" + +msgid "" "\n" -"Manage groups of Sudo Commands.\n" +"Manage DNS zone and resource records.\n" +msgstr "" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" + +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "invalid IP network format" +msgstr "" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "" + +msgid "invalid address format" +msgstr "" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" + +msgid "algorithm value: allowed interval 0-255" +msgstr "" + +msgid "flags value: allowed interval 0-255" +msgstr "" + +msgid "iterations value: allowed interval 0-65535" +msgstr "" + +#, python-format +msgid "salt value: %(err)s" +msgstr "" + +msgid "invalid domain-name: not fully qualified" +msgstr "" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" + +#, python-format +msgid "" +"No answers could be found in the specified lifetime for DNS reverse zone " +"%(revdns)s" +msgstr "" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" + +#, python-format +msgid "%s record" +msgstr "" + +#, python-format +msgid "Raw %s records" +msgstr "" + +#, python-format +msgid "%s Record" +msgstr "" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "" + +msgid "Invalid number of parts!" +msgstr "" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "" + +msgid "Create reverse" +msgstr "" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "" + +msgid "Exchanger" +msgstr "" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" + +msgid "Priority (order)" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Relative weight for entries with the same priority." +msgstr "" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Target Uniform Resource Identifier" +msgstr "" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "" + +msgid "Managedby permission" +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "cannot be used when a zone is specified" +msgstr "" + +#, fuzzy +msgid "Only one zone type is allowed per zone name" +msgstr "केवल एक मान की अनुमति है" + +#, python-format +msgid "Added system permission \"%(value)s\"" +msgstr "" + +#, python-format +msgid "permission \"%(value)s\" already exists" +msgstr "" + +#, python-format +msgid "Removed system permission \"%(value)s\"" +msgstr "" + +msgid "DNS zone" +msgstr "" + +msgid "DNS zones" +msgstr "" + +msgid "DNS Zones" +msgstr "" + +msgid "DNS Zone" +msgstr "" + +msgid "Default time to live" +msgstr "" + +msgid "Time to live for records without explicit TTL definition" +msgstr "" + +msgid "setting Authoritative nameserver" +msgstr "" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "" + +msgid "" +msgstr "" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" + +#, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "" + +msgid "is required" +msgstr "" + +#, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "" + +msgid "DNS resource record" +msgstr "" + +msgid "DNS resource records" +msgstr "" + +msgid "DNS Resource Records" +msgstr "" + +msgid "DNS Resource Record" +msgstr "" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" + +msgid "only master zones can contain records" +msgstr "" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" + +msgid "DNS zone root record cannot be renamed" +msgstr "" + +msgid "DNS records can be only updated one at a time" +msgstr "" + +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Found '%(value)s'" +msgstr "" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "" + +msgid "DNS configuration options" +msgstr "" + +msgid "DNS Global Configuration" +msgstr "" + +msgid "IPA DNS version" +msgstr "" + +msgid "List of IPA masters configured as DNS servers" +msgstr "" + +msgid "IPA server configured as DNSSec key master" +msgstr "" + +msgid "Global DNS configuration is empty" +msgstr "" + +msgid "DNS forward zone" +msgstr "" + +msgid "DNS forward zones" +msgstr "" + +msgid "DNS Forward Zones" +msgstr "" + +msgid "DNS Forward Zone" +msgstr "" + +msgid "Please specify forwarders." +msgstr "" + +#, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "" + +msgid "IPA DNS records" +msgstr "" + +msgid "IPA location records" +msgstr "" + +msgid "Update location and IPA server DNS records" +msgstr "" + +msgid "Result of the command" +msgstr "" + +msgid "Dry run" +msgstr "" + +msgid "Do not update records only return expected records" +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +msgid "DNS Servers" +msgstr "" + +msgid "DNS Server" +msgstr "" + +msgid "DNS Server name" +msgstr "" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +msgid "Search for DNS servers." +msgstr "" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "" + +msgid "Delete a DNS server" +msgstr "" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" "\n" "EXAMPLES:\n" "\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" "\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" "\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" "\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" "\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" msgstr "" -msgid "sudo command group" +msgid "groups" msgstr "" -msgid "sudo command groups" +msgid "User Group" msgstr "" #, python-format -msgid "Added Sudo Command Group \"%(value)s\"" +msgid "Added group \"%(value)s\"" +msgstr "" + +msgid "gid cannot be set for external group" +msgstr "" + +msgid "attribute \"gidNumber\" not allowed with --nonposix" msgstr "" #, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" +msgid "Deleted group \"%(value)s\"" +msgstr "" + +msgid "privileged group" msgstr "" #, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" +msgid "Modified group \"%(value)s\"" msgstr "" #, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" msgstr[0] "" msgstr[1] "" +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" +msgstr "" + +msgid "HBAC Services" +msgstr "" + +msgid "HBAC Service Groups" +msgstr "" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "" + +msgid "Access time" +msgstr "" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "" + +msgid "HBAC Service" +msgstr "" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC service group" +msgstr "" + +msgid "HBAC service groups" +msgstr "" + +msgid "HBAC Service Group" +msgstr "" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Access granted: %s" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host" +msgstr "" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Serial Number" +msgstr "" + +msgid "Serial Number (hex)" +msgstr "" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + msgid "" "\n" "Groups of hosts.\n" @@ -14161,294 +16182,501 @@ msgstr "" msgid "Remove users that can manage members of this hostgroup." msgstr "" -#, python-format msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" msgstr "" msgid "" "\n" -"Set a user's password\n" +"ID ranges\n" "\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" "\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" +"There are two type of ID ranges which are both handled by this utility:\n" "\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" "\n" -"EXAMPLES:\n" +"Both types have the following attributes in common:\n" "\n" -" To reset your own password:\n" -" ipa passwd\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" "\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"and an ID range of a trusted domain may set\n" +" - auto-private-groups: [true|false|hybrid] automatic creation of private " +"groups\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" "\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" msgstr "" -msgid "The OTP if the user has a token configured" +msgid "ID Ranges" msgstr "" -#, python-format -msgid "Changed password for \"%(value)s\"" +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "Auto private groups" +msgstr "" + +msgid "Auto creation of private groups, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" msgstr "" msgid "" "\n" -"Permissions\n" -msgstr "" - -msgid "" +" Add new ID range.\n" "\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -msgid "" +" To add a new ID range you always have to specify\n" "\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" +" --base-id\n" +" --range-size\n" "\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" +" Additionally\n" "\n" -"A permission is made up of a number of different parts:\n" +" --rid-base\n" +" --secondary-rid-base\n" "\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" +" may be given for a new ID range for the local domain while\n" "\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" +" --auto-private-groups\n" "\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" +" may be given for a new ID range for a trusted AD domain and\n" "\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" +" --rid-base\n" +" --dom-sid\n" "\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -msgid "" +" must be given to add a new range for a trusted AD domain.\n" "\n" -"Managed permissions\n" +msgstr "" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" msgstr "" msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" msgstr "" msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" msgstr "" msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." msgstr "" msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" +"private-groups is specified" msgstr "" -msgid "must be enclosed in parentheses" +msgid "Options secondary-rid-base and rid-base must be used together" msgstr "" -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -#, python-format -msgid "Deprecated; use %s" -msgstr "" - -msgid "ACI" -msgstr "" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, python-format -msgid "Entry %s not found" -msgstr "" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgid "Primary RID range and secondary RID range cannot overlap" msgstr "" msgid "" -"cannot specify full target filter and extra target filter simultaneously" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." msgstr "" #, python-format -msgid "option was renamed; use %s" +msgid "Deleted ID range \"%(value)s\"" msgstr "" #, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, python-format -msgid "%s: group not found" -msgstr "" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" -msgstr "" - -msgid "Bad search filter" -msgstr "" - -#, python-format -msgid "Entry %s does not exist" -msgstr "" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, python-format -msgid "Added permission \"%(value)s\"" -msgstr "" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "" - -msgid "cannot delete managed permissions" -msgstr "" - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "" - -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" msgstr[0] "" msgstr[1] "" -#, python-brace-format -msgid "{role}: role not found" +msgid "" +"Modify ID range.\n" +"\n" msgstr "" -#, python-brace-format -msgid "{attr}: no such attribute" +#, python-format +msgid "Modified ID range \"%(value)s\"" msgstr "" msgid "" -"\n" -"Session Support for IPA\n" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" msgstr "" +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +msgid "ID View" +msgstr "" + +msgid "system ID View" +msgstr "" + +msgid "ID Views" +msgstr "" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +msgid "Hosts the view applies to" +msgstr "" + +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "" + +msgid "Delete an ID override." +msgstr "" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "" + +msgid "Modify an ID override." +msgstr "" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + msgid "Internationalization messages" msgstr "" @@ -14464,9 +16692,6 @@ msgstr "" msgid "Are you sure you want to rebuild auto membership?" msgstr "" -msgid "Automember rebuild membership task completed" -msgstr "" - msgid "Are you sure you want to proceed with the action?" msgstr "" @@ -15356,9 +17581,6 @@ msgstr "" msgid "Affiliation Changed" msgstr "" -msgid "CA" -msgstr "" - msgid "CA Compromise" msgstr "" @@ -15568,9 +17790,6 @@ msgstr "" msgid "Add certificate mapping data" msgstr "" -msgid "Certificate mapping data" -msgstr "" - msgid "Configuration string" msgstr "" @@ -15587,6 +17806,9 @@ msgstr "" msgid "Remove certificate identity mapping rules" msgstr "" +msgid "Version" +msgstr "" + msgid "Group Options" msgstr "" @@ -16296,9 +18518,6 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "" -msgid "Host" -msgstr "" - msgid "Netgroup Settings" msgstr "" @@ -16417,6 +18636,9 @@ msgstr "" msgid "Add password policy" msgstr "" +msgid "Password Policy" +msgstr "" + msgid "Remove password policies" msgstr "" @@ -16444,9 +18666,6 @@ msgstr "" msgid "Remove ID ranges" msgstr "" -msgid "Active Directory domain" -msgstr "" - msgid "Active Directory domain with POSIX attributes" msgstr "" @@ -16471,6 +18690,9 @@ msgstr "" msgid "Remove RADIUS servers" msgstr "" +msgid "Realm Domains" +msgstr "" + msgid "Check DNS" msgstr "" @@ -16643,6 +18865,33 @@ msgstr "" msgid "User categories" msgstr "" +msgid "Add subid" +msgstr "" + +msgid "Assigned subids" +msgstr "" + +msgid "DNA remaining" +msgstr "" + +msgid "SubGID range size" +msgstr "" + +msgid "SubGID range start" +msgstr "" + +msgid "SubUID range size" +msgstr "" + +msgid "SubUID range start" +msgstr "" + +msgid "Remaining subids" +msgstr "" + +msgid "Subordinate ID Statistics" +msgstr "" + msgid "Add sudo command" msgstr "" @@ -16927,6 +19176,14 @@ msgstr "" msgid "Add user '${primary_key}' into sudo rules" msgstr "" +msgid "Auto assign subordinate ids" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to auto-assign a subordinate id to user ${object}?" +msgstr "" + msgid "Contact Settings" msgstr "" @@ -17381,9 +19638,6 @@ msgstr "" msgid "Authentication" msgstr "" -msgid "Automember" -msgstr "" - msgid "Automount" msgstr "" @@ -17408,6 +19662,9 @@ msgstr "" msgid "Role-Based Access Control" msgstr "" +msgid "Subordinate IDs" +msgstr "" + msgid "Sudo" msgstr "" @@ -17519,318 +19776,10 @@ msgstr "" msgid "Unsupported value" msgstr "" -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -msgid "invalid port number" -msgstr "" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" -msgstr "" - #, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -#, python-brace-format msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Access granted: %s" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." msgstr "" msgid "kerberos ticket policy settings" @@ -17997,6 +19946,1761 @@ msgstr "" msgid "Servers in location" msgstr "" +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +msgid "netgroups" +msgstr "" + +msgid "Netgroup" +msgstr "" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +msgid "URI" +msgstr "" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "" + +msgid "cannot be empty" +msgstr "" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"If the user authentication method is set to password+OTP, the user should\n" +"pass the --otp option when resetting the password.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To reset your own password when password+OTP is set as authentication " +"method:\n" +" ipa passwd --otp\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +msgid "The OTP if the user has a token configured" +msgstr "" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Permissions\n" +msgstr "" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +msgid "" +"\n" +"Managed permissions\n" +msgstr "" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "must be enclosed in parentheses" +msgstr "" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "" + +#, python-format +msgid "Deprecated; use %s" +msgstr "" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, python-format +msgid "Entry %s not found" +msgstr "" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, python-format +msgid "option was renamed; use %s" +msgstr "" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, python-format +msgid "%s: group not found" +msgstr "" + +msgid "target and targetgroup are mutually exclusive" +msgstr "" + +msgid "subtree and type are mutually exclusive" +msgstr "" + +msgid "Bad search filter" +msgstr "" + +#, python-format +msgid "Entry %s does not exist" +msgstr "" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, python-format +msgid "Added permission \"%(value)s\"" +msgstr "" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "" + +msgid "cannot delete managed permissions" +msgstr "" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "" + +#, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +msgid "invalid port number" +msgstr "" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "Role" +msgstr "" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"API Schema\n" +msgstr "" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +msgid "Documentation" +msgstr "" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +msgid "Help topic" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +msgid "Method name" +msgstr "" + +msgid "Display information about a command." +msgstr "" + +msgid "Search for commands." +msgstr "" + +msgid "Return command defaults" +msgstr "" + +#, python-brace-format +msgid "{oname}: {command_name} not found" +msgstr "" + +msgid "Display information about a class." +msgstr "" + +msgid "Search for classes." +msgstr "" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +msgid "CLI name" +msgstr "" + +msgid "Confirm (password)" +msgstr "" + +msgid "Default" +msgstr "" + +msgid "Default from" +msgstr "" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" +msgstr "" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command output." +msgstr "" + +msgid "Search for command outputs." +msgstr "" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "self service permission" +msgstr "" + +msgid "self service permissions" +msgstr "" + +msgid "Self Service Permissions" +msgstr "" + +msgid "Self Service Permission" +msgstr "" + +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +msgid "SELinux User Map rule" +msgstr "" + +msgid "SELinux User Map rules" +msgstr "" + +msgid "SELinux User Maps" +msgstr "" + +msgid "SELinux User Map" +msgstr "" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "" + +#, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +msgid "server roles" +msgstr "" + +msgid "IPA Server Roles" +msgstr "" + +msgid "IPA Server Role" +msgstr "" + +msgid "IPA server role name" +msgstr "" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "IPA role name" +msgstr "" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +#, python-format +msgid "authentication indicators not allowed in service \"%s\"" +msgstr "" + +msgid "Malformed principal" +msgstr "" + +msgid "{} is required by the IPA master" +msgstr "" + +msgid "service" +msgstr "" + +msgid "services" +msgstr "" + +msgid "Service principal alias" +msgstr "" + +msgid "Base-64 encoded service certificate" +msgstr "" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +msgid "Add a new IPA service." +msgstr "" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "" + +msgid "force principal name even if host not in DNS" +msgstr "" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +msgid "Add a new SMB service." +msgstr "" + +msgid "SMB service NetBIOS name" +msgstr "" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to a service" +msgstr "" + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a service" +msgstr "" + +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Subordinate ids\n" +"\n" +"Manage subordinate user and group ids for users\n" +"\n" +"EXAMPLES:\n" +"\n" +" Auto-assign a subordinate id range to current user\n" +" ipa subid-generate\n" +"\n" +" Auto-assign a subordinate id range to user alice:\n" +" ipa subid-generate --owner=alice\n" +"\n" +" Find subordinate ids for user alice:\n" +" ipa subid-find --owner=alice\n" +"\n" +" Match entry by any subordinate uid in range:\n" +" ipa subid-match --subuid=2147483649\n" +msgstr "" + +msgid "Subordinate id" +msgstr "" + +msgid "Subordinate ids" +msgstr "" + +msgid "Subordinate id description" +msgstr "" + +msgid "Owning user of subordinate id entry" +msgstr "" + +msgid "Start value for subordinate user ID (subuid) range" +msgstr "" + +msgid "Subordinate user ID count" +msgstr "" + +msgid "Start value for subordinate group ID (subgid) range" +msgstr "" + +msgid "Subordinate group ID count" +msgstr "" + +#, python-format +msgid "" +"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." +msgstr "" + +#, python-format +msgid "'%(dn)s is not a valid user" +msgstr "" + +msgid "subgidnumber must be equal to subuidnumber" +msgstr "" + +msgid "Add a new subordinate id." +msgstr "" + +#, python-format +msgid "Added subordinate id \"%(value)s\"" +msgstr "" + +msgid "Delete a subordinate id." +msgstr "" + +#, python-format +msgid "Deleted subordinate id \"%(value)s\"" +msgstr "" + +msgid "Modify a subordinate id." +msgstr "" + +#, python-format +msgid "Modified subordinate id \"%(value)s\"" +msgstr "" + +msgid "Search for subordinate id." +msgstr "" + +#, python-format +msgid "%(count)d subordinate id matched" +msgid_plural "%(count)d subordinate ids matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about a subordinate id." +msgstr "" + +msgid "Generate and auto-assign subuid and subgid range to user entry" +msgstr "" + +msgid "Match users by any subordinate uid in their range" +msgstr "" + +msgid "SubUID match" +msgstr "" + +msgid "Match value for subordinate user ID" +msgstr "" + +msgid "Subordinate id statistics" +msgstr "" + +#, python-format +msgid "%(remaining)i remaining subordinate id ranges" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +msgid "sudo command" +msgstr "" + +msgid "sudo commands" +msgstr "" + +msgid "Sudo Commands" +msgstr "" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + msgid "" "\n" "Topology\n" @@ -18213,1003 +21917,6 @@ msgid "" " replication agreements\n" msgstr "" -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -msgid "sudo command" -msgstr "" - -msgid "sudo commands" -msgstr "" - -msgid "Sudo Commands" -msgstr "" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -msgid "Self Service Permissions" -msgstr "" - -msgid "Self Service Permission" -msgstr "" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "A list of ACI values" -msgstr "LDAP प्रविष्टियों की सूची" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -msgid "ACI prefix is required" -msgstr "" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "groups" -msgstr "" - -msgid "User Group" -msgstr "" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "" - -msgid "privileged group" -msgstr "" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -msgid "Not a managed group" -msgstr "" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -msgid "automount location" -msgstr "" - -msgid "automount locations" -msgstr "" - -msgid "Automount Locations" -msgstr "" - -msgid "Automount Location" -msgstr "" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "automount map" -msgstr "" - -msgid "automount maps" -msgstr "" - -msgid "Automount Maps" -msgstr "" - -msgid "Automount Map" -msgstr "" - -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Automount key object." -msgstr "" - -msgid "automount key" -msgstr "" - -msgid "automount keys" -msgstr "" - -msgid "Automount Keys" -msgstr "" - -msgid "Automount Key" -msgstr "" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, python-format -msgid "key named %(key)s already exists" -msgstr "" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" -msgstr[1] "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -msgid "Delete an ID override." -msgstr "" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -msgid "Modify an ID override." -msgstr "" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -msgid "CA category" -msgstr "" - -msgid "CA category the ACL applies to" -msgstr "" - -msgid "CAs" -msgstr "" - -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, python-format -msgid "%i users or groups added." -msgstr "" - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, python-format -msgid "%i service added." -msgstr "" - -#, python-format -msgid "%i services added." -msgstr "" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - msgid "" "\n" "Cross-realm trusts\n" @@ -19375,12 +22082,6 @@ msgid "" " " msgstr "" -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - msgid "Type of trusted domain ID range, one of allowed values" msgstr "" @@ -19617,736 +22318,9 @@ msgid "" "itself" msgstr "" -msgid "" -"\n" -"DNS server configuration\n" +msgid "users" msgstr "" -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "" - -msgid "DNS servers" -msgstr "" - -msgid "DNS Servers" -msgstr "" - -msgid "DNS Server" -msgstr "" - -msgid "DNS Server name" -msgstr "" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "" - -msgid "Search for DNS servers." -msgstr "" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "" - -msgid "Delete a DNS server" -msgstr "" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "" - -msgid "HBAC Services" -msgstr "" - -msgid "HBAC Service" -msgstr "" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -msgid "HBAC service group" -msgstr "" - -msgid "HBAC service groups" -msgstr "" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" -msgstr "" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -msgid "Delegations" -msgstr "" - -msgid "Delegation" -msgstr "" - -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Role" -msgstr "" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -msgid "netgroups" -msgstr "" - -msgid "Netgroup" -msgstr "" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - #, python-format msgid "Added user \"%(value)s\"" msgstr "" @@ -20366,12 +22340,6 @@ msgstr "" msgid "Modified user \"%(value)s\"" msgstr "" -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" -msgstr[1] "" - #, python-format msgid "Undeleted user account \"%(value)s\"" msgstr "" @@ -20467,12 +22435,6 @@ msgstr "" msgid "Removed certificates from user \"%(value)s\"" msgstr "" -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - msgid "Add new principal alias to the user entry" msgstr "" @@ -20487,532 +22449,6 @@ msgstr "" msgid "Removed aliases from user \"%(value)s\"" msgstr "" -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" -msgstr "" - -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -msgid "SELinux User Maps" -msgstr "" - -msgid "SELinux User Map" -msgstr "" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "" - -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "" - msgid "" "\n" "Vaults\n" @@ -21355,107 +22791,156 @@ msgstr "" msgid "Checks if any of the servers has the KRA service enabled" msgstr "" -msgid "Member service groups" -msgstr "" - -msgid "Member HBAC service groups" -msgstr "" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" +msgid "operation not defined" msgstr "" #, python-format -msgid "container entry (%(container)s) not found" +msgid "not allowed to perform operation: %s" msgstr "" -#, python-format -msgid "%(parent)s: %(oname)s not found" +msgid "No such virtual command" msgstr "" -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "Class of Service object used for linking policies with groups" msgstr "" #, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +msgid "password policy" +msgstr "" + +msgid "password policies" +msgstr "" + +msgid "Password Policies" +msgstr "" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +msgid "User check" +msgstr "" + +msgid "Check if the password contains the username" +msgstr "" + msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" msgstr "" -#, python-format -msgid "added attribute value to entry %(value)s" +msgid "Maximum password life must be equal to or greater than the minimum." msgstr "" -#, python-format -msgid "removed attribute values from entry %(value)s" +msgid "cannot delete global password policy" msgstr "" -msgid "one or more values to remove" +msgid "priority cannot be set on global policy" msgstr "" msgid "" @@ -21602,6 +23087,10 @@ msgstr "" msgid "Ignoring topology connectivity errors." msgstr "" +#, python-format +msgid "Failed to remove server from security domain: %s" +msgstr "" + msgid "Server has already been deleted" msgstr "" @@ -21639,1391 +23128,186 @@ msgstr "" msgid "" "\n" -"Manage Certificate Authorities\n" +"Sudo Rules\n" msgstr "" msgid "" "\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" msgstr "" msgid "" "\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" msgstr "" msgid "" "\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" +"Each option needs to be added separately and no validation is done whether\n" +"the option is known by sudo or is in a valid format. Environment variables\n" +"also need to be set individually. For example env_keep=\"FOO BAR\" in " +"sudoers\n" +"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" +"+=BAR.\n" msgstr "" msgid "" "\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" msgstr "" msgid "" "\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" msgstr "" msgid "" "\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" msgstr "" msgid "" "\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" msgstr "" msgid "" "\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" "\n" -" ipa ca-del puppet\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" msgstr "" -msgid "Certificate Authority" +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" msgstr "" -msgid "Certificate Authorities" +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" msgstr "" -msgid "Name for referencing the CA" +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" msgstr "" -msgid "Description of the purpose of the CA" +msgid "" +"\n" +" Set multiple default Sudo options:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate' --" +"sudooption mail_badpass\n" msgstr "" -msgid "Authority ID" +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" msgstr "" -msgid "Dogtag Authority ID" +msgid "this option has been deprecated." msgstr "" -msgid "Subject DN" +msgid "sudo rules" msgstr "" -msgid "Subject Distinguished Name" +msgid "Sudo Rules" msgstr "" -msgid "Issuer Distinguished Name" -msgstr "" - -msgid "Search for CAs." +msgid "Sudo Rule" msgstr "" #, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +msgid "command" +msgstr "" + +msgid "commands" +msgstr "" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +msgid "group runAs" +msgstr "" + +msgid "runAs groups" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" msgstr[0] "" msgstr[1] "" -msgid "Display the properties of a CA." +msgid "commands cannot be added when command category='all'" msgstr "" -msgid "Create a CA." +msgid "users cannot be added when runAs user or runAs group category='all'" msgstr "" #, python-format -msgid "Created CA \"%(value)s\"" +msgid "RunAsUser does not accept '%(name)s' as a user name" msgstr "" #, python-format -msgid "Insufficient 'add' privilege for entry '%s'." +msgid "RunAsUser does not accept '%(name)s' as a group name" msgstr "" #, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -msgid "IPA CA cannot be deleted" -msgstr "" - -msgid "Must be disabled first" -msgstr "" - -msgid "Modify CA configuration." -msgstr "" - -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -msgid "Disable a CA." -msgstr "" - -#, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "" - -msgid "IPA CA cannot be disabled" -msgstr "" - -msgid "Enable a CA." -msgstr "" - -#, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -#, fuzzy -msgid "must be TRUE or FALSE" -msgstr "सही या गलत होना चाहिए" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -msgid "URI" -msgstr "" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "" - -msgid "cannot be empty" -msgstr "" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "invalid IP network format" -msgstr "" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -msgid "invalid address format" -msgstr "" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -msgid "flags value: allowed interval 0-255" -msgstr "" - -msgid "iterations value: allowed interval 0-65535" -msgstr "" - -#, python-format -msgid "salt value: %(err)s" -msgstr "" - -msgid "invalid domain-name: not fully qualified" -msgstr "" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" - -#, python-format -msgid "%s record" -msgstr "" - -#, python-format -msgid "Raw %s records" -msgstr "" - -#, python-format -msgid "%s Record" -msgstr "" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -msgid "Invalid number of parts!" -msgstr "" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -msgid "Create reverse" -msgstr "" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" - -msgid "Exchanger" -msgstr "" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -msgid "Priority (order)" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Relative weight for entries with the same priority." -msgstr "" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Target Uniform Resource Identifier" -msgstr "" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" - -msgid "Managedby permission" -msgstr "" - -msgid "cannot be used when a zone is specified" -msgstr "" - -#, fuzzy -msgid "Only one zone type is allowed per zone name" -msgstr "केवल एक मान की अनुमति है" - -#, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "" - -#, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "" - -#, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "" - -msgid "DNS zone" -msgstr "" - -msgid "DNS zones" -msgstr "" - -msgid "DNS Zones" -msgstr "" - -msgid "DNS Zone" -msgstr "" - -msgid "Default time to live" -msgstr "" - -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -msgid "setting Authoritative nameserver" -msgstr "" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -msgid "" -msgstr "" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "" - -msgid "is required" -msgstr "" - -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "" - -msgid "DNS resource record" -msgstr "" - -msgid "DNS resource records" -msgstr "" - -msgid "DNS Resource Records" -msgstr "" - -msgid "DNS Resource Record" -msgstr "" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -msgid "only master zones can contain records" -msgstr "" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -msgid "DNS zone root record cannot be renamed" -msgstr "" - -msgid "DNS records can be only updated one at a time" -msgstr "" - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Found '%(value)s'" -msgstr "" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "" - -msgid "DNS configuration options" -msgstr "" - -msgid "DNS Global Configuration" -msgstr "" - -msgid "IPA DNS version" -msgstr "" - -msgid "List of IPA masters configured as DNS servers" -msgstr "" - -msgid "IPA server configured as DNSSec key master" -msgstr "" - -msgid "Global DNS configuration is empty" -msgstr "" - -msgid "DNS forward zone" -msgstr "" - -msgid "DNS forward zones" -msgstr "" - -msgid "DNS Forward Zones" -msgstr "" - -msgid "DNS Forward Zone" -msgstr "" - -msgid "Please specify forwarders." -msgstr "" - -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "" - -msgid "IPA DNS records" -msgstr "" - -msgid "IPA location records" -msgstr "" - -msgid "Update location and IPA server DNS records" -msgstr "" - -msgid "Result of the command" -msgstr "" - -msgid "Dry run" -msgstr "" - -msgid "Do not update records only return expected records" -msgstr "" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -msgid "Certificate Profile" -msgstr "" - -msgid "Certificate Profiles" -msgstr "" - -msgid "Profile configuration" -msgstr "" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -msgid "must be enabled only on a single master" +msgid "RunAsGroup does not accept '%(name)s' as a group name" msgstr "" msgid "Request must be a dict" @@ -23047,6 +23331,17 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + #, python-format msgid "" "\n" @@ -23066,34 +23361,6 @@ msgstr "" msgid "Topology does not allow server %(server)s to replicate with servers:" msgstr "" -msgid "Trusting forest" -msgstr "" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Unknown" -msgstr "" - -msgid "Non-Active Directory domain" -msgstr "" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - msgid "" "\n" "Classes to manage trust joins using DCE-RPC calls\n" @@ -23252,33 +23519,6 @@ msgstr "" msgid "must be at least 1" msgstr "" -#, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -msgid "Unable to initialize STARTTLS session\n" -msgstr "" - msgid "Out of memory\n" msgstr "" @@ -23306,3 +23546,30 @@ msgstr "" msgid "Bad or unsupported salt type.\n" msgstr "" + +#, c-format +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "" + +msgid "" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" +msgstr "" + +msgid "Unable to initialize STARTTLS session\n" +msgstr "" diff --git a/po/hu.po b/po/hu.po index 0a705fecd..0f907aec1 100644 --- a/po/hu.po +++ b/po/hu.po @@ -18,155 +18,422 @@ msgstr "" "Plural-Forms: nplurals=2; plural=n != 1;\n" "X-Generator: Weblate 4.4\n" -msgid "A group may not be a member of itself" -msgstr "Egy csoport nem lehet tagja önmagának" +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "" -msgid "A list of LDAP entries" -msgstr "LDAP-bejegyzések listája" +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "" -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" +#, c-format +msgid "out of memory\n" +msgstr "" -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "Base64 kicsomagolás sikertelen: %(reason)s" +#, c-format +msgid "read error\n" +msgstr "" -msgid "Certificate" -msgstr "Tanúsítvány" +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "Tanúsítványhiba: %(error)s" +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" -msgid "Character classes" -msgstr "Karakterosztályok" +#, c-format +msgid "Removing principal %s\n" +msgstr "" -msgid "Default shell" -msgstr "Alapértelmezett shell" +#, c-format +msgid "Failed to open keytab\n" +msgstr "" -msgid "Default users group" -msgstr "Alapértelmezett csoport" +#, c-format +msgid "principal not found\n" +msgstr "" -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" -msgid "Description" -msgstr "Leírás" +#, c-format +msgid "Unable to remove entry\n" +msgstr "" -msgid "Fingerprint (SHA1)" -msgstr "Ujjlenyomat (SHA1)" +#, c-format +msgid "kvno %d\n" +msgstr "" -msgid "GID" -msgstr "GID" +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" -msgid "GID (use this option to set it manually)" -msgstr "GID (kézzel történő beállításhoz)" +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" -#, python-format -msgid "Group '%s' does not exist" -msgstr "A '%s' csoport nem létezik" +#, c-format +msgid "Unable to parse principal\n" +msgstr "" -msgid "HBAC service group description" -msgstr "HBAC szolgáltatás-csoport leírása" +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" -msgid "Issuer" -msgstr "Kibocsátó" +#, c-format +msgid "realm not found\n" +msgstr "" -msgid "LDAP URI" -msgstr "LDAP URI" +msgid "Print debugging information" +msgstr "" -msgid "Max lifetime (days)" -msgstr "Élettartam legfeljebb (nap)" +msgid "Debugging output" +msgstr "" -msgid "Maximum password lifetime (in days)" -msgstr "Jelszó maximális élettartama (nap)" +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" -msgid "Min lifetime (hours)" -msgstr "Minimális élettartam (óra)" +msgid "Kerberos Service Principal Name" +msgstr "" -msgid "Minimum password lifetime (in hours)" -msgstr "Jelszó minimális élettartama (óra)" +msgid "The keytab file to remove the principcal(s) from" +msgstr "" -msgid "Not After" -msgstr "Érvényesség vége" +msgid "Keytab File Name" +msgstr "" -msgid "Not Before" -msgstr "Érvényesség kezdete" +msgid "Remove all principals in this realm" +msgstr "" -msgid "Password history size" -msgstr "Megőrzött jelszavak (darab)" +#, fuzzy +msgid "Realm name" +msgstr "Szabály neve" -msgid "Passwords do not match" -msgstr "A jelszavak nem egyeznek meg" +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "" + +#, c-format +msgid "Out of memory \n" +msgstr "" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "" + +msgid "Simple bind failed\n" +msgstr "" + +msgid "SASL Bind failed\n" +msgstr "" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "" + +#, c-format +msgid "Failed to get result: %s\n" +msgstr "" + +#, c-format +msgid "Timeout exceeded." +msgstr "" + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "" + +#, c-format +msgid "Missing reply control!\n" +msgstr "" + +#, c-format +msgid "Out of Memory!\n" +msgstr "" + +#, c-format +msgid "Failed to create control!\n" +msgstr "" + +#, c-format +msgid "Failed to bind to server!\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab!\n" +msgstr "" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "" + +msgid "Failed to decode control reply!\n" +msgstr "" #, c-format msgid "Passwords do not match!\n" msgstr "A jelszavak nem egyeznek!\n" -msgid "Permissions" -msgstr "Jogosultságok" +#, c-format +msgid "Failed to open config file %s\n" +msgstr "" -msgid "Reason" -msgstr "Ok" +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "" -msgid "Request id" -msgstr "Igénylés azonosítója" +msgid "Failed to resolve symlink to keytab.\n" +msgstr "" -msgid "Request status" -msgstr "Igénylés állapota" +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" -msgid "Revocation reason" -msgstr "Visszavonás oka" +msgid "Print as little as possible" +msgstr "" -msgid "Revoked" -msgstr "Visszavont" +msgid "Output only on errors" +msgstr "" -msgid "Rule name" -msgstr "Szabály neve" +msgid "Output debug info" +msgstr "" -msgid "SOA serial" -msgstr "SOA sorozatszám" +msgid "Contact this specific KDC Server" +msgstr "" -msgid "Serial number" -msgstr "Sorozatszám" - -msgid "Service Groups" -msgstr "Szolgáltatás-csoportok" - -msgid "Service group name" -msgstr "Szolgáltatás-csoport neve" - -msgid "Service name" +#, fuzzy +msgid "Server Name" msgstr "Szolgáltatás neve" -msgid "Services" -msgstr "Szolgáltatások" +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" -msgid "Subject" -msgstr "Tárgy" +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" -msgid "Target group" -msgstr "Célcsoport" +msgid "Encryption types to request" +msgstr "" -msgid "The default users group cannot be removed" -msgstr "Az alapértelmezett csoport nem távolítható el" +msgid "Comma separated encryption types list" +msgstr "" -msgid "This command requires root access" -msgstr "Ez a parancs rendszergazdai jogosultságot igényel" +msgid "Show the list of permitted encryption types and exit" +msgstr "" -msgid "This is already a posix group" -msgstr "Ez egy létező POSIX csoport" +msgid "Permitted Encryption Types" +msgstr "" -msgid "User group" -msgstr "Felhasználói csport" +msgid "Asks for a non-random password to use for the principal" +msgstr "" -msgid "Zone name (FQDN)" -msgstr "Zóna neve (FQDN)" +#, fuzzy +msgid "LDAP DN" +msgstr "LDAP URI" -msgid "change to a POSIX group" -msgstr "POSIX-csoportra módosít" +msgid "DN to bind as if not using kerberos" +msgstr "" + +msgid "LDAP password" +msgstr "" + +msgid "password to use if not using kerberos" +msgstr "" + +msgid "Prompt for LDAP password" +msgstr "" + +msgid "Path to the IPA CA certificate" +msgstr "" + +#, fuzzy +msgid "IPA CA certificate" +msgstr "Tanúsítvány" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" + +msgid "url" +msgstr "" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" + +msgid "GSSAPI|EXTERNAL" +msgstr "" + +msgid "Retrieve current keys without changing them" +msgstr "" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +msgid "Enter LDAP password" +msgstr "" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "" + +#, c-format +msgid "DNS discovery for domain %s\n" +msgstr "" + +#, c-format +msgid "Discovered server %s\n" +msgstr "" + +#, c-format +msgid "Using discovered server %s\n" +msgstr "" + +#, c-format +msgid "DNS Discovery failed\n" +msgstr "" + +#, c-format +msgid "Using server from config %s\n" +msgstr "" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "" + +#, c-format +msgid "Using provided server %s\n" +msgstr "" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "" + +msgid "New Principal Password" +msgstr "" + +msgid "Verify Principal Password" +msgstr "" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" + +#, c-format +msgid "Failed to create key material\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "" #, c-format msgid "Out of memory!\n" @@ -192,9 +459,6 @@ msgstr "" msgid "Unable to enable SSL in LDAP\n" msgstr "" -msgid "SASL Bind failed\n" -msgstr "" - #, c-format msgid "Search for %1$s on rootdse failed with error %2$d\n" msgstr "" @@ -421,389 +685,6 @@ msgstr "" msgid "The hostname must not be: %s\n" msgstr "" -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "" - -#, c-format -msgid "Out of memory \n" -msgstr "" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "" - -msgid "Simple bind failed\n" -msgstr "" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -#, c-format -msgid "Out of Memory!\n" -msgstr "" - -#, c-format -msgid "Failed to create control!\n" -msgstr "" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "" - -msgid "Failed to decode control reply!\n" -msgstr "" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "" - -msgid "Failed to resolve symlink to keytab.\n" -msgstr "" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Output only on errors" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -#, fuzzy -msgid "Server Name" -msgstr "Szolgáltatás neve" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Encryption types to request" -msgstr "" - -msgid "Comma separated encryption types list" -msgstr "" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -msgid "Permitted Encryption Types" -msgstr "" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -#, fuzzy -msgid "LDAP DN" -msgstr "LDAP URI" - -msgid "DN to bind as if not using kerberos" -msgstr "" - -msgid "LDAP password" -msgstr "" - -msgid "password to use if not using kerberos" -msgstr "" - -msgid "Prompt for LDAP password" -msgstr "" - -msgid "Path to the IPA CA certificate" -msgstr "" - -#, fuzzy -msgid "IPA CA certificate" -msgstr "Tanúsítvány" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -msgid "Enter LDAP password" -msgstr "" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -msgid "New Principal Password" -msgstr "" - -msgid "Verify Principal Password" -msgstr "" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, c-format -msgid "Failed to create key material\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -#, fuzzy -msgid "Realm name" -msgstr "Szabály neve" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "" - -#, c-format -msgid "out of memory\n" -msgstr "" - -#, c-format -msgid "read error\n" -msgstr "" - msgid "Failed members" msgstr "" @@ -919,132 +800,36 @@ msgstr "" msgid "Skipped %(key)s" msgstr "" +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +#, fuzzy +msgid "Unrevoked" +msgstr "Visszavont" + +msgid "Error" +msgstr "" + +#, fuzzy +msgid "Input filename" +msgstr "Szabály neve" + +msgid "File to load the certificate from." +msgstr "" + +msgid "cannot specify both raw certificate and file" +msgstr "" + msgid "Input file" msgstr "" msgid "File to load the certificate from" msgstr "" -msgid "cannot specify both raw certificate and file" -msgstr "" - #, python-format msgid "Profile configuration stored in file '%(file)s'" msgstr "" -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -msgid "Servers details:" -msgstr "" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "Add a new YubiKey OTP token." -msgstr "" - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -msgid "Maximum number of agreements per replica" -msgstr "" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -msgid "Delete a user" -msgstr "" - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - msgid "Split DNS record to parts" msgstr "" @@ -1109,6 +894,131 @@ msgstr "" msgid "file to store DNS records in nsupdate format" msgstr "" +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "" + +msgid "Servers details:" +msgstr "" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "" + +msgid "User ID" +msgstr "" + +msgid "Password" +msgstr "" + +msgid "First Code" +msgstr "" + +msgid "Second Code" +msgstr "" + +msgid "Token ID" +msgstr "" + +msgid "python-yubico is not installed." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" + +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "Add a new YubiKey OTP token." +msgstr "" + +msgid "YubiKey slot" +msgstr "" + +msgid "No free YubiKey slot!" +msgstr "" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "" + +msgid "Topology is disconnected" +msgstr "" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "" + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "" + +msgid "Maximum number of agreements per replica" +msgstr "" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "" + +msgid "Delete a user" +msgstr "" + +msgid "preserve and no-preserve cannot be both set" +msgstr "" + #, python-format msgid "Cannot read file '%(filename)s': %(exc)s" msgstr "" @@ -1228,49 +1138,20 @@ msgstr "" msgid "Missing vault private key" msgstr "" -msgid "Write certificate (chain if --chain used) to file" +#, python-format +msgid "Enabled Sudo Rule \"%s\"" msgstr "" -#, fuzzy -msgid "Unrevoked" -msgstr "Visszavont" - -msgid "Error" +#, python-format +msgid "Disabled Sudo Rule \"%s\"" msgstr "" -#, fuzzy -msgid "Input filename" -msgstr "Szabály neve" - -msgid "File to load the certificate from." +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" msgstr "" -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -msgid "User ID" -msgstr "" - -msgid "Password" -msgstr "" - -msgid "First Code" -msgstr "" - -msgid "Second Code" -msgstr "" - -msgid "Token ID" +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" msgstr "" msgid "" @@ -1404,9 +1285,15 @@ msgstr "Jogosultságok" msgid "Permission ACI grants access to" msgstr "" +msgid "User group" +msgstr "Felhasználói csport" + msgid "User group ACI grants access to" msgstr "" +msgid "Permissions" +msgstr "Jogosultságok" + msgid "Permissions to grant(read, write, add, delete, all)" msgstr "" @@ -1440,6 +1327,9 @@ msgstr "" msgid "Subtree to apply ACI to" msgstr "" +msgid "Target group" +msgstr "Célcsoport" + msgid "Group to apply ACI to" msgstr "" @@ -1534,6 +1424,244 @@ msgstr "" msgid "Location of the ACI" msgstr "" +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Description" +msgstr "Leírás" + +msgid "A description of this auto member rule" +msgstr "" + +#, fuzzy +msgid "Default (fallback) Group" +msgstr "Alapértelmezett csoport" + +msgid "Default group for entries to land" +msgstr "" + +msgid "Add an automember rule." +msgstr "" + +msgid "Automember Rule" +msgstr "" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +msgid "Grouping Type" +msgstr "" + +msgid "Grouping to which the rule applies" +msgstr "" + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +msgid "Exclusive Regex" +msgstr "" + +msgid "Attribute Key" +msgstr "" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +msgid "Number of conditions added" +msgstr "" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +msgid "Display information about the default (fallback) automember groups." +msgstr "" + +msgid "Delete an automember rule." +msgstr "" + +msgid "List of deletions that failed" +msgstr "" + +msgid "Search for automember rules." +msgstr "" + +msgid "Modify an automember rule." +msgstr "" + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +msgid "Rights" +msgstr "" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Users" +msgstr "" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Hosts" +msgstr "" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +msgid "Conditions that could not be removed" +msgstr "" + +msgid "Number of conditions removed" +msgstr "" + +msgid "Display information about an automember rule." +msgstr "" + msgid "" "\n" "Automount\n" @@ -1669,25 +1797,12 @@ msgstr "" msgid "Create a new automount key." msgstr "" -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - msgid "Delete an automount key." msgstr "" msgid "Continuous mode: Don't stop on errors." msgstr "" -msgid "List of deletions that failed" -msgstr "" - msgid "Search for an automount key." msgstr "" @@ -1706,19 +1821,6 @@ msgstr "" msgid "Modify an automount key." msgstr "" -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "Rights" -msgstr "" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - msgid "New mount information" msgstr "" @@ -1814,6 +1916,187 @@ msgstr "" msgid "Nested Methods to execute" msgstr "" +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +msgid "Search for existing certificates." +msgstr "" + +msgid "Match cn attribute in subject" +msgstr "" + +msgid "Reason" +msgstr "Ok" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "" + +#, fuzzy +msgid "minimum serial number" +msgstr "Sorozatszám" + +#, fuzzy +msgid "maximum serial number" +msgstr "Sorozatszám" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Maximum number of certs returned" +msgstr "" + +msgid "Take a revoked certificate off hold." +msgstr "" + +msgid "Serial number" +msgstr "Sorozatszám" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +msgid "Submit a certificate signing request." +msgstr "" + +msgid "CSR" +msgstr "" + +msgid "Principal" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +msgid "Dictionary mapping variable name to value" +msgstr "" + +#, fuzzy +msgid "Revoke a certificate." +msgstr "Tanúsítvány" + +msgid "Retrieve an existing certificate." +msgstr "" + +msgid "Output filename" +msgstr "" + +msgid "File to store the certificate in." +msgstr "" + +msgid "Check the status of a certificate signing request." +msgstr "" + +msgid "Request id" +msgstr "Igénylés azonosítója" + msgid "" "\n" "Server configuration\n" @@ -1872,10 +2155,16 @@ msgstr "" msgid "Default location of home directories" msgstr "" +msgid "Default shell" +msgstr "Alapértelmezett shell" + #, fuzzy msgid "Default shell for new users" msgstr "Alapértelmezett shell" +msgid "Default users group" +msgstr "Alapértelmezett csoport" + msgid "Default group for new users" msgstr "" @@ -2315,6 +2604,9 @@ msgstr "" msgid "Zone name" msgstr "Zóna neve (FQDN)" +msgid "Zone name (FQDN)" +msgstr "Zóna neve (FQDN)" + msgid "Reverse zone IP network" msgstr "" @@ -2891,6 +3183,9 @@ msgstr "" msgid "Administrator e-mail address" msgstr "" +msgid "SOA serial" +msgstr "SOA sorozatszám" + #, fuzzy msgid "SOA record serial number" msgstr "Sorozatszám" @@ -3085,6 +3380,319 @@ msgstr "" msgid "Display information about a DNS zone (SOA record)." msgstr "" +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +#, fuzzy +msgid "Group name" +msgstr "Szolgáltatás-csoport neve" + +#, fuzzy +msgid "Group description" +msgstr "Leírás" + +msgid "GID" +msgstr "GID" + +msgid "GID (use this option to set it manually)" +msgstr "GID (kézzel történő beállításhoz)" + +msgid "Member users" +msgstr "" + +#, fuzzy +msgid "Member groups" +msgstr "Felhasználói csport" + +#, fuzzy +msgid "Member of groups" +msgstr "Felhasználói csport" + +msgid "Roles" +msgstr "" + +msgid "Member of netgroups" +msgstr "" + +msgid "Member of Sudo rule" +msgstr "" + +msgid "Member of HBAC rule" +msgstr "" + +msgid "Indirect Member users" +msgstr "" + +msgid "Indirect Member groups" +msgstr "" + +msgid "Indirect Member of group" +msgstr "" + +msgid "Indirect Member of netgroup" +msgstr "" + +msgid "Indirect Member of role" +msgstr "" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +msgid "Create a new group." +msgstr "" + +#, fuzzy +msgid "Create as a non-POSIX group" +msgstr "POSIX-csoportra módosít" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +msgid "Add members to a group." +msgstr "" + +#, fuzzy +msgid "External member" +msgstr "Sorozatszám" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +msgid "member user" +msgstr "" + +msgid "users to add" +msgstr "" + +#, fuzzy +msgid "member group" +msgstr "Felhasználói csport" + +msgid "groups to add" +msgstr "" + +msgid "Members that could not be added" +msgstr "" + +msgid "Number of members added" +msgstr "" + +#, fuzzy +msgid "Delete group." +msgstr "Alapértelmezett csoport" + +msgid "Detach a managed group from a user." +msgstr "" + +#, fuzzy +msgid "Search for groups." +msgstr "Szolgáltatás-csoportok" + +msgid "search for private groups" +msgstr "" + +#, fuzzy +msgid "search for POSIX groups" +msgstr "POSIX-csoportra módosít" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +#, fuzzy +msgid "search for non-POSIX groups" +msgstr "POSIX-csoportra módosít" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "user" +msgstr "" + +msgid "Search for groups with these member users." +msgstr "" + +msgid "Search for groups without these member users." +msgstr "" + +#, fuzzy +msgid "group" +msgstr "Felhasználói csport" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +#, fuzzy +msgid "netgroup" +msgstr "Célcsoport" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +msgid "HBAC rule" +msgstr "" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +msgid "Modify a group." +msgstr "" + +msgid "change to a POSIX group" +msgstr "POSIX-csoportra módosít" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +msgid "Remove members from a group." +msgstr "" + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "" + +msgid "Number of members removed" +msgstr "" + +msgid "Display information about a named group." +msgstr "" + msgid "" "\n" "Host-based access control\n" @@ -3135,6 +3743,9 @@ msgid "" " ipa hbacrule-del allow_server\n" msgstr "" +msgid "Rule name" +msgstr "Szabály neve" + #, fuzzy msgid "Rule type" msgstr "Szabály neve" @@ -3165,28 +3776,25 @@ msgstr "" msgid "Enabled" msgstr "" -msgid "Users" -msgstr "" - #, fuzzy msgid "User Groups" msgstr "Felhasználói csport" -msgid "Hosts" -msgstr "" - msgid "Host Groups" msgstr "" +msgid "Services" +msgstr "Szolgáltatások" + +msgid "Service Groups" +msgstr "Szolgáltatás-csoportok" + msgid "External host" msgstr "" msgid "Create a new HBAC rule." msgstr "" -msgid "Suppress processing of membership attributes." -msgstr "" - msgid "Add target hosts and hostgroups to an HBAC rule." msgstr "" @@ -3202,12 +3810,6 @@ msgstr "" msgid "host groups to add" msgstr "" -msgid "Members that could not be added" -msgstr "" - -msgid "Number of members added" -msgstr "" - msgid "Add services to an HBAC rule." msgstr "" @@ -3229,19 +3831,6 @@ msgstr "HBAC szolgáltatás-csoport leírása" msgid "Add users and groups to an HBAC rule." msgstr "" -msgid "member user" -msgstr "" - -msgid "users to add" -msgstr "" - -#, fuzzy -msgid "member group" -msgstr "Felhasználói csport" - -msgid "groups to add" -msgstr "" - msgid "Delete an HBAC rule." msgstr "" @@ -3266,12 +3855,6 @@ msgstr "" msgid "host groups to remove" msgstr "" -msgid "Members that could not be removed" -msgstr "" - -msgid "Number of members removed" -msgstr "" - msgid "Remove service and service groups from an HBAC rule." msgstr "" @@ -3286,12 +3869,6 @@ msgstr "HBAC szolgáltatás-csoport leírása" msgid "Remove users and groups from an HBAC rule." msgstr "" -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - msgid "Display the properties of an HBAC rule." msgstr "" @@ -3318,6 +3895,9 @@ msgid "" " ipa hbacsvc-del tftp\n" msgstr "" +msgid "Service name" +msgstr "Szolgáltatás neve" + #, fuzzy msgid "HBAC service" msgstr "Szolgáltatások" @@ -3370,6 +3950,12 @@ msgid "" " ipa hbacsvcgroup-del login\n" msgstr "" +msgid "Service group name" +msgstr "Szolgáltatás-csoport neve" + +msgid "HBAC service group description" +msgstr "HBAC szolgáltatás-csoport leírása" + msgid "Member HBAC service" msgstr "" @@ -3397,6 +3983,244 @@ msgstr "" msgid "Display information about an HBAC service group." msgstr "" +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +#, fuzzy +msgid "User name" +msgstr "Szabály neve" + +#, fuzzy +msgid "Target host" +msgstr "Célcsoport" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +msgid "Warning" +msgstr "" + +msgid "Matched rules" +msgstr "" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + msgid "" "\n" "Hosts/Machines\n" @@ -3500,6 +4324,9 @@ msgstr "" msgid "Random password" msgstr "" +msgid "Certificate" +msgstr "Tanúsítvány" + msgid "Base-64 encoded server certificate" msgstr "" @@ -3542,33 +4369,9 @@ msgstr "" msgid "Member of host-groups" msgstr "" -msgid "Roles" -msgstr "" - -msgid "Member of netgroups" -msgstr "" - -msgid "Member of Sudo rule" -msgstr "" - -msgid "Member of HBAC rule" -msgstr "" - -msgid "Indirect Member of netgroup" -msgstr "" - msgid "Indirect Member of host-group" msgstr "" -msgid "Indirect Member of role" -msgstr "" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - msgid "Keytab" msgstr "" @@ -3659,46 +4462,30 @@ msgstr "" msgid "Search for hosts without these member of host groups." msgstr "" -#, fuzzy -msgid "netgroup" -msgstr "Célcsoport" - msgid "Search for hosts with these member of netgroups." msgstr "" msgid "Search for hosts without these member of netgroups." msgstr "" -msgid "role" -msgstr "" - msgid "Search for hosts with these member of roles." msgstr "" msgid "Search for hosts without these member of roles." msgstr "" -msgid "HBAC rule" -msgstr "" - msgid "Search for hosts with these member of HBAC rules." msgstr "" msgid "Search for hosts without these member of HBAC rules." msgstr "" -msgid "sudo rule" -msgstr "" - msgid "Search for hosts with these member of sudo rules." msgstr "" msgid "Search for hosts without these member of sudo rules." msgstr "" -msgid "user" -msgstr "" - msgid "Search for hosts with these enrolled by users." msgstr "" @@ -3851,6 +4638,232 @@ msgstr "" msgid "Display information about a hostgroup." msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +#, fuzzy +msgid "Range name" +msgstr "Szabály neve" + +msgid "First Posix ID of the range" +msgstr "" + +msgid "Number of IDs in the range" +msgstr "" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +msgid "Range type" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "Delete an ID range." +msgstr "" + +msgid "Search for ranges." +msgstr "" + +msgid "Modify ID range." +msgstr "" + +msgid "Display information about a range." +msgstr "" + msgid "" "\n" "ID Views\n" @@ -3867,10 +4880,6 @@ msgstr "" msgid "Anchor to override" msgstr "" -#, fuzzy -msgid "Group name" -msgstr "Szolgáltatás-csoport neve" - msgid "Group ID Number" msgstr "" @@ -4098,10 +5107,6 @@ msgid "" " ipa krbtpolicy-mod admin --maxlife=3600\n" msgstr "" -#, fuzzy -msgid "User name" -msgstr "Szabály neve" - msgid "Manage ticket policy for specific user" msgstr "" @@ -4223,6 +5228,9 @@ msgstr "" msgid "Migrate users and groups from DS to IPA." msgstr "" +msgid "LDAP URI" +msgstr "LDAP URI" + msgid "LDAP URI of DS server to migrate from" msgstr "" @@ -4355,9 +5363,6 @@ msgid "" "retrieve and print all attributes from the server. Affects command output." msgstr "" -msgid "Dictionary mapping variable name to value" -msgstr "" - msgid "Total number of variables env (>= count)" msgstr "" @@ -4467,10 +5472,6 @@ msgstr "" msgid "Search for netgroups without these member users." msgstr "" -#, fuzzy -msgid "group" -msgstr "Felhasználói csport" - msgid "Search for netgroups with these member groups." msgstr "" @@ -4564,6 +5565,149 @@ msgstr "" msgid "Show the current OTP configuration." msgstr "" +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Manager" +msgstr "" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +msgid "Disabled" +msgstr "" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +msgid "Validity start" +msgstr "" + +msgid "First date/time the token can be used" +msgstr "" + +msgid "Validity end" +msgstr "" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "" + +msgid "Token model (informational only)" +msgstr "" + +#, fuzzy +msgid "Serial" +msgstr "SOA sorozatszám" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +msgid "Add a new OTP token." +msgstr "" + +msgid "(deprecated)" +msgstr "" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +msgid "Delete an OTP token." +msgstr "" + +msgid "Search for OTP token." +msgstr "" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +msgid "Modify a OTP token." +msgstr "" + +msgid "Rename the OTP token object" +msgstr "" + +msgid "Display information about an OTP token." +msgstr "" + msgid "" "\n" "YubiKey Tokens\n" @@ -5008,10 +6152,28 @@ msgstr "" msgid "Manage password policy for specific group" msgstr "" +msgid "Max lifetime (days)" +msgstr "Élettartam legfeljebb (nap)" + +msgid "Maximum password lifetime (in days)" +msgstr "Jelszó maximális élettartama (nap)" + +msgid "Min lifetime (hours)" +msgstr "Minimális élettartam (óra)" + +msgid "Minimum password lifetime (in hours)" +msgstr "Jelszó minimális élettartama (óra)" + #, fuzzy msgid "History size" msgstr "Megőrzött jelszavak (darab)" +msgid "Password history size" +msgstr "Megőrzött jelszavak (darab)" + +msgid "Character classes" +msgstr "Karakterosztályok" + #, fuzzy msgid "Minimum number of character classes" msgstr "Karakterosztályok" @@ -5238,13 +6400,6 @@ msgstr "Szabály neve" msgid "A description of this role-group" msgstr "" -msgid "Member users" -msgstr "" - -#, fuzzy -msgid "Member groups" -msgstr "Felhasználói csport" - msgid "Privileges" msgstr "" @@ -5515,9 +6670,6 @@ msgid "" "httpd.keytab\n" msgstr "" -msgid "Principal" -msgstr "" - #, fuzzy msgid "Service principal" msgstr "Szolgáltatás neve" @@ -6253,10 +7405,6 @@ msgstr "" msgid "Sudo Command Group" msgstr "" -#, fuzzy -msgid "Group description" -msgstr "Leírás" - msgid "Commands" msgstr "" @@ -6297,1685 +7445,6 @@ msgstr "" msgid "Display Sudo Command Group." msgstr "" -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -msgid "First name" -msgstr "" - -msgid "Last name" -msgstr "" - -#, fuzzy -msgid "Full name" -msgstr "Szabály neve" - -msgid "Display name" -msgstr "" - -msgid "Initials" -msgstr "" - -msgid "Kerberos principal" -msgstr "" - -msgid "Kerberos principal expiration" -msgstr "" - -msgid "Email address" -msgstr "" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -msgid "Street address" -msgstr "" - -msgid "City" -msgstr "" - -msgid "State/Province" -msgstr "" - -msgid "ZIP" -msgstr "" - -msgid "Telephone Number" -msgstr "" - -msgid "Mobile Telephone Number" -msgstr "" - -#, fuzzy -msgid "Pager Number" -msgstr "Sorozatszám" - -#, fuzzy -msgid "Fax Number" -msgstr "Sorozatszám" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "" - -msgid "Manager" -msgstr "" - -msgid "Car License" -msgstr "" - -msgid "Account disabled" -msgstr "" - -msgid "User authentication types" -msgstr "" - -msgid "Types of supported user authentication" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "RADIUS proxy configuration" -msgstr "" - -msgid "RADIUS proxy username" -msgstr "" - -msgid "Department Number" -msgstr "" - -msgid "Employee Number" -msgstr "" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -#, fuzzy -msgid "Member of groups" -msgstr "Felhasználói csport" - -msgid "Indirect Member of group" -msgstr "" - -msgid "Kerberos keys available" -msgstr "" - -msgid "Add a new user." -msgstr "" - -#, fuzzy -msgid "Don't create user private group" -msgstr "Alapértelmezett csoport" - -msgid "Delete a user." -msgstr "" - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -msgid "Search for users." -msgstr "" - -msgid "Self" -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -msgid "Modify a user." -msgstr "" - -msgid "Rename the user object" -msgstr "" - -msgid "Display information about a user." -msgstr "" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "A description of this auto member rule" -msgstr "" - -#, fuzzy -msgid "Default (fallback) Group" -msgstr "Alapértelmezett csoport" - -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -msgid "Automember Rule" -msgstr "" - -msgid "Grouping Type" -msgstr "" - -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -msgid "Attribute Key" -msgstr "" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -msgid "Delete an automember rule." -msgstr "" - -msgid "Search for automember rules." -msgstr "" - -msgid "Modify an automember rule." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -msgid "Number of conditions removed" -msgstr "" - -msgid "Display information about an automember rule." -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -msgid "Search for existing certificates." -msgstr "" - -msgid "Match cn attribute in subject" -msgstr "" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -#, fuzzy -msgid "minimum serial number" -msgstr "Sorozatszám" - -#, fuzzy -msgid "maximum serial number" -msgstr "Sorozatszám" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -msgid "Submit a certificate signing request." -msgstr "" - -msgid "CSR" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -#, fuzzy -msgid "Revoke a certificate." -msgstr "Tanúsítvány" - -msgid "Retrieve an existing certificate." -msgstr "" - -msgid "Output filename" -msgstr "" - -msgid "File to store the certificate in." -msgstr "" - -msgid "Check the status of a certificate signing request." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "Indirect Member users" -msgstr "" - -msgid "Indirect Member groups" -msgstr "" - -msgid "Create a new group." -msgstr "" - -#, fuzzy -msgid "Create as a non-POSIX group" -msgstr "POSIX-csoportra módosít" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Add members to a group." -msgstr "" - -#, fuzzy -msgid "External member" -msgstr "Sorozatszám" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -#, fuzzy -msgid "Delete group." -msgstr "Alapértelmezett csoport" - -msgid "Detach a managed group from a user." -msgstr "" - -#, fuzzy -msgid "Search for groups." -msgstr "Szolgáltatás-csoportok" - -msgid "search for private groups" -msgstr "" - -#, fuzzy -msgid "search for POSIX groups" -msgstr "POSIX-csoportra módosít" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -#, fuzzy -msgid "search for non-POSIX groups" -msgstr "POSIX-csoportra módosít" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "Modify a group." -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -msgid "Remove members from a group." -msgstr "" - -msgid "Display information about a named group." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -#, fuzzy -msgid "Target host" -msgstr "Célcsoport" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Warning" -msgstr "" - -msgid "Matched rules" -msgstr "" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -msgid "NetBIOS name" -msgstr "" - -msgid "Domain GUID" -msgstr "" - -msgid "Fallback primary group" -msgstr "" - -msgid "Domain name" -msgstr "" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -msgid "Active Directory domain administrator" -msgstr "" - -msgid "Active Directory domain administrator's password" -msgstr "" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "Range type" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -msgid "Delete a trust." -msgstr "" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -msgid "Search for trusts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -msgid "Display information about a trust." -msgstr "" - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -#, fuzzy -msgid "Range name" -msgstr "Szabály neve" - -msgid "First Posix ID of the range" -msgstr "" - -msgid "Number of IDs in the range" -msgstr "" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "Delete an ID range." -msgstr "" - -msgid "Search for ranges." -msgstr "" - -msgid "Modify ID range." -msgstr "" - -msgid "Display information about a range." -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -msgid "Disabled" -msgstr "" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -msgid "Validity start" -msgstr "" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Validity end" -msgstr "" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -#, fuzzy -msgid "Serial" -msgstr "SOA sorozatszám" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -msgid "Add a new OTP token." -msgstr "" - -msgid "(deprecated)" -msgstr "" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -msgid "Delete an OTP token." -msgstr "" - -msgid "Search for OTP token." -msgstr "" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -msgid "Modify a OTP token." -msgstr "" - -msgid "Rename the OTP token object" -msgstr "" - -msgid "Display information about an OTP token." -msgstr "" - msgid "" "\n" "Sudo Rules\n" @@ -8186,6 +7655,502 @@ msgstr "" msgid "Display Sudo Rule." msgstr "" +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +msgid "NetBIOS name" +msgstr "" + +msgid "Domain GUID" +msgstr "" + +msgid "Fallback primary group" +msgstr "" + +msgid "Domain name" +msgstr "" + +msgid "Trusted domain partner" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +msgid "Active Directory domain administrator" +msgstr "" + +msgid "Active Directory domain administrator's password" +msgstr "" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +msgid "Delete a trust." +msgstr "" + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +msgid "Search for trusts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +msgid "Display information about a trust." +msgstr "" + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "" + +msgid "Last name" +msgstr "" + +#, fuzzy +msgid "Full name" +msgstr "Szabály neve" + +msgid "Display name" +msgstr "" + +msgid "Initials" +msgstr "" + +msgid "Kerberos principal" +msgstr "" + +msgid "Kerberos principal expiration" +msgstr "" + +msgid "Email address" +msgstr "" + +msgid "Prompt to set the user password" +msgstr "" + +msgid "Generate a random user password" +msgstr "" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" + +msgid "Street address" +msgstr "" + +msgid "City" +msgstr "" + +msgid "State/Province" +msgstr "" + +msgid "ZIP" +msgstr "" + +msgid "Telephone Number" +msgstr "" + +msgid "Mobile Telephone Number" +msgstr "" + +#, fuzzy +msgid "Pager Number" +msgstr "Sorozatszám" + +#, fuzzy +msgid "Fax Number" +msgstr "Sorozatszám" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "" + +msgid "Car License" +msgstr "" + +msgid "Account disabled" +msgstr "" + +msgid "User authentication types" +msgstr "" + +msgid "Types of supported user authentication" +msgstr "" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "RADIUS proxy configuration" +msgstr "" + +msgid "RADIUS proxy username" +msgstr "" + +msgid "Department Number" +msgstr "" + +msgid "Employee Number" +msgstr "" + +msgid "Employee Type" +msgstr "" + +msgid "Preferred Language" +msgstr "" + +msgid "Kerberos keys available" +msgstr "" + +msgid "Add a new user." +msgstr "" + +#, fuzzy +msgid "Don't create user private group" +msgstr "Alapértelmezett csoport" + +msgid "Delete a user." +msgstr "" + +msgid "Disable a user account." +msgstr "" + +msgid "Enable a user account." +msgstr "" + +msgid "Search for users." +msgstr "" + +msgid "Self" +msgstr "" + +msgid "Display user record for current Kerberos principal" +msgstr "" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +msgid "Search for users with these member of HBAC rules." +msgstr "" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +msgid "Modify a user." +msgstr "" + +msgid "Rename the user object" +msgstr "" + +msgid "Display information about a user." +msgstr "" + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + msgid "Time limit of search in seconds (0 is unlimited)" msgstr "" @@ -8302,6 +8267,111 @@ msgstr "" msgid "Display the properties of a CA ACL." msgstr "" +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "Profile ID" +msgstr "" + +msgid "Certificate Profile to use" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +#, fuzzy +msgid "Profile description" +msgstr "Leírás" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +msgid "Search for Certificate Profiles." +msgstr "" + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" msgstr "" @@ -8331,6 +8401,218 @@ msgstr "" msgid "Remove certificates from host entry" msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + msgid "Fallback to AD DC LDAP" msgstr "" @@ -8359,6 +8641,9 @@ msgid "" "to onelevel" msgstr "" +msgid "Remove users that can manage this token." +msgstr "" + msgid "Target DN subtree" msgstr "" @@ -8793,6 +9078,13 @@ msgid "" " " msgstr "" +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + msgid "Preserved user" msgstr "" @@ -9092,333 +9384,6 @@ msgstr "" msgid "Display information about a vault container." msgstr "" -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "Profile ID" -msgstr "" - -msgid "Certificate Profile to use" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -#, fuzzy -msgid "Profile description" -msgstr "Leírás" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -msgid "Search for Certificate Profiles." -msgstr "" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - msgid "Resolve a host name in DNS. (Deprecated)" msgstr "" @@ -11101,6 +11066,192 @@ msgid "" " ipa hostgroup-del baltimore\n" msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + msgid "" "Comma-separated list of objectclasses used to search for user entries in DS" msgstr "" @@ -11409,198 +11560,6 @@ msgstr "" msgid "comma-separated list of sudo commands to remove" msgstr "" -msgid "Active directory domain administrator's password" -msgstr "" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - msgid "" "\n" "Sudo Rules\n" @@ -11642,10 +11601,10 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" -msgid "A dictionary representing an LDAP entry" +msgid "Active directory domain administrator's password" msgstr "" -msgid "All commands should at least have a result" +msgid "GECOS field" msgstr "" #, python-format @@ -11691,110 +11650,371 @@ msgid "No file to read" msgstr "" #, python-format -msgid "%(filename)s: file not found" -msgstr "" - -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -msgid "Filename is empty" +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" #, python-format -msgid "Permission denied: %(file)s" +msgid "unknown error %(code)d from %(server)s: %(error)s" msgstr "" -msgid "empty DNS label" +msgid "an internal error has occurred" msgstr "" -msgid "DNS label cannot be longer that 63 characters" +#, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "" + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" msgstr "" #, python-format msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "" - -msgid "cannot be longer that {} characters" -msgstr "" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "" - -msgid "invalid SSH public key" -msgstr "" - -msgid "options are not allowed" -msgstr "" - -msgid "invalid hostmask" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." msgstr "" #, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "" + +msgid "did not receive Kerberos credentials" msgstr "" #, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "" + +msgid "No credentials cache found" +msgstr "" + +msgid "Ticket expired" +msgstr "" + +msgid "Credentials cache permissions incorrect" +msgstr "" + +msgid "Bad format in credentials cache" +msgstr "" + +msgid "Cannot resolve KDC for requested realm" +msgstr "" + +msgid "Session error" +msgstr "" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "" + +#, python-format +msgid "'%(name)s' is required" +msgstr "" + +#, python-format +msgid "invalid '%(name)s': %(error)s" +msgstr "" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "" + +msgid "Passwords do not match" +msgstr "A jelszavak nem egyeznek meg" + +msgid "Command not implemented" +msgstr "" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "" + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "" + +#, fuzzy, python-format +msgid "%(reason)s" +msgstr "Ok" + +msgid "This entry already exists" +msgstr "" + +msgid "You must enroll a host in order to create a host service" msgstr "" #, python-format msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" - -msgid "invalid escape code in domain name" -msgstr "" - -msgid "domain name cannot be longer than 255 characters" -msgstr "" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "" - -msgid "invalid domain name" -msgstr "" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -msgid "invalid IP address format" -msgstr "" - -#, python-format -msgid "%(port)s is not a valid port" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" msgstr "" msgid "" -"at least one value equal to the canonical principal name must be present" +"The realm for the principal does not match the realm for this IPA server" msgstr "" -msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgid "This command requires root access" +msgstr "Ez a parancs rendszergazdai jogosultságot igényel" + +msgid "This is already a posix group" +msgstr "Ez egy létező POSIX csoport" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "" + +msgid "This entry is already enabled" +msgstr "" + +msgid "This entry is already disabled" +msgstr "" + +msgid "This entry cannot be enabled or disabled" +msgstr "" + +msgid "This entry is not a member" +msgstr "" + +msgid "A group may not be a member of itself" +msgstr "Egy csoport nem lehet tagja önmagának" + +#, fuzzy +msgid "This entry is already a member" +msgstr "Ez egy létező POSIX csoport" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "Base64 kicsomagolás sikertelen: %(reason)s" + +#, fuzzy +msgid "A group may not be added as a member of itself" +msgstr "Egy csoport nem lehet tagja önmagának" + +msgid "The default users group cannot be removed" +msgstr "Az alapértelmezett csoport nem távolítható el" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" + +msgid "A managed group cannot have a password policy." +msgstr "" + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "" + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "" + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" + +msgid "This group already allows external members" +msgstr "" + +msgid "This group cannot be posix because it is external" +msgstr "" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "" + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" + +#, python-format +msgid "'%(attr)s' already contains one or more values" +msgstr "" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "" + +msgid "change collided with another change" +msgstr "" + +msgid "no modifications to be performed" +msgstr "" + +#, python-format +msgid "%(desc)s: %(info)s" +msgstr "" + +msgid "limits exceeded for this query" +msgstr "" + +#, python-format +msgid "%(info)s" +msgstr "" + +msgid "modifying primary key is not allowed" +msgstr "" + +#, python-format +msgid "%(attr)s: Only one value allowed." +msgstr "" + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "" + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "" + +msgid "Not allowed on non-leaf entry" +msgstr "" + +msgid "LDAP timeout" +msgstr "" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "" + +msgid "Configured time limit exceeded" +msgstr "" + +msgid "Configured size limit exceeded" +msgstr "" + +msgid "Configured administrative server limit exceeded" +msgstr "" + +#, fuzzy, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "Tanúsítványhiba: %(error)s" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "Tanúsítványhiba: %(error)s" + +msgid "Already registered" +msgstr "" + +msgid "Not registered yet" +msgstr "" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "" + +#, python-format +msgid "%(exception)s" +msgstr "" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" + +msgid "Results are truncated, try a more specific search" +msgstr "" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "" + +msgid "Client version. Used to determine if server will accept request." msgstr "" msgid "Additional instructions:" @@ -11954,345 +12174,23 @@ msgstr "" msgid "The certificate for %(ca)s is not available on this server." msgstr "" -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." +#, python-format +msgid "%(count)d variables" msgstr "" #, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "" - -msgid "an internal error has occurred" -msgstr "" - -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "" - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "" - -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "" - -msgid "did not receive Kerberos credentials" -msgstr "" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "" - -msgid "No credentials cache found" -msgstr "" - -msgid "Ticket expired" -msgstr "" - -msgid "Credentials cache permissions incorrect" -msgstr "" - -msgid "Bad format in credentials cache" -msgstr "" - -msgid "Cannot resolve KDC for requested realm" -msgstr "" - -msgid "Session error" -msgstr "" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" msgstr[0] "" msgstr[1] "" -#, python-format -msgid "overlapping arguments and options: %(names)s" +msgid "A dictionary representing an LDAP entry" msgstr "" -#, python-format -msgid "'%(name)s' is required" -msgstr "" +msgid "A list of LDAP entries" +msgstr "LDAP-bejegyzések listája" -#, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "" - -msgid "Command not implemented" -msgstr "" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "" - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" - -#, fuzzy, python-format -msgid "%(reason)s" -msgstr "Ok" - -msgid "This entry already exists" -msgstr "" - -msgid "You must enroll a host in order to create a host service" -msgstr "" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "" - -msgid "This entry is already enabled" -msgstr "" - -msgid "This entry is already disabled" -msgstr "" - -msgid "This entry cannot be enabled or disabled" -msgstr "" - -msgid "This entry is not a member" -msgstr "" - -#, fuzzy -msgid "This entry is already a member" -msgstr "Ez egy létező POSIX csoport" - -#, fuzzy -msgid "A group may not be added as a member of itself" -msgstr "Egy csoport nem lehet tagja önmagának" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" - -msgid "A managed group cannot have a password policy." -msgstr "" - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" - -msgid "This group already allows external members" -msgstr "" - -msgid "This group cannot be posix because it is external" -msgstr "" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" - -#, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "" - -msgid "change collided with another change" -msgstr "" - -msgid "no modifications to be performed" -msgstr "" - -#, python-format -msgid "%(desc)s: %(info)s" -msgstr "" - -msgid "limits exceeded for this query" -msgstr "" - -#, python-format -msgid "%(info)s" -msgstr "" - -msgid "modifying primary key is not allowed" -msgstr "" - -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "" - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "" - -msgid "Not allowed on non-leaf entry" -msgstr "" - -msgid "LDAP timeout" -msgstr "" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" - -msgid "Configured time limit exceeded" -msgstr "" - -msgid "Configured size limit exceeded" -msgstr "" - -msgid "Configured administrative server limit exceeded" -msgstr "" - -#, fuzzy, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "Tanúsítványhiba: %(error)s" - -msgid "Already registered" -msgstr "" - -msgid "Not registered yet" -msgstr "" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" - -#, python-format -msgid "%(exception)s" -msgstr "" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" +msgid "All commands should at least have a result" msgstr "" msgid "incorrect type" @@ -12427,27 +12325,116 @@ msgid "Service principal is required" msgstr "" #, python-format -msgid "%(count)d variables" +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +msgid "any of the configured servers" +msgstr "" + +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" msgstr "" #, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "" -msgstr[1] "" +msgid "Permission denied: %(file)s" +msgstr "" -msgid "Results are truncated, try a more specific search" +msgid "empty DNS label" +msgstr "" + +msgid "DNS label cannot be longer that 63 characters" msgstr "" #, python-format -msgid "Unknown option: %(option)s" +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" msgstr "" -msgid "Client version. Used to determine if server will accept request." +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "" + +msgid "cannot be longer that {} characters" +msgstr "" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "" + +msgid "invalid SSH public key" +msgstr "" + +msgid "options are not allowed" +msgstr "" + +msgid "invalid hostmask" msgstr "" #, python-format -msgid "objectclass %s not found" +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +msgid "invalid escape code in domain name" +msgstr "" + +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +msgid "invalid domain name" +msgstr "" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +msgid "invalid IP address format" +msgstr "" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" #, python-format @@ -12466,934 +12453,1251 @@ msgstr "" msgid "Retrieving CA status failed with status %d" msgstr "" +#, python-format +msgid "objectclass %s not found" +msgstr "" + +msgid "Trusting forest" +msgstr "" + +msgid "Trusted forest" +msgstr "" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +msgid "Unknown" +msgstr "" + +msgid "Non-Active Directory domain" +msgstr "" + +msgid "Active Directory domain" +msgstr "" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "" +msgid "Failed to authenticate to CA REST API" +msgstr "" + #, python-format msgid "Replication agreement for %(hostname)s not found" msgstr "" -msgid "Failed to authenticate to CA REST API" -msgstr "" - -msgid "One time password commands" -msgstr "" - -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" -msgstr "" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" - -msgid "server roles" -msgstr "" - -msgid "IPA Server Roles" -msgstr "" - -msgid "IPA Server Role" -msgstr "" - #, fuzzy -msgid "IPA server role name" -msgstr "Szolgáltatás-csoport neve" +msgid "A list of ACI values" +msgstr "LDAP-bejegyzések listája" -#, fuzzy -msgid "Role status" -msgstr "Igénylés állapota" - -msgid "Status of the role" +msgid "type, filter, subtree and targetgroup are mutually exclusive" msgstr "" -msgid "Show role status on a server" +msgid "ACI prefix is required" msgstr "" -msgid "Find a server role on a server(s)" +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" + +msgid "filter and memberof are mutually exclusive" +msgstr "" + +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" msgstr "" #, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" +msgid "Group '%s' does not exist" +msgstr "A '%s' csoport nem létezik" + +msgid "empty filter" +msgstr "" + +#, fuzzy, python-format +msgid "Syntax Error: %(error)s" +msgstr "Tanúsítványhiba: %(error)s" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "" + +msgid "ACI" +msgstr "" + +#, fuzzy, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" msgstr[0] "" msgstr[1] "" -msgid "Include IPA master entries" +#, fuzzy, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "" +"\n" +"Auto Membership Rule.\n" msgstr "" -msgid "roles" +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" msgstr "" -#, fuzzy -msgid "IPA role name" -msgstr "Szabály neve" +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" -msgid "Class of Service object used for linking policies with groups" +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" msgstr "" #, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgid "%(otype)s \"%(oname)s\" not found" msgstr "" -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -msgid "password policy" -msgstr "" - -msgid "password policies" -msgstr "" - -#, fuzzy -msgid "Password Policies" -msgstr "Megőrzött jelszavak (darab)" - -#, fuzzy -msgid "Password Policy" -msgstr "Megőrzött jelszavak (darab)" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -#, fuzzy -msgid "Maximum password life must be greater than minimum." -msgstr "Jelszó maximális élettartama (nap)" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" +#, python-format +msgid "%s is not a valid attribute." msgstr "" msgid "" "\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" +" Add an automember rule.\n" +" " msgstr "" -msgid "Realm domains" -msgstr "" +#, fuzzy, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" -msgid "Realm Domains" +msgid "Auto Membership is not configured" msgstr "" msgid "" "\n" -" Modify realm domains\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "" + +msgid "" "\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" "\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" +" Remove conditions from an automember rule.\n" " " msgstr "" #, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "" + msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "" +"\n" +" Search for automember rules.\n" +" " msgstr "" #, python-format -msgid "The following domains do not belong to this realm: %(domains)s" +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "automount location" +msgstr "" + +msgid "automount locations" +msgstr "" + +msgid "Automount Locations" +msgstr "" + +msgid "Automount Location" +msgstr "" + +#, fuzzy, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "automount map" +msgstr "" + +msgid "automount maps" +msgstr "" + +msgid "Automount Maps" +msgstr "" + +msgid "Automount Map" +msgstr "" + +#, fuzzy, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Automount key object." +msgstr "" + +msgid "automount key" +msgstr "" + +msgid "automount keys" +msgstr "" + +msgid "Automount Keys" +msgstr "" + +msgid "Automount Key" msgstr "" #, python-format msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" msgstr "" #, python-format -msgid "Results should contain primary key attribute only (\"%s\")" +msgid "key named %(key)s already exists" msgstr "" -msgid "Help topic" +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" msgstr "" +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" + +#, fuzzy, python-format +msgid "Added automount key \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +msgid "Added automount indirect map \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "" +msgstr[1] "" + #, fuzzy -msgid "Version" -msgstr "Jogosultságok" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" +msgid "Member service groups" +msgstr "Szolgáltatás-csoportok" #, fuzzy -msgid "Method name" -msgstr "Szabály neve" +msgid "Member HBAC service groups" +msgstr "HBAC szolgáltatás-csoport leírása" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" +msgstr "" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "" #, python-format msgid "%(pkey)s: %(oname)s not found" msgstr "" -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -#, fuzzy -msgid "Search for classes." -msgstr "Karakterosztályok" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -#, fuzzy -msgid "Required" -msgstr "Igénylés azonosítója" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -msgid "CLI name" -msgstr "" - -msgid "Confirm (password)" -msgstr "" - -#, fuzzy -msgid "Default" -msgstr "Alapértelmezett shell" - -#, fuzzy -msgid "Default from" -msgstr "Alapértelmezett csoport" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" msgstr "" #, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." +msgid "attribute \"%(attribute)s\" not allowed" msgstr "" #, python-format -msgid "%(command_name)s: %(oname)s not found" +msgid "these attributes are not allowed: %(attrs)s" msgstr "" -msgid "Display information about a command output." +msgid "attribute is not configurable" msgstr "" -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" +msgid "No such attribute on this entry" msgstr "" #, python-format -msgid "Malformed principal: %(error)s" +msgid "Rename the %(ldap_obj_name)s object" msgstr "" -msgid "Add target to a named service delegation." +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" msgstr "" #, python-format msgid "member %s" msgstr "" -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, fuzzy, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "privileged service delegation rule" +#, python-format +msgid "%s to add" msgstr "" #, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -#, fuzzy -msgid "Service delegation target" -msgstr "Szolgáltatás-csoport neve" - -#, fuzzy, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "privileged service delegation target" +msgid "%s to remove" msgstr "" #, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" +#, python-format msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" msgstr "" msgid "" "\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" msgstr "" msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." msgstr "" -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -msgid "Malformed principal" -msgstr "" - -msgid "{} is required by the IPA master" -msgstr "" - -#, fuzzy -msgid "service" -msgstr "Szolgáltatások" - -#, fuzzy -msgid "services" -msgstr "Szolgáltatások" - msgid "Principal alias" msgstr "" -msgid "Service principal alias" +msgid "User password expiration" msgstr "" -msgid "Base-64 encoded service certificate" +msgid "SSH public key fingerprint" +msgstr "" + +msgid "Base-64 encoded user certificate" msgstr "" #, fuzzy -msgid "Serial Number" -msgstr "Sorozatszám" +msgid "Certificate mapping data" +msgstr "Tanúsítvány" -#, fuzzy -msgid "Serial Number (hex)" -msgstr "Sorozatszám" - -#, fuzzy -msgid "Fingerprint (SHA256)" -msgstr "Ujjlenyomat (SHA1)" - -msgid "Authentication Indicators" +msgid "SMB logon script path" msgstr "" -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgid "SMB profile path" msgstr "" -msgid "NONE value cannot be combined with other PAC types" +msgid "SMB Home Directory" msgstr "" -msgid "Add a new IPA service." -msgstr "" - -msgid "force principal name even if host not in DNS" -msgstr "" - -msgid "Skip host check" -msgstr "" - -msgid "" -"force service to be created even when host object does not exist to manage it" +msgid "SMB Home Directory Drive" msgstr "" #, python-format -msgid "The host '%s' does not exist to add a service to." +msgid "invalid e-mail format: %(email)s" msgstr "" -msgid "Add a new SMB service." +#, python-format +msgid "manager %(manager)s not found" msgstr "" -#, fuzzy -msgid "SMB service NetBIOS name" -msgstr "Szolgáltatás neve" +#, python-format +msgid "can be at most %(len)d characters" +msgstr "" + +msgid "Issuer" +msgstr "Kibocsátó" + +msgid "Issuer of the certificate" +msgstr "" + +msgid "Subject" +msgstr "Tárgy" + +msgid "Subject of the certificate" +msgstr "" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" #, fuzzy, python-format -msgid "Modified service \"%(value)s\"" +msgid "Added certificate mappings to user \"%(value)s\"" msgstr "A %(value)s szolgáltatás hozzáadva" +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + #, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +#, fuzzy +msgid "Certificate Authority" +msgstr "Tanúsítvány" + +#, fuzzy +msgid "Certificate Authorities" +msgstr "Tanúsítvány" + +msgid "Name" +msgstr "" + +msgid "Name for referencing the CA" +msgstr "" + +msgid "Description of the purpose of the CA" +msgstr "" + +msgid "Authority ID" +msgstr "" + +msgid "Dogtag Authority ID" +msgstr "" + +#, fuzzy +msgid "Subject DN" +msgstr "Tárgy" + +msgid "Subject Distinguished Name" +msgstr "" + +#, fuzzy +msgid "Issuer DN" +msgstr "Kibocsátó" + +msgid "Issuer Distinguished Name" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +#, fuzzy +msgid "Certificate chain" +msgstr "Tanúsítvány" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Search for CAs." +msgstr "" + +#, python-format +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include certificate chain in output" +msgstr "" + +msgid "Display the properties of a CA." +msgstr "" + +msgid "Create a CA." +msgstr "" + +#, fuzzy, python-format +msgid "Created CA \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "" + +#, python-format +msgid "Unrecognized attributes: %(attrs)s" +msgstr "" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "" + +msgid "Delete a CA (must be disabled first)." +msgstr "" + +#, fuzzy, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "Insufficient privilege to delete a CA." +msgstr "" + +msgid "CA" +msgstr "" + +msgid "IPA CA cannot be deleted" +msgstr "" + +msgid "Must be disabled first" +msgstr "" + +msgid "Modify CA configuration." +msgstr "" + +#, fuzzy, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Insufficient privilege to modify a CA." +msgstr "" + +msgid "Disable a CA." +msgstr "" + +#, fuzzy, python-format +msgid "Disabled CA \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "IPA CA cannot be disabled" +msgstr "" + +msgid "Enable a CA." +msgstr "" + +#, fuzzy, python-format +msgid "Enabled CA \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "" + +msgid "CA ACLs" +msgstr "" + +msgid "CA category" +msgstr "" + +msgid "CA category the ACL applies to" +msgstr "" + +msgid "CAs" +msgstr "" + +#, fuzzy, python-format +msgid "Added CA ACL \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "default CA ACL can be only disabled" +msgstr "" + +#, fuzzy, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" + +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" msgstr[0] "" msgstr[1] "" #, fuzzy, python-format -msgid "Disabled service \"%(value)s\"" +msgid "Enabled CA ACL \"%(value)s\"" msgstr "A %(value)s szolgáltatás eltávolítva" #, fuzzy, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to a service" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Remove principal alias from a service" -msgstr "" - -#, fuzzy, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" +msgid "Disabled CA ACL \"%(value)s\"" msgstr "A %(value)s szolgáltatás eltávolítva" -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" +#, python-format +msgid "%i user or group added." msgstr "" #, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, fuzzy, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" -msgstr "" - -msgid "command" -msgstr "" - -msgid "commands" -msgstr "" - -msgid "runAs user" -msgstr "" - -msgid "runAs users" -msgstr "" - -msgid "group runAs" -msgstr "" - -#, fuzzy -msgid "runAs groups" -msgstr "Felhasználói csport" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "commands cannot be added when command category='all'" +msgid "%i users or groups added." msgstr "" msgid "users cannot be added when user category='all'" msgstr "" +#, python-format +msgid "%i user or group removed." +msgstr "" + +#, python-format +msgid "%i users or groups removed." +msgstr "" + +#, python-format +msgid "%i host or hostgroup added." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "" + msgid "hosts cannot be added when host category='all'" msgstr "" -msgid "users cannot be added when runAs user or runAs group category='all'" +#, python-format +msgid "%i host or hostgroup removed." msgstr "" #, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" +msgid "%i hosts or hostgroups removed." +msgstr "" + +#, fuzzy, python-format +msgid "%i service added." +msgstr "Szolgáltatás neve" + +#, fuzzy, python-format +msgid "%i services added." +msgstr "Szolgáltatás neve" + +msgid "services cannot be added when service category='all'" msgstr "" #, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" +msgid "%i service removed." msgstr "" #, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgid "%i services removed." +msgstr "" + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, python-format +msgid "%i profiles removed." +msgstr "" + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." msgstr "" msgid "pyhbac is not installed." @@ -13609,16 +13913,6 @@ msgstr "" msgid "Name of issuing CA" msgstr "" -msgid "Base-64 encoded certificate." -msgstr "" - -#, fuzzy -msgid "Certificate chain" -msgstr "Tanúsítvány" - -msgid "X.509 certificate chain" -msgstr "" - msgid "Subject email address" msgstr "" @@ -13656,16 +13950,25 @@ msgstr "" msgid "Subject Other Name" msgstr "" +msgid "Not Before" +msgstr "Érvényesség kezdete" + +msgid "Not After" +msgstr "Érvényesség vége" + +msgid "Fingerprint (SHA1)" +msgstr "Ujjlenyomat (SHA1)" + #, fuzzy -msgid "Issuer DN" -msgstr "Kibocsátó" +msgid "Fingerprint (SHA256)" +msgstr "Ujjlenyomat (SHA1)" #, fuzzy msgid "Serial number (hex)" msgstr "Sorozatszám" -msgid "Include certificate chain in output" -msgstr "" +msgid "Request status" +msgstr "Igénylés állapota" msgid "" "automatically add the principal if it doesn't exist (service principals only)" @@ -13757,6 +14060,12 @@ msgstr "" msgid "Status" msgstr "" +msgid "Revoked" +msgstr "Visszavont" + +msgid "Revocation reason" +msgstr "Visszavonás oka" + msgid "" "Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " "revocation reason details. " @@ -13775,6 +14084,10 @@ msgstr "" msgid "7 is not a valid revocation reason" msgstr "Visszavonás oka" +#, fuzzy +msgid "Status of the certificate" +msgstr "Tanúsítvány" + msgid "Results should contain primary key attribute only (\"certificate\")" msgstr "" @@ -14005,7 +14318,113 @@ msgid_plural "%(count)s users matched" msgstr[0] "" msgstr[1] "" -msgid "Base-64 encoded user certificate" +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +#, fuzzy +msgid "Certificate Profile" +msgstr "Tanúsítvány" + +#, fuzzy +msgid "Certificate Profiles" +msgstr "Tanúsítvány" + +msgid "Profile configuration" +msgstr "" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, fuzzy, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy +msgid "Certificate profiles cannot be renamed" +msgstr "Az alapértelmezett csoport nem távolítható el" + +msgid "Insufficient privilege to modify a certificate profile." msgstr "" msgid "" @@ -14078,6 +14497,9 @@ msgstr "" msgid "Maximum hostname length" msgstr "" +msgid "Enable adding subids to new users" +msgstr "" + msgid "IPA masters" msgstr "" @@ -14150,6 +14572,22 @@ msgstr "" msgid "DNSec key master" msgstr "" +#, fuzzy +msgid "Setup SID configuration" +msgstr "Visszavonás oka" + +msgid "New users and groups automatically get a SID assigned" +msgstr "" + +msgid "Add SIDs" +msgstr "" + +msgid "Add SIDs for existing users and groups" +msgstr "" + +msgid "NetBIOS name of the IPA domain" +msgstr "" + msgid "Empty domain is not allowed" msgstr "" @@ -14165,6 +14603,20 @@ msgstr "" msgid "Disabled domain '%(domain)s' is not allowed" msgstr "" +msgid "not allowed to enable SID generation" +msgstr "" + +msgid "" +"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " +"allowed. Empty string is not allowed." +msgstr "" + +msgid "Failed to call DBus" +msgstr "" + +msgid "Configuration of SID failed. See details in the error log" +msgstr "" + #, fuzzy msgid "The group doesn't exist" msgstr "A '%s' csoport nem létezik" @@ -14190,55 +14642,1625 @@ msgstr "" msgid "SELinux user map default user not in order list" msgstr "" -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" +#, python-format +msgid "You cannot specify %s without the --enable-sid option" msgstr "" -msgid "sudo command group" +msgid "delegation" msgstr "" -msgid "sudo command groups" +msgid "delegations" +msgstr "" + +msgid "Delegations" +msgstr "" + +msgid "Delegation" msgstr "" #, fuzzy, python-format -msgid "Added Sudo Command Group \"%(value)s\"" +msgid "Added delegation \"%(value)s\"" msgstr "A %(value)s szolgáltatás hozzáadva" #, fuzzy, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" msgstr "A %(value)s szolgáltatás eltávolítva" +#, fuzzy, python-format +msgid "Modified delegation \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + #, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +msgstr "" + +msgid "" +"\n" +"Manage DNS zone and resource records.\n" +msgstr "" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" + +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "invalid IP network format" +msgstr "" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "" + +msgid "invalid address format" +msgstr "" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" + +msgid "algorithm value: allowed interval 0-255" +msgstr "" + +msgid "flags value: allowed interval 0-255" +msgstr "" + +msgid "iterations value: allowed interval 0-65535" msgstr "" #, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" +msgid "salt value: %(err)s" +msgstr "" + +msgid "invalid domain-name: not fully qualified" +msgstr "" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" + +#, python-format +msgid "" +"No answers could be found in the specified lifetime for DNS reverse zone " +"%(revdns)s" +msgstr "" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" + +#, python-format +msgid "%s record" +msgstr "" + +#, python-format +msgid "Raw %s records" +msgstr "" + +#, python-format +msgid "%s Record" +msgstr "" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "" + +msgid "Invalid number of parts!" +msgstr "" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "" + +msgid "Create reverse" +msgstr "" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "" + +msgid "Exchanger" +msgstr "" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" + +msgid "Priority (order)" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Relative weight for entries with the same priority." +msgstr "" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Target Uniform Resource Identifier" +msgstr "" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "" + +msgid "Managedby permission" +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "cannot be used when a zone is specified" +msgstr "" + +msgid "Only one zone type is allowed per zone name" +msgstr "" + +#, fuzzy, python-format +msgid "Added system permission \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "permission \"%(value)s\" already exists" +msgstr "" + +#, fuzzy, python-format +msgid "Removed system permission \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "DNS zone" +msgstr "" + +msgid "DNS zones" +msgstr "" + +msgid "DNS Zones" +msgstr "" + +msgid "DNS Zone" +msgstr "" + +#, fuzzy +msgid "Default time to live" +msgstr "Alapértelmezett shell" + +msgid "Time to live for records without explicit TTL definition" +msgstr "" + +msgid "setting Authoritative nameserver" +msgstr "" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "" + +msgid "" +msgstr "" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "is required" +msgstr "" + +#, fuzzy, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "DNS resource record" +msgstr "" + +msgid "DNS resource records" +msgstr "" + +msgid "DNS Resource Records" +msgstr "" + +msgid "DNS Resource Record" +msgstr "" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" + +msgid "only master zones can contain records" +msgstr "" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" + +msgid "DNS zone root record cannot be renamed" +msgstr "" + +msgid "DNS records can be only updated one at a time" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Found '%(value)s'" +msgstr "" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "" + +msgid "DNS configuration options" +msgstr "" + +msgid "DNS Global Configuration" +msgstr "" + +msgid "IPA DNS version" +msgstr "" + +msgid "List of IPA masters configured as DNS servers" +msgstr "" + +msgid "IPA server configured as DNSSec key master" +msgstr "" + +msgid "Global DNS configuration is empty" +msgstr "" + +msgid "DNS forward zone" +msgstr "" + +msgid "DNS forward zones" +msgstr "" + +msgid "DNS Forward Zones" +msgstr "" + +msgid "DNS Forward Zone" +msgstr "" + +msgid "Please specify forwarders." +msgstr "" + +#, fuzzy, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "" + +msgid "IPA DNS records" +msgstr "" + +msgid "IPA location records" +msgstr "" + +msgid "Update location and IPA server DNS records" +msgstr "" + +msgid "Result of the command" +msgstr "" + +msgid "Dry run" +msgstr "" + +msgid "Do not update records only return expected records" +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +#, fuzzy +msgid "DNS Servers" +msgstr "Szolgáltatások" + +msgid "DNS Server" +msgstr "" + +#, fuzzy +msgid "DNS Server name" +msgstr "Szolgáltatás neve" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, fuzzy, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Search for DNS servers." +msgstr "" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" msgstr[0] "" msgstr[1] "" +msgid "IPA DNS Server is not installed" +msgstr "" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, fuzzy, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Delete a DNS server" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +#, fuzzy +msgid "groups" +msgstr "Felhasználói csport" + +#, fuzzy +msgid "User Group" +msgstr "Felhasználói csport" + +#, fuzzy, python-format +msgid "Added group \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "gid cannot be set for external group" +msgstr "" + +msgid "attribute \"gidNumber\" not allowed with --nonposix" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy +msgid "privileged group" +msgstr "Célcsoport" + +#, fuzzy, python-format +msgid "Modified group \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" +msgstr "" + +#, fuzzy +msgid "HBAC Services" +msgstr "Szolgáltatások" + +#, fuzzy +msgid "HBAC Service Groups" +msgstr "Szolgáltatás-csoportok" + +#, fuzzy, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "Access time" +msgstr "" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +#, fuzzy +msgid "HBAC services" +msgstr "Szolgáltatások" + +#, fuzzy +msgid "HBAC Service" +msgstr "Szolgáltatások" + +#, fuzzy, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +msgid "HBAC service group" +msgstr "HBAC szolgáltatás-csoport leírása" + +#, fuzzy +msgid "HBAC service groups" +msgstr "HBAC szolgáltatás-csoport leírása" + +#, fuzzy +msgid "HBAC Service Group" +msgstr "Szolgáltatás-csoportok" + +#, fuzzy, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "HBAC szolgáltatás-csoport leírása" +msgstr[1] "HBAC szolgáltatás-csoport leírása" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Access granted: %s" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host" +msgstr "" + +msgid "Base-64 encoded host certificate" +msgstr "" + +#, fuzzy +msgid "Serial Number" +msgstr "Sorozatszám" + +#, fuzzy +msgid "Serial Number (hex)" +msgstr "Sorozatszám" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, fuzzy, python-format +msgid "Added host \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, fuzzy, python-format +msgid "Modified host \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, fuzzy, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + msgid "" "\n" "Groups of hosts.\n" @@ -14321,296 +16343,502 @@ msgstr "" msgid "Remove users that can manage members of this hostgroup." msgstr "" -#, python-format msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" msgstr "" msgid "" "\n" -"Set a user's password\n" +"ID ranges\n" "\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" "\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" +"There are two type of ID ranges which are both handled by this utility:\n" "\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" "\n" -"EXAMPLES:\n" +"Both types have the following attributes in common:\n" "\n" -" To reset your own password:\n" -" ipa passwd\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" "\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"and an ID range of a trusted domain may set\n" +" - auto-private-groups: [true|false|hybrid] automatic creation of private " +"groups\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" "\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" msgstr "" -msgid "The OTP if the user has a token configured" +msgid "ID Ranges" msgstr "" -#, python-format -msgid "Changed password for \"%(value)s\"" +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" msgstr "" #, fuzzy -msgid "" -"\n" -"Permissions\n" -msgstr "Jogosultságok" +msgid "Auto private groups" +msgstr "HBAC szolgáltatás-csoport leírása" + +msgid "Auto creation of private groups, one of allowed values" +msgstr "" msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" msgstr "" msgid "" "\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" +" Add new ID range.\n" "\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" +" To add a new ID range you always have to specify\n" "\n" -"A permission is made up of a number of different parts:\n" +" --base-id\n" +" --range-size\n" "\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" +" Additionally\n" "\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" +" --rid-base\n" +" --secondary-rid-base\n" "\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" +" may be given for a new ID range for the local domain while\n" "\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" +" --auto-private-groups\n" "\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -#, fuzzy -msgid "" +" may be given for a new ID range for a trusted AD domain and\n" "\n" -"Managed permissions\n" -msgstr "Jogosultságok" - -msgid "" +" --rid-base\n" +" --dom-sid\n" "\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" +" must be given to add a new range for a trusted AD domain.\n" "\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "must be enclosed in parentheses" -msgstr "" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -#, python-format -msgid "Deprecated; use %s" -msgstr "" - -msgid "ACI" -msgstr "" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, python-format -msgid "Entry %s not found" -msgstr "" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, python-format -msgid "%s: group not found" -msgstr "" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" -msgstr "" - -msgid "Bad search filter" msgstr "" #, fuzzy, python-format -msgid "Entry %s does not exist" -msgstr "A '%s' csoport nem létezik" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, fuzzy, python-format -msgid "Added permission \"%(value)s\"" +msgid "Added ID range \"%(value)s\"" msgstr "A %(value)s szolgáltatás hozzáadva" -msgid "attrs and included attributes are mutually exclusive" +msgid "Options dom-sid and dom-name cannot be used together" msgstr "" -#, python-format -msgid "Cannot store permission ACI to %s" +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" +"private-groups is specified" +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." msgstr "" #, fuzzy, python-format -msgid "Deleted permission \"%(value)s\"" +msgid "Deleted ID range \"%(value)s\"" msgstr "A %(value)s szolgáltatás eltávolítva" -msgid "cannot delete managed permissions" -msgstr "" - #, python-format -msgid "ACI of permission %s was not found" -msgstr "" - -#, fuzzy, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" msgstr[0] "" msgstr[1] "" -#, python-brace-format -msgid "{role}: role not found" +msgid "" +"Modify ID range.\n" +"\n" msgstr "" -#, python-brace-format -msgid "{attr}: no such attribute" +#, fuzzy, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" msgstr "" msgid "" -"\n" -"Session Support for IPA\n" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." msgstr "" +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +msgid "ID View" +msgstr "" + +msgid "system ID View" +msgstr "" + +msgid "ID Views" +msgstr "" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +msgid "Hosts the view applies to" +msgstr "" + +#, fuzzy, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, fuzzy, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Delete an ID override." +msgstr "" + +#, fuzzy, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "Modify an ID override." +msgstr "" + +#, fuzzy, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, fuzzy, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + msgid "Internationalization messages" msgstr "" @@ -14626,9 +16854,6 @@ msgstr "" msgid "Are you sure you want to rebuild auto membership?" msgstr "" -msgid "Automember rebuild membership task completed" -msgstr "" - msgid "Are you sure you want to proceed with the action?" msgstr "" @@ -15531,9 +17756,6 @@ msgstr "" msgid "Affiliation Changed" msgstr "" -msgid "CA" -msgstr "" - msgid "CA Compromise" msgstr "" @@ -15770,10 +17992,6 @@ msgstr "" msgid "Add certificate mapping data" msgstr "" -#, fuzzy -msgid "Certificate mapping data" -msgstr "Tanúsítvány" - msgid "Configuration string" msgstr "" @@ -15790,6 +18008,10 @@ msgstr "" msgid "Remove certificate identity mapping rules" msgstr "" +#, fuzzy +msgid "Version" +msgstr "Jogosultságok" + msgid "Group Options" msgstr "" @@ -16512,9 +18734,6 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "" -msgid "Host" -msgstr "" - msgid "Netgroup Settings" msgstr "" @@ -16636,6 +18855,10 @@ msgstr "" msgid "Add password policy" msgstr "" +#, fuzzy +msgid "Password Policy" +msgstr "Megőrzött jelszavak (darab)" + msgid "Remove password policies" msgstr "" @@ -16663,9 +18886,6 @@ msgstr "" msgid "Remove ID ranges" msgstr "" -msgid "Active Directory domain" -msgstr "" - msgid "Active Directory domain with POSIX attributes" msgstr "" @@ -16690,6 +18910,9 @@ msgstr "" msgid "Remove RADIUS servers" msgstr "" +msgid "Realm Domains" +msgstr "" + msgid "Check DNS" msgstr "" @@ -16870,6 +19093,34 @@ msgstr "" msgid "User categories" msgstr "" +#, fuzzy +msgid "Add subid" +msgstr "Szolgáltatások" + +msgid "Assigned subids" +msgstr "" + +msgid "DNA remaining" +msgstr "" + +msgid "SubGID range size" +msgstr "" + +msgid "SubGID range start" +msgstr "" + +msgid "SubUID range size" +msgstr "" + +msgid "SubUID range start" +msgstr "" + +msgid "Remaining subids" +msgstr "" + +msgid "Subordinate ID Statistics" +msgstr "" + msgid "Add sudo command" msgstr "" @@ -17157,6 +19408,14 @@ msgstr "" msgid "Add user '${primary_key}' into sudo rules" msgstr "" +msgid "Auto assign subordinate ids" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to auto-assign a subordinate id to user ${object}?" +msgstr "" + msgid "Contact Settings" msgstr "" @@ -17613,9 +19872,6 @@ msgstr "" msgid "Authentication" msgstr "" -msgid "Automember" -msgstr "" - msgid "Automount" msgstr "" @@ -17641,6 +19897,9 @@ msgstr "" msgid "Role-Based Access Control" msgstr "" +msgid "Subordinate IDs" +msgstr "" + msgid "Sudo" msgstr "" @@ -17753,319 +20012,10 @@ msgstr "Igénylés azonosítója" msgid "Unsupported value" msgstr "" -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -#, fuzzy -msgid "invalid port number" -msgstr "Sorozatszám" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" -msgstr "" - -#, fuzzy, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - #, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -#, python-brace-format msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Access granted: %s" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." msgstr "" msgid "kerberos ticket policy settings" @@ -18235,6 +20185,1785 @@ msgstr "" msgid "Servers in location" msgstr "" +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +#, fuzzy +msgid "Invalid LDAP URI." +msgstr "LDAP URI" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +#, fuzzy +msgid "netgroups" +msgstr "Célcsoport" + +#, fuzzy +msgid "Netgroup" +msgstr "Célcsoport" + +#, fuzzy, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +msgid "URI" +msgstr "" + +#, fuzzy, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "cannot be empty" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"If the user authentication method is set to password+OTP, the user should\n" +"pass the --otp option when resetting the password.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To reset your own password when password+OTP is set as authentication " +"method:\n" +" ipa passwd --otp\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +msgid "The OTP if the user has a token configured" +msgstr "" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "" +"\n" +"Permissions\n" +msgstr "Jogosultságok" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +#, fuzzy +msgid "" +"\n" +"Managed permissions\n" +msgstr "Jogosultságok" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "must be enclosed in parentheses" +msgstr "" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "" + +#, python-format +msgid "Deprecated; use %s" +msgstr "" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, python-format +msgid "Entry %s not found" +msgstr "" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, python-format +msgid "option was renamed; use %s" +msgstr "" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, python-format +msgid "%s: group not found" +msgstr "" + +msgid "target and targetgroup are mutually exclusive" +msgstr "" + +msgid "subtree and type are mutually exclusive" +msgstr "" + +msgid "Bad search filter" +msgstr "" + +#, fuzzy, python-format +msgid "Entry %s does not exist" +msgstr "A '%s' csoport nem létezik" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, fuzzy, python-format +msgid "Added permission \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "cannot delete managed permissions" +msgstr "" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "" + +#, fuzzy, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, fuzzy, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +#, fuzzy +msgid "invalid port number" +msgstr "Sorozatszám" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, fuzzy, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "Role" +msgstr "" + +#, fuzzy, python-format +msgid "Added role \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +msgid "Modified role \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"API Schema\n" +msgstr "" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +msgid "Documentation" +msgstr "" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +msgid "Help topic" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +#, fuzzy +msgid "Method name" +msgstr "Szabály neve" + +msgid "Display information about a command." +msgstr "" + +msgid "Search for commands." +msgstr "" + +msgid "Return command defaults" +msgstr "" + +#, python-brace-format +msgid "{oname}: {command_name} not found" +msgstr "" + +msgid "Display information about a class." +msgstr "" + +#, fuzzy +msgid "Search for classes." +msgstr "Karakterosztályok" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +#, fuzzy +msgid "Required" +msgstr "Igénylés azonosítója" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +msgid "CLI name" +msgstr "" + +msgid "Confirm (password)" +msgstr "" + +#, fuzzy +msgid "Default" +msgstr "Alapértelmezett shell" + +#, fuzzy +msgid "Default from" +msgstr "Alapértelmezett csoport" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" +msgstr "" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command output." +msgstr "" + +msgid "Search for command outputs." +msgstr "" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +#, fuzzy +msgid "self service permission" +msgstr "HBAC szolgáltatás-csoport leírása" + +msgid "self service permissions" +msgstr "" + +#, fuzzy +msgid "Self Service Permissions" +msgstr "Jogosultságok" + +msgid "Self Service Permission" +msgstr "" + +#, fuzzy, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +msgid "SELinux User Map rule" +msgstr "" + +msgid "SELinux User Map rules" +msgstr "" + +msgid "SELinux User Maps" +msgstr "" + +msgid "SELinux User Map" +msgstr "" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "" + +#, fuzzy, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +msgid "server roles" +msgstr "" + +msgid "IPA Server Roles" +msgstr "" + +msgid "IPA Server Role" +msgstr "" + +#, fuzzy +msgid "IPA server role name" +msgstr "Szolgáltatás-csoport neve" + +#, fuzzy +msgid "Role status" +msgstr "Igénylés állapota" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +#, fuzzy +msgid "IPA role name" +msgstr "Szabály neve" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +#, python-format +msgid "authentication indicators not allowed in service \"%s\"" +msgstr "" + +msgid "Malformed principal" +msgstr "" + +msgid "{} is required by the IPA master" +msgstr "" + +#, fuzzy +msgid "service" +msgstr "Szolgáltatások" + +#, fuzzy +msgid "services" +msgstr "Szolgáltatások" + +msgid "Service principal alias" +msgstr "" + +msgid "Base-64 encoded service certificate" +msgstr "" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +msgid "Add a new IPA service." +msgstr "" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "force principal name even if host not in DNS" +msgstr "" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +msgid "Add a new SMB service." +msgstr "" + +#, fuzzy +msgid "SMB service NetBIOS name" +msgstr "Szolgáltatás neve" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +msgid "Modified service \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to a service" +msgstr "" + +#, fuzzy, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Remove principal alias from a service" +msgstr "" + +#, fuzzy, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, fuzzy, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +#, fuzzy +msgid "Service delegation target" +msgstr "Szolgáltatás-csoport neve" + +#, fuzzy, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, fuzzy, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Subordinate ids\n" +"\n" +"Manage subordinate user and group ids for users\n" +"\n" +"EXAMPLES:\n" +"\n" +" Auto-assign a subordinate id range to current user\n" +" ipa subid-generate\n" +"\n" +" Auto-assign a subordinate id range to user alice:\n" +" ipa subid-generate --owner=alice\n" +"\n" +" Find subordinate ids for user alice:\n" +" ipa subid-find --owner=alice\n" +"\n" +" Match entry by any subordinate uid in range:\n" +" ipa subid-match --subuid=2147483649\n" +msgstr "" + +msgid "Subordinate id" +msgstr "" + +msgid "Subordinate ids" +msgstr "" + +#, fuzzy +msgid "Subordinate id description" +msgstr "Leírás" + +msgid "Owning user of subordinate id entry" +msgstr "" + +msgid "Start value for subordinate user ID (subuid) range" +msgstr "" + +msgid "Subordinate user ID count" +msgstr "" + +msgid "Start value for subordinate group ID (subgid) range" +msgstr "" + +msgid "Subordinate group ID count" +msgstr "" + +#, python-format +msgid "" +"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." +msgstr "" + +#, python-format +msgid "'%(dn)s is not a valid user" +msgstr "" + +msgid "subgidnumber must be equal to subuidnumber" +msgstr "" + +msgid "Add a new subordinate id." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added subordinate id \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Delete a subordinate id." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted subordinate id \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "Modify a subordinate id." +msgstr "" + +#, fuzzy, python-format +msgid "Modified subordinate id \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy +msgid "Search for subordinate id." +msgstr "Karakterosztályok" + +#, fuzzy, python-format +msgid "%(count)d subordinate id matched" +msgid_plural "%(count)d subordinate ids matched" +msgstr[0] "HBAC szolgáltatás-csoport leírása" +msgstr[1] "HBAC szolgáltatás-csoport leírása" + +msgid "Display information about a subordinate id." +msgstr "" + +msgid "Generate and auto-assign subuid and subgid range to user entry" +msgstr "" + +msgid "Match users by any subordinate uid in their range" +msgstr "" + +msgid "SubUID match" +msgstr "" + +msgid "Match value for subordinate user ID" +msgstr "" + +msgid "Subordinate id statistics" +msgstr "" + +#, python-format +msgid "%(remaining)i remaining subordinate id ranges" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +msgid "sudo command" +msgstr "" + +msgid "sudo commands" +msgstr "" + +msgid "Sudo Commands" +msgstr "" + +#, fuzzy, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, fuzzy, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + msgid "" "\n" "Topology\n" @@ -18451,1005 +22180,6 @@ msgid "" " replication agreements\n" msgstr "" -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -msgid "sudo command" -msgstr "" - -msgid "sudo commands" -msgstr "" - -msgid "Sudo Commands" -msgstr "" - -#, fuzzy, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "self service permission" -msgstr "HBAC szolgáltatás-csoport leírása" - -msgid "self service permissions" -msgstr "" - -#, fuzzy -msgid "Self Service Permissions" -msgstr "Jogosultságok" - -msgid "Self Service Permission" -msgstr "" - -#, fuzzy, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "A list of ACI values" -msgstr "LDAP-bejegyzések listája" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -msgid "ACI prefix is required" -msgstr "" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -msgid "empty filter" -msgstr "" - -#, fuzzy, python-format -msgid "Syntax Error: %(error)s" -msgstr "Tanúsítványhiba: %(error)s" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -#, fuzzy, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -#, fuzzy -msgid "groups" -msgstr "Felhasználói csport" - -#, fuzzy -msgid "User Group" -msgstr "Felhasználói csport" - -#, fuzzy, python-format -msgid "Added group \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy -msgid "privileged group" -msgstr "Célcsoport" - -#, fuzzy, python-format -msgid "Modified group \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -msgid "Not a managed group" -msgstr "" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -msgid "automount location" -msgstr "" - -msgid "automount locations" -msgstr "" - -msgid "Automount Locations" -msgstr "" - -msgid "Automount Location" -msgstr "" - -#, fuzzy, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "automount map" -msgstr "" - -msgid "automount maps" -msgstr "" - -msgid "Automount Maps" -msgstr "" - -msgid "Automount Map" -msgstr "" - -#, fuzzy, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Automount key object." -msgstr "" - -msgid "automount key" -msgstr "" - -msgid "automount keys" -msgstr "" - -msgid "Automount Keys" -msgstr "" - -msgid "Automount Key" -msgstr "" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, python-format -msgid "key named %(key)s already exists" -msgstr "" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, fuzzy, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" -msgstr[1] "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, fuzzy, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Delete an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "Modify an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -#, fuzzy -msgid "Invalid LDAP URI." -msgstr "LDAP URI" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -msgid "CA category" -msgstr "" - -msgid "CA category the ACL applies to" -msgstr "" - -msgid "CAs" -msgstr "" - -#, fuzzy, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, fuzzy, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, python-format -msgid "%i users or groups added." -msgstr "" - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, fuzzy, python-format -msgid "%i service added." -msgstr "Szolgáltatás neve" - -#, fuzzy, python-format -msgid "%i services added." -msgstr "Szolgáltatás neve" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - msgid "" "\n" "Cross-realm trusts\n" @@ -19615,12 +22345,6 @@ msgid "" " " msgstr "" -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - msgid "Type of trusted domain ID range, one of allowed values" msgstr "" @@ -19858,747 +22582,9 @@ msgid "" "itself" msgstr "" -msgid "" -"\n" -"DNS server configuration\n" +msgid "users" msgstr "" -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "" - -msgid "DNS servers" -msgstr "" - -#, fuzzy -msgid "DNS Servers" -msgstr "Szolgáltatások" - -msgid "DNS Server" -msgstr "" - -#, fuzzy -msgid "DNS Server name" -msgstr "Szolgáltatás neve" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, fuzzy, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Search for DNS servers." -msgstr "" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, fuzzy, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Delete a DNS server" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -#, fuzzy, python-format -msgid "Added host \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, fuzzy, python-format -msgid "Modified host \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -#, fuzzy -msgid "HBAC services" -msgstr "Szolgáltatások" - -#, fuzzy -msgid "HBAC Services" -msgstr "Szolgáltatások" - -#, fuzzy -msgid "HBAC Service" -msgstr "Szolgáltatások" - -#, fuzzy, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "HBAC service group" -msgstr "HBAC szolgáltatás-csoport leírása" - -#, fuzzy -msgid "HBAC service groups" -msgstr "HBAC szolgáltatás-csoport leírása" - -#, fuzzy -msgid "HBAC Service Groups" -msgstr "Szolgáltatás-csoportok" - -#, fuzzy -msgid "HBAC Service Group" -msgstr "Szolgáltatás-csoportok" - -#, fuzzy, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "HBAC szolgáltatás-csoport leírása" -msgstr[1] "HBAC szolgáltatás-csoport leírása" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -msgid "Delegations" -msgstr "" - -msgid "Delegation" -msgstr "" - -#, fuzzy, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, fuzzy, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Role" -msgstr "" - -#, fuzzy, python-format -msgid "Added role \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified role \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, fuzzy -msgid "netgroups" -msgstr "Célcsoport" - -#, fuzzy -msgid "Netgroup" -msgstr "Célcsoport" - -#, fuzzy, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - #, fuzzy, python-format msgid "Added user \"%(value)s\"" msgstr "A %(value)s szolgáltatás hozzáadva" @@ -20618,12 +22604,6 @@ msgstr "" msgid "Modified user \"%(value)s\"" msgstr "A %(value)s szolgáltatás hozzáadva" -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" -msgstr[1] "" - #, fuzzy, python-format msgid "Undeleted user account \"%(value)s\"" msgstr "A %(value)s szolgáltatás eltávolítva" @@ -20719,12 +22699,6 @@ msgstr "A %(value)s szolgáltatás hozzáadva" msgid "Removed certificates from user \"%(value)s\"" msgstr "A %(value)s szolgáltatás eltávolítva" -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - msgid "Add new principal alias to the user entry" msgstr "" @@ -20739,532 +22713,6 @@ msgstr "" msgid "Removed aliases from user \"%(value)s\"" msgstr "A %(value)s szolgáltatás eltávolítva" -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" -msgstr "" - -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -msgid "SELinux User Maps" -msgstr "" - -msgid "SELinux User Map" -msgstr "" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "" - -#, fuzzy, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - msgid "" "\n" "Vaults\n" @@ -21607,109 +23055,158 @@ msgstr "" msgid "Checks if any of the servers has the KRA service enabled" msgstr "" -#, fuzzy -msgid "Member service groups" -msgstr "Szolgáltatás-csoportok" +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +msgid "password policy" +msgstr "" + +msgid "password policies" +msgstr "" #, fuzzy -msgid "Member HBAC service groups" -msgstr "HBAC szolgáltatás-csoport leírása" +msgid "Password Policies" +msgstr "Megőrzött jelszavak (darab)" -msgid "Member ID user overrides" +msgid "Max repeat" msgstr "" -msgid "Indirect Member ID user overrides" +msgid "Maximum number of same consecutive characters" msgstr "" -msgid "Indirect Member permissions" +msgid "Max sequence" msgstr "" -msgid "Indirect Member HBAC service" +msgid "The max. length of monotonic character sequences (abcd)" msgstr "" -msgid "Indirect Member HBAC service group" +msgid "Dictionary check" msgstr "" -msgid "Invalid format. Should be name=value" +msgid "Check if the password is a dictionary word" msgstr "" -msgid "An IPA master host cannot be deleted or disabled" +msgid "User check" msgstr "" -msgid "entry" +msgid "Check if the password contains the username" msgstr "" -msgid "entries" -msgstr "" - -msgid "Entry" -msgstr "" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" msgstr "" -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." +#, fuzzy +msgid "Maximum password life must be equal to or greater than the minimum." +msgstr "Jelszó maximális élettartama (nap)" + +msgid "cannot delete global password policy" msgstr "" -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" +msgid "priority cannot be set on global policy" msgstr "" msgid "" @@ -21858,6 +23355,10 @@ msgstr "" msgid "Ignoring topology connectivity errors." msgstr "" +#, python-format +msgid "Failed to remove server from security domain: %s" +msgstr "" + msgid "Server has already been deleted" msgstr "" @@ -21896,1396 +23397,187 @@ msgstr "" msgid "" "\n" -"Manage Certificate Authorities\n" +"Sudo Rules\n" msgstr "" msgid "" "\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" msgstr "" msgid "" "\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" msgstr "" msgid "" "\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" +"Each option needs to be added separately and no validation is done whether\n" +"the option is known by sudo or is in a valid format. Environment variables\n" +"also need to be set individually. For example env_keep=\"FOO BAR\" in " +"sudoers\n" +"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" +"+=BAR.\n" msgstr "" msgid "" "\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" msgstr "" msgid "" "\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" msgstr "" msgid "" "\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" msgstr "" msgid "" "\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" msgstr "" msgid "" "\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" "\n" -" ipa ca-del puppet\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" msgstr "" -#, fuzzy -msgid "Certificate Authority" -msgstr "Tanúsítvány" - -#, fuzzy -msgid "Certificate Authorities" -msgstr "Tanúsítvány" - -msgid "Name for referencing the CA" +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" msgstr "" -msgid "Description of the purpose of the CA" +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" msgstr "" -msgid "Authority ID" +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" msgstr "" -msgid "Dogtag Authority ID" +msgid "" +"\n" +" Set multiple default Sudo options:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate' --" +"sudooption mail_badpass\n" msgstr "" -#, fuzzy -msgid "Subject DN" -msgstr "Tárgy" - -msgid "Subject Distinguished Name" +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" msgstr "" -msgid "Issuer Distinguished Name" +msgid "this option has been deprecated." msgstr "" -msgid "Search for CAs." +msgid "sudo rules" +msgstr "" + +msgid "Sudo Rules" +msgstr "" + +msgid "Sudo Rule" msgstr "" #, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, fuzzy, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +msgid "command" +msgstr "" + +msgid "commands" +msgstr "" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +msgid "group runAs" +msgstr "" + +#, fuzzy +msgid "runAs groups" +msgstr "Felhasználói csport" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" msgstr[0] "" msgstr[1] "" -msgid "Display the properties of a CA." +msgid "commands cannot be added when command category='all'" msgstr "" -msgid "Create a CA." -msgstr "" - -#, fuzzy, python-format -msgid "Created CA \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." +msgid "users cannot be added when runAs user or runAs group category='all'" msgstr "" #, python-format -msgid "Unrecognized attributes: %(attrs)s" +msgid "RunAsUser does not accept '%(name)s' as a user name" msgstr "" #, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -msgid "IPA CA cannot be deleted" -msgstr "" - -msgid "Must be disabled first" -msgstr "" - -msgid "Modify CA configuration." -msgstr "" - -#, fuzzy, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -msgid "Disable a CA." -msgstr "" - -#, fuzzy, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "IPA CA cannot be disabled" -msgstr "" - -msgid "Enable a CA." -msgstr "" - -#, fuzzy, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, fuzzy, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "Entry RDN is not 'uid'" +msgid "RunAsUser does not accept '%(name)s' as a group name" msgstr "" #, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -msgid "URI" -msgstr "" - -#, fuzzy, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "cannot be empty" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "invalid IP network format" -msgstr "" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -msgid "invalid address format" -msgstr "" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -msgid "flags value: allowed interval 0-255" -msgstr "" - -msgid "iterations value: allowed interval 0-65535" -msgstr "" - -#, python-format -msgid "salt value: %(err)s" -msgstr "" - -msgid "invalid domain-name: not fully qualified" -msgstr "" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" - -#, python-format -msgid "%s record" -msgstr "" - -#, python-format -msgid "Raw %s records" -msgstr "" - -#, python-format -msgid "%s Record" -msgstr "" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -msgid "Invalid number of parts!" -msgstr "" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -msgid "Create reverse" -msgstr "" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" - -msgid "Exchanger" -msgstr "" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -msgid "Priority (order)" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Relative weight for entries with the same priority." -msgstr "" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Target Uniform Resource Identifier" -msgstr "" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" - -msgid "Managedby permission" -msgstr "" - -msgid "cannot be used when a zone is specified" -msgstr "" - -msgid "Only one zone type is allowed per zone name" -msgstr "" - -#, fuzzy, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "" - -#, fuzzy, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "DNS zone" -msgstr "" - -msgid "DNS zones" -msgstr "" - -msgid "DNS Zones" -msgstr "" - -msgid "DNS Zone" -msgstr "" - -#, fuzzy -msgid "Default time to live" -msgstr "Alapértelmezett shell" - -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -msgid "setting Authoritative nameserver" -msgstr "" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -msgid "" -msgstr "" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "is required" -msgstr "" - -#, fuzzy, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "DNS resource record" -msgstr "" - -msgid "DNS resource records" -msgstr "" - -msgid "DNS Resource Records" -msgstr "" - -msgid "DNS Resource Record" -msgstr "" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -msgid "only master zones can contain records" -msgstr "" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -msgid "DNS zone root record cannot be renamed" -msgstr "" - -msgid "DNS records can be only updated one at a time" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Found '%(value)s'" -msgstr "" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "" - -msgid "DNS configuration options" -msgstr "" - -msgid "DNS Global Configuration" -msgstr "" - -msgid "IPA DNS version" -msgstr "" - -msgid "List of IPA masters configured as DNS servers" -msgstr "" - -msgid "IPA server configured as DNSSec key master" -msgstr "" - -msgid "Global DNS configuration is empty" -msgstr "" - -msgid "DNS forward zone" -msgstr "" - -msgid "DNS forward zones" -msgstr "" - -msgid "DNS Forward Zones" -msgstr "" - -msgid "DNS Forward Zone" -msgstr "" - -msgid "Please specify forwarders." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "" - -msgid "IPA DNS records" -msgstr "" - -msgid "IPA location records" -msgstr "" - -msgid "Update location and IPA server DNS records" -msgstr "" - -msgid "Result of the command" -msgstr "" - -msgid "Dry run" -msgstr "" - -msgid "Do not update records only return expected records" -msgstr "" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, fuzzy, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -#, fuzzy -msgid "Certificate Profile" -msgstr "Tanúsítvány" - -#, fuzzy -msgid "Certificate Profiles" -msgstr "Tanúsítvány" - -msgid "Profile configuration" -msgstr "" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, fuzzy, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy -msgid "Certificate profiles cannot be renamed" -msgstr "Az alapértelmezett csoport nem távolítható el" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -msgid "must be enabled only on a single master" +msgid "RunAsGroup does not accept '%(name)s' as a group name" msgstr "" #, fuzzy @@ -23310,6 +23602,17 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + #, python-format msgid "" "\n" @@ -23329,34 +23632,6 @@ msgstr "" msgid "Topology does not allow server %(server)s to replicate with servers:" msgstr "" -msgid "Trusting forest" -msgstr "" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Unknown" -msgstr "" - -msgid "Non-Active Directory domain" -msgstr "" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - msgid "" "\n" "Classes to manage trust joins using DCE-RPC calls\n" @@ -23515,33 +23790,6 @@ msgstr "" msgid "must be at least 1" msgstr "" -#, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -msgid "Unable to initialize STARTTLS session\n" -msgstr "" - msgid "Out of memory\n" msgstr "" @@ -23569,3 +23817,30 @@ msgstr "" msgid "Bad or unsupported salt type.\n" msgstr "" + +#, c-format +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "" + +msgid "" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" +msgstr "" + +msgid "Unable to initialize STARTTLS session\n" +msgstr "" diff --git a/po/id.po b/po/id.po index e5deed83c..fecc242c1 100644 --- a/po/id.po +++ b/po/id.po @@ -18,421 +18,154 @@ msgstr "" "Plural-Forms: nplurals=1; plural=0;\n" "X-Generator: Weblate 4.3.1\n" -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" - -msgid " * 1 - keyCompromise\n" -msgstr " * 1 - keyCompromise\n" - -msgid " * 10 - aACompromise\n" -msgstr " * 10 - aACompromise\n" - -msgid " * 2 - cACompromise\n" -msgstr " * 2 - cACompromise\n" - -msgid " * 6 - certificateHold\n" -msgstr " * 6 - certificateHold\n" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr " * 9 - privilegeWithdrawn\n" - -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "${count} pengguna diaktifkan" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "${count} pengguna digelar" - -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "%(attr)s: Hanya satu nilai yang diperbolehkan." - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "%(count)d ACI cocok" - -#, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "%(count)d CA cocok" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "%(count)d token OTP cocok" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "%(count)d grup cocok" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "%(count)d host sesuai" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "%(count)d hostgroup cocok" - -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "%(count)d pengaya telah dimuat" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "%(count)d pengguna cocok" - -#, python-format -msgid "%(count)d variables" -msgstr "%(count)d variabel" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "%(count)s server cocok" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "%(count)s peran server cocok" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "%(count)s pengguna cocok" - -#, python-format -msgid "%(desc)s: %(info)s" -msgstr "%(desc)s: %(info)s" - -#, python-format -msgid "%(exception)s" -msgstr "%(exception)s" - -#, python-format -msgid "%(info)s" -msgstr "%(info)s" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" - -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "%i host atau hostgroup ditambahkan." - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "%i host atau hostgroup dibuang." - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "%i hosts atau hostgroups ditambahkan." - -msgid "A description of this command" -msgstr "Suatu penjelasan atas perintah ini" - -msgid "A group may not be a member of itself" -msgstr "Sebuah grup tidak mungkin menjadi anggota grup itu sendiri" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "ACI dengan nama \"%s\" tidak ditemukan" - -msgid "Account disabled" -msgstr "Akun dinonaktifkan" - -msgid "Active Directory domain" -msgstr "Domain Active Directory" - -msgid "Add host group" -msgstr "Tambah grup host" - -#, python-format -msgid "Added %(map)s" -msgstr "Ditambahkan %(map)s" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "Menambah token OTP \"%(value)s\"" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "Grup \"%(value)s\" ditambahkan" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "Host \"%(value)s\" ditambahkan" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "Hostgroup \"%(value)s\" ditambahkan" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "Segmen \"%(value)s\" ditambahkan" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -msgid "Allow query" -msgstr "Izinkan kuiri" - -#, python-brace-format -msgid "An error has occurred (${error})" -msgstr "Terjadi kesalahan internal (${error})" - -msgid "Asks for a non-random password to use for the principal" -msgstr "Meminta kata sandi non-acak untuk digunakan bagi prinsipal" - -msgid "Audit" -msgstr "Audit" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "Aturan anggota otomatis: %s tidak ditemukan!" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "Penguraian Base64 gagal: %(reason)s" - -msgid "Bind rule type" -msgstr "Tipe aturan bind" - -msgid "CSR" -msgstr "CSR" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "Operasi sertifikat tidak dapat diselesaikan: %(error)s" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "Mengubah keadaan server \"%(value)s\"." - -#, python-brace-format -msgid "Click to ${action}" -msgstr "Klik untuk ${action}" +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "tidak dapat membuka berkas konfigurasi %s\n" #, c-format -msgid "Closing keytab failed\n" -msgstr "Menutup keytab gagal\n" - -msgid "Comma separated encryption types list" -msgstr "Daftar tipe enkripsi yang dipisahkan koma" - -msgid "Command name" -msgstr "Nama perintah" - -msgid "Command not implemented" -msgstr "Perintah tidak diimplementasikan" - -msgid "Confirm (password)" -msgstr "Konfirmasi (kata sandi)" - -msgid "Consume an entitlement." -msgstr "Mengkonsumsi suatu hak." - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "ACI \"%(value)s\" telah dibuat" - -#, python-format -msgid "Created CA \"%(value)s\"" -msgstr "CA \"%(value)s\" dibuat" - -msgid "DLV Digest" -msgstr "Digest DLV" - -msgid "DNAME Target" -msgstr "Target DNAME" - -msgid "DNS Server name" -msgstr "Nama Server DNS" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "Server DNS %(server)s: %(error)s." - -msgid "DS Digest" -msgstr "Digest DS" - -msgid "Debugging output" -msgstr "Keluaran awakutu" - -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "Hapus '%(value)s' %(name)s?" - -msgid "Delete a hostgroup." -msgstr "Menghapus suatu hostgroup." - -msgid "Delete all?" -msgstr "Hapus semua?" - -msgid "Delete group." -msgstr "Menghapus grup." - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "ACI \"%(value)s\" telah dihapus" - -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "CA \"%(value)s\" dihapus" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "Menghapus token OTP \"%(value)s\"" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "Grup \"%(value)s\" dihapus" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "Host \"%(value)s\" dihapus" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "Hostgroup \"%(value)s\" dihapus" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "Segmen \"%(value)s\" dihapus" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -#, python-format -msgid "Deprecated; use %s" -msgstr "Usang; gunakan %s" - -#, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "CA \"%(value)s\" dinonaktifkan" - -msgid "Domain" -msgstr "Domain" - -msgid "Domain GUID" -msgstr "GUID Domain" - -msgid "Domain SID" -msgstr "SID Domain" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "Sunting ${entity}" - -#, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "CA \"%(value)s\" difungsikan" - -msgid "Encryption types to request" -msgstr "Tipe enkripsi yang akan diminta" - -msgid "Enrollment UUID (not implemented)" -msgstr "UUID pendaftaran (tidak diimplementasikan)" +msgid "cannot stat() configuration file %s\n" +msgstr "tidak dapat melakukan stat() berkas konfigurasi %s\n" #, c-format -msgid "Enrollment failed. %s\n" -msgstr "Pendaftaran gagal. %s\n" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "Masukkan %(label)s lagi untuk verifikasi: " - -#, python-format -msgid "Entry %s does not exist" -msgstr "Entri %s tidak ada" - -#, python-format -msgid "Entry %s not found" -msgstr "Entri %s tidak ditemukan" +msgid "out of memory\n" +msgstr "kehabisan memori!\n" #, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "Galat saat mendapatkan ranah Kerberos default: %s.\n" +msgid "read error\n" +msgstr "galat baca\n" #, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "Galat saat memperoleh kredensial awal: %s.\n" +msgid "Unable to parse principal name\n" +msgstr "Tidak dapat mengurai nama prinsipal\n" #, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "Galat saat mengurai \"%1$s\": %2$s.\n" +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "krb5_parse_name %1$d: %2$s\n" #, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "Galat saat me-resolve keytab: %s.\n" - -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "Galat saat menyimpan kredensial dalam singgahan kredensial: %s.\n" - -#, c-format -msgid "Expanding buffer in jsonrpc_handle_response failed" -msgstr "Memperluas penyangga dalam jsonrpc_handle_response gagal" - -msgid "Expires On" -msgstr "Kedaluwarsa Pada" - -#, c-format -msgid "Extracting the data from the JSON-RPC response failed: %s\n" -msgstr "Gagal mengekstrak data dari respons JSON-RPC: %s\n" - -#, c-format -msgid "Extracting the error from the JSON-RPC response failed: %s\n" -msgstr "Gagal mengekstrak kesalahan dari respons JSON-RPC: %s\n" - -msgid "Failed service/service groups" -msgstr "Grup layanan/layanan gagal" - -#, c-format -msgid "Failed to create control!\n" -msgstr "Gagal membuat kontrol!\n" - -msgid "Failed to decode control reply!\n" -msgstr "Gagal mendekode balasan kontrol!\n" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "Gagal mendapatkan hasil: %s\n" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "Gagal membuka berkas konfigurasi %s\n" +msgid "Removing principal %s\n" +msgstr "Menghapus prinsipal %s\n" #, c-format msgid "Failed to open keytab\n" msgstr "Gagal membuka keytab\n" +#, c-format +msgid "principal not found\n" +msgstr "prinsipal tidak ditemukan\n" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "krb5_kt_get_entry %1$d: %2$s\n" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "Tak bisa menghapus entri\n" + +#, c-format +msgid "kvno %d\n" +msgstr "kvno %d\n" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "krb5_kt_remove_entry %1$d: %2$s\n" + +#, fuzzy, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "Gagal mendapatkan hasil: %s\n" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "Tidak dapat mengurai prinsipal\n" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "krb5_unparse_name %1$d: %2$s\n" + +#, c-format +msgid "realm not found\n" +msgstr "realm tidak ditemukan\n" + +msgid "Print debugging information" +msgstr "Cetak informasi awakutu" + +msgid "Debugging output" +msgstr "Keluaran awakutu" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" +"Prinsipal yang akan dihapus dari keytab (misalnya: ftp/ftp.example." +"com@EXAMPLE.COM)" + +msgid "Kerberos Service Principal Name" +msgstr "Nama Prisipal Layanan Kerberos" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "Berkas keytab yang akan dihapus prinsipalnya" + +msgid "Keytab File Name" +msgstr "Nama Berkas Keytab" + +msgid "Remove all principals in this realm" +msgstr "Hapus semua prinsipal di realm ini" + +msgid "Realm name" +msgstr "Nama realm" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "Inisialisasi konteks Kerberos gagal\n" + #, c-format msgid "Failed to open keytab '%1$s': %2$s\n" msgstr "Gagal membuka keytab '%1$s': %2$s\n" #, c-format -msgid "Failed to parse config file %s\n" -msgstr "Gagal mengurai berkas konfig %s\n" +msgid "Closing keytab failed\n" +msgstr "Menutup keytab gagal\n" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "krb5_kt_close %1$d: %2$s\n" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "Inisialisasi konteks Kerberos gagal: %1$s (%2$d)\n" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "Tidak dapat mengurai prinsipal: %1$s (%2$d)\n" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "Tidak ada kunci yang diterima oleh KDC\n" + +#, c-format +msgid "Out of memory \n" +msgstr "Kehabisan memori \n" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "Tak bisa menginisialisasi pustaka ldap!\n" + +msgid "Simple bind failed\n" +msgstr "Bind sederhana gagal\n" + +msgid "SASL Bind failed\n" +msgstr "Bind SASL gagal\n" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "Operasi gagal: %s\n" + +#, c-format +msgid "Failed to get result: %s\n" +msgstr "Gagal mendapatkan hasil: %s\n" + +#, c-format +msgid "Timeout exceeded." +msgstr "Tenggat waktu terlampaui." #, c-format msgid "Failed to parse extended result: %s\n" @@ -442,128 +175,6 @@ msgstr "Gagal mengurai hasil yang diperluas: %s\n" msgid "Failed to parse result: %s\n" msgstr "Gagal mengurai hasil: %s\n" -#, c-format -msgid "Failed to retrieve any keys" -msgstr "Gagal mengambil kunci apapun" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "Gagal mengambil tipe enkripsi %1$s (#%2$d)\n" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "Gagal mengambil tipe enkripsi #%d\n" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "Gagal mengurai Permintaan Penandatanganan Sertifikat: %s" - -msgid "Force the host join. Rejoin even if already joined." -msgstr "Paksa host bergabung. Bergabung kembali bahkan jika sudah bergabung." - -msgid "Forwarders" -msgstr "Forwarder" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "Grup '%s' tidak ada" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "Aturan HBAC %(rule)s tidak ditemukan" - -#, c-format -msgid "Host is already joined.\n" -msgstr "Host sudah bergabung.\n" - -msgid "Hostname of this server" -msgstr "Nama host peladen ini" - -msgid "IPA Server to use" -msgstr "Server IPA yang akan digunakan" - -#, c-format -msgid "IPA namingContext not found\n" -msgstr "IPA namingContext tidak ditemukan\n" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "Hak akses tidak mencukupi: %(info)s" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "Permintaan JSON-RPC tidak valid: %(error)s" - -#, c-format -msgid "JSON-RPC call failed with status code: %li\n" -msgstr "Panggilan JSON-RPC gagal dengan kode status: %li\n" - -#, c-format -msgid "JSON-RPC call failed: %s\n" -msgstr "Panggilan JSON-RPC gagal: %s\n" - -#, c-format -msgid "JSON-RPC call was unauthorized. Check your credentials.\n" -msgstr "Panggilan JSON-RPC tanpa otorisasi. Periksa kredensial Anda.\n" - -#, c-format -msgid "" -"JSON-RPC request:\n" -"%s\n" -msgstr "" -"Permintaan JSON-RPC:\n" -"%s\n" - -#, c-format -msgid "" -"JSON-RPC response:\n" -"%s\n" -msgstr "" -"Respon JSON-RPC:\n" -"%s\n" - -msgid "Kerberos Service Principal Name" -msgstr "Nama Prisipal Layanan Kerberos" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "Inisialisasi konteks Kerberos gagal\n" - -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "Inisialisasi konteks Kerberos gagal: %1$s (%2$d)\n" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Kesalahan kerberos: %(major)s/%(minor)s" - -msgid "Keytab File Name" -msgstr "Nama Berkas Keytab" - -msgid "LDAP DN" -msgstr "DN LDAP" - -msgid "LDAP URI" -msgstr "URI LDAP" - -msgid "LDAP basedn" -msgstr "basedn LDAP" - -msgid "LDAP password (if not using Kerberos)" -msgstr "Kata sandi LDAP (jika tidak menggunakan Kerberos)" - -msgid "Mailing Address" -msgstr "Alamat Surat" - -msgid "Master file" -msgstr "Berkas induk" - -msgid "Maximum serial number" -msgstr "Nomor seri maksimum" - -msgid "Minimum serial number" -msgstr "Nomor seri minimum" - #, c-format msgid "Missing reply control list!\n" msgstr "Kurang daftar kontrol balasan!\n" @@ -572,651 +183,13 @@ msgstr "Kurang daftar kontrol balasan!\n" msgid "Missing reply control!\n" msgstr "Kehilangan kontrol balasan!\n" -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "ACI \"%(value)s\" telah dimodifikasi" - -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "CA \"%(value)s\" diubah" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "Mengubah token OTP \"%(value)s\"" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "Grup \"%(value)s\" dimodifikasi" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "Host \"%(value)s\" dimodifikasi" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "Hostgroup \"%(value)s\" dimodifikasi" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "Segmen \"%(value)s\" dimodifikasi" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "Ubah '%(value)s' %(name)s?" - -msgid "Modify a hostgroup." -msgstr "Memodifikasi suatu hostgroup." - -msgid "Must be a decimal number" -msgstr "Harus angka desimal" - -msgid "Must be a positive number" -msgstr "Harus angka positif" - -msgid "Must be an integer" -msgstr "Harus bilangan bulat" - -msgid "Must be disabled first" -msgstr "Harus dinon-fungsikan terlebih dahulu" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "Tidak ada kunci yang diterima oleh KDC\n" - -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "Tidak ada izin bagi bergabungnya host ini ke domain IPA.\n" - -#, c-format -msgid "No values for %s" -msgstr "Tidak ada nilai bagi %s" - -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "Tidak ada izin tulis pada berkas keytab '%s'\n" - -msgid "Non-POSIX" -msgstr "Non-POSIX" - -msgid "Nonce" -msgstr "Nonce" - -msgid "Number of plugins loaded" -msgstr "Cacah pengaya yang dimuat" - -msgid "OTP Token" -msgstr "Token OTP" - -msgid "Only one value is allowed" -msgstr "Hanya satu nilai yang diperbolehkan" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "Operasi gagal: %s\n" - #, c-format msgid "Out of Memory!\n" msgstr "Kehabisan Memori!\n" #, c-format -msgid "Out of memory \n" -msgstr "Kehabisan memori \n" - -#, c-format -msgid "Out of memory!" -msgstr "Kehabisan memori!" - -#, c-format -msgid "Out of memory!\n" -msgstr "Kehabisan memori!\n" - -msgid "Output only on errors" -msgstr "Keluaran hanya pada kesalahan" - -#, c-format -msgid "Parsing JSON-RPC response failed: %s\n" -msgstr "Penguraian respons JSON-RPC gagal: %s\n" - -#, c-format -msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" -msgstr "" -"Penguraian respons JSON-RPC gagal: tidak ada nilai 'hasil' yang ditemukan.\n" - -msgid "Password cannot be set on enrolled host." -msgstr "Kata sandi tidak dapat ditata pada host yang didaftarkan." - -msgid "Password is too long!\n" -msgstr "Kata sandi terlalu panjang!\n" - -msgid "Passwords do not match" -msgstr "Kata sandi tidak cocok" - -msgid "Passwords do not match!" -msgstr "Kata sandi tidak cocok!" - -#, c-format -msgid "Passwords do not match!\n" -msgstr "Kata sandi tidak cocok!\n" - -msgid "Passwords must match" -msgstr "Kata sandi harus cocok" - -msgid "Permitted Encryption Types" -msgstr "Tipe Enkripsi yang Diizinkan" - -msgid "Print as little as possible" -msgstr "Mencetak sesedikat mungkin" - -msgid "Print debugging information" -msgstr "Cetak informasi awakutu" - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "Mencetak keluaran XML-RPC mentah dalam mode GSSAPI" - -msgid "Public key:" -msgstr "Kunci publik:" - -msgid "Quiet mode. Only errors are displayed." -msgstr "Mode senyap. Hanya galat yang ditampilkan." - -msgid "Realm name" -msgstr "Nama realm" - -msgid "Reason" -msgstr "Alasan" - -msgid "Record type" -msgstr "Tipe record" - -msgid "Remove all principals in this realm" -msgstr "Hapus semua prinsipal di realm ini" - -#, c-format -msgid "Removing principal %s\n" -msgstr "Menghapus prinsipal %s\n" - -msgid "Reset OTP" -msgstr "OTP Reset" - -msgid "Results are truncated, try a more specific search" -msgstr "Hasil yang terpotong, coba cari dengan lebih spesifik" - -msgid "SASL Bind failed\n" -msgstr "Bind SASL gagal\n" - -msgid "SRV Target" -msgstr "Target SRV" - -msgid "SSH public key:" -msgstr "Kunci publik SSH:" - -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "Mencari %1$s pada rootdse gagal dengan galat %2$d\n" - -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "Mencari namingContext IPA gagal dengan galat %d\n" - -msgid "Serial" -msgstr "Serial" - -msgid "Server Name" -msgstr "Nama Peladen" - -msgid "Service Options" -msgstr "Opsi Layanan" - -msgid "Show the list of permitted encryption types and exit" -msgstr "Tampilkan daftar tipe enkripsi yang diizinkan dan keluar" - -msgid "Simple bind failed\n" -msgstr "Bind sederhana gagal\n" - -msgid "Specifies where to store keytab information." -msgstr "Menentukan tempat menyimpan informasi keytab." - -msgid "Subject Distinguished Name" -msgstr "Distinguished Name Subjek" - -msgid "Submit a certificate signing request." -msgstr "Mengirim sebuah permintan penandatanganan sertifikat." - -msgid "Sudo" -msgstr "Sudo" - -msgid "Target" -msgstr "Target" - -msgid "Target DN" -msgstr "DN Target" - -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "Nama host harus fully-qualified: %s\n" - -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "Nama host tidak boleh: %s\n" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "Berkas keytab yang akan dihapus prinsipalnya" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" -"Prinsipal yang akan dihapus dari keytab (misalnya: ftp/ftp.example." -"com@EXAMPLE.COM)" - -msgid "This command requires root access" -msgstr "Perintah ini memerlukan akses root" - -msgid "This entry already exists" -msgstr "Entri ini sudah ada" - -msgid "This is already a posix group" -msgstr "Ini sudah merupakan grup posix" - -msgid "Ticket expired" -msgstr "Tiket kedaluwarsa" - -#, c-format -msgid "Timeout exceeded." -msgstr "Tenggat waktu terlampaui." - -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "Tak bisa menentukan peladen IPA dari %s\n" - -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "Tak bisa menentukan root DN dari %s\n" - -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "Tidak bisa memfungsikan SSL dalam LDAP\n" - -#, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "Tidak dapat menghasilkan Kerberos Credential Cache\n" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "Tak bisa menginisialisasi pustaka ldap!\n" - -#, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "" -"Tidak dapat bergabung dengan host: Kerberos Credential Cache tidak " -"ditemukan\n" - -#, c-format -msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" -msgstr "" -"Tidak dapat bergabung dengan host: Kerberos User Principal tidak ditemukan " -"dan kata sandi host tidak disediakan.\n" - -#, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "" -"Tidak dapat bergabung dengan host: Inisialisasi konteks Kerberos gagal\n" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "Tidak dapat mengurai prinsipal\n" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "Tidak dapat mengurai nama prinsipal\n" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "Tidak dapat mengurai prinsipal: %1$s (%2$d)\n" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "Tak bisa menghapus entri\n" - -msgid "Undo" -msgstr "Tak Jadi" - -msgid "You must enroll a host in order to create a host service" -msgstr "Anda harus mendaftarkan sebuah host untuk membuat layanan host" - -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "access() pada %1$s gagal: errno = %2$d\n" - -msgid "an internal error has occurred" -msgstr "terjadi kesalahan internal" - -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "terjadi kesalahan internal pada server di '%(server)s'" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" -"setidaknya diperlukan salah satu dari: type, filter, subtree, targetgroup, " -"attrs atau memberof" - -msgid "basedn" -msgstr "basedn" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "ber_init() gagal, Kontrol tidak valid ?!\n" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "ber_scanf() gagal, tidak dapat menemukan kvno ?!\n" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "boleh maksimum %(len)d karakter" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "panjang maksimum yang diperbolehkan %(maxlength)d byte" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "panjang maksimum yang diperbolehkan %(maxlength)d karakter" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "nilai maksimum yang diperbolehkan %(maxvalue)d" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "boleh maksimum %(maxvalue)s" - -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "tidak dapat membuka berkas konfigurasi %s\n" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "tidak dapat melakukan stat() berkas konfigurasi %s\n" - -msgid "change collided with another change" -msgstr "perubahan bertabrakan dengan perubahan lain" - -#, c-format -msgid "child exited with %d\n" -msgstr "anak keluar dengan %d\n" - -#, c-format -msgid "curl_easy_init() failed\n" -msgstr "curl_easy_init() gagal\n" - -#, c-format -msgid "curl_easy_setopt() failed\n" -msgstr "curl_easy_setopt() gagal\n" - -#, c-format -msgid "curl_global_init() failed\n" -msgstr "curl_global_init() gagal\n" - -#, c-format -msgid "curl_slist_append() failed for value: '%s'\n" -msgstr "curl_slist_append() gagal untuk nilai: '%s'\n" - -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "galat pada server '%(server)s': %(error)s" - -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "mengeksekusi ipa-getkeytab gagal, errno %d\n" - -msgid "filename" -msgstr "namaberkas" - -#, c-format -msgid "fork() failed\n" -msgstr "fork() gagal\n" - -msgid "hostname" -msgstr "namahost" - -msgid "incorrect type" -msgstr "tipe salah" - -#, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "'%(name)s' tidak valid: %(error)s" - -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "ipa-getkeytab memiliki izin yang buruk?\n" - -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "ipa-getkeytab tidak ditemukan\n" - -#, c-format -msgid "json_dumps() failed\n" -msgstr "json_dumps() gagal\n" - -#, c-format -msgid "json_pack_ex() failed: %s\n" -msgstr "json_pack_ex() gagal: %s\n" - -#, python-format -msgid "key %(key)s already exists" -msgstr "kunci %(key)s sudah ada" - -#, python-format -msgid "key named %(key)s already exists" -msgstr "kunci bernama %(key)s sudah ada" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "krb5_kt_close %1$d: %2$s\n" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "krb5_kt_get_entry %1$d: %2$s\n" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "krb5_kt_remove_entry %1$d: %2$s\n" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "krb5_parse_name %1$d: %2$s\n" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "krb5_unparse_name %1$d: %2$s\n" - -#, c-format -msgid "kvno %d\n" -msgstr "kvno %d\n" - -msgid "limits exceeded for this query" -msgstr "query ini telah melampaui batas" - -#, python-format -msgid "map %(map)s already exists" -msgstr "peta %(map)s sudah ada" - -msgid "maximum serial number" -msgstr "nomor seri maksimum" - -msgid "minimum serial number" -msgstr "nomor seri minimum" - -#, python-format -msgid "must be '%(value)s'" -msgstr "harus '%(value)s'" - -msgid "must be DNS name" -msgstr "harus berupa nama DNS" - -msgid "must be TRUE or FALSE" -msgstr "harus TRUE atau FALSE" - -msgid "must be True or False" -msgstr "harus True atau False" - -msgid "must be Unicode text" -msgstr "harus teks Unicode" - -msgid "must be a certificate" -msgstr "harus merupakan sebuah sertifikat" - -msgid "must be a certificate signing request" -msgstr "harus berupa sebuah permintaan penandatanganan sertifikat" - -msgid "must be a decimal number" -msgstr "harus merupakan angka desimal" - -msgid "must be absolute" -msgstr "harus absolut" - -msgid "must be an integer" -msgstr "harus merupakan bilangan bulat" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "panjang minimum yang diperbolehkan %(minlength)d byte" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "setidaknya minimum harus %(minlength)d karakter" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "setidaknya harus %(minvalue)d" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "setidaknya harus %(minvalue)s" - -msgid "must be at least 1" -msgstr "setidaknya harus 1" - -msgid "must be binary data" -msgstr "harus merupakan data biner" - -msgid "must be datetime value" -msgstr "harus berupa nilai datetime" - -msgid "must be dictionary" -msgstr "harus berupa kamus" - -msgid "must be enclosed in parentheses" -msgstr "mesti diapit kurung" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "harus tepat %(length)d byte" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "harus tepat %(length)d karakter" - -#, python-format -msgid "must be one of %(values)s" -msgstr "harus satu dari %(values)s" - -msgid "must be relative" -msgstr "harus relatif" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "harus cocok dengan pola \"%(pattern)s\"" - -msgid "no modifications to be performed" -msgstr "tidak ada modifikasi yang harus dilakukan" - -#, c-format -msgid "out of memory\n" -msgstr "kehabisan memori!\n" - -msgid "password" -msgstr "kata sandi" - -#, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "izin \"%(value)s\" sudah ada" - -msgid "pkinit" -msgstr "pkinit" - -#, c-format -msgid "principal not found\n" -msgstr "prinsipal tidak ditemukan\n" - -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "prinsipal tidak ditemukan dalam respons XML-RPC\n" - -msgid "priority cannot be set on global policy" -msgstr "prioritas tidak dapat ditetapkan pada kebijakan global" - -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "kuiri '%(owner)s %(rtype)s': %(error)s" - -#, c-format -msgid "read error\n" -msgstr "galat baca\n" - -#, c-format -msgid "realm not found\n" -msgstr "realm tidak ditemukan\n" - -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "hasil tidak ditemukan dalam respons XML-RPC\n" - -msgid "segment" -msgstr "segmen" - -msgid "sidgen_was_run" -msgstr "sidgen_was_run" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "kesalahan %(code)d tidak dikenal dari %(server)s: %(error)s" - -msgid "users" -msgstr "pengguna" - -msgid "vaultcontainer" -msgstr "vaultcontainer" - -msgid "vaultcontainers" -msgstr "vaultcontainers" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "{attr}: tidak ada atribut seperti itu" - -#, c-format -msgid "Unenrollment successful.\n" -msgstr "" - -#, fuzzy, c-format -msgid "Unenrollment failed.\n" -msgstr "Pendaftaran gagal. %s\n" - -msgid "Unenroll this host from IPA server" -msgstr "" - -#, c-format -msgid "Cannot get host's FQDN!\n" -msgstr "" +msgid "Failed to create control!\n" +msgstr "Gagal membuat kontrol!\n" #, fuzzy, c-format msgid "Failed to bind to server!\n" @@ -1226,6 +199,41 @@ msgstr "Gagal mendekode balasan kontrol!\n" msgid "Failed to get keytab!\n" msgstr "Gagal membuka keytab\n" +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "ber_init() gagal, Kontrol tidak valid ?!\n" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "ber_scanf() gagal, tidak dapat menemukan kvno ?!\n" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "Gagal mengambil tipe enkripsi #%d\n" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "Gagal mengambil tipe enkripsi %1$s (#%2$d)\n" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "Gagal mengambil kunci apapun" + +msgid "Failed to decode control reply!\n" +msgstr "Gagal mendekode balasan kontrol!\n" + +#, c-format +msgid "Passwords do not match!\n" +msgstr "Kata sandi tidak cocok!\n" + +#, c-format +msgid "Failed to open config file %s\n" +msgstr "Gagal membuka berkas konfigurasi %s\n" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "Gagal mengurai berkas konfig %s\n" + #, fuzzy msgid "Failed to resolve symlink to keytab.\n" msgstr "Gagal membuka keytab\n" @@ -1233,9 +241,21 @@ msgstr "Gagal membuka keytab\n" msgid "keytab is a dangling symlink and owned by another user.\n" msgstr "" +msgid "Print as little as possible" +msgstr "Mencetak sesedikat mungkin" + +msgid "Output only on errors" +msgstr "Keluaran hanya pada kesalahan" + +msgid "Output debug info" +msgstr "" + msgid "Contact this specific KDC Server" msgstr "" +msgid "Server Name" +msgstr "Nama Peladen" + #, fuzzy msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" msgstr "" @@ -1247,6 +267,24 @@ msgid "" "exist)." msgstr "" +msgid "Encryption types to request" +msgstr "Tipe enkripsi yang akan diminta" + +msgid "Comma separated encryption types list" +msgstr "Daftar tipe enkripsi yang dipisahkan koma" + +msgid "Show the list of permitted encryption types and exit" +msgstr "Tampilkan daftar tipe enkripsi yang diizinkan dan keluar" + +msgid "Permitted Encryption Types" +msgstr "Tipe Enkripsi yang Diizinkan" + +msgid "Asks for a non-random password to use for the principal" +msgstr "Meminta kata sandi non-acak untuk digunakan bagi prinsipal" + +msgid "LDAP DN" +msgstr "DN LDAP" + #, fuzzy msgid "DN to bind as if not using kerberos" msgstr "Kata sandi LDAP (jika tidak menggunakan Kerberos)" @@ -1320,10 +358,34 @@ msgstr "" msgid "Cannot specify server and LDAP uri simultaneously.\n" msgstr "" +#, c-format +msgid "DNS discovery for domain %s\n" +msgstr "" + +#, c-format +msgid "Discovered server %s\n" +msgstr "" + +#, c-format +msgid "Using discovered server %s\n" +msgstr "" + +#, c-format +msgid "DNS Discovery failed\n" +msgstr "" + +#, c-format +msgid "Using server from config %s\n" +msgstr "" + #, c-format msgid "Server name not provided and unavailable\n" msgstr "" +#, c-format +msgid "Using provided server %s\n" +msgstr "" + #, c-format msgid "Incompatible options provided (-r and -P)\n" msgstr "" @@ -1380,9 +442,264 @@ msgstr "Gagal membuka keytab\n" msgid "Keytab successfully retrieved and stored in: %s\n" msgstr "" +#, c-format +msgid "Out of memory!\n" +msgstr "Kehabisan memori!\n" + +#, c-format +msgid "No permission to join this host to the IPA domain.\n" +msgstr "Tidak ada izin bagi bergabungnya host ini ke domain IPA.\n" + +#, c-format +msgid "No write permissions on keytab file '%s'\n" +msgstr "Tidak ada izin tulis pada berkas keytab '%s'\n" + +#, c-format +msgid "access() on %1$s failed: errno = %2$d\n" +msgstr "access() pada %1$s gagal: errno = %2$d\n" + +#, c-format +msgid "Out of memory!" +msgstr "Kehabisan memori!" + +#, c-format +msgid "Unable to enable SSL in LDAP\n" +msgstr "Tidak bisa memfungsikan SSL dalam LDAP\n" + +#, c-format +msgid "Search for %1$s on rootdse failed with error %2$d\n" +msgstr "Mencari %1$s pada rootdse gagal dengan galat %2$d\n" + +#, c-format +msgid "No values for %s" +msgstr "Tidak ada nilai bagi %s" + +#, c-format +msgid "Search for IPA namingContext failed with error %d\n" +msgstr "Mencari namingContext IPA gagal dengan galat %d\n" + +#, c-format +msgid "IPA namingContext not found\n" +msgstr "IPA namingContext tidak ditemukan\n" + +#, c-format +msgid "Unable to determine root DN of %s\n" +msgstr "Tak bisa menentukan root DN dari %s\n" + +#, c-format +msgid "Enrollment failed. %s\n" +msgstr "Pendaftaran gagal. %s\n" + +#, c-format +msgid "principal not found in XML-RPC response\n" +msgstr "prinsipal tidak ditemukan dalam respons XML-RPC\n" + +#, c-format +msgid "Host is already joined.\n" +msgstr "Host sudah bergabung.\n" + +#, c-format +msgid "curl_slist_append() failed for value: '%s'\n" +msgstr "curl_slist_append() gagal untuk nilai: '%s'\n" + +#, c-format +msgid "curl_easy_setopt() failed\n" +msgstr "curl_easy_setopt() gagal\n" + +#, c-format +msgid "Expanding buffer in jsonrpc_handle_response failed" +msgstr "Memperluas penyangga dalam jsonrpc_handle_response gagal" + +#, c-format +msgid "curl_global_init() failed\n" +msgstr "curl_global_init() gagal\n" + +#, c-format +msgid "curl_easy_init() failed\n" +msgstr "curl_easy_init() gagal\n" + +#, c-format +msgid "json_dumps() failed\n" +msgstr "json_dumps() gagal\n" + +#, c-format +msgid "" +"JSON-RPC request:\n" +"%s\n" +msgstr "" +"Permintaan JSON-RPC:\n" +"%s\n" + +#, c-format +msgid "JSON-RPC call failed: %s\n" +msgstr "Panggilan JSON-RPC gagal: %s\n" + +#, c-format +msgid "JSON-RPC call failed with status code: %li\n" +msgstr "Panggilan JSON-RPC gagal dengan kode status: %li\n" + +#, c-format +msgid "JSON-RPC call was unauthorized. Check your credentials.\n" +msgstr "Panggilan JSON-RPC tanpa otorisasi. Periksa kredensial Anda.\n" + +#, c-format +msgid "" +"JSON-RPC response:\n" +"%s\n" +msgstr "" +"Respon JSON-RPC:\n" +"%s\n" + +#, c-format +msgid "Extracting the error from the JSON-RPC response failed: %s\n" +msgstr "Gagal mengekstrak kesalahan dari respons JSON-RPC: %s\n" + +#, c-format +msgid "Parsing JSON-RPC response failed: %s\n" +msgstr "Penguraian respons JSON-RPC gagal: %s\n" + +#, c-format +msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" +msgstr "" +"Penguraian respons JSON-RPC gagal: tidak ada nilai 'hasil' yang ditemukan.\n" + +#, c-format +msgid "Extracting the data from the JSON-RPC response failed: %s\n" +msgstr "Gagal mengekstrak data dari respons JSON-RPC: %s\n" + +#, c-format +msgid "json_pack_ex() failed: %s\n" +msgstr "json_pack_ex() gagal: %s\n" + +#, c-format +msgid "Unenrollment successful.\n" +msgstr "" + #, fuzzy, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "Gagal mendapatkan hasil: %s\n" +msgid "Unenrollment failed.\n" +msgstr "Pendaftaran gagal. %s\n" + +#, c-format +msgid "result not found in XML-RPC response\n" +msgstr "hasil tidak ditemukan dalam respons XML-RPC\n" + +#, c-format +msgid "Unable to determine IPA server from %s\n" +msgstr "Tak bisa menentukan peladen IPA dari %s\n" + +#, c-format +msgid "Unable to join host: Kerberos context initialization failed\n" +msgstr "" +"Tidak dapat bergabung dengan host: Inisialisasi konteks Kerberos gagal\n" + +#, c-format +msgid "Unable to join host: Kerberos Credential Cache not found\n" +msgstr "" +"Tidak dapat bergabung dengan host: Kerberos Credential Cache tidak " +"ditemukan\n" + +#, c-format +msgid "" +"Unable to join host: Kerberos User Principal not found and host password not " +"provided.\n" +msgstr "" +"Tidak dapat bergabung dengan host: Kerberos User Principal tidak ditemukan " +"dan kata sandi host tidak disediakan.\n" + +#, c-format +msgid "fork() failed\n" +msgstr "fork() gagal\n" + +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "ipa-getkeytab tidak ditemukan\n" + +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "ipa-getkeytab memiliki izin yang buruk?\n" + +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "mengeksekusi ipa-getkeytab gagal, errno %d\n" + +#, c-format +msgid "child exited with %d\n" +msgstr "anak keluar dengan %d\n" + +#, c-format +msgid "Error resolving keytab: %s.\n" +msgstr "Galat saat me-resolve keytab: %s.\n" + +#, c-format +msgid "Error getting default Kerberos realm: %s.\n" +msgstr "Galat saat mendapatkan ranah Kerberos default: %s.\n" + +#, c-format +msgid "Error parsing \"%1$s\": %2$s.\n" +msgstr "Galat saat mengurai \"%1$s\": %2$s.\n" + +#, c-format +msgid "Error obtaining initial credentials: %s.\n" +msgstr "Galat saat memperoleh kredensial awal: %s.\n" + +#, c-format +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "Tidak dapat menghasilkan Kerberos Credential Cache\n" + +#, c-format +msgid "Error storing creds in credential cache: %s.\n" +msgstr "Galat saat menyimpan kredensial dalam singgahan kredensial: %s.\n" + +msgid "Print the raw XML-RPC output in GSSAPI mode" +msgstr "Mencetak keluaran XML-RPC mentah dalam mode GSSAPI" + +msgid "Quiet mode. Only errors are displayed." +msgstr "Mode senyap. Hanya galat yang ditampilkan." + +msgid "Unenroll this host from IPA server" +msgstr "" + +msgid "Hostname of this server" +msgstr "Nama host peladen ini" + +msgid "hostname" +msgstr "namahost" + +msgid "IPA Server to use" +msgstr "Server IPA yang akan digunakan" + +msgid "Specifies where to store keytab information." +msgstr "Menentukan tempat menyimpan informasi keytab." + +msgid "filename" +msgstr "namaberkas" + +msgid "Force the host join. Rejoin even if already joined." +msgstr "Paksa host bergabung. Bergabung kembali bahkan jika sudah bergabung." + +msgid "LDAP password (if not using Kerberos)" +msgstr "Kata sandi LDAP (jika tidak menggunakan Kerberos)" + +msgid "password" +msgstr "kata sandi" + +msgid "LDAP basedn" +msgstr "basedn LDAP" + +msgid "basedn" +msgstr "basedn" + +#, c-format +msgid "Cannot get host's FQDN!\n" +msgstr "" + +#, c-format +msgid "The hostname must be fully-qualified: %s\n" +msgstr "Nama host harus fully-qualified: %s\n" + +#, c-format +msgid "The hostname must not be: %s\n" +msgstr "Nama host tidak boleh: %s\n" msgid "Failed members" msgstr "" @@ -1399,6 +716,9 @@ msgstr "%i hosts atau hostgroups ditambahkan." msgid "Failed users/groups" msgstr "Grup layanan/layanan gagal" +msgid "Failed service/service groups" +msgstr "Grup layanan/layanan gagal" + #, fuzzy msgid "Failed to remove" msgstr "Tak bisa menghapus entri\n" @@ -1447,6 +767,9 @@ msgstr "" msgid "Import automount files for a specific location." msgstr "" +msgid "Master file" +msgstr "Berkas induk" + #, fuzzy msgid "Automount master file." msgstr "Berkas induk" @@ -1459,9 +782,21 @@ msgstr "" msgid "File %(file)s not found" msgstr "Aturan HBAC %(rule)s tidak ditemukan" +#, python-format +msgid "key %(key)s already exists" +msgstr "kunci %(key)s sudah ada" + +#, python-format +msgid "map %(map)s already exists" +msgstr "peta %(map)s sudah ada" + msgid "Imported maps:" msgstr "" +#, python-format +msgid "Added %(map)s" +msgstr "Ditambahkan %(map)s" + msgid "Imported keys:" msgstr "" @@ -1490,17 +825,97 @@ msgstr "" msgid "Skipped %(key)s" msgstr "" +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +msgid "Unrevoked" +msgstr "" + +msgid "Error" +msgstr "" + +#, fuzzy +msgid "Input filename" +msgstr "namaberkas" + +msgid "File to load the certificate from." +msgstr "" + +msgid "cannot specify both raw certificate and file" +msgstr "" + msgid "Input file" msgstr "" msgid "File to load the certificate from" msgstr "" -msgid "cannot specify both raw certificate and file" +#, python-format +msgid "Profile configuration stored in file '%(file)s'" +msgstr "" + +msgid "Split DNS record to parts" +msgstr "" + +msgid "Please choose a type of DNS resource record to be added" msgstr "" #, python-format -msgid "Profile configuration stored in file '%(file)s'" +msgid "The most common types for this type of zone are: %s\n" +msgstr "" + +msgid "DNS resource record type" +msgstr "" + +#, python-format +msgid "Invalid or unsupported type. Allowed values are: %s" +msgstr "" + +msgid "No option to modify specific record provided." +msgstr "" + +msgid "Current DNS record contents:\n" +msgstr "" + +#, python-format +msgid "Modify %(name)s '%(value)s'?" +msgstr "Ubah '%(value)s' %(name)s?" + +#, python-format +msgid "" +"%(count)d %(type)s record skipped. Only one value per DNS record type can be " +"modified at one time." +msgid_plural "" +"%(count)d %(type)s records skipped. Only one value per DNS record type can " +"be modified at one time." +msgstr[0] "" + +msgid "" +"Neither --del-all nor options to delete a specific record provided.\n" +"Command help may be consulted for all supported record types." +msgstr "" + +msgid "No option to delete specific record provided." +msgstr "" + +msgid "Delete all?" +msgstr "Hapus semua?" + +#, python-format +msgid "Delete %(name)s '%(value)s'?" +msgstr "Hapus '%(value)s' %(name)s?" + +msgid "Server will check DNS forwarder(s)." +msgstr "" + +msgid "This may take some time, please wait ..." +msgstr "" + +#, fuzzy +msgid "DNS forwarder" +msgstr "Forwarder" + +msgid "file to store DNS records in nsupdate format" msgstr "" #, python-format @@ -1523,6 +938,35 @@ msgid "" "can use their Kerberos accounts." msgstr "" +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "" + +msgid "User ID" +msgstr "" + +#, fuzzy +msgid "Password" +msgstr "kata sandi" + +msgid "First Code" +msgstr "" + +msgid "Second Code" +msgstr "" + +msgid "Token ID" +msgstr "" + msgid "python-yubico is not installed." msgstr "" @@ -1566,22 +1010,6 @@ msgstr "" msgid "Removing %(servers)s from replication topology, please wait..." msgstr "" -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "CA \"%(value)s\" dinonaktifkan" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - #, python-format msgid "Replication topology of suffix \"%(suffix)s\" is in order." msgstr "" @@ -1617,59 +1045,6 @@ msgstr "Menghapus suatu hostgroup." msgid "preserve and no-preserve cannot be both set" msgstr "" -msgid "Split DNS record to parts" -msgstr "" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "" - -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "" - -msgid "DNS resource record type" -msgstr "" - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "" - -msgid "No option to modify specific record provided." -msgstr "" - -msgid "Current DNS record contents:\n" -msgstr "" - -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" - -msgid "No option to delete specific record provided." -msgstr "" - -msgid "Server will check DNS forwarder(s)." -msgstr "" - -msgid "This may take some time, please wait ..." -msgstr "" - -#, fuzzy -msgid "DNS forwarder" -msgstr "Forwarder" - -msgid "file to store DNS records in nsupdate format" -msgstr "" - #, fuzzy, python-format msgid "Cannot read file '%(filename)s': %(exc)s" msgstr "'%(name)s' tidak valid: %(error)s" @@ -1796,49 +1171,20 @@ msgstr "" msgid "Missing vault private key" msgstr "" -msgid "Write certificate (chain if --chain used) to file" +#, python-format +msgid "Enabled Sudo Rule \"%s\"" msgstr "" -msgid "Unrevoked" +#, fuzzy, python-format +msgid "Disabled Sudo Rule \"%s\"" +msgstr "CA \"%(value)s\" dinonaktifkan" + +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" msgstr "" -msgid "Error" -msgstr "" - -#, fuzzy -msgid "Input filename" -msgstr "namaberkas" - -msgid "File to load the certificate from." -msgstr "" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -msgid "User ID" -msgstr "" - -#, fuzzy -msgid "Password" -msgstr "kata sandi" - -msgid "First Code" -msgstr "" - -msgid "Second Code" -msgstr "" - -msgid "Token ID" +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" msgstr "" msgid "" @@ -2116,6 +1462,249 @@ msgstr "" msgid "Location of the ACI" msgstr "" +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +#, fuzzy +msgid "Description" +msgstr "Opsi Layanan" + +#, fuzzy +msgid "A description of this auto member rule" +msgstr "Suatu penjelasan atas perintah ini" + +msgid "Default (fallback) Group" +msgstr "" + +msgid "Default group for entries to land" +msgstr "" + +msgid "Add an automember rule." +msgstr "" + +#, fuzzy +msgid "Automember Rule" +msgstr "Aturan anggota otomatis: %s tidak ditemukan!" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +msgid "Grouping Type" +msgstr "" + +msgid "Grouping to which the rule applies" +msgstr "" + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +msgid "Exclusive Regex" +msgstr "" + +msgid "Attribute Key" +msgstr "" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +#, fuzzy +msgid "Number of conditions added" +msgstr "Cacah pengaya yang dimuat" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +msgid "Display information about the default (fallback) automember groups." +msgstr "" + +msgid "Delete an automember rule." +msgstr "" + +msgid "List of deletions that failed" +msgstr "" + +msgid "Search for automember rules." +msgstr "" + +msgid "Modify an automember rule." +msgstr "" + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +msgid "Rights" +msgstr "" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +#, fuzzy +msgid "Users" +msgstr "pengguna" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Hosts" +msgstr "" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +msgid "Conditions that could not be removed" +msgstr "" + +#, fuzzy +msgid "Number of conditions removed" +msgstr "Cacah pengaya yang dimuat" + +msgid "Display information about an automember rule." +msgstr "" + msgid "" "\n" "Automount\n" @@ -2249,23 +1838,9 @@ msgstr "" msgid "Automount map name." msgstr "" -#, fuzzy -msgid "Description" -msgstr "Opsi Layanan" - msgid "Create a new automount key." msgstr "" -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - #, fuzzy msgid "Delete an automount key." msgstr "Menghapus suatu hostgroup." @@ -2273,9 +1848,6 @@ msgstr "Menghapus suatu hostgroup." msgid "Continuous mode: Don't stop on errors." msgstr "" -msgid "List of deletions that failed" -msgstr "" - msgid "Search for an automount key." msgstr "" @@ -2295,19 +1867,6 @@ msgstr "" msgid "Modify an automount key." msgstr "Memodifikasi suatu hostgroup." -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "Rights" -msgstr "" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - #, fuzzy msgid "New mount information" msgstr "Cetak informasi awakutu" @@ -2406,6 +1965,188 @@ msgstr "" msgid "Nested Methods to execute" msgstr "" +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +msgid "Search for existing certificates." +msgstr "" + +msgid "Match cn attribute in subject" +msgstr "" + +msgid "Reason" +msgstr "Alasan" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "" + +msgid "minimum serial number" +msgstr "nomor seri minimum" + +msgid "maximum serial number" +msgstr "nomor seri maksimum" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Maximum number of certs returned" +msgstr "" + +msgid "Take a revoked certificate off hold." +msgstr "" + +#, fuzzy +msgid "Serial number" +msgstr "Nomor seri maksimum" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +msgid "Submit a certificate signing request." +msgstr "Mengirim sebuah permintan penandatanganan sertifikat." + +msgid "CSR" +msgstr "CSR" + +msgid "Principal" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +msgid "Dictionary mapping variable name to value" +msgstr "" + +#, fuzzy +msgid "Revoke a certificate." +msgstr "harus merupakan sebuah sertifikat" + +msgid "Retrieve an existing certificate." +msgstr "" + +#, fuzzy +msgid "Output filename" +msgstr "namaberkas" + +msgid "File to store the certificate in." +msgstr "" + +#, fuzzy +msgid "Check the status of a certificate signing request." +msgstr "harus berupa sebuah permintaan penandatanganan sertifikat" + +msgid "Request id" +msgstr "" + msgid "" "\n" "Server configuration\n" @@ -2954,6 +2695,9 @@ msgstr "" msgid "Records" msgstr "Tipe record" +msgid "Record type" +msgstr "Tipe record" + #, fuzzy msgid "Record data" msgstr "Tipe record" @@ -3094,6 +2838,9 @@ msgstr "Digest DLV" msgid "Digest Type" msgstr "Digest DS" +msgid "DLV Digest" +msgstr "Digest DLV" + #, fuzzy msgid "Digest" msgstr "Digest DS" @@ -3105,6 +2852,12 @@ msgstr "Target DNAME" msgid "Raw DNAME records" msgstr "" +msgid "DNAME Target" +msgstr "Target DNAME" + +msgid "Target" +msgstr "Target" + msgid "DNSKEY record" msgstr "" @@ -3127,6 +2880,9 @@ msgstr "" msgid "DS Digest Type" msgstr "Digest DS" +msgid "DS Digest" +msgstr "Digest DS" + msgid "HIP record" msgstr "" @@ -3386,6 +3142,9 @@ msgstr "Target SRV" msgid "Port" msgstr "" +msgid "SRV Target" +msgstr "Target SRV" + msgid "" "The domain name of the target host or '.' if the service is decidedly not " "available at this domain" @@ -3525,6 +3284,9 @@ msgstr "" msgid "Allow dynamic updates." msgstr "" +msgid "Allow query" +msgstr "Izinkan kuiri" + msgid "" "Semicolon separated list of IP addresses or networks which are allowed to " "issue queries" @@ -3676,6 +3438,315 @@ msgstr "" msgid "Display information about a DNS zone (SOA record)." msgstr "" +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "Group name" +msgstr "" + +msgid "Group description" +msgstr "" + +msgid "GID" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "" + +msgid "Member users" +msgstr "" + +#, fuzzy +msgid "Member groups" +msgstr "Menghapus grup." + +msgid "Member of groups" +msgstr "" + +msgid "Roles" +msgstr "" + +msgid "Member of netgroups" +msgstr "" + +msgid "Member of Sudo rule" +msgstr "" + +msgid "Member of HBAC rule" +msgstr "" + +msgid "Indirect Member users" +msgstr "" + +msgid "Indirect Member groups" +msgstr "" + +msgid "Indirect Member of group" +msgstr "" + +msgid "Indirect Member of netgroup" +msgstr "" + +msgid "Indirect Member of role" +msgstr "" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +#, fuzzy +msgid "Create a new group." +msgstr "Menghapus suatu hostgroup." + +msgid "Create as a non-POSIX group" +msgstr "" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +#, fuzzy +msgid "Add members to a group." +msgstr "Tambah grup host" + +msgid "External member" +msgstr "" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +msgid "member user" +msgstr "" + +msgid "users to add" +msgstr "" + +#, fuzzy +msgid "member group" +msgstr "Menghapus grup." + +msgid "groups to add" +msgstr "" + +msgid "Members that could not be added" +msgstr "" + +#, fuzzy +msgid "Number of members added" +msgstr "Cacah pengaya yang dimuat" + +msgid "Delete group." +msgstr "Menghapus grup." + +msgid "Detach a managed group from a user." +msgstr "" + +msgid "Search for groups." +msgstr "" + +msgid "search for private groups" +msgstr "" + +msgid "search for POSIX groups" +msgstr "" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +msgid "search for non-POSIX groups" +msgstr "" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +#, fuzzy +msgid "user" +msgstr "pengguna" + +msgid "Search for groups with these member users." +msgstr "" + +msgid "Search for groups without these member users." +msgstr "" + +msgid "group" +msgstr "" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +#, fuzzy +msgid "netgroup" +msgstr "Menghapus grup." + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +msgid "HBAC rule" +msgstr "" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +#, fuzzy +msgid "Modify a group." +msgstr "Memodifikasi suatu hostgroup." + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +msgid "Remove members from a group." +msgstr "" + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "" + +#, fuzzy +msgid "Number of members removed" +msgstr "Cacah pengaya yang dimuat" + +msgid "Display information about a named group." +msgstr "" + msgid "" "\n" "Host-based access control\n" @@ -3759,16 +3830,9 @@ msgstr "" msgid "Enabled" msgstr "" -#, fuzzy -msgid "Users" -msgstr "pengguna" - msgid "User Groups" msgstr "" -msgid "Hosts" -msgstr "" - #, fuzzy msgid "Host Groups" msgstr "Tambah grup host" @@ -3787,9 +3851,6 @@ msgstr "" msgid "Create a new HBAC rule." msgstr "" -msgid "Suppress processing of membership attributes." -msgstr "" - msgid "Add target hosts and hostgroups to an HBAC rule." msgstr "" @@ -3807,13 +3868,6 @@ msgstr "Tambah grup host" msgid "host groups to add" msgstr "%i hosts atau hostgroups ditambahkan." -msgid "Members that could not be added" -msgstr "" - -#, fuzzy -msgid "Number of members added" -msgstr "Cacah pengaya yang dimuat" - msgid "Add services to an HBAC rule." msgstr "" @@ -3832,19 +3886,6 @@ msgstr "" msgid "Add users and groups to an HBAC rule." msgstr "" -msgid "member user" -msgstr "" - -msgid "users to add" -msgstr "" - -#, fuzzy -msgid "member group" -msgstr "Menghapus grup." - -msgid "groups to add" -msgstr "" - #, fuzzy msgid "Delete an HBAC rule." msgstr "Menghapus suatu hostgroup." @@ -3873,13 +3914,6 @@ msgstr "%i host atau hostgroup dibuang." msgid "host groups to remove" msgstr "%i host atau hostgroup dibuang." -msgid "Members that could not be removed" -msgstr "" - -#, fuzzy -msgid "Number of members removed" -msgstr "Cacah pengaya yang dimuat" - msgid "Remove service and service groups from an HBAC rule." msgstr "" @@ -3892,12 +3926,6 @@ msgstr "" msgid "Remove users and groups from an HBAC rule." msgstr "" -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - msgid "Display the properties of an HBAC rule." msgstr "" @@ -4011,6 +4039,244 @@ msgstr "" msgid "Display information about an HBAC service group." msgstr "" +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +#, fuzzy +msgid "User name" +msgstr "Nama realm" + +#, fuzzy +msgid "Target host" +msgstr "Target" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +msgid "Warning" +msgstr "" + +msgid "Matched rules" +msgstr "" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + msgid "" "\n" "Hosts/Machines\n" @@ -4167,33 +4433,9 @@ msgstr "" msgid "Member of host-groups" msgstr "Menghapus suatu hostgroup." -msgid "Roles" -msgstr "" - -msgid "Member of netgroups" -msgstr "" - -msgid "Member of Sudo rule" -msgstr "" - -msgid "Member of HBAC rule" -msgstr "" - -msgid "Indirect Member of netgroup" -msgstr "" - msgid "Indirect Member of host-group" msgstr "" -msgid "Indirect Member of role" -msgstr "" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - msgid "Keytab" msgstr "" @@ -4292,47 +4534,30 @@ msgstr "" msgid "Search for hosts without these member of host groups." msgstr "" -#, fuzzy -msgid "netgroup" -msgstr "Menghapus grup." - msgid "Search for hosts with these member of netgroups." msgstr "" msgid "Search for hosts without these member of netgroups." msgstr "" -msgid "role" -msgstr "" - msgid "Search for hosts with these member of roles." msgstr "" msgid "Search for hosts without these member of roles." msgstr "" -msgid "HBAC rule" -msgstr "" - msgid "Search for hosts with these member of HBAC rules." msgstr "" msgid "Search for hosts without these member of HBAC rules." msgstr "" -msgid "sudo rule" -msgstr "" - msgid "Search for hosts with these member of sudo rules." msgstr "" msgid "Search for hosts without these member of sudo rules." msgstr "" -#, fuzzy -msgid "user" -msgstr "pengguna" - msgid "Search for hosts with these enrolled by users." msgstr "" @@ -4439,6 +4664,9 @@ msgstr "Tambah grup host" msgid "Add members to a hostgroup." msgstr "Menghapus suatu hostgroup." +msgid "Delete a hostgroup." +msgstr "Menghapus suatu hostgroup." + #, fuzzy msgid "Search for hostgroups." msgstr "Menghapus suatu hostgroup." @@ -4482,6 +4710,9 @@ msgstr "" msgid "Search for host groups without these member of sudo rules." msgstr "" +msgid "Modify a hostgroup." +msgstr "Memodifikasi suatu hostgroup." + #, fuzzy msgid "Remove members from a hostgroup." msgstr "Menghapus suatu hostgroup." @@ -4489,6 +4720,234 @@ msgstr "Menghapus suatu hostgroup." msgid "Display information about a hostgroup." msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +#, fuzzy +msgid "Range name" +msgstr "Nama realm" + +msgid "First Posix ID of the range" +msgstr "" + +#, fuzzy +msgid "Number of IDs in the range" +msgstr "Cacah pengaya yang dimuat" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +#, fuzzy +msgid "Range type" +msgstr "Tipe record" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "Delete an ID range." +msgstr "" + +msgid "Search for ranges." +msgstr "" + +msgid "Modify ID range." +msgstr "" + +msgid "Display information about a range." +msgstr "" + msgid "" "\n" "ID Views\n" @@ -4505,12 +4964,6 @@ msgstr "" msgid "Anchor to override" msgstr "" -msgid "Group name" -msgstr "" - -msgid "GID" -msgstr "" - msgid "Group ID Number" msgstr "" @@ -4739,10 +5192,6 @@ msgid "" " ipa krbtpolicy-mod admin --maxlife=3600\n" msgstr "" -#, fuzzy -msgid "User name" -msgstr "Nama realm" - msgid "Manage ticket policy for specific user" msgstr "" @@ -4864,6 +5313,9 @@ msgstr "" msgid "Migrate users and groups from DS to IPA." msgstr "" +msgid "LDAP URI" +msgstr "URI LDAP" + msgid "LDAP URI of DS server to migrate from" msgstr "" @@ -5001,9 +5453,6 @@ msgid "" "retrieve and print all attributes from the server. Affects command output." msgstr "" -msgid "Dictionary mapping variable name to value" -msgstr "" - msgid "Total number of variables env (>= count)" msgstr "" @@ -5016,6 +5465,9 @@ msgstr "" msgid "Dictionary mapping plugin names to bases" msgstr "" +msgid "Number of plugins loaded" +msgstr "Cacah pengaya yang dimuat" + msgid "" "\n" "Netgroups\n" @@ -5109,9 +5561,6 @@ msgstr "" msgid "Search for netgroups without these member users." msgstr "" -msgid "group" -msgstr "" - msgid "Search for netgroups with these member groups." msgstr "" @@ -5206,6 +5655,151 @@ msgstr "" msgid "Show the current OTP configuration." msgstr "" +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Manager" +msgstr "" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +msgid "Disabled" +msgstr "" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +msgid "Validity start" +msgstr "" + +msgid "First date/time the token can be used" +msgstr "" + +msgid "Validity end" +msgstr "" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "" + +msgid "Token model (informational only)" +msgstr "" + +msgid "Serial" +msgstr "Serial" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +msgid "Add a new OTP token." +msgstr "" + +#, fuzzy +msgid "(deprecated)" +msgstr "Usang; gunakan %s" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +#, fuzzy +msgid "Delete an OTP token." +msgstr "Menghapus token OTP \"%(value)s\"" + +msgid "Search for OTP token." +msgstr "" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +#, fuzzy +msgid "Modify a OTP token." +msgstr "Memodifikasi suatu hostgroup." + +msgid "Rename the OTP token object" +msgstr "" + +msgid "Display information about an OTP token." +msgstr "" + msgid "" "\n" "YubiKey Tokens\n" @@ -5363,6 +5957,9 @@ msgstr "" msgid "Attributes to which the permission applies by default" msgstr "" +msgid "Bind rule type" +msgstr "Tipe aturan bind" + msgid "Subtree to apply permissions to" msgstr "" @@ -5375,6 +5972,9 @@ msgstr "" msgid "All target filters, including those implied by type and memberof" msgstr "" +msgid "Target DN" +msgstr "DN Target" + msgid "" "Optional DN to apply the permission to (must be in the subtree, but may not " "yet exist)" @@ -5836,6 +6436,9 @@ msgid "" " ipa realmdomains-mod --del-domain=olddomain.com\n" msgstr "" +msgid "Domain" +msgstr "Domain" + #, fuzzy msgid "Add domain" msgstr "Domain" @@ -5900,13 +6503,6 @@ msgstr "Nama realm" msgid "A description of this role-group" msgstr "Suatu penjelasan atas perintah ini" -msgid "Member users" -msgstr "" - -#, fuzzy -msgid "Member groups" -msgstr "Menghapus grup." - msgid "Privileges" msgstr "" @@ -6179,9 +6775,6 @@ msgid "" "httpd.keytab\n" msgstr "" -msgid "Principal" -msgstr "" - #, fuzzy msgid "Service principal" msgstr "Opsi Layanan" @@ -6865,6 +7458,9 @@ msgstr "" msgid "Sudo Command" msgstr "" +msgid "A description of this command" +msgstr "Suatu penjelasan atas perintah ini" + msgid "Sudo Command Groups" msgstr "" @@ -6914,9 +7510,6 @@ msgstr "" msgid "Sudo Command Group" msgstr "" -msgid "Group description" -msgstr "" - #, fuzzy msgid "Commands" msgstr "Nama perintah" @@ -6960,1686 +7553,6 @@ msgstr "" msgid "Display Sudo Command Group." msgstr "" -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -#, fuzzy -msgid "First name" -msgstr "namahost" - -#, fuzzy -msgid "Last name" -msgstr "namahost" - -#, fuzzy -msgid "Full name" -msgstr "Nama realm" - -#, fuzzy -msgid "Display name" -msgstr "namaberkas" - -msgid "Initials" -msgstr "" - -#, fuzzy -msgid "Kerberos principal" -msgstr "Nama Prisipal Layanan Kerberos" - -#, fuzzy -msgid "Kerberos principal expiration" -msgstr "Nama Prisipal Layanan Kerberos" - -#, fuzzy -msgid "Email address" -msgstr "Alamat Surat" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -msgid "Street address" -msgstr "" - -msgid "City" -msgstr "" - -msgid "State/Province" -msgstr "" - -msgid "ZIP" -msgstr "" - -msgid "Telephone Number" -msgstr "" - -msgid "Mobile Telephone Number" -msgstr "" - -msgid "Pager Number" -msgstr "" - -msgid "Fax Number" -msgstr "" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "" - -msgid "Manager" -msgstr "" - -msgid "Car License" -msgstr "" - -msgid "User authentication types" -msgstr "" - -msgid "Types of supported user authentication" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "RADIUS proxy configuration" -msgstr "" - -msgid "RADIUS proxy username" -msgstr "" - -msgid "Department Number" -msgstr "" - -msgid "Employee Number" -msgstr "" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -msgid "Member of groups" -msgstr "" - -msgid "Indirect Member of group" -msgstr "" - -msgid "Kerberos keys available" -msgstr "" - -msgid "Add a new user." -msgstr "" - -msgid "Don't create user private group" -msgstr "" - -#, fuzzy -msgid "Delete a user." -msgstr "Menghapus suatu hostgroup." - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -msgid "Search for users." -msgstr "" - -msgid "Self" -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -#, fuzzy -msgid "Modify a user." -msgstr "Memodifikasi suatu hostgroup." - -msgid "Rename the user object" -msgstr "" - -msgid "Display information about a user." -msgstr "" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -#, fuzzy -msgid "A description of this auto member rule" -msgstr "Suatu penjelasan atas perintah ini" - -msgid "Default (fallback) Group" -msgstr "" - -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -#, fuzzy -msgid "Automember Rule" -msgstr "Aturan anggota otomatis: %s tidak ditemukan!" - -msgid "Grouping Type" -msgstr "" - -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -msgid "Attribute Key" -msgstr "" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -#, fuzzy -msgid "Number of conditions added" -msgstr "Cacah pengaya yang dimuat" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -msgid "Delete an automember rule." -msgstr "" - -msgid "Search for automember rules." -msgstr "" - -msgid "Modify an automember rule." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -#, fuzzy -msgid "Number of conditions removed" -msgstr "Cacah pengaya yang dimuat" - -msgid "Display information about an automember rule." -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -msgid "Search for existing certificates." -msgstr "" - -msgid "Match cn attribute in subject" -msgstr "" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -#, fuzzy -msgid "Serial number" -msgstr "Nomor seri maksimum" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -#, fuzzy -msgid "Revoke a certificate." -msgstr "harus merupakan sebuah sertifikat" - -msgid "Retrieve an existing certificate." -msgstr "" - -#, fuzzy -msgid "Output filename" -msgstr "namaberkas" - -msgid "File to store the certificate in." -msgstr "" - -#, fuzzy -msgid "Check the status of a certificate signing request." -msgstr "harus berupa sebuah permintaan penandatanganan sertifikat" - -msgid "Request id" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "GID (use this option to set it manually)" -msgstr "" - -msgid "Indirect Member users" -msgstr "" - -msgid "Indirect Member groups" -msgstr "" - -#, fuzzy -msgid "Create a new group." -msgstr "Menghapus suatu hostgroup." - -msgid "Create as a non-POSIX group" -msgstr "" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -#, fuzzy -msgid "Add members to a group." -msgstr "Tambah grup host" - -msgid "External member" -msgstr "" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -msgid "Detach a managed group from a user." -msgstr "" - -msgid "Search for groups." -msgstr "" - -msgid "search for private groups" -msgstr "" - -msgid "search for POSIX groups" -msgstr "" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -msgid "search for non-POSIX groups" -msgstr "" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -#, fuzzy -msgid "Modify a group." -msgstr "Memodifikasi suatu hostgroup." - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -msgid "Remove members from a group." -msgstr "" - -msgid "Display information about a named group." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -#, fuzzy -msgid "Target host" -msgstr "Target" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Warning" -msgstr "" - -msgid "Matched rules" -msgstr "" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -msgid "NetBIOS name" -msgstr "" - -msgid "Fallback primary group" -msgstr "" - -#, fuzzy -msgid "Domain name" -msgstr "Nama perintah" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -#, fuzzy -msgid "Active Directory domain administrator" -msgstr "Domain Active Directory" - -#, fuzzy -msgid "Active Directory domain administrator's password" -msgstr "Domain Active Directory" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -#, fuzzy -msgid "Range type" -msgstr "Tipe record" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -#, fuzzy -msgid "Delete a trust." -msgstr "Menghapus suatu hostgroup." - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -msgid "Search for trusts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -msgid "Display information about a trust." -msgstr "" - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -#, fuzzy -msgid "Range name" -msgstr "Nama realm" - -msgid "First Posix ID of the range" -msgstr "" - -#, fuzzy -msgid "Number of IDs in the range" -msgstr "Cacah pengaya yang dimuat" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "Delete an ID range." -msgstr "" - -msgid "Search for ranges." -msgstr "" - -msgid "Modify ID range." -msgstr "" - -msgid "Display information about a range." -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -msgid "Disabled" -msgstr "" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -msgid "Validity start" -msgstr "" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Validity end" -msgstr "" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -msgid "Add a new OTP token." -msgstr "" - -#, fuzzy -msgid "(deprecated)" -msgstr "Usang; gunakan %s" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -#, fuzzy -msgid "Delete an OTP token." -msgstr "Menghapus token OTP \"%(value)s\"" - -msgid "Search for OTP token." -msgstr "" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -#, fuzzy -msgid "Modify a OTP token." -msgstr "Memodifikasi suatu hostgroup." - -msgid "Rename the OTP token object" -msgstr "" - -msgid "Display information about an OTP token." -msgstr "" - msgid "" "\n" "Sudo Rules\n" @@ -8856,6 +7769,511 @@ msgstr "" msgid "Display Sudo Rule." msgstr "" +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +msgid "NetBIOS name" +msgstr "" + +msgid "Domain GUID" +msgstr "GUID Domain" + +msgid "Fallback primary group" +msgstr "" + +#, fuzzy +msgid "Domain name" +msgstr "Nama perintah" + +msgid "Trusted domain partner" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +#, fuzzy +msgid "Active Directory domain administrator" +msgstr "Domain Active Directory" + +#, fuzzy +msgid "Active Directory domain administrator's password" +msgstr "Domain Active Directory" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +#, fuzzy +msgid "Delete a trust." +msgstr "Menghapus suatu hostgroup." + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +msgid "Search for trusts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +msgid "Display information about a trust." +msgstr "" + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +#, fuzzy +msgid "First name" +msgstr "namahost" + +#, fuzzy +msgid "Last name" +msgstr "namahost" + +#, fuzzy +msgid "Full name" +msgstr "Nama realm" + +#, fuzzy +msgid "Display name" +msgstr "namaberkas" + +msgid "Initials" +msgstr "" + +#, fuzzy +msgid "Kerberos principal" +msgstr "Nama Prisipal Layanan Kerberos" + +#, fuzzy +msgid "Kerberos principal expiration" +msgstr "Nama Prisipal Layanan Kerberos" + +#, fuzzy +msgid "Email address" +msgstr "Alamat Surat" + +msgid "Prompt to set the user password" +msgstr "" + +msgid "Generate a random user password" +msgstr "" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" + +msgid "Street address" +msgstr "" + +msgid "City" +msgstr "" + +msgid "State/Province" +msgstr "" + +msgid "ZIP" +msgstr "" + +msgid "Telephone Number" +msgstr "" + +msgid "Mobile Telephone Number" +msgstr "" + +msgid "Pager Number" +msgstr "" + +msgid "Fax Number" +msgstr "" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "" + +msgid "Car License" +msgstr "" + +msgid "Account disabled" +msgstr "Akun dinonaktifkan" + +msgid "User authentication types" +msgstr "" + +msgid "Types of supported user authentication" +msgstr "" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "RADIUS proxy configuration" +msgstr "" + +msgid "RADIUS proxy username" +msgstr "" + +msgid "Department Number" +msgstr "" + +msgid "Employee Number" +msgstr "" + +msgid "Employee Type" +msgstr "" + +msgid "Preferred Language" +msgstr "" + +msgid "Kerberos keys available" +msgstr "" + +msgid "Add a new user." +msgstr "" + +msgid "Don't create user private group" +msgstr "" + +#, fuzzy +msgid "Delete a user." +msgstr "Menghapus suatu hostgroup." + +msgid "Disable a user account." +msgstr "" + +msgid "Enable a user account." +msgstr "" + +msgid "Search for users." +msgstr "" + +msgid "Self" +msgstr "" + +msgid "Display user record for current Kerberos principal" +msgstr "" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +msgid "Search for users with these member of HBAC rules." +msgstr "" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +#, fuzzy +msgid "Modify a user." +msgstr "Memodifikasi suatu hostgroup." + +msgid "Rename the user object" +msgstr "" + +msgid "Display information about a user." +msgstr "" + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + msgid "Time limit of search in seconds (0 is unlimited)" msgstr "" @@ -8973,6 +8391,115 @@ msgstr "" msgid "Display the properties of a CA ACL." msgstr "" +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "Profile ID" +msgstr "" + +msgid "Certificate Profile to use" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +msgid "Profile description" +msgstr "" + +#, fuzzy +msgid "Brief description of this profile" +msgstr "Suatu penjelasan atas perintah ini" + +#, fuzzy +msgid "Store issued certificates" +msgstr "harus merupakan sebuah sertifikat" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +#, fuzzy +msgid "Delete a Certificate Profile." +msgstr "harus merupakan sebuah sertifikat" + +msgid "Search for Certificate Profiles." +msgstr "" + +#, fuzzy +msgid "Import a Certificate Profile." +msgstr "harus merupakan sebuah sertifikat" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +#, fuzzy +msgid "Write profile configuration to file" +msgstr "tidak dapat membuka berkas konfigurasi %s\n" + msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" msgstr "" @@ -9003,6 +8530,218 @@ msgstr "" msgid "Remove certificates from host entry" msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + msgid "Fallback to AD DC LDAP" msgstr "" @@ -9031,6 +8770,9 @@ msgid "" "to onelevel" msgstr "" +msgid "Remove users that can manage this token." +msgstr "" + #, fuzzy msgid "Target DN subtree" msgstr "DN Target" @@ -9474,6 +9216,13 @@ msgid "" " " msgstr "" +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + msgid "Preserved user" msgstr "" @@ -9723,6 +9472,9 @@ msgstr "" msgid "Vault data encrypted with session key" msgstr "" +msgid "Nonce" +msgstr "Nonce" + #, fuzzy msgid "Delete a vault." msgstr "Hapus semua?" @@ -9772,337 +9524,6 @@ msgstr "" msgid "Display information about a vault container." msgstr "" -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "Profile ID" -msgstr "" - -msgid "Certificate Profile to use" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -msgid "Profile description" -msgstr "" - -#, fuzzy -msgid "Brief description of this profile" -msgstr "Suatu penjelasan atas perintah ini" - -#, fuzzy -msgid "Store issued certificates" -msgstr "harus merupakan sebuah sertifikat" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -#, fuzzy -msgid "Delete a Certificate Profile." -msgstr "harus merupakan sebuah sertifikat" - -msgid "Search for Certificate Profiles." -msgstr "" - -#, fuzzy -msgid "Import a Certificate Profile." -msgstr "harus merupakan sebuah sertifikat" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -#, fuzzy -msgid "Write profile configuration to file" -msgstr "tidak dapat membuka berkas konfigurasi %s\n" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - msgid "Resolve a host name in DNS. (Deprecated)" msgstr "" @@ -11313,6 +10734,9 @@ msgid "" "Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" msgstr "" +msgid "Consume an entitlement." +msgstr "Mengkonsumsi suatu hak." + msgid "Quantity" msgstr "" @@ -11339,6 +10763,9 @@ msgstr "" msgid "Username" msgstr "namaberkas" +msgid "Enrollment UUID (not implemented)" +msgstr "UUID pendaftaran (tidak diimplementasikan)" + msgid "Registration password" msgstr "" @@ -11784,6 +11211,192 @@ msgid "" " ipa hostgroup-del baltimore\n" msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + msgid "" "Comma-separated list of objectclasses used to search for user entries in DS" msgstr "" @@ -12091,199 +11704,6 @@ msgstr "" msgid "comma-separated list of sudo commands to remove" msgstr "" -#, fuzzy -msgid "Active directory domain administrator's password" -msgstr "Domain Active Directory" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - msgid "" "\n" "Sudo Rules\n" @@ -12325,14 +11745,19 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" -msgid "A dictionary representing an LDAP entry" +#, fuzzy +msgid "Active directory domain administrator's password" +msgstr "Domain Active Directory" + +msgid "GECOS field" msgstr "" -msgid "A list of LDAP entries" -msgstr "" +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "Masukkan %(label)s lagi untuk verifikasi: " -msgid "All commands should at least have a result" -msgstr "" +msgid "Passwords do not match!" +msgstr "Kata sandi tidak cocok!" msgid "No matching entries found" msgstr "" @@ -12352,6 +11777,9 @@ msgstr "" msgid " ipa --help" msgstr "" +msgid "Command name" +msgstr "Nama perintah" + msgid "Positional arguments" msgstr "" @@ -12366,109 +11794,375 @@ msgstr "Usang; gunakan %s" msgid "No file to read" msgstr "" -#, fuzzy, python-format -msgid "%(filename)s: file not found" -msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" - -#, fuzzy, python-brace-format -msgid "Unable to parse option {item}" -msgstr "Tidak dapat mengurai prinsipal\n" - -msgid "Filename is empty" +#, python-format +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" #, python-format -msgid "Permission denied: %(file)s" +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "kesalahan %(code)d tidak dikenal dari %(server)s: %(error)s" + +msgid "an internal error has occurred" +msgstr "terjadi kesalahan internal" + +#, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "terjadi kesalahan internal pada server di '%(server)s'" + +#, python-format +msgid "unknown command '%(name)s'" msgstr "" -msgid "empty DNS label" +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "galat pada server '%(server)s': %(error)s" + +#, fuzzy, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "galat pada server '%(server)s': %(error)s" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "Permintaan JSON-RPC tidak valid: %(error)s" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" msgstr "" -msgid "DNS label cannot be longer that 63 characters" +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" msgstr "" #, python-format msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." msgstr "" -msgid "single label {}s are not supported" +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Kesalahan kerberos: %(major)s/%(minor)s" + +#, fuzzy +msgid "did not receive Kerberos credentials" +msgstr "Tidak dapat menghasilkan Kerberos Credential Cache\n" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" msgstr "" -msgid "too many '@' characters" +msgid "No credentials cache found" +msgstr "" + +msgid "Ticket expired" +msgstr "Tiket kedaluwarsa" + +msgid "Credentials cache permissions incorrect" msgstr "" #, fuzzy -msgid "cannot be longer that {} characters" -msgstr "panjang maksimum yang diperbolehkan %(maxlength)d karakter" +msgid "Bad format in credentials cache" +msgstr "Galat saat menyimpan kredensial dalam singgahan kredensial: %s.\n" -msgid "hostname contains empty label (consecutive dots)" +msgid "Cannot resolve KDC for requested realm" msgstr "" -msgid "not fully qualified" -msgstr "" - -#, fuzzy -msgid "invalid SSH public key" -msgstr "Kunci publik SSH:" - -msgid "options are not allowed" -msgstr "" - -msgid "invalid hostmask" -msgstr "" - -#, fuzzy, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "kuiri '%(owner)s %(rtype)s': %(error)s" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" +msgid "Session error" msgstr "" #, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" - -msgid "invalid escape code in domain name" -msgstr "" - -msgid "domain name cannot be longer than 255 characters" -msgstr "" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "" - -msgid "invalid domain name" +msgid "Principal %(principal)s cannot be authenticated: %(message)s" msgstr "" #, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgid "Insufficient access: %(info)s" +msgstr "Hak akses tidak mencukupi: %(info)s" + +#, python-format +msgid "command '%(name)s' takes no arguments" msgstr "" -#, fuzzy, python-format -msgid "invalid domain-name: %s" +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "" + +#, python-format +msgid "'%(name)s' is required" +msgstr "" + +#, python-format +msgid "invalid '%(name)s': %(error)s" msgstr "'%(name)s' tidak valid: %(error)s" #, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgid "api has no such namespace: '%(name)s'" msgstr "" -msgid "invalid IP address format" +msgid "Passwords do not match" +msgstr "Kata sandi tidak cocok" + +msgid "Command not implemented" +msgstr "Perintah tidak diimplementasikan" + +msgid "Client is not configured. Run ipa-client-install." msgstr "" #, python-format -msgid "%(port)s is not a valid port" +msgid "Could not get %(name)s interactively" +msgstr "" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "" + +#, python-format +msgid "%(reason)s" +msgstr "%(reason)s" + +msgid "This entry already exists" +msgstr "Entri ini sudah ada" + +msgid "You must enroll a host in order to create a host service" +msgstr "Anda harus mendaftarkan sebuah host untuk membuat layanan host" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" msgstr "" msgid "" -"at least one value equal to the canonical principal name must be present" +"The realm for the principal does not match the realm for this IPA server" msgstr "" -msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgid "This command requires root access" +msgstr "Perintah ini memerlukan akses root" + +msgid "This is already a posix group" +msgstr "Ini sudah merupakan grup posix" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "" + +#, fuzzy +msgid "This entry is already enabled" +msgstr "Entri ini sudah ada" + +#, fuzzy +msgid "This entry is already disabled" +msgstr "Entri ini sudah ada" + +msgid "This entry cannot be enabled or disabled" +msgstr "" + +msgid "This entry is not a member" +msgstr "" + +msgid "A group may not be a member of itself" +msgstr "Sebuah grup tidak mungkin menjadi anggota grup itu sendiri" + +#, fuzzy +msgid "This entry is already a member" +msgstr "Entri ini sudah ada" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "Penguraian Base64 gagal: %(reason)s" + +#, fuzzy +msgid "A group may not be added as a member of itself" +msgstr "Sebuah grup tidak mungkin menjadi anggota grup itu sendiri" + +msgid "The default users group cannot be removed" +msgstr "" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" + +msgid "A managed group cannot have a password policy." +msgstr "" + +#, fuzzy, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "harus merupakan sebuah sertifikat" + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "" + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" + +msgid "This group already allows external members" +msgstr "" + +msgid "This group cannot be posix because it is external" +msgstr "" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "" + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" + +#, python-format +msgid "'%(attr)s' already contains one or more values" +msgstr "" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "" + +msgid "change collided with another change" +msgstr "perubahan bertabrakan dengan perubahan lain" + +msgid "no modifications to be performed" +msgstr "tidak ada modifikasi yang harus dilakukan" + +#, python-format +msgid "%(desc)s: %(info)s" +msgstr "%(desc)s: %(info)s" + +msgid "limits exceeded for this query" +msgstr "query ini telah melampaui batas" + +#, python-format +msgid "%(info)s" +msgstr "%(info)s" + +msgid "modifying primary key is not allowed" +msgstr "" + +#, python-format +msgid "%(attr)s: Only one value allowed." +msgstr "%(attr)s: Hanya satu nilai yang diperbolehkan." + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "" + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "" + +msgid "Not allowed on non-leaf entry" +msgstr "" + +msgid "LDAP timeout" +msgstr "" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "" + +msgid "Configured time limit exceeded" +msgstr "" + +msgid "Configured size limit exceeded" +msgstr "" + +msgid "Configured administrative server limit exceeded" +msgstr "" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "Operasi sertifikat tidak dapat diselesaikan: %(error)s" + +#, fuzzy, python-format +msgid "Certificate format error: %(error)s" +msgstr "Operasi sertifikat tidak dapat diselesaikan: %(error)s" + +msgid "Already registered" +msgstr "" + +msgid "Not registered yet" +msgstr "" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "" + +#, python-format +msgid "%(exception)s" +msgstr "%(exception)s" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" + +msgid "Results are truncated, try a more specific search" +msgstr "Hasil yang terpotong, coba cari dengan lebih spesifik" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "" + +msgid "Client version. Used to determine if server will accept request." msgstr "" msgid "Additional instructions:" @@ -12502,6 +12196,10 @@ msgid "" "%(hint)s" msgstr "" +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "Server DNS %(server)s: %(error)s." + #, python-format msgid "" "DNS server %(server)s does not support DNSSEC: %(error)s.\n" @@ -12624,297 +12322,126 @@ msgstr "" msgid "The certificate for %(ca)s is not available on this server." msgstr "" -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." -msgstr "" +#, python-format +msgid "%(count)d variables" +msgstr "%(count)d variabel" #, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "%(count)d pengaya telah dimuat" + +msgid "A dictionary representing an LDAP entry" msgstr "" -#, python-format -msgid "unknown command '%(name)s'" +msgid "A list of LDAP entries" msgstr "" -#, fuzzy, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "galat pada server '%(server)s': %(error)s" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" +msgid "All commands should at least have a result" msgstr "" -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "" +msgid "incorrect type" +msgstr "tipe salah" -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" - -#, fuzzy -msgid "did not receive Kerberos credentials" -msgstr "Tidak dapat menghasilkan Kerberos Credential Cache\n" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "" - -msgid "No credentials cache found" -msgstr "" - -msgid "Credentials cache permissions incorrect" -msgstr "" - -#, fuzzy -msgid "Bad format in credentials cache" -msgstr "Galat saat menyimpan kredensial dalam singgahan kredensial: %s.\n" - -msgid "Cannot resolve KDC for requested realm" -msgstr "" - -msgid "Session error" -msgstr "" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "" - -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "" - -#, python-format -msgid "'%(name)s' is required" -msgstr "" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "" - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "" - -#, fuzzy -msgid "This entry is already enabled" -msgstr "Entri ini sudah ada" - -#, fuzzy -msgid "This entry is already disabled" -msgstr "Entri ini sudah ada" - -msgid "This entry cannot be enabled or disabled" -msgstr "" - -msgid "This entry is not a member" -msgstr "" - -#, fuzzy -msgid "This entry is already a member" -msgstr "Entri ini sudah ada" - -#, fuzzy -msgid "A group may not be added as a member of itself" -msgstr "Sebuah grup tidak mungkin menjadi anggota grup itu sendiri" - -msgid "The default users group cannot be removed" -msgstr "" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" - -msgid "A managed group cannot have a password policy." -msgstr "" - -#, fuzzy, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "harus merupakan sebuah sertifikat" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" - -msgid "This group already allows external members" -msgstr "" - -msgid "This group cannot be posix because it is external" -msgstr "" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" - -#, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "" - -msgid "modifying primary key is not allowed" -msgstr "" - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "" - -msgid "Not allowed on non-leaf entry" -msgstr "" - -msgid "LDAP timeout" -msgstr "" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" - -msgid "Configured time limit exceeded" -msgstr "" - -msgid "Configured size limit exceeded" -msgstr "" - -msgid "Configured administrative server limit exceeded" -msgstr "" - -#, fuzzy, python-format -msgid "Certificate format error: %(error)s" -msgstr "Operasi sertifikat tidak dapat diselesaikan: %(error)s" - -msgid "Already registered" -msgstr "" - -msgid "Not registered yet" -msgstr "" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" +msgid "Only one value is allowed" +msgstr "Hanya satu nilai yang diperbolehkan" msgid "this option is deprecated" msgstr "" +msgid "must be True or False" +msgstr "harus True atau False" + +msgid "must be an integer" +msgstr "harus merupakan bilangan bulat" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "setidaknya harus %(minvalue)d" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "nilai maksimum yang diperbolehkan %(maxvalue)d" + +msgid "must be a decimal number" +msgstr "harus merupakan angka desimal" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "setidaknya harus %(minvalue)s" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "boleh maksimum %(maxvalue)s" + #, python-format msgid "" "number class '%(cls)s' is not included in a list of allowed number classes: " "%(allowed)s" msgstr "" +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "harus cocok dengan pola \"%(pattern)s\"" + +msgid "must be binary data" +msgstr "harus merupakan data biner" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "panjang minimum yang diperbolehkan %(minlength)d byte" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "panjang maksimum yang diperbolehkan %(maxlength)d byte" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "harus tepat %(length)d byte" + +msgid "must be a certificate" +msgstr "harus merupakan sebuah sertifikat" + +msgid "must be a certificate signing request" +msgstr "harus berupa sebuah permintaan penandatanganan sertifikat" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "Gagal mengurai Permintaan Penandatanganan Sertifikat: %s" + +msgid "must be Unicode text" +msgstr "harus teks Unicode" + msgid "Leading and trailing spaces are not allowed" msgstr "" +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "setidaknya minimum harus %(minlength)d karakter" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "panjang maksimum yang diperbolehkan %(maxlength)d karakter" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "harus tepat %(length)d karakter" + #, python-format msgid "The character %(char)r is not allowed." msgstr "" +#, python-format +msgid "must be '%(value)s'" +msgstr "harus '%(value)s'" + +#, python-format +msgid "must be one of %(values)s" +msgstr "harus satu dari %(values)s" + +msgid "must be datetime value" +msgstr "harus berupa nilai datetime" + msgid "does not match any of accepted formats: " msgstr "" @@ -12922,6 +12449,18 @@ msgstr "" msgid "incomplete time value" msgstr "harus berupa nilai datetime" +msgid "must be DNS name" +msgstr "harus berupa nama DNS" + +msgid "must be absolute" +msgstr "harus absolut" + +msgid "must be relative" +msgstr "harus relatif" + +msgid "must be dictionary" +msgstr "harus berupa kamus" + msgid "must be Kerberos principal" msgstr "" @@ -12933,16 +12472,120 @@ msgstr "Ubah '%(value)s' %(name)s?" msgid "Service principal is required" msgstr "Nama Prisipal Layanan Kerberos" -#, python-format -msgid "Unknown option: %(option)s" +#, fuzzy, python-format +msgid "%(filename)s: file not found" +msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" + +#, fuzzy, python-brace-format +msgid "Unable to parse option {item}" +msgstr "Tidak dapat mengurai prinsipal\n" + +msgid "any of the configured servers" msgstr "" -msgid "Client version. Used to determine if server will accept request." +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" +msgstr "" + +#, python-format +msgid "Permission denied: %(file)s" +msgstr "" + +msgid "empty DNS label" +msgstr "" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "" + +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" + +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "" + +#, fuzzy +msgid "cannot be longer that {} characters" +msgstr "panjang maksimum yang diperbolehkan %(maxlength)d karakter" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "" + +#, fuzzy +msgid "invalid SSH public key" +msgstr "Kunci publik SSH:" + +msgid "options are not allowed" +msgstr "" + +msgid "invalid hostmask" +msgstr "" + +#, python-format +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "kuiri '%(owner)s %(rtype)s': %(error)s" + +#, fuzzy, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "kuiri '%(owner)s %(rtype)s': %(error)s" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +msgid "invalid escape code in domain name" +msgstr "" + +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +msgid "invalid domain name" +msgstr "" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" msgstr "" #, fuzzy, python-format -msgid "objectclass %s not found" -msgstr "Entri %s tidak ditemukan" +msgid "invalid domain-name: %s" +msgstr "'%(name)s' tidak valid: %(error)s" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +msgid "invalid IP address format" +msgstr "" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgstr "" #, python-format msgid "Retrieving CA cert chain failed: %s" @@ -12960,952 +12603,1255 @@ msgstr "" msgid "Retrieving CA status failed with status %d" msgstr "" +#, fuzzy, python-format +msgid "objectclass %s not found" +msgstr "Entri %s tidak ditemukan" + +msgid "Trusting forest" +msgstr "" + +msgid "Trusted forest" +msgstr "" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +msgid "Unknown" +msgstr "" + +#, fuzzy +msgid "Non-Active Directory domain" +msgstr "Domain Active Directory" + +msgid "Active Directory domain" +msgstr "Domain Active Directory" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "" +msgid "Failed to authenticate to CA REST API" +msgstr "" + #, python-format msgid "Replication agreement for %(hostname)s not found" msgstr "" -msgid "Failed to authenticate to CA REST API" -msgstr "" - -msgid "One time password commands" -msgstr "" - -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" -msgstr "" +#, fuzzy +msgid "A list of ACI values" +msgstr "ACI \"%(value)s\" telah dihapus" #, fuzzy -msgid "" -"\n" -"IPA server roles\n" -msgstr "Server IPA yang akan digunakan" +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" +"setidaknya diperlukan salah satu dari: type, filter, subtree, targetgroup, " +"attrs atau memberof" -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgid "ACI prefix is required" msgstr "" msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" +"setidaknya diperlukan salah satu dari: type, filter, subtree, targetgroup, " +"attrs atau memberof" + +msgid "filter and memberof are mutually exclusive" msgstr "" -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgid "group, permission and self are mutually exclusive" msgstr "" -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -#, fuzzy -msgid "server role" -msgstr "Nama Peladen" - -#, fuzzy -msgid "server roles" -msgstr "Nama Peladen" - -#, fuzzy -msgid "IPA Server Roles" -msgstr "Server IPA yang akan digunakan" - -#, fuzzy -msgid "IPA Server Role" -msgstr "Server IPA yang akan digunakan" - -#, fuzzy -msgid "IPA server role name" -msgstr "Server IPA yang akan digunakan" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -msgid "Include IPA master entries" -msgstr "" - -msgid "roles" -msgstr "" - -msgid "IPA role name" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" +msgid "One of group, permission or self is required" msgstr "" #, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgid "Group '%s' does not exist" +msgstr "Grup '%s' tidak ada" + +msgid "empty filter" msgstr "" -msgid "Add Class of Service entry" +#, python-format +msgid "Syntax Error: %(error)s" msgstr "" -msgid "Delete Class of Service entry" +#, python-format +msgid "invalid DN (%s)" msgstr "" -msgid "Modify Class of Service entry" +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "ACI dengan nama \"%s\" tidak ditemukan" + +msgid "ACI object." msgstr "" -msgid "Display Class of Service entry" +msgid "ACIs" msgstr "" -msgid "Search for Class of Service entry" +msgid "ACI" msgstr "" -#, fuzzy -msgid "password policy" -msgstr "kata sandi" +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "ACI \"%(value)s\" telah dibuat" -#, fuzzy -msgid "password policies" -msgstr "kata sandi" +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "ACI \"%(value)s\" telah dihapus" -msgid "Password Policies" -msgstr "" +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "ACI \"%(value)s\" telah dimodifikasi" -#, fuzzy -msgid "Password Policy" -msgstr "kata sandi" +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "%(count)d ACI cocok" -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "" - -#, fuzzy -msgid "cannot delete global password policy" -msgstr "prioritas tidak dapat ditetapkan pada kebijakan global" +#, fuzzy, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "ACI \"%(value)s\" telah dibuat" msgid "" "\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" +"Auto Membership Rule.\n" msgstr "" -#, fuzzy -msgid "Realm domains" -msgstr "Nama realm" - -#, fuzzy -msgid "Realm Domains" -msgstr "Domain" - msgid "" "\n" -" Modify realm domains\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" "\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" "\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +#, fuzzy +msgid "Auto Membership is not configured" +msgstr "Aturan anggota otomatis: %s tidak ditemukan!" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "Host \"%(value)s\" ditambahkan" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "Aturan anggota otomatis: %s tidak ditemukan!" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "Hostgroup \"%(value)s\" dihapus" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "%(count)d pengguna cocok" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" " " msgstr "" #, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " msgstr "" #, python-format -msgid "The following domains do not belong to this realm: %(domains)s" +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "automount location" +msgstr "" + +msgid "automount locations" +msgstr "" + +msgid "Automount Locations" +msgstr "" + +msgid "Automount Location" +msgstr "" + +#, fuzzy, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "Menambah token OTP \"%(value)s\"" + +#, fuzzy, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "Menghapus token OTP \"%(value)s\"" + +#, fuzzy, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "%(count)d token OTP cocok" + +msgid "automount map" +msgstr "" + +msgid "automount maps" +msgstr "" + +msgid "Automount Maps" +msgstr "" + +msgid "Automount Map" +msgstr "" + +#, fuzzy, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "Grup \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "Grup \"%(value)s\" dihapus" + +#, fuzzy, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "Grup \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "%(count)d grup cocok" + +msgid "Automount key object." +msgstr "" + +msgid "automount key" +msgstr "" + +msgid "automount keys" +msgstr "" + +msgid "Automount Keys" +msgstr "" + +msgid "Automount Key" msgstr "" #, python-format msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" msgstr "" #, python-format -msgid "Results should contain primary key attribute only (\"%s\")" +msgid "key named %(key)s already exists" +msgstr "kunci bernama %(key)s sudah ada" + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" msgstr "" -msgid "Help topic" +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." msgstr "" -msgid "Version" +#, fuzzy, python-format +msgid "Added automount key \"%(value)s\"" +msgstr "Menambah token OTP \"%(value)s\"" + +#, fuzzy, python-format +msgid "Added automount indirect map \"%(value)s\"" +msgstr "Grup \"%(value)s\" ditambahkan" + +msgid "mount point is relative to parent map, cannot begin with /" msgstr "" -msgid "Parameters" -msgstr "" +#, fuzzy, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "Menghapus token OTP \"%(value)s\"" -msgid "Method of" -msgstr "" +#, fuzzy, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "Mengubah token OTP \"%(value)s\"" + +#, fuzzy, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "%(count)d token OTP cocok" #, fuzzy -msgid "Method name" -msgstr "namahost" +msgid "Member service groups" +msgstr "Grup layanan/layanan gagal" + +#, fuzzy +msgid "Member HBAC service groups" +msgstr "Grup layanan/layanan gagal" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" +msgstr "" + +#, fuzzy, python-format +msgid "container entry (%(container)s) not found" +msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" + +#, fuzzy, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" #, fuzzy, python-format msgid "%(pkey)s: %(oname)s not found" msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -msgid "Search for classes." -msgstr "" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -msgid "CLI name" -msgstr "Nama perintah" - -msgid "Default" -msgstr "" - -msgid "Default from" -msgstr "" - -msgid "Label" -msgstr "" - -#, fuzzy -msgid "Convert on server" -msgstr "Nama host peladen ini" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "" - #, fuzzy, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, fuzzy, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" - -msgid "Display information about a command output." -msgstr "" - -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -#, fuzzy -msgid "Member principals" -msgstr "Menghapus prinsipal %s\n" +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "kunci bernama %(key)s sudah ada" #, python-format -msgid "Malformed principal: %(error)s" +msgid "attribute \"%(attribute)s\" not allowed" msgstr "" -msgid "Add target to a named service delegation." +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" msgstr "" #, python-format msgid "member %s" msgstr "" -msgid "Remove member from a named service delegation." +#, python-format +msgid "%s to add" msgstr "" -msgid "service delegation rule" +#, python-format +msgid "%s to remove" msgstr "" -#, fuzzy -msgid "service delegation rules" -msgstr "Opsi Layanan" - -#, fuzzy -msgid "Service delegation rules" -msgstr "Opsi Layanan" - -#, fuzzy -msgid "Service delegation rule" -msgstr "Opsi Layanan" - -#, fuzzy, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "Segmen \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -msgid "privileged service delegation rule" +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" msgstr "" -#, fuzzy, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "%(count)s peran server cocok" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -#, fuzzy -msgid "Service delegation targets" -msgstr "Opsi Layanan" - -#, fuzzy -msgid "Service delegation target" -msgstr "Opsi Layanan" - -#, fuzzy, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "Segmen \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "Segmen \"%(value)s\" dihapus" - -msgid "privileged service delegation target" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "%(count)s peran server cocok" - +#, python-format msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" msgstr "" msgid "" "\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" msgstr "" +msgid "must be TRUE or FALSE" +msgstr "harus TRUE atau FALSE" + msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." msgstr "" -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -#, fuzzy -msgid "Malformed principal" -msgstr "Tidak dapat mengurai prinsipal\n" - -msgid "{} is required by the IPA master" -msgstr "" - -msgid "service" -msgstr "" - -#, fuzzy -msgid "services" -msgstr "Opsi Layanan" - msgid "Principal alias" msgstr "" -#, fuzzy -msgid "Service principal alias" -msgstr "Nama Prisipal Layanan Kerberos" - -msgid "Base-64 encoded service certificate" +msgid "User password expiration" msgstr "" +#, fuzzy +msgid "SSH public key fingerprint" +msgstr "Kunci publik SSH:" + +#, fuzzy +msgid "Base-64 encoded user certificate" +msgstr "harus merupakan sebuah sertifikat" + +msgid "Certificate mapping data" +msgstr "" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, fuzzy, python-format +msgid "manager %(manager)s not found" +msgstr "Entri %s tidak ditemukan" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "boleh maksimum %(len)d karakter" + +msgid "Issuer" +msgstr "" + +#, fuzzy +msgid "Issuer of the certificate" +msgstr "harus merupakan sebuah sertifikat" + msgid "Subject" msgstr "" #, fuzzy -msgid "Serial Number" -msgstr "Nomor seri maksimum" +msgid "Subject of the certificate" +msgstr "harus merupakan sebuah sertifikat" -msgid "Serial Number (hex)" +msgid "cannot have an empty subject" msgstr "" -msgid "Issuer" +msgid "cannot specify both subject/issuer and certificate" msgstr "" -msgid "Not Before" +msgid "cannot specify both subject/issuer and ipacertmapdata" msgstr "" -msgid "Not After" -msgstr "" - -msgid "Fingerprint (SHA1)" -msgstr "" - -msgid "Fingerprint (SHA256)" -msgstr "" - -msgid "Revocation reason" -msgstr "" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "" - -msgid "Add a new IPA service." +msgid "Add one or more certificate mappings to the user entry." msgstr "" #, fuzzy, python-format -msgid "Added service \"%(value)s\"" +msgid "Added certificate mappings to user \"%(value)s\"" msgstr "Pengguna \"%(value)s\" ditambahkan" -msgid "force principal name even if host not in DNS" +msgid "Remove one or more certificate mappings from the user entry." msgstr "" -msgid "Skip host check" +#, fuzzy, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" msgstr "" msgid "" -"force service to be created even when host object does not exist to manage it" +"\n" +"Manage Certificate Authorities\n" +msgstr "" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +msgid "Certificate Authority" +msgstr "" + +msgid "Certificate Authorities" +msgstr "" + +msgid "Name" +msgstr "" + +msgid "Name for referencing the CA" +msgstr "" + +msgid "Description of the purpose of the CA" +msgstr "" + +msgid "Authority ID" +msgstr "" + +msgid "Dogtag Authority ID" +msgstr "" + +msgid "Subject DN" +msgstr "" + +msgid "Subject Distinguished Name" +msgstr "Distinguished Name Subjek" + +msgid "Issuer DN" +msgstr "" + +#, fuzzy +msgid "Issuer Distinguished Name" +msgstr "Distinguished Name Subjek" + +#, fuzzy +msgid "Base-64 encoded certificate." +msgstr "harus merupakan sebuah sertifikat" + +msgid "Certificate chain" +msgstr "" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Search for CAs." msgstr "" #, python-format -msgid "The host '%s' does not exist to add a service to." +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "%(count)d CA cocok" + +#, fuzzy +msgid "Include certificate chain in output" +msgstr "harus berupa sebuah permintaan penandatanganan sertifikat" + +msgid "Display the properties of a CA." msgstr "" -msgid "Add a new SMB service." +msgid "Create a CA." msgstr "" -msgid "SMB service NetBIOS name" +#, python-format +msgid "Created CA \"%(value)s\"" +msgstr "CA \"%(value)s\" dibuat" + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." msgstr "" -#, fuzzy, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" +#, python-format +msgid "Unrecognized attributes: %(attrs)s" +msgstr "" -#, fuzzy, python-format -msgid "Modified service \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "" -#, fuzzy, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "%(count)s server cocok" +#, fuzzy +msgid "Delete a CA (must be disabled first)." +msgstr "Harus dinon-fungsikan terlebih dahulu" -#, fuzzy, python-format -msgid "Disabled service \"%(value)s\"" +#, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "CA \"%(value)s\" dihapus" + +msgid "Insufficient privilege to delete a CA." +msgstr "" + +msgid "CA" +msgstr "" + +msgid "IPA CA cannot be deleted" +msgstr "" + +msgid "Must be disabled first" +msgstr "Harus dinon-fungsikan terlebih dahulu" + +#, fuzzy +msgid "Modify CA configuration." +msgstr "Memodifikasi suatu hostgroup." + +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "CA \"%(value)s\" diubah" + +msgid "Insufficient privilege to modify a CA." +msgstr "" + +msgid "Disable a CA." +msgstr "" + +#, python-format +msgid "Disabled CA \"%(value)s\"" msgstr "CA \"%(value)s\" dinonaktifkan" -#, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to a service" -msgstr "" - -#, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "" - #, fuzzy -msgid "Remove principal alias from a service" -msgstr "Hapus semua prinsipal di realm ini" +msgid "IPA CA cannot be disabled" +msgstr "Akun dinonaktifkan" + +msgid "Enable a CA." +msgstr "" #, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "" +msgid "Enabled CA \"%(value)s\"" +msgstr "CA \"%(value)s\" difungsikan" msgid "" "\n" -"Sudo Rules\n" -msgstr "" - -msgid "" +"Manage CA ACL rules.\n" "\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" "\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" +"SUBJECT PRINCIPAL SCOPE:\n" "\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" "\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" "\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" +"CERTIFICATE AUTHORITY SCOPE:\n" "\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" "\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" +"PROFILE SCOPE:\n" "\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" "\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" +"EXAMPLES:\n" "\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" "\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" "\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" msgstr "" -msgid "this option has been deprecated." +msgid "CA ACL" msgstr "" -msgid "sudo rules" +msgid "CA ACLs" msgstr "" -msgid "Sudo Rules" +msgid "CA category" msgstr "" -#, fuzzy -msgid "Sudo Rule" -msgstr "Sudo" +msgid "CA category the ACL applies to" +msgstr "" -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgid "CAs" msgstr "" #, fuzzy, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" +msgid "Added CA ACL \"%(value)s\"" +msgstr "Host \"%(value)s\" ditambahkan" #, fuzzy, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "CA \"%(value)s\" dihapus" + +msgid "default CA ACL can be only disabled" +msgstr "" #, fuzzy, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" +msgid "Modified CA ACL \"%(value)s\"" +msgstr "CA \"%(value)s\" diubah" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" -#, python-format msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +"profile category cannot be set to 'all' while there are allowed profiles" msgstr "" -#, fuzzy -msgid "command" -msgstr "Nama perintah" - -#, fuzzy -msgid "commands" -msgstr "Nama perintah" - -msgid "runAs user" +msgid "user category cannot be set to 'all' while there are allowed users" msgstr "" -#, fuzzy -msgid "runAs users" -msgstr "pengguna" - -msgid "group runAs" +msgid "host category cannot be set to 'all' while there are allowed hosts" msgstr "" -#, fuzzy -msgid "runAs groups" -msgstr "Tambah grup host" +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" #, fuzzy, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "%(count)d pengguna cocok" +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "%(count)d CA cocok" -msgid "commands cannot be added when command category='all'" -msgstr "" +#, fuzzy, python-format +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "CA \"%(value)s\" difungsikan" + +#, fuzzy, python-format +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "CA \"%(value)s\" dinonaktifkan" + +#, fuzzy, python-format +msgid "%i user or group added." +msgstr "%i host atau hostgroup ditambahkan." + +#, fuzzy, python-format +msgid "%i users or groups added." +msgstr "%i hosts atau hostgroups ditambahkan." msgid "users cannot be added when user category='all'" msgstr "" +#, fuzzy, python-format +msgid "%i user or group removed." +msgstr "%i host atau hostgroup dibuang." + +#, fuzzy, python-format +msgid "%i users or groups removed." +msgstr "%i host atau hostgroup dibuang." + +#, python-format +msgid "%i host or hostgroup added." +msgstr "%i host atau hostgroup ditambahkan." + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "%i hosts atau hostgroups ditambahkan." + msgid "hosts cannot be added when host category='all'" msgstr "" -msgid "users cannot be added when runAs user or runAs group category='all'" +#, python-format +msgid "%i host or hostgroup removed." +msgstr "%i host atau hostgroup dibuang." + +#, fuzzy, python-format +msgid "%i hosts or hostgroups removed." +msgstr "%i host atau hostgroup dibuang." + +#, python-format +msgid "%i service added." msgstr "" #, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" +msgid "%i services added." +msgstr "" + +msgid "services cannot be added when service category='all'" msgstr "" #, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" +msgid "%i service removed." +msgstr "" + +#, fuzzy, python-format +msgid "%i services removed." +msgstr "%i host atau hostgroup dibuang." + +#, python-format +msgid "%i profile added." msgstr "" #, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, fuzzy, python-format +msgid "%i profiles removed." +msgstr "%i host atau hostgroup dibuang." + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." msgstr "" msgid "pyhbac is not installed." @@ -14062,6 +14008,12 @@ msgstr "" msgid " * 0 - unspecified\n" msgstr " * 6 - certificateHold\n" +msgid " * 1 - keyCompromise\n" +msgstr " * 1 - keyCompromise\n" + +msgid " * 2 - cACompromise\n" +msgstr " * 2 - cACompromise\n" + msgid " * 3 - affiliationChanged\n" msgstr "" @@ -14073,15 +14025,33 @@ msgstr " * 2 - cACompromise\n" msgid " * 5 - cessationOfOperation\n" msgstr " * 6 - certificateHold\n" +msgid " * 6 - certificateHold\n" +msgstr " * 6 - certificateHold\n" + #, fuzzy msgid " * 8 - removeFromCRL\n" msgstr " * 1 - keyCompromise\n" +msgid " * 9 - privilegeWithdrawn\n" +msgstr " * 9 - privilegeWithdrawn\n" + +msgid " * 10 - aACompromise\n" +msgstr " * 10 - aACompromise\n" + msgid "" "\n" "Note that reason code 7 is not used. See RFC 5280 for more details:\n" msgstr "" +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" + msgid "CA is not configured" msgstr "" @@ -14104,16 +14074,6 @@ msgstr "" msgid "Name of issuing CA" msgstr "" -#, fuzzy -msgid "Base-64 encoded certificate." -msgstr "harus merupakan sebuah sertifikat" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - msgid "Subject email address" msgstr "" @@ -14150,7 +14110,16 @@ msgstr "Nama Prisipal Layanan Kerberos" msgid "Subject Other Name" msgstr "Distinguished Name Subjek" -msgid "Issuer DN" +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" msgstr "" #, fuzzy @@ -14160,10 +14129,6 @@ msgstr "Nomor seri maksimum" msgid "Request status" msgstr "" -#, fuzzy -msgid "Include certificate chain in output" -msgstr "harus berupa sebuah permintaan penandatanganan sertifikat" - msgid "" "automatically add the principal if it doesn't exist (service principals only)" msgstr "" @@ -14257,6 +14222,9 @@ msgstr "" msgid "Revoked" msgstr "" +msgid "Revocation reason" +msgstr "" + msgid "" "Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " "revocation reason details. " @@ -14274,6 +14242,10 @@ msgstr "" msgid "7 is not a valid revocation reason" msgstr "" +#, fuzzy +msgid "Status of the certificate" +msgstr "harus merupakan sebuah sertifikat" + msgid "Results should contain primary key attribute only (\"certificate\")" msgstr "" @@ -14497,9 +14469,116 @@ msgid "" " " msgstr "" +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "%(count)s pengguna cocok" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +msgid "Certificate Profile" +msgstr "" + +msgid "Certificate Profiles" +msgstr "" + +msgid "Profile configuration" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "%(count)d grup cocok" + +#, fuzzy, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "CA \"%(value)s\" dibuat" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "Grup \"%(value)s\" dihapus" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, fuzzy, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + #, fuzzy -msgid "Base-64 encoded user certificate" -msgstr "harus merupakan sebuah sertifikat" +msgid "Certificate profiles cannot be renamed" +msgstr "Operasi sertifikat tidak dapat diselesaikan: %(error)s" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" msgid "" "\n" @@ -14572,6 +14651,9 @@ msgstr "" msgid "Maximum hostname length" msgstr "" +msgid "Enable adding subids to new users" +msgstr "" + msgid "IPA masters" msgstr "" @@ -14647,6 +14729,23 @@ msgstr "" msgid "DNSec key master" msgstr "" +#, fuzzy +msgid "Setup SID configuration" +msgstr "tidak dapat melakukan stat() berkas konfigurasi %s\n" + +msgid "New users and groups automatically get a SID assigned" +msgstr "" + +#, fuzzy +msgid "Add SIDs" +msgstr "Tambah grup host" + +msgid "Add SIDs for existing users and groups" +msgstr "" + +msgid "NetBIOS name of the IPA domain" +msgstr "" + msgid "Empty domain is not allowed" msgstr "" @@ -14662,6 +14761,22 @@ msgstr "" msgid "Disabled domain '%(domain)s' is not allowed" msgstr "" +#, fuzzy +msgid "not allowed to enable SID generation" +msgstr "Tak bisa menghapus entri\n" + +msgid "" +"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " +"allowed. Empty string is not allowed." +msgstr "" + +#, fuzzy +msgid "Failed to call DBus" +msgstr "Gagal membuka keytab\n" + +msgid "Configuration of SID failed. See details in the error log" +msgstr "" + #, fuzzy msgid "The group doesn't exist" msgstr "Grup '%s' tidak ada" @@ -14687,54 +14802,1619 @@ msgstr "galat pada server '%(server)s': %(error)s" msgid "SELinux user map default user not in order list" msgstr "" +#, python-format +msgid "You cannot specify %s without the --enable-sid option" +msgstr "" + +msgid "delegation" +msgstr "" + +msgid "delegations" +msgstr "" + +msgid "Delegations" +msgstr "" + +msgid "Delegation" +msgstr "" + +#, fuzzy, python-format +msgid "Added delegation \"%(value)s\"" +msgstr "Segmen \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +msgid "Deleted delegation \"%(value)s\"" +msgstr "Segmen \"%(value)s\" dihapus" + +#, fuzzy, python-format +msgid "Modified delegation \"%(value)s\"" +msgstr "Segmen \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "%(count)d grup cocok" + msgid "" "\n" -"Groups of Sudo Commands\n" +"Domain Name System (DNS)\n" +msgstr "" + +msgid "" +"\n" +"Manage DNS zone and resource records.\n" +msgstr "" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" + +msgid "" "\n" -"Manage groups of Sudo Commands.\n" "\n" "EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" msgstr "" -msgid "sudo command group" +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" msgstr "" -msgid "sudo command groups" +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "invalid IP network format" +msgstr "" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "" + +msgid "invalid address format" +msgstr "" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" + +msgid "algorithm value: allowed interval 0-255" +msgstr "" + +msgid "flags value: allowed interval 0-255" +msgstr "" + +msgid "iterations value: allowed interval 0-65535" +msgstr "" + +#, python-format +msgid "salt value: %(err)s" +msgstr "" + +msgid "invalid domain-name: not fully qualified" +msgstr "" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" + +#, python-format +msgid "" +"No answers could be found in the specified lifetime for DNS reverse zone " +"%(revdns)s" +msgstr "" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" msgstr "" #, fuzzy, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "Grup \"%(value)s\" ditambahkan" +msgid "DNS zone %(zone)s not found" +msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" + +#, python-format +msgid "%s record" +msgstr "" + +#, python-format +msgid "Raw %s records" +msgstr "" #, fuzzy, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" +msgid "%s Record" +msgstr "Tipe record" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "" + +msgid "Invalid number of parts!" +msgstr "" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "" + +msgid "Create reverse" +msgstr "" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "" + +msgid "Exchanger" +msgstr "" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" + +msgid "Priority (order)" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Relative weight for entries with the same priority." +msgstr "" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Target Uniform Resource Identifier" +msgstr "" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "" + +msgid "Managedby permission" +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "cannot be used when a zone is specified" +msgstr "" + +#, fuzzy +msgid "Only one zone type is allowed per zone name" +msgstr "Hanya satu nilai yang diperbolehkan" + +#, fuzzy, python-format +msgid "Added system permission \"%(value)s\"" +msgstr "Segmen \"%(value)s\" ditambahkan" + +#, python-format +msgid "permission \"%(value)s\" already exists" +msgstr "izin \"%(value)s\" sudah ada" + +#, fuzzy, python-format +msgid "Removed system permission \"%(value)s\"" +msgstr "Segmen \"%(value)s\" dihapus" + +msgid "DNS zone" +msgstr "" + +msgid "DNS zones" +msgstr "" + +msgid "DNS Zones" +msgstr "" + +msgid "DNS Zone" +msgstr "" + +msgid "Default time to live" +msgstr "" + +msgid "Time to live for records without explicit TTL definition" +msgstr "" + +msgid "setting Authoritative nameserver" +msgstr "" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "" + +msgid "" +msgstr "" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "Host \"%(value)s\" dihapus" + +msgid "is required" +msgstr "" + +#, fuzzy, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "CA \"%(value)s\" dinonaktifkan" + +#, fuzzy, python-format +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "CA \"%(value)s\" difungsikan" + +msgid "DNS resource record" +msgstr "" + +msgid "DNS resource records" +msgstr "" + +msgid "DNS Resource Records" +msgstr "" + +msgid "DNS Resource Record" +msgstr "" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" + +msgid "only master zones can contain records" +msgstr "" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" + +msgid "DNS zone root record cannot be renamed" +msgstr "" + +msgid "DNS records can be only updated one at a time" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "" + +#, fuzzy, python-format +msgid "Found '%(value)s'" +msgstr "harus '%(value)s'" + +#, fuzzy, python-format +msgid "Host '%(host)s' not found" +msgstr "Entri %s tidak ditemukan" + +msgid "DNS configuration options" +msgstr "" + +msgid "DNS Global Configuration" +msgstr "" + +msgid "IPA DNS version" +msgstr "" + +msgid "List of IPA masters configured as DNS servers" +msgstr "" + +msgid "IPA server configured as DNSSec key master" +msgstr "" + +msgid "Global DNS configuration is empty" +msgstr "" + +msgid "DNS forward zone" +msgstr "" + +msgid "DNS forward zones" +msgstr "" + +#, fuzzy +msgid "DNS Forward Zones" +msgstr "Forwarder" + +#, fuzzy +msgid "DNS Forward Zone" +msgstr "Forwarder" + +msgid "Please specify forwarders." +msgstr "" + +#, fuzzy, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" msgstr "Grup \"%(value)s\" dihapus" #, fuzzy, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "CA \"%(value)s\" dinonaktifkan" + +#, fuzzy, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "CA \"%(value)s\" difungsikan" + +msgid "IPA DNS records" +msgstr "" + +msgid "IPA location records" +msgstr "" + +msgid "Update location and IPA server DNS records" +msgstr "" + +#, fuzzy +msgid "Result of the command" +msgstr "Suatu penjelasan atas perintah ini" + +msgid "Dry run" +msgstr "" + +msgid "Do not update records only return expected records" +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +#, fuzzy +msgid "DNS server" +msgstr "Nama Server DNS" + +#, fuzzy +msgid "DNS servers" +msgstr "Nama Server DNS" + +#, fuzzy +msgid "DNS Servers" +msgstr "Nama Server DNS" + +#, fuzzy +msgid "DNS Server" +msgstr "Nama Server DNS" + +msgid "DNS Server name" +msgstr "Nama Server DNS" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "Forwarder" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, fuzzy, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +msgid "Search for DNS servers." +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "%(count)s server cocok" + +#, fuzzy +msgid "IPA DNS Server is not installed" +msgstr "Server IPA yang akan digunakan" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, fuzzy, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +msgid "Delete a DNS server" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "groups" +msgstr "" + +msgid "User Group" +msgstr "" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "Grup \"%(value)s\" ditambahkan" + +#, fuzzy +msgid "gid cannot be set for external group" +msgstr "Kata sandi tidak dapat ditata pada host yang didaftarkan." + +msgid "attribute \"gidNumber\" not allowed with --nonposix" +msgstr "" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "Grup \"%(value)s\" dihapus" + +#, fuzzy +msgid "privileged group" +msgstr "Menghapus grup." + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "Grup \"%(value)s\" dimodifikasi" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "%(count)d grup cocok" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, fuzzy, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "Grup \"%(value)s\" dihapus" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" +msgstr "" + +msgid "HBAC Services" +msgstr "" + +#, fuzzy +msgid "HBAC Service Groups" +msgstr "Server IPA yang akan digunakan" + +#, fuzzy, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "ACI \"%(value)s\" telah dihapus" + +#, fuzzy, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "ACI \"%(value)s\" telah dimodifikasi" + +#, fuzzy, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "%(count)d ACI cocok" + +#, fuzzy, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "CA \"%(value)s\" difungsikan" + +#, fuzzy, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "CA \"%(value)s\" dinonaktifkan" + +msgid "Access time" +msgstr "" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "" + +msgid "HBAC Service" +msgstr "" + +#, fuzzy, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +#, fuzzy, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "%(count)s server cocok" + +msgid "HBAC service group" +msgstr "" + +#, fuzzy +msgid "HBAC service groups" +msgstr "Grup layanan/layanan gagal" + +msgid "HBAC Service Group" +msgstr "" + +#, fuzzy, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "Grup \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "Grup \"%(value)s\" dihapus" + +#, fuzzy, python-format +msgid "Modified HBAC service group \"%(value)s\"" msgstr "Grup \"%(value)s\" dimodifikasi" #, fuzzy, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" msgstr[0] "%(count)d grup cocok" +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Access granted: %s" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host" +msgstr "" + +#, fuzzy +msgid "Base-64 encoded host certificate" +msgstr "harus merupakan sebuah sertifikat" + +#, fuzzy +msgid "Serial Number" +msgstr "Nomor seri maksimum" + +msgid "Serial Number (hex)" +msgstr "" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "Host \"%(value)s\" ditambahkan" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "Host \"%(value)s\" dihapus" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "Host \"%(value)s\" dimodifikasi" + +msgid "Password cannot be set on enrolled host." +msgstr "Kata sandi tidak dapat ditata pada host yang didaftarkan." + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "%(count)d host sesuai" + +#, fuzzy, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "CA \"%(value)s\" dinonaktifkan" + +#, fuzzy, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "Host \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "Host \"%(value)s\" dimodifikasi" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, fuzzy, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "Host \"%(value)s\" ditambahkan" + +#, fuzzy +msgid "Remove principal alias from a host entry" +msgstr "Hapus semua prinsipal di realm ini" + +#, fuzzy, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "Host \"%(value)s\" dimodifikasi" + msgid "" "\n" "Groups of hosts.\n" @@ -14780,12 +16460,20 @@ msgstr "Tambah grup host" msgid "Host Group" msgstr "Tambah grup host" +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "Hostgroup \"%(value)s\" ditambahkan" + #, python-format msgid "" "netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " "common namespace" msgstr "" +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "Hostgroup \"%(value)s\" dihapus" + #, fuzzy msgid "hostgroup" msgstr "Tambah grup host" @@ -14794,282 +16482,514 @@ msgstr "Tambah grup host" msgid "privileged hostgroup" msgstr "Menghapus suatu hostgroup." +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "Hostgroup \"%(value)s\" dimodifikasi" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "%(count)d hostgroup cocok" + msgid "Add users that can manage members of this hostgroup." msgstr "" msgid "Remove users that can manage members of this hostgroup." msgstr "" -#, python-format msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" msgstr "" msgid "" "\n" -"Set a user's password\n" +"ID ranges\n" "\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" "\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" +"There are two type of ID ranges which are both handled by this utility:\n" "\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" "\n" -"EXAMPLES:\n" +"Both types have the following attributes in common:\n" "\n" -" To reset your own password:\n" -" ipa passwd\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" "\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"and an ID range of a trusted domain may set\n" +" - auto-private-groups: [true|false|hybrid] automatic creation of private " +"groups\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" "\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" msgstr "" -msgid "The OTP if the user has a token configured" +msgid "ID Ranges" msgstr "" -#, fuzzy, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "Mengubah keadaan server \"%(value)s\"." - -msgid "" -"\n" -"Permissions\n" +msgid "ID Range" msgstr "" -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" +msgid "local domain range" msgstr "" #, fuzzy -msgid "" -"\n" -"Managed permissions\n" -msgstr "ipa-getkeytab memiliki izin yang buruk?\n" +msgid "Active Directory domain range" +msgstr "Domain Active Directory" -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" +msgid "Active Directory trust range with POSIX attributes" msgstr "" -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -msgid "ACI" -msgstr "" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#, fuzzy, python-format -msgid "option was renamed; use %s" -msgstr "Usang; gunakan %s" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, fuzzy, python-format -msgid "%s: group not found" -msgstr "Entri %s tidak ditemukan" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" +msgid "ID range type, one of allowed values" msgstr "" #, fuzzy -msgid "Bad search filter" -msgstr "Berkas induk" +msgid "Auto private groups" +msgstr "Grup layanan/layanan gagal" + +msgid "Auto creation of private groups, one of allowed values" +msgstr "" msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --auto-private-groups\n" +"\n" +" may be given for a new ID range for a trusted AD domain and\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" msgstr "" #, fuzzy, python-format -msgid "Added permission \"%(value)s\"" +msgid "Added ID range \"%(value)s\"" msgstr "Pengguna \"%(value)s\" ditambahkan" -msgid "attrs and included attributes are mutually exclusive" +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" +"private-groups is specified" +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, fuzzy, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "ACI \"%(value)s\" telah dihapus" + +#, fuzzy, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "%(count)d pengguna cocok" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "ACI \"%(value)s\" telah dimodifikasi" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +msgid "ID View" +msgstr "" + +msgid "system ID View" +msgstr "" + +msgid "ID Views" +msgstr "" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +msgid "Hosts the view applies to" +msgstr "" + +#, fuzzy, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "ACI \"%(value)s\" telah dihapus" + +#, fuzzy, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "ACI \"%(value)s\" telah dimodifikasi" + +#, fuzzy, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "%(count)d ACI cocok" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +#, fuzzy +msgid "not found" +msgstr "realm tidak ditemukan\n" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" msgstr "" #, python-format -msgid "Cannot store permission ACI to %s" +msgid "ID View applied to %i host." msgstr "" -#, fuzzy, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -msgid "cannot delete managed permissions" +#, python-format +msgid "ID View applied to %i hosts." msgstr "" -#, fuzzy, python-format -msgid "ACI of permission %s was not found" -msgstr "ACI dengan nama \"%s\" tidak ditemukan" - -#, fuzzy, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -msgid "cannot rename managed permissions" +#, python-format +msgid "ID View cleared from %i host." msgstr "" -msgid "not modifiable on managed permissions" +#, python-format +msgid "ID View cleared from %i hosts." msgstr "" -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "%(count)d pengguna cocok" - -#, fuzzy, python-brace-format -msgid "{role}: role not found" -msgstr "realm tidak ditemukan\n" - msgid "" -"\n" -"Session Support for IPA\n" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." msgstr "" +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, fuzzy, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +msgid "Delete an ID override." +msgstr "" + +#, fuzzy, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +msgid "Modify an ID override." +msgstr "" + +#, fuzzy, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "%(count)d pengguna cocok" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, fuzzy, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +#, fuzzy, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "%(count)s peran server cocok" + +#, fuzzy, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "Grup \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "Grup \"%(value)s\" dihapus" + +#, fuzzy, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "Grup \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "%(count)d grup cocok" + msgid "Internationalization messages" msgstr "" @@ -15085,9 +17005,6 @@ msgstr "" msgid "Are you sure you want to rebuild auto membership?" msgstr "" -msgid "Automember rebuild membership task completed" -msgstr "" - msgid "Are you sure you want to proceed with the action?" msgstr "" @@ -15375,6 +17292,10 @@ msgstr "" msgid "Unsaved Changes" msgstr "" +#, python-brace-format +msgid "Edit ${entity}" +msgstr "Sunting ${entity}" + msgid "Hide details" msgstr "" @@ -15421,6 +17342,10 @@ msgstr "" msgid "Return to the main page and retry the operation" msgstr "" +#, python-brace-format +msgid "An error has occurred (${error})" +msgstr "Terjadi kesalahan internal (${error})" + msgid "HTTP Error" msgstr "" @@ -15993,9 +17918,6 @@ msgstr "" msgid "Affiliation Changed" msgstr "" -msgid "CA" -msgstr "" - #, fuzzy msgid "CA Compromise" msgstr " * 2 - cACompromise\n" @@ -16018,12 +17940,21 @@ msgstr "Nama perintah" msgid "the certificate with serial number " msgstr "" +msgid "Expires On" +msgstr "Kedaluwarsa Pada" + msgid "Issued on from" msgstr "" msgid "Issued on to" msgstr "" +msgid "Maximum serial number" +msgstr "Nomor seri maksimum" + +msgid "Minimum serial number" +msgstr "Nomor seri minimum" + msgid "Revoked on from" msgstr "" @@ -16210,9 +18141,6 @@ msgstr "" msgid "Add certificate mapping data" msgstr "" -msgid "Certificate mapping data" -msgstr "" - msgid "Configuration string" msgstr "" @@ -16230,6 +18158,9 @@ msgstr "" msgid "Remove certificate identity mapping rules" msgstr "harus berupa sebuah permintaan penandatanganan sertifikat" +msgid "Version" +msgstr "" + #, fuzzy msgid "Group Options" msgstr "Opsi Layanan" @@ -16246,6 +18177,9 @@ msgstr "Opsi Layanan" msgid "Server Options" msgstr "Opsi Layanan" +msgid "Service Options" +msgstr "Opsi Layanan" + #, fuzzy msgid "User Options" msgstr "Opsi Layanan" @@ -16456,6 +18390,9 @@ msgstr "" msgid "Change to POSIX group" msgstr "" +msgid "Non-POSIX" +msgstr "Non-POSIX" + #, fuzzy msgid "POSIX" msgstr "Non-POSIX" @@ -16711,6 +18648,9 @@ msgstr "" msgid "One-Time Password Present" msgstr "" +msgid "Reset OTP" +msgstr "OTP Reset" + msgid "Reset One-Time Password" msgstr "" @@ -16764,6 +18704,9 @@ msgstr "" msgid "Host unprovisioned" msgstr "" +msgid "Add host group" +msgstr "Tambah grup host" + #, python-brace-format msgid "Add hosts into host group '${primary_key}'" msgstr "" @@ -16958,9 +18901,6 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "" -msgid "Host" -msgstr "" - msgid "Netgroup Settings" msgstr "" @@ -17060,6 +19000,9 @@ msgstr "" msgid "Privilege Settings" msgstr "" +msgid "Public key:" +msgstr "Kunci publik:" + #, fuzzy msgid "Set public key" msgstr "Kunci publik SSH:" @@ -17082,6 +19025,10 @@ msgstr "" msgid "Add password policy" msgstr "" +#, fuzzy +msgid "Password Policy" +msgstr "kata sandi" + msgid "Remove password policies" msgstr "" @@ -17100,6 +19047,9 @@ msgstr "" msgid "Range size" msgstr "" +msgid "Domain SID" +msgstr "SID Domain" + msgid "Secondary RID base" msgstr "" @@ -17132,6 +19082,10 @@ msgstr "" msgid "Remove RADIUS servers" msgstr "" +#, fuzzy +msgid "Realm Domains" +msgstr "Domain" + msgid "Check DNS" msgstr "" @@ -17255,6 +19209,9 @@ msgstr "Nama Prisipal Layanan Kerberos" msgid "SSH public keys" msgstr "Kunci publik SSH:" +msgid "SSH public key:" +msgstr "Kunci publik SSH:" + msgid "Set SSH key" msgstr "" @@ -17265,6 +19222,10 @@ msgstr "" msgid "Are you sure you want to activate ${object}?" msgstr "" +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "${count} pengguna diaktifkan" + msgid "Add stage user" msgstr "" @@ -17284,6 +19245,10 @@ msgstr "" msgid "Are you sure you want to stage selected users?" msgstr "" +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "${count} pengguna digelar" + #, python-brace-format msgid "Are you sure you want to stage ${object}?" msgstr "" @@ -17302,6 +19267,33 @@ msgstr "${count} pengguna digelar" msgid "User categories" msgstr "" +msgid "Add subid" +msgstr "" + +msgid "Assigned subids" +msgstr "" + +msgid "DNA remaining" +msgstr "" + +msgid "SubGID range size" +msgstr "" + +msgid "SubGID range start" +msgstr "" + +msgid "SubUID range size" +msgstr "" + +msgid "SubUID range start" +msgstr "" + +msgid "Remaining subids" +msgstr "" + +msgid "Subordinate ID Statistics" +msgstr "" + msgid "Add sudo command" msgstr "" @@ -17597,6 +19589,14 @@ msgstr "" msgid "Add user '${primary_key}' into sudo rules" msgstr "" +msgid "Auto assign subordinate ids" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to auto-assign a subordinate id to user ${object}?" +msgstr "" + msgid "Contact Settings" msgstr "" @@ -17614,6 +19614,9 @@ msgstr "" msgid "Password expiration" msgstr "Kata sandi terlalu panjang!\n" +msgid "Mailing Address" +msgstr "Alamat Surat" + msgid "Misc. Information" msgstr "" @@ -17655,6 +19658,10 @@ msgid "" "immediately." msgstr "" +#, python-brace-format +msgid "Click to ${action}" +msgstr "Klik untuk ${action}" + msgid "Unlock" msgstr "" @@ -17807,6 +19814,9 @@ msgstr "" msgid "Your password has expired. Please enter a new password." msgstr "" +msgid "Passwords must match" +msgstr "Kata sandi harus cocok" + msgid "Password reset was not successful." msgstr "" @@ -18039,10 +20049,10 @@ msgstr "" msgid "Working" msgstr "" -msgid "Authentication" -msgstr "" +msgid "Audit" +msgstr "Audit" -msgid "Automember" +msgid "Authentication" msgstr "" msgid "Automount" @@ -18071,6 +20081,12 @@ msgstr "" msgid "Role-Based Access Control" msgstr "" +msgid "Subordinate IDs" +msgstr "" + +msgid "Sudo" +msgstr "Sudo" + msgid "Topology" msgstr "" @@ -18116,6 +20132,9 @@ msgstr "" msgid "Prev" msgstr "" +msgid "Undo" +msgstr "Tak Jadi" + msgid "Undo this change." msgstr "" @@ -18133,10 +20152,16 @@ msgstr "" msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" msgstr "" +msgid "Must be a decimal number" +msgstr "Harus angka desimal" + #, fuzzy msgid "Format error" msgstr "galat baca\n" +msgid "Must be an integer" +msgstr "Harus bilangan bulat" + msgid "Not a valid IP address" msgstr "" @@ -18161,6 +20186,9 @@ msgstr "" msgid "Parse error" msgstr "galat baca\n" +msgid "Must be a positive number" +msgstr "Harus angka positif" + #, python-brace-format msgid "'${port}' is not a valid port" msgstr "" @@ -18171,320 +20199,10 @@ msgstr "" msgid "Unsupported value" msgstr "" -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -#, fuzzy -msgid "invalid port number" -msgstr "Nomor seri minimum" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -#, fuzzy -msgid "RADIUS Servers" -msgstr "Nama Server DNS" - -#, fuzzy -msgid "RADIUS Server" -msgstr "Nama Server DNS" - -#, fuzzy, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "%(count)s server cocok" - -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - #, python-format -msgid "Access granted: %s" +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." msgstr "" msgid "kerberos ticket policy settings" @@ -18653,774 +20371,6 @@ msgstr "" msgid "Servers in location" msgstr "" -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -#, fuzzy -msgid "segments" -msgstr "segmen" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "%(count)d host sesuai" - -#, fuzzy, python-format -msgid "%(value)s" -msgstr "harus '%(value)s'" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "%(count)d host sesuai" - -#, fuzzy, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "Host \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "Host \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "Host \"%(value)s\" dimodifikasi" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -msgid "sudo command" -msgstr "" - -msgid "sudo commands" -msgstr "" - -msgid "Sudo Commands" -msgstr "" - -#, fuzzy, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "Menambah token OTP \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "CA \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "CA \"%(value)s\" diubah" - -#, fuzzy, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "%(count)d CA cocok" - -msgid "self service permission" -msgstr "" - -#, fuzzy -msgid "self service permissions" -msgstr "Opsi Layanan" - -#, fuzzy -msgid "Self Service Permissions" -msgstr "Opsi Layanan" - -msgid "Self Service Permission" -msgstr "" - -#, fuzzy, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "%(count)s server cocok" - -#, fuzzy -msgid "A list of ACI values" -msgstr "ACI \"%(value)s\" telah dihapus" - -#, fuzzy -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" -"setidaknya diperlukan salah satu dari: type, filter, subtree, targetgroup, " -"attrs atau memberof" - -msgid "ACI prefix is required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -#, fuzzy, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "ACI \"%(value)s\" telah dibuat" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "groups" -msgstr "" - -msgid "User Group" -msgstr "" - -#, fuzzy -msgid "gid cannot be set for external group" -msgstr "Kata sandi tidak dapat ditata pada host yang didaftarkan." - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, fuzzy -msgid "privileged group" -msgstr "Menghapus grup." - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, fuzzy, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "Grup \"%(value)s\" dihapus" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -msgid "Not a managed group" -msgstr "" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -msgid "automount location" -msgstr "" - -msgid "automount locations" -msgstr "" - -msgid "Automount Locations" -msgstr "" - -msgid "Automount Location" -msgstr "" - -#, fuzzy, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "Menambah token OTP \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "Menghapus token OTP \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "%(count)d token OTP cocok" - -msgid "automount map" -msgstr "" - -msgid "automount maps" -msgstr "" - -msgid "Automount Maps" -msgstr "" - -msgid "Automount Map" -msgstr "" - -#, fuzzy, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "Grup \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "Grup \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "Grup \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "%(count)d grup cocok" - -msgid "Automount key object." -msgstr "" - -msgid "automount key" -msgstr "" - -msgid "automount keys" -msgstr "" - -msgid "Automount Keys" -msgstr "" - -msgid "Automount Key" -msgstr "" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, fuzzy, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "Menambah token OTP \"%(value)s\"" - -#, fuzzy, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "Grup \"%(value)s\" ditambahkan" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "Menghapus token OTP \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "Mengubah token OTP \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "%(count)d token OTP cocok" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, fuzzy, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "ACI \"%(value)s\" telah dihapus" - -#, fuzzy, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "ACI \"%(value)s\" telah dimodifikasi" - -#, fuzzy, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "%(count)d ACI cocok" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -#, fuzzy -msgid "not found" -msgstr "realm tidak ditemukan\n" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -msgid "Delete an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -msgid "Modify an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "%(count)d pengguna cocok" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "%(count)s peran server cocok" - -#, fuzzy, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "Grup \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "Grup \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "Grup \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "%(count)d grup cocok" - msgid "" "\n" "Migration to IPA\n" @@ -19572,217 +20522,1845 @@ msgstr "" msgid "Default group for new users not found" msgstr "" +#, fuzzy +msgid "netgroups" +msgstr "Menghapus grup." + +#, fuzzy +msgid "Netgroup" +msgstr "Menghapus grup." + +#, fuzzy, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "Grup \"%(value)s\" ditambahkan" + +#, python-format msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -msgid "CA category" -msgstr "" - -msgid "CA category the ACL applies to" -msgstr "" - -msgid "CAs" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" msgstr "" #, fuzzy, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "Host \"%(value)s\" ditambahkan" +msgid "Deleted netgroup \"%(value)s\"" +msgstr "Grup \"%(value)s\" dihapus" #, fuzzy, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "CA \"%(value)s\" dihapus" - -msgid "default CA ACL can be only disabled" -msgstr "" +msgid "Modified netgroup \"%(value)s\"" +msgstr "Grup \"%(value)s\" dimodifikasi" #, fuzzy, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "CA \"%(value)s\" diubah" +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "%(count)d grup cocok" -msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgid "One time password commands" msgstr "" -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" +msgid "OTP configuration options" msgstr "" -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "%(count)d CA cocok" - -#, fuzzy, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "CA \"%(value)s\" difungsikan" - -#, fuzzy, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "CA \"%(value)s\" dinonaktifkan" - -#, fuzzy, python-format -msgid "%i user or group added." -msgstr "%i host atau hostgroup ditambahkan." - -#, fuzzy, python-format -msgid "%i users or groups added." -msgstr "%i hosts atau hostgroups ditambahkan." - -#, fuzzy, python-format -msgid "%i user or group removed." -msgstr "%i host atau hostgroup dibuang." - -#, fuzzy, python-format -msgid "%i users or groups removed." -msgstr "%i host atau hostgroup dibuang." - -#, fuzzy, python-format -msgid "%i hosts or hostgroups removed." -msgstr "%i host atau hostgroup dibuang." - -#, python-format -msgid "%i service added." -msgstr "" - -#, python-format -msgid "%i services added." -msgstr "" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, fuzzy, python-format -msgid "%i services removed." -msgstr "%i host atau hostgroup dibuang." - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, fuzzy, python-format -msgid "%i profiles removed." -msgstr "%i host atau hostgroup dibuang." - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." +msgid "OTP Configuration" msgstr "" #, fuzzy -msgid "operation not defined" -msgstr "Operasi gagal: %s\n" +msgid "" +"\n" +"OTP Tokens\n" +msgstr "Token OTP" -#, python-format -msgid "not allowed to perform operation: %s" +msgid "" +"\n" +"Manage OTP tokens.\n" msgstr "" -msgid "No such virtual command" +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +#, fuzzy +msgid "OTP token" +msgstr "Token OTP" + +#, fuzzy +msgid "OTP tokens" +msgstr "Token OTP" + +#, fuzzy +msgid "OTP Tokens" +msgstr "Token OTP" + +msgid "OTP Token" +msgstr "Token OTP" + +msgid "URI" +msgstr "" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "Menambah token OTP \"%(value)s\"" + +msgid "cannot be empty" +msgstr "" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "Menghapus token OTP \"%(value)s\"" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "Mengubah token OTP \"%(value)s\"" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "%(count)d token OTP cocok" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"If the user authentication method is set to password+OTP, the user should\n" +"pass the --otp option when resetting the password.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To reset your own password when password+OTP is set as authentication " +"method:\n" +" ipa passwd --otp\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +msgid "The OTP if the user has a token configured" +msgstr "" + +#, fuzzy, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "Mengubah keadaan server \"%(value)s\"." + +msgid "" +"\n" +"Permissions\n" +msgstr "" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +#, fuzzy +msgid "" +"\n" +"Managed permissions\n" +msgstr "ipa-getkeytab memiliki izin yang buruk?\n" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "must be enclosed in parentheses" +msgstr "mesti diapit kurung" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "" + +#, python-format +msgid "Deprecated; use %s" +msgstr "Usang; gunakan %s" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, python-format +msgid "Entry %s not found" +msgstr "Entri %s tidak ditemukan" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, fuzzy, python-format +msgid "option was renamed; use %s" +msgstr "Usang; gunakan %s" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, fuzzy, python-format +msgid "%s: group not found" +msgstr "Entri %s tidak ditemukan" + +msgid "target and targetgroup are mutually exclusive" +msgstr "" + +msgid "subtree and type are mutually exclusive" +msgstr "" + +#, fuzzy +msgid "Bad search filter" +msgstr "Berkas induk" + +#, python-format +msgid "Entry %s does not exist" +msgstr "Entri %s tidak ada" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, fuzzy, python-format +msgid "Added permission \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +msgid "cannot delete managed permissions" +msgstr "" + +#, fuzzy, python-format +msgid "ACI of permission %s was not found" +msgstr "ACI dengan nama \"%s\" tidak ditemukan" + +#, fuzzy, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "%(count)d pengguna cocok" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "pkinit" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "%(count)s server cocok" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, fuzzy, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "Segmen \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "Segmen \"%(value)s\" dihapus" + +#, fuzzy, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "Segmen \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "%(count)s server cocok" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +#, fuzzy +msgid "invalid port number" +msgstr "Nomor seri minimum" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +#, fuzzy +msgid "RADIUS Servers" +msgstr "Nama Server DNS" + +#, fuzzy +msgid "RADIUS Server" +msgstr "Nama Server DNS" + +#, fuzzy, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +#, fuzzy, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "%(count)s server cocok" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +#, fuzzy +msgid "Realm domains" +msgstr "Nama realm" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "Role" +msgstr "" + +#, fuzzy, python-format +msgid "Added role \"%(value)s\"" +msgstr "Grup \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "Grup \"%(value)s\" dihapus" + +#, fuzzy, python-format +msgid "Modified role \"%(value)s\"" +msgstr "Grup \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "%(count)d grup cocok" + +msgid "" +"\n" +"API Schema\n" +msgstr "" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +msgid "Documentation" +msgstr "" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +msgid "Help topic" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +#, fuzzy +msgid "Method name" +msgstr "namahost" + +msgid "Display information about a command." +msgstr "" + +msgid "Search for commands." +msgstr "" + +msgid "Return command defaults" +msgstr "" + +#, fuzzy, python-brace-format +msgid "{oname}: {command_name} not found" +msgstr "realm tidak ditemukan\n" + +msgid "Display information about a class." +msgstr "" + +msgid "Search for classes." +msgstr "" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +msgid "CLI name" +msgstr "Nama perintah" + +msgid "Confirm (password)" +msgstr "Konfirmasi (kata sandi)" + +msgid "Default" +msgstr "" + +msgid "Default from" +msgstr "" + +msgid "Label" +msgstr "" + +#, fuzzy +msgid "Convert on server" +msgstr "Nama host peladen ini" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" +msgstr "" + +#, fuzzy, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, fuzzy, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" + +msgid "Display information about a command output." +msgstr "" + +msgid "Search for command outputs." +msgstr "" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "self service permission" +msgstr "" + +#, fuzzy +msgid "self service permissions" +msgstr "Opsi Layanan" + +#, fuzzy +msgid "Self Service Permissions" +msgstr "Opsi Layanan" + +msgid "Self Service Permission" +msgstr "" + +#, fuzzy, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +#, fuzzy, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "%(count)s server cocok" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +msgid "SELinux User Map rule" +msgstr "" + +msgid "SELinux User Map rules" +msgstr "" + +msgid "SELinux User Maps" +msgstr "" + +msgid "SELinux User Map" +msgstr "" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "Aturan HBAC %(rule)s tidak ditemukan" + +#, fuzzy, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +#, fuzzy, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "%(count)d pengguna cocok" + +#, fuzzy, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "CA \"%(value)s\" difungsikan" + +#, fuzzy, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "CA \"%(value)s\" dinonaktifkan" + +#, fuzzy +msgid "" +"\n" +"IPA server roles\n" +msgstr "Server IPA yang akan digunakan" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +#, fuzzy +msgid "server role" +msgstr "Nama Peladen" + +#, fuzzy +msgid "server roles" +msgstr "Nama Peladen" + +#, fuzzy +msgid "IPA Server Roles" +msgstr "Server IPA yang akan digunakan" + +#, fuzzy +msgid "IPA Server Role" +msgstr "Server IPA yang akan digunakan" + +#, fuzzy +msgid "IPA server role name" +msgstr "Server IPA yang akan digunakan" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "%(count)s peran server cocok" + +msgid "Include IPA master entries" +msgstr "" + +msgid "IPA role name" +msgstr "" + +#, fuzzy, python-brace-format +msgid "{role}: role not found" +msgstr "realm tidak ditemukan\n" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "{attr}: tidak ada atribut seperti itu" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +#, python-format +msgid "authentication indicators not allowed in service \"%s\"" +msgstr "" + +#, fuzzy +msgid "Malformed principal" +msgstr "Tidak dapat mengurai prinsipal\n" + +msgid "{} is required by the IPA master" +msgstr "" + +msgid "service" +msgstr "" + +#, fuzzy +msgid "services" +msgstr "Opsi Layanan" + +#, fuzzy +msgid "Service principal alias" +msgstr "Nama Prisipal Layanan Kerberos" + +msgid "Base-64 encoded service certificate" +msgstr "" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +msgid "Add a new IPA service." +msgstr "" + +#, fuzzy, python-format +msgid "Added service \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +msgid "force principal name even if host not in DNS" +msgstr "" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +msgid "Add a new SMB service." +msgstr "" + +msgid "SMB service NetBIOS name" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +#, fuzzy, python-format +msgid "Modified service \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "%(count)s server cocok" + +#, fuzzy, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "CA \"%(value)s\" dinonaktifkan" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to a service" +msgstr "" + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "Remove principal alias from a service" +msgstr "Hapus semua prinsipal di realm ini" + +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +#, fuzzy +msgid "Member principals" +msgstr "Menghapus prinsipal %s\n" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +#, fuzzy +msgid "service delegation rules" +msgstr "Opsi Layanan" + +#, fuzzy +msgid "Service delegation rules" +msgstr "Opsi Layanan" + +#, fuzzy +msgid "Service delegation rule" +msgstr "Opsi Layanan" + +#, fuzzy, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "Segmen \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +msgid "privileged service delegation rule" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "%(count)s peran server cocok" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +#, fuzzy +msgid "Service delegation targets" +msgstr "Opsi Layanan" + +#, fuzzy +msgid "Service delegation target" +msgstr "Opsi Layanan" + +#, fuzzy, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "Segmen \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "Segmen \"%(value)s\" dihapus" + +msgid "privileged service delegation target" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "%(count)s peran server cocok" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +#, fuzzy +msgid "stage users" +msgstr "pengguna" + +#, fuzzy, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +#, fuzzy, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "%(count)d pengguna cocok" + +#, fuzzy, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +#, fuzzy +msgid "Entry RDN is not 'uid'" +msgstr "Entri %s tidak ditemukan" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, fuzzy, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "kunci bernama %(key)s sudah ada" + +#, fuzzy, python-format +msgid "Stage user %s activated" +msgstr "${count} pengguna diaktifkan" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, fuzzy, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Subordinate ids\n" +"\n" +"Manage subordinate user and group ids for users\n" +"\n" +"EXAMPLES:\n" +"\n" +" Auto-assign a subordinate id range to current user\n" +" ipa subid-generate\n" +"\n" +" Auto-assign a subordinate id range to user alice:\n" +" ipa subid-generate --owner=alice\n" +"\n" +" Find subordinate ids for user alice:\n" +" ipa subid-find --owner=alice\n" +"\n" +" Match entry by any subordinate uid in range:\n" +" ipa subid-match --subuid=2147483649\n" +msgstr "" + +msgid "Subordinate id" +msgstr "" + +msgid "Subordinate ids" +msgstr "" + +#, fuzzy +msgid "Subordinate id description" +msgstr "Opsi Layanan" + +msgid "Owning user of subordinate id entry" +msgstr "" + +msgid "Start value for subordinate user ID (subuid) range" +msgstr "" + +msgid "Subordinate user ID count" +msgstr "" + +msgid "Start value for subordinate group ID (subgid) range" +msgstr "" + +msgid "Subordinate group ID count" +msgstr "" + +#, fuzzy, python-format +msgid "" +"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." +msgstr "kunci bernama %(key)s sudah ada" + +#, python-format +msgid "'%(dn)s is not a valid user" +msgstr "" + +msgid "subgidnumber must be equal to subuidnumber" +msgstr "" + +msgid "Add a new subordinate id." +msgstr "" + +#, fuzzy, python-format +msgid "Added subordinate id \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +#, fuzzy +msgid "Delete a subordinate id." +msgstr "harus merupakan sebuah sertifikat" + +#, fuzzy, python-format +msgid "Deleted subordinate id \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +#, fuzzy +msgid "Modify a subordinate id." +msgstr "Memodifikasi suatu hostgroup." + +#, fuzzy, python-format +msgid "Modified subordinate id \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +msgid "Search for subordinate id." +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d subordinate id matched" +msgid_plural "%(count)d subordinate ids matched" +msgstr[0] "%(count)s server cocok" + +msgid "Display information about a subordinate id." +msgstr "" + +msgid "Generate and auto-assign subuid and subgid range to user entry" +msgstr "" + +msgid "Match users by any subordinate uid in their range" +msgstr "" + +msgid "SubUID match" +msgstr "" + +msgid "Match value for subordinate user ID" +msgstr "" + +msgid "Subordinate id statistics" +msgstr "" + +#, python-format +msgid "%(remaining)i remaining subordinate id ranges" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +msgid "sudo command" +msgstr "" + +msgid "sudo commands" +msgstr "" + +msgid "Sudo Commands" +msgstr "" + +#, fuzzy, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "Menambah token OTP \"%(value)s\"" + +#, fuzzy, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "CA \"%(value)s\" dihapus" + +#, fuzzy, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "CA \"%(value)s\" diubah" + +#, fuzzy, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "%(count)d CA cocok" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, fuzzy, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "Grup \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "Grup \"%(value)s\" dihapus" + +#, fuzzy, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "Grup \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "%(count)d grup cocok" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "segmen" + +#, fuzzy +msgid "segments" +msgstr "segmen" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "%(count)d host sesuai" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "Segmen \"%(value)s\" ditambahkan" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "Segmen \"%(value)s\" dihapus" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "Segmen \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +msgid "%(value)s" +msgstr "harus '%(value)s'" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "%(count)d host sesuai" + +#, fuzzy, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "Host \"%(value)s\" dihapus" + +#, fuzzy, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "Host \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "Host \"%(value)s\" dimodifikasi" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" msgstr "" msgid "" @@ -19950,13 +22528,6 @@ msgid "" " " msgstr "" -#, fuzzy -msgid "Active Directory domain range" -msgstr "Domain Active Directory" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - msgid "Type of trusted domain ID range, one of allowed values" msgstr "" @@ -20128,6 +22699,9 @@ msgstr "CA \"%(value)s\" diubah" msgid "SID" msgstr "" +msgid "sidgen_was_run" +msgstr "sidgen_was_run" + msgid "" "This command relies on the existence of the \"editors\" group, but this " "group was not found." @@ -20193,716 +22767,28 @@ msgid "" "itself" msgstr "" -msgid "" -"\n" -"DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -#, fuzzy -msgid "DNS server" -msgstr "Nama Server DNS" - -#, fuzzy -msgid "DNS servers" -msgstr "Nama Server DNS" - -#, fuzzy -msgid "DNS Servers" -msgstr "Nama Server DNS" - -#, fuzzy -msgid "DNS Server" -msgstr "Nama Server DNS" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, fuzzy, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -msgid "Search for DNS servers." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "%(count)s server cocok" - -#, fuzzy -msgid "IPA DNS Server is not installed" -msgstr "Server IPA yang akan digunakan" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, fuzzy, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -msgid "Delete a DNS server" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -#, fuzzy -msgid "Base-64 encoded host certificate" -msgstr "harus merupakan sebuah sertifikat" - -#, fuzzy -msgid "SSH public key fingerprint" -msgstr "Kunci publik SSH:" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, fuzzy, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "CA \"%(value)s\" dinonaktifkan" - -#, fuzzy, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "Host \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "Host \"%(value)s\" dimodifikasi" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "Host \"%(value)s\" ditambahkan" - -#, fuzzy -msgid "Remove principal alias from a host entry" -msgstr "Hapus semua prinsipal di realm ini" - -#, fuzzy, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "Host \"%(value)s\" dimodifikasi" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "" - -msgid "HBAC Services" -msgstr "" - -msgid "HBAC Service" -msgstr "" - -#, fuzzy, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "%(count)s server cocok" - -msgid "HBAC service group" -msgstr "" - -#, fuzzy -msgid "HBAC service groups" -msgstr "Grup layanan/layanan gagal" - -#, fuzzy -msgid "HBAC Service Groups" -msgstr "Server IPA yang akan digunakan" - -msgid "HBAC Service Group" -msgstr "" - -#, fuzzy, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "Grup \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "Grup \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "Grup \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "%(count)d grup cocok" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -msgid "Delegations" -msgstr "" - -msgid "Delegation" -msgstr "" - -#, fuzzy, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "Segmen \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "Segmen \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "Segmen \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "%(count)d grup cocok" +msgid "users" +msgstr "pengguna" #, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, fuzzy, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "Segmen \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "Segmen \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "Segmen \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "%(count)s server cocok" - -msgid "Role" -msgstr "" - -#, fuzzy, python-format -msgid "Added role \"%(value)s\"" -msgstr "Grup \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "Grup \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Modified role \"%(value)s\"" -msgstr "Grup \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "%(count)d grup cocok" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -msgid "Added ID range \"%(value)s\"" +msgid "Added user \"%(value)s\"" msgstr "Pengguna \"%(value)s\" ditambahkan" -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "ACI \"%(value)s\" telah dihapus" - -#, fuzzy, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "%(count)d pengguna cocok" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "ACI \"%(value)s\" telah dimodifikasi" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, fuzzy -msgid "netgroups" -msgstr "Menghapus grup." - -#, fuzzy -msgid "Netgroup" -msgstr "Menghapus grup." - -#, fuzzy, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "Grup \"%(value)s\" ditambahkan" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "Grup \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "Grup \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "%(count)d grup cocok" - msgid "Default group for new users is not POSIX" msgstr "" +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + #, python-format msgid "%s: user is already preserved" msgstr "" +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + #, fuzzy, python-format msgid "Undeleted user account \"%(value)s\"" msgstr "Pengguna \"%(value)s\" dihapus" @@ -20998,12 +22884,6 @@ msgstr "Pengguna \"%(value)s\" ditambahkan" msgid "Removed certificates from user \"%(value)s\"" msgstr "Pengguna \"%(value)s\" dimodifikasi" -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - msgid "Add new principal alias to the user entry" msgstr "" @@ -21019,510 +22899,6 @@ msgstr "Hapus semua prinsipal di realm ini" msgid "Removed aliases from user \"%(value)s\"" msgstr "Pengguna \"%(value)s\" dimodifikasi" -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -#, fuzzy -msgid "Auto Membership is not configured" -msgstr "Aturan anggota otomatis: %s tidak ditemukan!" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "Host \"%(value)s\" ditambahkan" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "Hostgroup \"%(value)s\" dihapus" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "%(count)d pengguna cocok" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" -msgstr "" - -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -msgid "SELinux User Maps" -msgstr "" - -msgid "SELinux User Map" -msgstr "" - -#, fuzzy, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "%(count)d pengguna cocok" - -#, fuzzy, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "CA \"%(value)s\" difungsikan" - -#, fuzzy, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "CA \"%(value)s\" dinonaktifkan" - msgid "" "\n" "Vaults\n" @@ -21768,6 +23144,12 @@ msgid "" " " msgstr "" +msgid "vaultcontainer" +msgstr "vaultcontainer" + +msgid "vaultcontainers" +msgstr "vaultcontainers" + #, fuzzy msgid "Vault Containers" msgstr "vaultcontainers" @@ -21863,109 +23245,160 @@ msgid "Checks if any of the servers has the KRA service enabled" msgstr "" #, fuzzy -msgid "Member service groups" -msgstr "Grup layanan/layanan gagal" +msgid "operation not defined" +msgstr "Operasi gagal: %s\n" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" #, fuzzy -msgid "Member HBAC service groups" -msgstr "Grup layanan/layanan gagal" +msgid "password policy" +msgstr "kata sandi" -msgid "Member ID user overrides" +#, fuzzy +msgid "password policies" +msgstr "kata sandi" + +msgid "Password Policies" msgstr "" -msgid "Indirect Member ID user overrides" +msgid "Max repeat" msgstr "" -msgid "Indirect Member permissions" +msgid "Maximum number of same consecutive characters" msgstr "" -msgid "Indirect Member HBAC service" +msgid "Max sequence" msgstr "" -msgid "Indirect Member HBAC service group" +msgid "The max. length of monotonic character sequences (abcd)" msgstr "" -msgid "Invalid format. Should be name=value" +msgid "Dictionary check" msgstr "" -msgid "An IPA master host cannot be deleted or disabled" +msgid "Check if the password is a dictionary word" msgstr "" -msgid "entry" +msgid "User check" msgstr "" -msgid "entries" +msgid "Check if the password contains the username" msgstr "" -msgid "Entry" -msgstr "" - -#, fuzzy, python-format -msgid "container entry (%(container)s) not found" -msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" - -#, fuzzy, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" - -#, fuzzy, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "kunci bernama %(key)s sudah ada" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" msgstr "" -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." +msgid "Maximum password life must be equal to or greater than the minimum." msgstr "" -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" +#, fuzzy +msgid "cannot delete global password policy" +msgstr "prioritas tidak dapat ditetapkan pada kebijakan global" -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" +msgid "priority cannot be set on global policy" +msgstr "prioritas tidak dapat ditetapkan pada kebijakan global" #, fuzzy msgid "" @@ -22115,6 +23548,10 @@ msgstr "" msgid "Ignoring topology connectivity errors." msgstr "" +#, fuzzy, python-format +msgid "Failed to remove server from security domain: %s" +msgstr "galat pada server '%(server)s': %(error)s" + msgid "Server has already been deleted" msgstr "" @@ -22137,6 +23574,10 @@ msgstr "" msgid "Server state" msgstr "Nama Peladen" +#, python-format +msgid "Changed server state of \"%(value)s\"." +msgstr "Mengubah keadaan server \"%(value)s\"." + msgid "Cannot hide CA renewal master." msgstr "" @@ -22149,1347 +23590,192 @@ msgstr "" msgid "" "\n" -"Manage Certificate Authorities\n" +"Sudo Rules\n" msgstr "" msgid "" "\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" msgstr "" msgid "" "\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" msgstr "" msgid "" "\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" +"Each option needs to be added separately and no validation is done whether\n" +"the option is known by sudo or is in a valid format. Environment variables\n" +"also need to be set individually. For example env_keep=\"FOO BAR\" in " +"sudoers\n" +"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" +"+=BAR.\n" msgstr "" msgid "" "\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" msgstr "" msgid "" "\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" msgstr "" msgid "" "\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" msgstr "" msgid "" "\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" msgstr "" msgid "" "\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" "\n" -" ipa ca-del puppet\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" msgstr "" -msgid "Certificate Authority" +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" msgstr "" -msgid "Certificate Authorities" +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" msgstr "" -msgid "Name for referencing the CA" +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" msgstr "" -msgid "Description of the purpose of the CA" +msgid "" +"\n" +" Set multiple default Sudo options:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate' --" +"sudooption mail_badpass\n" msgstr "" -msgid "Authority ID" +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" msgstr "" -msgid "Dogtag Authority ID" +msgid "this option has been deprecated." msgstr "" -msgid "Subject DN" +msgid "sudo rules" +msgstr "" + +msgid "Sudo Rules" msgstr "" #, fuzzy -msgid "Issuer Distinguished Name" -msgstr "Distinguished Name Subjek" - -msgid "Search for CAs." -msgstr "" - -msgid "Display the properties of a CA." -msgstr "" - -msgid "Create a CA." -msgstr "" +msgid "Sudo Rule" +msgstr "Sudo" #, python-format -msgid "Insufficient 'add' privilege for entry '%s'." +msgid "order must be a unique value (%(order)d already used by %(rule)s)" msgstr "" +#, fuzzy, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +#, fuzzy, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + #, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -#, fuzzy -msgid "Delete a CA (must be disabled first)." -msgstr "Harus dinon-fungsikan terlebih dahulu" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -msgid "IPA CA cannot be deleted" -msgstr "" - -#, fuzzy -msgid "Modify CA configuration." -msgstr "Memodifikasi suatu hostgroup." - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -msgid "Disable a CA." -msgstr "" - -#, fuzzy -msgid "IPA CA cannot be disabled" -msgstr "Akun dinonaktifkan" - -msgid "Enable a CA." -msgstr "" - msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" msgstr "" #, fuzzy -msgid "stage users" +msgid "command" +msgstr "Nama perintah" + +#, fuzzy +msgid "commands" +msgstr "Nama perintah" + +msgid "runAs user" +msgstr "" + +#, fuzzy +msgid "runAs users" msgstr "pengguna" -#, fuzzy, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -#, fuzzy -msgid "Entry RDN is not 'uid'" -msgstr "Entri %s tidak ditemukan" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, fuzzy, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "kunci bernama %(key)s sudah ada" - -#, fuzzy, python-format -msgid "Stage user %s activated" -msgstr "${count} pengguna diaktifkan" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, fuzzy, python-format -msgid "manager %(manager)s not found" -msgstr "Entri %s tidak ditemukan" - -#, fuzzy -msgid "Issuer of the certificate" -msgstr "harus merupakan sebuah sertifikat" - -#, fuzzy -msgid "Subject of the certificate" -msgstr "harus merupakan sebuah sertifikat" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -#, fuzzy -msgid "" -"\n" -"OTP Tokens\n" -msgstr "Token OTP" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgid "group runAs" msgstr "" #, fuzzy -msgid "OTP token" -msgstr "Token OTP" - -#, fuzzy -msgid "OTP tokens" -msgstr "Token OTP" - -#, fuzzy -msgid "OTP Tokens" -msgstr "Token OTP" - -msgid "URI" -msgstr "" - -msgid "cannot be empty" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "invalid IP network format" -msgstr "" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -msgid "invalid address format" -msgstr "" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -msgid "flags value: allowed interval 0-255" -msgstr "" - -msgid "iterations value: allowed interval 0-65535" -msgstr "" - -#, python-format -msgid "salt value: %(err)s" -msgstr "" - -msgid "invalid domain-name: not fully qualified" -msgstr "" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" +msgid "runAs groups" +msgstr "Tambah grup host" #, fuzzy, python-format -msgid "DNS zone %(zone)s not found" -msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "%(count)d pengguna cocok" -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" msgstr "" #, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgid "RunAsUser does not accept '%(name)s' as a user name" msgstr "" #, python-format -msgid "%s record" +msgid "RunAsUser does not accept '%(name)s' as a group name" msgstr "" #, python-format -msgid "Raw %s records" +msgid "RunAsGroup does not accept '%(name)s' as a group name" msgstr "" -#, fuzzy, python-format -msgid "%s Record" -msgstr "Tipe record" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -msgid "Invalid number of parts!" -msgstr "" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -msgid "Create reverse" -msgstr "" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" - -msgid "Exchanger" -msgstr "" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -msgid "Priority (order)" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Relative weight for entries with the same priority." -msgstr "" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Target Uniform Resource Identifier" -msgstr "" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" - -msgid "Managedby permission" -msgstr "" - -msgid "cannot be used when a zone is specified" -msgstr "" - -#, fuzzy -msgid "Only one zone type is allowed per zone name" -msgstr "Hanya satu nilai yang diperbolehkan" - -#, fuzzy, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "Segmen \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "Segmen \"%(value)s\" dihapus" - -msgid "DNS zone" -msgstr "" - -msgid "DNS zones" -msgstr "" - -msgid "DNS Zones" -msgstr "" - -msgid "DNS Zone" -msgstr "" - -msgid "Default time to live" -msgstr "" - -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -msgid "setting Authoritative nameserver" -msgstr "" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -msgid "" -msgstr "" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "Host \"%(value)s\" dihapus" - -msgid "is required" -msgstr "" - -#, fuzzy, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "CA \"%(value)s\" dinonaktifkan" - -#, fuzzy, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "CA \"%(value)s\" difungsikan" - -msgid "DNS resource record" -msgstr "" - -msgid "DNS resource records" -msgstr "" - -msgid "DNS Resource Records" -msgstr "" - -msgid "DNS Resource Record" -msgstr "" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -msgid "only master zones can contain records" -msgstr "" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -msgid "DNS zone root record cannot be renamed" -msgstr "" - -msgid "DNS records can be only updated one at a time" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "" - -#, fuzzy, python-format -msgid "Found '%(value)s'" -msgstr "harus '%(value)s'" - -#, fuzzy, python-format -msgid "Host '%(host)s' not found" -msgstr "Entri %s tidak ditemukan" - -msgid "DNS configuration options" -msgstr "" - -msgid "DNS Global Configuration" -msgstr "" - -msgid "IPA DNS version" -msgstr "" - -msgid "List of IPA masters configured as DNS servers" -msgstr "" - -msgid "IPA server configured as DNSSec key master" -msgstr "" - -msgid "Global DNS configuration is empty" -msgstr "" - -msgid "DNS forward zone" -msgstr "" - -msgid "DNS forward zones" -msgstr "" - -#, fuzzy -msgid "DNS Forward Zones" -msgstr "Forwarder" - -#, fuzzy -msgid "DNS Forward Zone" -msgstr "Forwarder" - -msgid "Please specify forwarders." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "Grup \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "CA \"%(value)s\" dinonaktifkan" - -#, fuzzy, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "CA \"%(value)s\" difungsikan" - -msgid "IPA DNS records" -msgstr "" - -msgid "IPA location records" -msgstr "" - -msgid "Update location and IPA server DNS records" -msgstr "" - -#, fuzzy -msgid "Result of the command" -msgstr "Suatu penjelasan atas perintah ini" - -msgid "Dry run" -msgstr "" - -msgid "Do not update records only return expected records" -msgstr "" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, fuzzy, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "ACI \"%(value)s\" telah dihapus" - -#, fuzzy, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "ACI \"%(value)s\" telah dimodifikasi" - -#, fuzzy, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "%(count)d ACI cocok" - -#, fuzzy, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "CA \"%(value)s\" difungsikan" - -#, fuzzy, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "CA \"%(value)s\" dinonaktifkan" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -msgid "Certificate Profile" -msgstr "" - -msgid "Certificate Profiles" -msgstr "" - -msgid "Profile configuration" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "%(count)d grup cocok" - -#, fuzzy, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "CA \"%(value)s\" dibuat" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "Grup \"%(value)s\" dihapus" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, fuzzy, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -#, fuzzy -msgid "Certificate profiles cannot be renamed" -msgstr "Operasi sertifikat tidak dapat diselesaikan: %(error)s" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -#, fuzzy -msgid "must be enabled only on a single master" -msgstr "mesti diapit kurung" - #, fuzzy msgid "Request must be a dict" msgstr "harus merupakan sebuah sertifikat" @@ -23513,6 +23799,18 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +#, fuzzy +msgid "must be enabled only on a single master" +msgstr "mesti diapit kurung" + #, python-format msgid "" "\n" @@ -23532,35 +23830,6 @@ msgstr "" msgid "Topology does not allow server %(server)s to replicate with servers:" msgstr "" -msgid "Trusting forest" -msgstr "" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Unknown" -msgstr "" - -#, fuzzy -msgid "Non-Active Directory domain" -msgstr "Domain Active Directory" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - msgid "" "\n" "Classes to manage trust joins using DCE-RPC calls\n" @@ -23716,6 +23985,40 @@ msgstr "" msgid "RADIUS proxy server with name \"%s\" already exists" msgstr "" +msgid "must be at least 1" +msgstr "setidaknya harus 1" + +#, fuzzy +msgid "Out of memory\n" +msgstr "Kehabisan memori \n" + +msgid "Warning unrecognized encryption type.\n" +msgstr "" + +msgid "Warning unrecognized salt type.\n" +msgstr "" + +#, fuzzy +msgid "Out of memory!?\n" +msgstr "Kehabisan memori!\n" + +msgid "Enctype comparison failed!\n" +msgstr "" + +msgid "Password is too long!\n" +msgstr "Kata sandi terlalu panjang!\n" + +#, fuzzy +msgid "Failed to create random key!\n" +msgstr "Gagal membuat kontrol!\n" + +#, fuzzy +msgid "Failed to create key!\n" +msgstr "Gagal membuat kontrol!\n" + +msgid "Bad or unsupported salt type.\n" +msgstr "" + #, fuzzy, c-format msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" msgstr "Tak bisa menginisialisasi pustaka ldap!\n" @@ -23743,31 +24046,3 @@ msgstr "" #, fuzzy msgid "Unable to initialize STARTTLS session\n" msgstr "Tak bisa menginisialisasi pustaka ldap!\n" - -#, fuzzy -msgid "Out of memory\n" -msgstr "Kehabisan memori \n" - -msgid "Warning unrecognized encryption type.\n" -msgstr "" - -msgid "Warning unrecognized salt type.\n" -msgstr "" - -#, fuzzy -msgid "Out of memory!?\n" -msgstr "Kehabisan memori!\n" - -msgid "Enctype comparison failed!\n" -msgstr "" - -#, fuzzy -msgid "Failed to create random key!\n" -msgstr "Gagal membuat kontrol!\n" - -#, fuzzy -msgid "Failed to create key!\n" -msgstr "Gagal membuat kontrol!\n" - -msgid "Bad or unsupported salt type.\n" -msgstr "" diff --git a/po/ja.po b/po/ja.po index 972eef7c6..65348ac8c 100644 --- a/po/ja.po +++ b/po/ja.po @@ -18,423 +18,419 @@ msgstr "" "Plural-Forms: nplurals=1; plural=0\n" "X-Generator: Zanata 4.6.2\n" -#, python-format -msgid "%(desc)s: %(info)s" -msgstr "%(desc)s: %(info)s" +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "" -#, python-format -msgid "%(info)s" -msgstr "%(info)s" +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "" -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" - -#, python-format -msgid "%s Record" -msgstr "%s レコード" - -#, python-format -msgid "%s record" -msgstr "%s レコード" - -msgid "A list of ACI values" -msgstr "ACI 値の一覧" - -msgid "ACI name" -msgstr "ACI 名" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "名前 \"%s\" の ACI が見つかりませんでした" - -msgid "ACIs" -msgstr "ACI" - -msgid "Account" -msgstr "アカウント" - -msgid "Account Status" -msgstr "アカウント状態" - -msgid "Add a new HBAC service group." -msgstr "新しい HBAC サービスグループを追加します。" - -msgid "Add a new HBAC service." -msgstr "新しい HBAC サービスを追加します。" - -msgid "Add a new host." -msgstr "新しいホストを追加します。" - -msgid "Add a new role." -msgstr "新しい役割を追加します。" - -msgid "Add a new user." -msgstr "新しいユーザーを追加します。" - -msgid "Add members to an HBAC service group." -msgstr "HBAC サービスグループにメンバーを追加します。" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "Base64 形式のデコードに失敗: %(reason)s" - -msgid "Certificates" -msgstr "証明書" - -msgid "Command not implemented" -msgstr "コマンドが実装されていません" - -msgid "Create a new HBAC rule." -msgstr "新しい HBAC ルールを作成します。" - -msgid "Create a new group." -msgstr "新しいグループを作成します。" - -msgid "Default host group" -msgstr "標準のホストグループ" - -msgid "Default user group" -msgstr "標準のユーザーグループ" - -msgid "Delete a host." -msgstr "ホストを削除します。" - -msgid "Delete a role." -msgstr "役割を削除します。" - -msgid "Delete a user." -msgstr "ユーザーを削除します。" - -msgid "Delete an HBAC rule." -msgstr "HBAC ルールを削除します。" - -msgid "Delete an HBAC service group." -msgstr "HBAC サービスグループを削除します。" - -msgid "Delete an existing HBAC service." -msgstr "既存の HBAC サービスを削除します。" - -msgid "Delete group." -msgstr "グループを削除します。" - -msgid "Disable a user account." -msgstr "ユーザーアカウントを無効化します。" - -msgid "Disable an HBAC rule." -msgstr "HBAC ルールを無効化します。" - -msgid "Display information about a role." -msgstr "役割に関する情報を表示します。" - -msgid "Display information about an HBAC service group." -msgstr "HBAC サービスグループに関する情報を表示します。" - -msgid "Display information about an HBAC service." -msgstr "HBAC サービスに関する情報を表示します。" - -msgid "Display the properties of an HBAC rule." -msgstr "HBAC ルールのプロパティーを表示します。" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "${entity} の編集" - -msgid "Enable a user account." -msgstr "ユーザーアカウントを有効化します。" - -msgid "Enable an HBAC rule." -msgstr "HBAC ルールを有効化します。" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "確認のため再び %(label)s を入力してください: " - -msgid "Filter" -msgstr "フィルター" - -msgid "Fingerprint" -msgstr "フィンガープリント" - -msgid "Fingerprint (SHA1)" -msgstr "フィンガープリント (SHA1)" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "グループ '%s' が存在しません" - -msgid "Group Options" -msgstr "グループオプション" - -msgid "HBAC Service" -msgstr "HBAC サービス" - -msgid "HBAC Service Group" -msgstr "HBAC サービスグループ" - -msgid "HBAC Service Groups" -msgstr "HBAC サービスグループ" - -msgid "HBAC service group" -msgstr "HBAC サービスグループ" - -msgid "HBAC service groups" -msgstr "HBAC サービスグループ" - -msgid "HBAC services" -msgstr "HBAC サービス" - -msgid "HTTP Error" -msgstr "HTTP エラー" - -msgid "Host" -msgstr "ホスト" - -msgid "Host Group" -msgstr "ホストグループ" - -msgid "IP Address" -msgstr "IP アドレス" - -msgid "IPA Error" -msgstr "IPA エラー" - -msgid "Internal Error" -msgstr "内部エラー" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "無効な JSON-RPC リクエスト: %(error)s" - -msgid "Kerberos Key" -msgstr "Kerberos キー" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Kerberos エラー: %(major)s/%(minor)s" - -msgid "Member of a group" -msgstr "グループのメンバー" - -msgid "Modify a group." -msgstr "グループを変更します。" - -msgid "Modify a role." -msgstr "役割を変更します。" - -msgid "Modify a user." -msgstr "ユーザーを変更します。" - -msgid "Modify an HBAC rule." -msgstr "HBAC ルールを変更します。" - -msgid "Modify an HBAC service group." -msgstr "HBAC サービスグループを変更します。" - -msgid "Modify an HBAC service." -msgstr "HBAC サービスを変更します。" - -msgid "Options" -msgstr "オプション" - -msgid "Out of memory\n" +#, fuzzy, c-format +msgid "out of memory\n" msgstr "メモリー不足\n" -msgid "Out of memory!?\n" -msgstr "メモリー不足!?\n" +#, c-format +msgid "read error\n" +msgstr "" -msgid "Password Policies" -msgstr "パスワードポリシー" +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" -msgid "Passwords do not match" -msgstr "パスワードが違います" +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" -msgid "Passwords do not match!" -msgstr "パスワードが違います。" +#, c-format +msgid "Removing principal %s\n" +msgstr "" -msgid "Permissions" -msgstr "権限" +#, c-format +msgid "Failed to open keytab\n" +msgstr "" -msgid "Port" -msgstr "ポート" +#, c-format +msgid "principal not found\n" +msgstr "" -msgid "Refresh" -msgstr "更新" +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" -msgid "Remove members from an HBAC service group." -msgstr "HBAC サービスグループからメンバーを削除します。" +#, c-format +msgid "Unable to remove entry\n" +msgstr "" -msgid "Reset OTP" -msgstr "OTP のリセット" +#, c-format +msgid "kvno %d\n" +msgstr "" -msgid "Rules" -msgstr "ルール" +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" -msgid "Search Options" -msgstr "検索オプション" +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" -msgid "Search for HBAC rules." -msgstr "HBAC ルールを検索します。" +#, c-format +msgid "Unable to parse principal\n" +msgstr "" -msgid "Search for HBAC services." -msgstr "HBAC サービスを検索します。" +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" -msgid "Search for an HBAC service group." -msgstr "HBAC サービスグループを検索します。" +#, c-format +msgid "realm not found\n" +msgstr "" -msgid "Search for groups." -msgstr "グループを検索します。" +msgid "Print debugging information" +msgstr "" -msgid "Search for hosts." -msgstr "ホストを検索します。" - -msgid "Search for roles." -msgstr "役割を検索します。" - -msgid "Set" -msgstr "設定" - -msgid "Sudo Command" -msgstr "sudo コマンド" - -msgid "Sudo Commands" -msgstr "sudo コマンド" - -msgid "Sudo Rule" -msgstr "sudo ルール" - -msgid "Sudo Rules" -msgstr "sudo ルール" - -msgid "Text Data" -msgstr "テキストデータ" - -msgid "This entry already exists" -msgstr "このエントリーはすでに存在します" - -msgid "URL" -msgstr "URL" - -msgid "Unknown Error" -msgstr "未知のエラー" - -msgid "User Group" -msgstr "ユーザーグループ" - -msgid "User Options" -msgstr "ユーザーオプション" - -msgid "User group" -msgstr "ユーザーグループ" - -msgid "Validation error" -msgstr "検証エラー" - -msgid "an internal error has occurred" -msgstr "内部エラーが発生しました" +msgid "Debugging output" +msgstr "" msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" msgstr "" -"少なくとも type, filter, subtree, targetgroup, attrs または memberof のどれか" -"が必要です" -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "大きくても %(maxlength)d バイトである必要があります" +msgid "Kerberos Service Principal Name" +msgstr "" -msgid "group" -msgstr "グループ" +msgid "The keytab file to remove the principcal(s) from" +msgstr "" -msgid "groups" -msgstr "グループ" +msgid "Keytab File Name" +msgstr "" -msgid "host" -msgstr "ホスト" +msgid "Remove all principals in this realm" +msgstr "" -msgid "host group" -msgstr "ホストグループ" +msgid "Realm name" +msgstr "" -msgid "host groups" -msgstr "ホストグループ" +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" -msgid "hosts" -msgstr "ホスト" +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" -msgid "invalid SSH public key" -msgstr "無効な SSH 公開鍵" +#, c-format +msgid "Closing keytab failed\n" +msgstr "" -#, python-format -msgid "invalid domain-name: %s" -msgstr "無効なドメイン名: %s" +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" -msgid "must be Unicode text" -msgstr "Unicode テキストである必要があります" +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "" -msgid "must be an integer" -msgstr "整数である必要があります" +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "" -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "少なくとも %(minlength)d バイトである必要があります" +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "" -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "少なくとも %(minlength)d 文字である必要があります" +#, fuzzy, c-format +msgid "Out of memory \n" +msgstr "メモリー不足\n" -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "少なくとも %(minvalue)d である必要があります" +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "" -msgid "must be binary data" -msgstr "バイナリーデータである必要があります" +msgid "Simple bind failed\n" +msgstr "" -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "ちょうど %(length)d バイトである必要があります" +msgid "SASL Bind failed\n" +msgstr "" -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "ちょうど %(length)d 文字である必要があります" +#, c-format +msgid "Operation failed: %s\n" +msgstr "" -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "パターン \"%(pattern)s\" が一致する必要があります" +#, c-format +msgid "Failed to get result: %s\n" +msgstr "" -msgid "password policies" -msgstr "パスワードポリシー" +#, c-format +msgid "Timeout exceeded." +msgstr "" -msgid "password policy" -msgstr "パスワードポリシー" +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "" -msgid "role" -msgstr "役割" +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "" -msgid "roles" -msgstr "役割" +#, c-format +msgid "Missing reply control list!\n" +msgstr "" -msgid "sudo command" -msgstr "sudo コマンド" +#, c-format +msgid "Missing reply control!\n" +msgstr "" -msgid "sudo commands" -msgstr "sudo コマンド" +#, fuzzy, c-format +msgid "Out of Memory!\n" +msgstr "メモリー不足!?\n" -msgid "sudo rule" -msgstr "sudo ルール" +#, c-format +msgid "Failed to create control!\n" +msgstr "" -msgid "sudo rules" -msgstr "sudo ルール" +#, c-format +msgid "Failed to bind to server!\n" +msgstr "" -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "%(server)s から未知のエラー %(code)d: %(error)s" +#, c-format +msgid "Failed to get keytab!\n" +msgstr "" -msgid "user" -msgstr "ユーザー" +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "" -msgid "users" -msgstr "ユーザー" +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "" + +msgid "Failed to decode control reply!\n" +msgstr "" + +#, fuzzy, c-format +msgid "Passwords do not match!\n" +msgstr "パスワードが違います。" + +#, c-format +msgid "Failed to open config file %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "" + +msgid "Failed to resolve symlink to keytab.\n" +msgstr "" + +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" + +msgid "Print as little as possible" +msgstr "" + +msgid "Output only on errors" +msgstr "" + +msgid "Output debug info" +msgstr "" + +msgid "Contact this specific KDC Server" +msgstr "" + +msgid "Server Name" +msgstr "" + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" + +msgid "Encryption types to request" +msgstr "" + +msgid "Comma separated encryption types list" +msgstr "" + +msgid "Show the list of permitted encryption types and exit" +msgstr "" + +msgid "Permitted Encryption Types" +msgstr "" + +msgid "Asks for a non-random password to use for the principal" +msgstr "" + +msgid "LDAP DN" +msgstr "" + +msgid "DN to bind as if not using kerberos" +msgstr "" + +msgid "LDAP password" +msgstr "" + +msgid "password to use if not using kerberos" +msgstr "" + +msgid "Prompt for LDAP password" +msgstr "" + +msgid "Path to the IPA CA certificate" +msgstr "" + +#, fuzzy +msgid "IPA CA certificate" +msgstr "証明書" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" + +msgid "url" +msgstr "" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" + +msgid "GSSAPI|EXTERNAL" +msgstr "" + +msgid "Retrieve current keys without changing them" +msgstr "" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +msgid "Enter LDAP password" +msgstr "" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "" + +#, c-format +msgid "DNS discovery for domain %s\n" +msgstr "" + +#, c-format +msgid "Discovered server %s\n" +msgstr "" + +#, c-format +msgid "Using discovered server %s\n" +msgstr "" + +#, c-format +msgid "DNS Discovery failed\n" +msgstr "" + +#, c-format +msgid "Using server from config %s\n" +msgstr "" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "" + +#, c-format +msgid "Using provided server %s\n" +msgstr "" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "" + +msgid "New Principal Password" +msgstr "" + +msgid "Verify Principal Password" +msgstr "" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" + +#, c-format +msgid "Failed to create key material\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "" #, fuzzy, c-format msgid "Out of memory!\n" @@ -460,9 +456,6 @@ msgstr "メモリー不足!?\n" msgid "Unable to enable SSL in LDAP\n" msgstr "" -msgid "SASL Bind failed\n" -msgstr "" - #, c-format msgid "Search for %1$s on rootdse failed with error %2$d\n" msgstr "" @@ -691,390 +684,6 @@ msgstr "" msgid "The hostname must not be: %s\n" msgstr "" -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "" - -#, fuzzy, c-format -msgid "Out of memory \n" -msgstr "メモリー不足\n" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "" - -msgid "Simple bind failed\n" -msgstr "" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Out of Memory!\n" -msgstr "メモリー不足!?\n" - -#, c-format -msgid "Failed to create control!\n" -msgstr "" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "" - -msgid "Failed to decode control reply!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Passwords do not match!\n" -msgstr "パスワードが違います。" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "" - -msgid "Failed to resolve symlink to keytab.\n" -msgstr "" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Output only on errors" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -msgid "Server Name" -msgstr "" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Encryption types to request" -msgstr "" - -msgid "Comma separated encryption types list" -msgstr "" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -msgid "Permitted Encryption Types" -msgstr "" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -msgid "LDAP DN" -msgstr "" - -msgid "DN to bind as if not using kerberos" -msgstr "" - -msgid "LDAP password" -msgstr "" - -msgid "password to use if not using kerberos" -msgstr "" - -msgid "Prompt for LDAP password" -msgstr "" - -msgid "Path to the IPA CA certificate" -msgstr "" - -#, fuzzy -msgid "IPA CA certificate" -msgstr "証明書" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -msgid "Enter LDAP password" -msgstr "" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -msgid "New Principal Password" -msgstr "" - -msgid "Verify Principal Password" -msgstr "" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, c-format -msgid "Failed to create key material\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -msgid "Realm name" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "" - -#, fuzzy, c-format -msgid "out of memory\n" -msgstr "メモリー不足\n" - -#, c-format -msgid "read error\n" -msgstr "" - msgid "Failed members" msgstr "" @@ -1191,134 +800,35 @@ msgstr "" msgid "Skipped %(key)s" msgstr "" +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +msgid "Unrevoked" +msgstr "" + +#, fuzzy +msgid "Error" +msgstr "IPA エラー" + +msgid "Input filename" +msgstr "" + +msgid "File to load the certificate from." +msgstr "" + +msgid "cannot specify both raw certificate and file" +msgstr "" + msgid "Input file" msgstr "" msgid "File to load the certificate from" msgstr "" -msgid "cannot specify both raw certificate and file" -msgstr "" - #, python-format msgid "Profile configuration stored in file '%(file)s'" msgstr "" -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -msgid "Servers details:" -msgstr "" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -#, fuzzy -msgid "Add a new YubiKey OTP token." -msgstr "新しい役割を追加します。" - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, fuzzy, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "sudo ルール" - -#, fuzzy, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "sudo ルール" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -msgid "Maximum number of agreements per replica" -msgstr "" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -#, fuzzy -msgid "Delete a user" -msgstr "ユーザーを削除します。" - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - msgid "Split DNS record to parts" msgstr "" @@ -1383,6 +893,134 @@ msgstr "" msgid "file to store DNS records in nsupdate format" msgstr "" +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "" + +msgid "Servers details:" +msgstr "" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "" + +msgid "User ID" +msgstr "" + +#, fuzzy +msgid "Password" +msgstr "パスワードポリシー" + +msgid "First Code" +msgstr "" + +msgid "Second Code" +msgstr "" + +msgid "Token ID" +msgstr "" + +msgid "python-yubico is not installed." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" + +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +#, fuzzy +msgid "Add a new YubiKey OTP token." +msgstr "新しい役割を追加します。" + +msgid "YubiKey slot" +msgstr "" + +msgid "No free YubiKey slot!" +msgstr "" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "" + +msgid "Topology is disconnected" +msgstr "" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "" + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "" + +msgid "Maximum number of agreements per replica" +msgstr "" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "" + +#, fuzzy +msgid "Delete a user" +msgstr "ユーザーを削除します。" + +msgid "preserve and no-preserve cannot be both set" +msgstr "" + #, python-format msgid "Cannot read file '%(filename)s': %(exc)s" msgstr "" @@ -1507,49 +1145,20 @@ msgstr "" msgid "Missing vault private key" msgstr "" -msgid "Write certificate (chain if --chain used) to file" +#, fuzzy, python-format +msgid "Enabled Sudo Rule \"%s\"" +msgstr "sudo ルール" + +#, fuzzy, python-format +msgid "Disabled Sudo Rule \"%s\"" +msgstr "sudo ルール" + +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" msgstr "" -msgid "Unrevoked" -msgstr "" - -#, fuzzy -msgid "Error" -msgstr "IPA エラー" - -msgid "Input filename" -msgstr "" - -msgid "File to load the certificate from." -msgstr "" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -msgid "User ID" -msgstr "" - -#, fuzzy -msgid "Password" -msgstr "パスワードポリシー" - -msgid "First Code" -msgstr "" - -msgid "Second Code" -msgstr "" - -msgid "Token ID" +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" msgstr "" msgid "" @@ -1673,6 +1282,9 @@ msgid "" "targetattr REPLACES the current attributes, it does not add to them.\n" msgstr "" +msgid "ACI name" +msgstr "ACI 名" + #, fuzzy msgid "Permission" msgstr "権限" @@ -1680,9 +1292,15 @@ msgstr "権限" msgid "Permission ACI grants access to" msgstr "" +msgid "User group" +msgstr "ユーザーグループ" + msgid "User group ACI grants access to" msgstr "" +msgid "Permissions" +msgstr "権限" + msgid "Permissions to grant(read, write, add, delete, all)" msgstr "" @@ -1702,6 +1320,12 @@ msgstr "" msgid "Member of" msgstr "グループのメンバー" +msgid "Member of a group" +msgstr "グループのメンバー" + +msgid "Filter" +msgstr "フィルター" + msgid "Legal LDAP filter (e.g. ou=Engineering)" msgstr "" @@ -1813,6 +1437,253 @@ msgstr "" msgid "Location of the ACI" msgstr "" +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +#, fuzzy +msgid "Description" +msgstr "ユーザーオプション" + +msgid "A description of this auto member rule" +msgstr "" + +#, fuzzy +msgid "Default (fallback) Group" +msgstr "標準のホストグループ" + +msgid "Default group for entries to land" +msgstr "" + +#, fuzzy +msgid "Add an automember rule." +msgstr "新しい役割を追加します。" + +msgid "Automember Rule" +msgstr "" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +msgid "Grouping Type" +msgstr "" + +msgid "Grouping to which the rule applies" +msgstr "" + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +msgid "Exclusive Regex" +msgstr "" + +msgid "Attribute Key" +msgstr "" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +msgid "Number of conditions added" +msgstr "" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +#, fuzzy +msgid "Display information about the default (fallback) automember groups." +msgstr "HBAC サービスグループに関する情報を表示します。" + +#, fuzzy +msgid "Delete an automember rule." +msgstr "HBAC ルールを削除します。" + +msgid "List of deletions that failed" +msgstr "" + +#, fuzzy +msgid "Search for automember rules." +msgstr "HBAC ルールを検索します。" + +#, fuzzy +msgid "Modify an automember rule." +msgstr "HBAC ルールを変更します。" + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +msgid "Rights" +msgstr "" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +#, fuzzy +msgid "Users" +msgstr "ユーザー" + +msgid "Rebuild membership for specified users" +msgstr "" + +#, fuzzy +msgid "Hosts" +msgstr "ホスト" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +msgid "Conditions that could not be removed" +msgstr "" + +msgid "Number of conditions removed" +msgstr "" + +#, fuzzy +msgid "Display information about an automember rule." +msgstr "役割に関する情報を表示します。" + msgid "" "\n" "Automount\n" @@ -1945,24 +1816,10 @@ msgstr "" msgid "Automount map name." msgstr "" -#, fuzzy -msgid "Description" -msgstr "ユーザーオプション" - #, fuzzy msgid "Create a new automount key." msgstr "新しいグループを作成します。" -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - #, fuzzy msgid "Delete an automount key." msgstr "ホストを削除します。" @@ -1970,9 +1827,6 @@ msgstr "ホストを削除します。" msgid "Continuous mode: Don't stop on errors." msgstr "" -msgid "List of deletions that failed" -msgstr "" - #, fuzzy msgid "Search for an automount key." msgstr "ホストを検索します。" @@ -1993,19 +1847,6 @@ msgstr "" msgid "Modify an automount key." msgstr "役割を変更します。" -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "Rights" -msgstr "" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - msgid "New mount information" msgstr "" @@ -2109,6 +1950,188 @@ msgstr "" msgid "Nested Methods to execute" msgstr "" +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +#, fuzzy +msgid "Search for existing certificates." +msgstr "HBAC サービスを検索します。" + +msgid "Match cn attribute in subject" +msgstr "" + +#, fuzzy +msgid "Reason" +msgstr "%(reason)s" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "" + +msgid "minimum serial number" +msgstr "" + +msgid "maximum serial number" +msgstr "" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Maximum number of certs returned" +msgstr "" + +msgid "Take a revoked certificate off hold." +msgstr "" + +msgid "Serial number" +msgstr "" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +msgid "Submit a certificate signing request." +msgstr "" + +msgid "CSR" +msgstr "" + +msgid "Principal" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +msgid "Dictionary mapping variable name to value" +msgstr "" + +#, fuzzy +msgid "Revoke a certificate." +msgstr "証明書" + +#, fuzzy +msgid "Retrieve an existing certificate." +msgstr "既存の HBAC サービスを削除します。" + +msgid "Output filename" +msgstr "" + +msgid "File to store the certificate in." +msgstr "" + +msgid "Check the status of a certificate signing request." +msgstr "" + +msgid "Request id" +msgstr "" + msgid "" "\n" "Server configuration\n" @@ -2682,6 +2705,9 @@ msgstr "%s レコード" msgid "A IP Address" msgstr "IP アドレス" +msgid "IP Address" +msgstr "IP アドレス" + msgid "A Create reverse" msgstr "" @@ -3132,6 +3158,9 @@ msgstr "" msgid "SRV Port" msgstr "ポート" +msgid "Port" +msgstr "ポート" + msgid "SRV Target" msgstr "" @@ -3162,6 +3191,9 @@ msgstr "フィンガープリント" msgid "SSHFP Fingerprint" msgstr "フィンガープリント" +msgid "Fingerprint" +msgstr "フィンガープリント" + #, fuzzy msgid "TA record" msgstr "%s レコード" @@ -3229,6 +3261,9 @@ msgstr "" msgid "TXT Text Data" msgstr "テキストデータ" +msgid "Text Data" +msgstr "テキストデータ" + msgid "Authoritative nameserver" msgstr "" @@ -3443,6 +3478,332 @@ msgstr "" msgid "Display information about a DNS zone (SOA record)." msgstr "役割に関する情報を表示します。" +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +#, fuzzy +msgid "Group name" +msgstr "グループオプション" + +#, fuzzy +msgid "Group description" +msgstr "グループオプション" + +msgid "GID" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "" + +msgid "Member users" +msgstr "" + +#, fuzzy +msgid "Member groups" +msgstr "グループのメンバー" + +#, fuzzy +msgid "Member of groups" +msgstr "グループのメンバー" + +#, fuzzy +msgid "Roles" +msgstr "役割" + +#, fuzzy +msgid "Member of netgroups" +msgstr "グループのメンバー" + +#, fuzzy +msgid "Member of Sudo rule" +msgstr "グループのメンバー" + +#, fuzzy +msgid "Member of HBAC rule" +msgstr "グループのメンバー" + +msgid "Indirect Member users" +msgstr "" + +#, fuzzy +msgid "Indirect Member groups" +msgstr "グループのメンバー" + +#, fuzzy +msgid "Indirect Member of group" +msgstr "グループのメンバー" + +#, fuzzy +msgid "Indirect Member of netgroup" +msgstr "グループのメンバー" + +#, fuzzy +msgid "Indirect Member of role" +msgstr "グループのメンバー" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +msgid "Create a new group." +msgstr "新しいグループを作成します。" + +#, fuzzy +msgid "Create as a non-POSIX group" +msgstr "新しいグループを作成します。" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +#, fuzzy +msgid "Add members to a group." +msgstr "HBAC サービスグループにメンバーを追加します。" + +msgid "External member" +msgstr "" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +msgid "member user" +msgstr "" + +msgid "users to add" +msgstr "" + +#, fuzzy +msgid "member group" +msgstr "グループのメンバー" + +#, fuzzy +msgid "groups to add" +msgstr "グループ" + +msgid "Members that could not be added" +msgstr "" + +msgid "Number of members added" +msgstr "" + +msgid "Delete group." +msgstr "グループを削除します。" + +msgid "Detach a managed group from a user." +msgstr "" + +msgid "Search for groups." +msgstr "グループを検索します。" + +#, fuzzy +msgid "search for private groups" +msgstr "グループを検索します。" + +#, fuzzy +msgid "search for POSIX groups" +msgstr "グループを検索します。" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +#, fuzzy +msgid "search for non-POSIX groups" +msgstr "グループを検索します。" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "user" +msgstr "ユーザー" + +#, fuzzy +msgid "Search for groups with these member users." +msgstr "グループを検索します。" + +msgid "Search for groups without these member users." +msgstr "" + +msgid "group" +msgstr "グループ" + +#, fuzzy +msgid "Search for groups with these member groups." +msgstr "HBAC サービスグループを検索します。" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +#, fuzzy +msgid "netgroup" +msgstr "グループ" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "役割" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +#, fuzzy +msgid "HBAC rule" +msgstr "HBAC サービス" + +#, fuzzy +msgid "Search for groups with these member of HBAC rules." +msgstr "HBAC ルールを検索します。" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "sudo ルール" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +msgid "Modify a group." +msgstr "グループを変更します。" + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +#, fuzzy +msgid "Remove members from a group." +msgstr "HBAC サービスグループからメンバーを削除します。" + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "" + +msgid "Number of members removed" +msgstr "" + +#, fuzzy +msgid "Display information about a named group." +msgstr "役割に関する情報を表示します。" + msgid "" "\n" "Host-based access control\n" @@ -3524,18 +3885,10 @@ msgstr "" msgid "Enabled" msgstr "" -#, fuzzy -msgid "Users" -msgstr "ユーザー" - #, fuzzy msgid "User Groups" msgstr "ユーザーグループ" -#, fuzzy -msgid "Hosts" -msgstr "ホスト" - #, fuzzy msgid "Host Groups" msgstr "ホストグループ" @@ -3551,8 +3904,8 @@ msgstr "HBAC サービスグループ" msgid "External host" msgstr "" -msgid "Suppress processing of membership attributes." -msgstr "" +msgid "Create a new HBAC rule." +msgstr "新しい HBAC ルールを作成します。" msgid "Add target hosts and hostgroups to an HBAC rule." msgstr "" @@ -3571,12 +3924,6 @@ msgstr "グループのメンバー" msgid "host groups to add" msgstr "ホストグループ" -msgid "Members that could not be added" -msgstr "" - -msgid "Number of members added" -msgstr "" - #, fuzzy msgid "Add services to an HBAC rule." msgstr "HBAC ルールを削除します。" @@ -3601,19 +3948,20 @@ msgstr "HBAC サービスグループ" msgid "Add users and groups to an HBAC rule." msgstr "HBAC ルールのプロパティーを表示します。" -msgid "member user" -msgstr "" +msgid "Delete an HBAC rule." +msgstr "HBAC ルールを削除します。" -msgid "users to add" -msgstr "" +msgid "Disable an HBAC rule." +msgstr "HBAC ルールを無効化します。" -#, fuzzy -msgid "member group" -msgstr "グループのメンバー" +msgid "Enable an HBAC rule." +msgstr "HBAC ルールを有効化します。" -#, fuzzy -msgid "groups to add" -msgstr "グループ" +msgid "Search for HBAC rules." +msgstr "HBAC ルールを検索します。" + +msgid "Modify an HBAC rule." +msgstr "HBAC ルールを変更します。" msgid "Remove target hosts and hostgroups from an HBAC rule." msgstr "" @@ -3625,12 +3973,6 @@ msgstr "" msgid "host groups to remove" msgstr "ホストグループ" -msgid "Members that could not be removed" -msgstr "" - -msgid "Number of members removed" -msgstr "" - msgid "Remove service and service groups from an HBAC rule." msgstr "" @@ -3646,11 +3988,8 @@ msgstr "HBAC サービスグループ" msgid "Remove users and groups from an HBAC rule." msgstr "HBAC サービスグループからメンバーを削除します。" -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" +msgid "Display the properties of an HBAC rule." +msgstr "HBAC ルールのプロパティーを表示します。" msgid "" "\n" @@ -3690,9 +4029,24 @@ msgstr "HBAC サービスグループ" msgid "Member of HBAC service groups" msgstr "HBAC サービスグループ" +msgid "Add a new HBAC service." +msgstr "新しい HBAC サービスを追加します。" + +msgid "Delete an existing HBAC service." +msgstr "既存の HBAC サービスを削除します。" + +msgid "Search for HBAC services." +msgstr "HBAC サービスを検索します。" + msgid "Results should contain primary key attribute only (\"service\")" msgstr "" +msgid "Modify an HBAC service." +msgstr "HBAC サービスを変更します。" + +msgid "Display information about an HBAC service." +msgstr "HBAC サービスに関する情報を表示します。" + msgid "" "\n" "HBAC Service Groups\n" @@ -3727,6 +4081,264 @@ msgstr "HBAC サービスグループ" msgid "Member HBAC service" msgstr "HBAC サービス" +msgid "Add a new HBAC service group." +msgstr "新しい HBAC サービスグループを追加します。" + +msgid "Add members to an HBAC service group." +msgstr "HBAC サービスグループにメンバーを追加します。" + +msgid "Delete an HBAC service group." +msgstr "HBAC サービスグループを削除します。" + +msgid "Search for an HBAC service group." +msgstr "HBAC サービスグループを検索します。" + +msgid "Modify an HBAC service group." +msgstr "HBAC サービスグループを変更します。" + +msgid "Remove members from an HBAC service group." +msgstr "HBAC サービスグループからメンバーを削除します。" + +msgid "Display information about an HBAC service group." +msgstr "HBAC サービスグループに関する情報を表示します。" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +msgid "User name" +msgstr "" + +msgid "Target host" +msgstr "" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +msgid "Warning" +msgstr "" + +#, fuzzy +msgid "Matched rules" +msgstr "sudo ルール" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + msgid "" "\n" "Hosts/Machines\n" @@ -3879,40 +4491,10 @@ msgstr "" msgid "Member of host-groups" msgstr "グループのメンバー" -#, fuzzy -msgid "Roles" -msgstr "役割" - -#, fuzzy -msgid "Member of netgroups" -msgstr "グループのメンバー" - -#, fuzzy -msgid "Member of Sudo rule" -msgstr "グループのメンバー" - -#, fuzzy -msgid "Member of HBAC rule" -msgstr "グループのメンバー" - -#, fuzzy -msgid "Indirect Member of netgroup" -msgstr "グループのメンバー" - #, fuzzy msgid "Indirect Member of host-group" msgstr "グループのメンバー" -#, fuzzy -msgid "Indirect Member of role" -msgstr "グループのメンバー" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - msgid "Keytab" msgstr "" @@ -3946,6 +4528,9 @@ msgstr "" msgid "Host Groups allowed to create keytab" msgstr "" +msgid "Add a new host." +msgstr "新しいホストを追加します。" + msgid "force host name even if not in DNS" msgstr "" @@ -3966,6 +4551,9 @@ msgid "" "Allow users, groups, hosts or host groups to retrieve a keytab of this host." msgstr "" +msgid "Delete a host." +msgstr "ホストを削除します。" + msgid "Remove entries from DNS" msgstr "" @@ -3981,19 +4569,21 @@ msgid "" "host." msgstr "" +msgid "Search for hosts." +msgstr "ホストを検索します。" + msgid "Results should contain primary key attribute only (\"hostname\")" msgstr "" +msgid "host group" +msgstr "ホストグループ" + msgid "Search for hosts with these member of host groups." msgstr "" msgid "Search for hosts without these member of host groups." msgstr "" -#, fuzzy -msgid "netgroup" -msgstr "グループ" - msgid "Search for hosts with these member of netgroups." msgstr "" @@ -4006,10 +4596,6 @@ msgstr "" msgid "Search for hosts without these member of roles." msgstr "" -#, fuzzy -msgid "HBAC rule" -msgstr "HBAC サービス" - #, fuzzy msgid "Search for hosts with these member of HBAC rules." msgstr "HBAC ルールを検索します。" @@ -4029,6 +4615,9 @@ msgstr "" msgid "Search for hosts without these enrolled by users." msgstr "" +msgid "host" +msgstr "ホスト" + msgid "Search for hosts with these managed by hosts." msgstr "" @@ -4183,6 +4772,235 @@ msgstr "HBAC サービスグループからメンバーを削除します。" msgid "Display information about a hostgroup." msgstr "役割に関する情報を表示します。" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "Range name" +msgstr "" + +msgid "First Posix ID of the range" +msgstr "" + +msgid "Number of IDs in the range" +msgstr "" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +msgid "Range type" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +#, fuzzy +msgid "Delete an ID range." +msgstr "役割を削除します。" + +#, fuzzy +msgid "Search for ranges." +msgstr "役割を検索します。" + +#, fuzzy +msgid "Modify ID range." +msgstr "役割を変更します。" + +#, fuzzy +msgid "Display information about a range." +msgstr "役割に関する情報を表示します。" + msgid "" "\n" "ID Views\n" @@ -4199,13 +5017,6 @@ msgstr "" msgid "Anchor to override" msgstr "" -#, fuzzy -msgid "Group name" -msgstr "グループオプション" - -msgid "GID" -msgstr "" - msgid "Group ID Number" msgstr "" @@ -4289,6 +5100,9 @@ msgid "" "hostgroups. If any other ID View is applied to the host, it is overriden." msgstr "" +msgid "hosts" +msgstr "ホスト" + msgid "Hosts to apply the ID View to" msgstr "" @@ -4444,9 +5258,6 @@ msgid "" " ipa krbtpolicy-mod admin --maxlife=3600\n" msgstr "" -msgid "User name" -msgstr "" - msgid "Manage ticket policy for specific user" msgstr "" @@ -4705,9 +5516,6 @@ msgid "" "retrieve and print all attributes from the server. Affects command output." msgstr "" -msgid "Dictionary mapping variable name to value" -msgstr "" - msgid "Total number of variables env (>= count)" msgstr "" @@ -4918,6 +5726,153 @@ msgstr "" msgid "Show the current OTP configuration." msgstr "" +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Manager" +msgstr "" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +msgid "Disabled" +msgstr "" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +msgid "Validity start" +msgstr "" + +msgid "First date/time the token can be used" +msgstr "" + +msgid "Validity end" +msgstr "" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "" + +msgid "Token model (informational only)" +msgstr "" + +msgid "Serial" +msgstr "" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +#, fuzzy +msgid "Add a new OTP token." +msgstr "新しい役割を追加します。" + +msgid "(deprecated)" +msgstr "" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +#, fuzzy +msgid "Delete an OTP token." +msgstr "役割を削除します。" + +#, fuzzy +msgid "Search for OTP token." +msgstr "役割を検索します。" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +#, fuzzy +msgid "Modify a OTP token." +msgstr "役割を変更します。" + +msgid "Rename the OTP token object" +msgstr "" + +#, fuzzy +msgid "Display information about an OTP token." +msgstr "役割に関する情報を表示します。" + msgid "" "\n" "YubiKey Tokens\n" @@ -5633,13 +6588,6 @@ msgstr "" msgid "A description of this role-group" msgstr "" -msgid "Member users" -msgstr "" - -#, fuzzy -msgid "Member groups" -msgstr "グループのメンバー" - msgid "Privileges" msgstr "" @@ -5647,6 +6595,9 @@ msgstr "" msgid "Member services" msgstr "HBAC サービス" +msgid "Add a new role." +msgstr "新しい役割を追加します。" + #, fuzzy msgid "Add members to a role." msgstr "HBAC サービスグループにメンバーを追加します。" @@ -5669,6 +6620,15 @@ msgstr "" msgid "Number of privileges added" msgstr "" +msgid "Delete a role." +msgstr "役割を削除します。" + +msgid "Search for roles." +msgstr "役割を検索します。" + +msgid "Modify a role." +msgstr "役割を変更します。" + msgid "Rename the role object" msgstr "" @@ -5685,6 +6645,9 @@ msgstr "" msgid "Number of privileges removed" msgstr "" +msgid "Display information about a role." +msgstr "役割に関する情報を表示します。" + msgid "" "\n" "Self-service Permissions\n" @@ -5906,9 +6869,6 @@ msgid "" "httpd.keytab\n" msgstr "" -msgid "Principal" -msgstr "" - msgid "Service principal" msgstr "" @@ -6593,6 +7553,9 @@ msgid "" " ipa sudocmd-del /usr/bin/less\n" msgstr "" +msgid "Sudo Command" +msgstr "sudo コマンド" + msgid "A description of this command" msgstr "" @@ -6652,10 +7615,6 @@ msgstr "" msgid "Sudo Command Group" msgstr "sudo コマンド" -#, fuzzy -msgid "Group description" -msgstr "グループオプション" - #, fuzzy msgid "Commands" msgstr "sudo コマンド" @@ -6708,1701 +7667,6 @@ msgstr "sudo コマンド" msgid "Display Sudo Command Group." msgstr "sudo コマンド" -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -msgid "First name" -msgstr "" - -msgid "Last name" -msgstr "" - -msgid "Full name" -msgstr "" - -msgid "Display name" -msgstr "" - -msgid "Initials" -msgstr "" - -#, fuzzy -msgid "Kerberos principal" -msgstr "Kerberos キー" - -msgid "Kerberos principal expiration" -msgstr "" - -#, fuzzy -msgid "Email address" -msgstr "IP アドレス" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -msgid "Street address" -msgstr "" - -msgid "City" -msgstr "" - -msgid "State/Province" -msgstr "" - -msgid "ZIP" -msgstr "" - -msgid "Telephone Number" -msgstr "" - -msgid "Mobile Telephone Number" -msgstr "" - -msgid "Pager Number" -msgstr "" - -msgid "Fax Number" -msgstr "" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "" - -msgid "Manager" -msgstr "" - -msgid "Car License" -msgstr "" - -#, fuzzy -msgid "Account disabled" -msgstr "アカウント" - -msgid "User authentication types" -msgstr "" - -msgid "Types of supported user authentication" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "RADIUS proxy configuration" -msgstr "" - -msgid "RADIUS proxy username" -msgstr "" - -msgid "Department Number" -msgstr "" - -msgid "Employee Number" -msgstr "" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -#, fuzzy -msgid "Member of groups" -msgstr "グループのメンバー" - -#, fuzzy -msgid "Indirect Member of group" -msgstr "グループのメンバー" - -#, fuzzy -msgid "Kerberos keys available" -msgstr "Kerberos キー" - -#, fuzzy -msgid "Don't create user private group" -msgstr "標準のユーザーグループ" - -#, fuzzy -msgid "Search for users." -msgstr "ホストを検索します。" - -msgid "Self" -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -#, fuzzy -msgid "Search for users with these member of HBAC rules." -msgstr "HBAC ルールを検索します。" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -msgid "Rename the user object" -msgstr "" - -#, fuzzy -msgid "Display information about a user." -msgstr "役割に関する情報を表示します。" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "A description of this auto member rule" -msgstr "" - -#, fuzzy -msgid "Default (fallback) Group" -msgstr "標準のホストグループ" - -msgid "Default group for entries to land" -msgstr "" - -#, fuzzy -msgid "Add an automember rule." -msgstr "新しい役割を追加します。" - -msgid "Automember Rule" -msgstr "" - -msgid "Grouping Type" -msgstr "" - -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -msgid "Attribute Key" -msgstr "" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -#, fuzzy -msgid "Display information about the default (fallback) automember groups." -msgstr "HBAC サービスグループに関する情報を表示します。" - -#, fuzzy -msgid "Delete an automember rule." -msgstr "HBAC ルールを削除します。" - -#, fuzzy -msgid "Search for automember rules." -msgstr "HBAC ルールを検索します。" - -#, fuzzy -msgid "Modify an automember rule." -msgstr "HBAC ルールを変更します。" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -msgid "Number of conditions removed" -msgstr "" - -#, fuzzy -msgid "Display information about an automember rule." -msgstr "役割に関する情報を表示します。" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -#, fuzzy -msgid "Search for existing certificates." -msgstr "HBAC サービスを検索します。" - -msgid "Match cn attribute in subject" -msgstr "" - -#, fuzzy -msgid "Reason" -msgstr "%(reason)s" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -msgid "minimum serial number" -msgstr "" - -msgid "maximum serial number" -msgstr "" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -msgid "Serial number" -msgstr "" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -msgid "Submit a certificate signing request." -msgstr "" - -msgid "CSR" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -#, fuzzy -msgid "Revoke a certificate." -msgstr "証明書" - -#, fuzzy -msgid "Retrieve an existing certificate." -msgstr "既存の HBAC サービスを削除します。" - -msgid "Output filename" -msgstr "" - -msgid "File to store the certificate in." -msgstr "" - -msgid "Check the status of a certificate signing request." -msgstr "" - -msgid "Request id" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "GID (use this option to set it manually)" -msgstr "" - -msgid "Indirect Member users" -msgstr "" - -#, fuzzy -msgid "Indirect Member groups" -msgstr "グループのメンバー" - -#, fuzzy -msgid "Create as a non-POSIX group" -msgstr "新しいグループを作成します。" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -#, fuzzy -msgid "Add members to a group." -msgstr "HBAC サービスグループにメンバーを追加します。" - -msgid "External member" -msgstr "" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -msgid "Detach a managed group from a user." -msgstr "" - -#, fuzzy -msgid "search for private groups" -msgstr "グループを検索します。" - -#, fuzzy -msgid "search for POSIX groups" -msgstr "グループを検索します。" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -#, fuzzy -msgid "search for non-POSIX groups" -msgstr "グループを検索します。" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -#, fuzzy -msgid "Search for groups with these member users." -msgstr "グループを検索します。" - -msgid "Search for groups without these member users." -msgstr "" - -#, fuzzy -msgid "Search for groups with these member groups." -msgstr "HBAC サービスグループを検索します。" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -#, fuzzy -msgid "Search for groups with these member of HBAC rules." -msgstr "HBAC ルールを検索します。" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -#, fuzzy -msgid "Remove members from a group." -msgstr "HBAC サービスグループからメンバーを削除します。" - -#, fuzzy -msgid "Display information about a named group." -msgstr "役割に関する情報を表示します。" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -msgid "Target host" -msgstr "" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Warning" -msgstr "" - -#, fuzzy -msgid "Matched rules" -msgstr "sudo ルール" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -#, fuzzy -msgid "NetBIOS name" -msgstr "ACI 名" - -msgid "Domain GUID" -msgstr "" - -msgid "Fallback primary group" -msgstr "" - -msgid "Domain name" -msgstr "" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -msgid "Active Directory domain administrator" -msgstr "" - -msgid "Active Directory domain administrator's password" -msgstr "" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "Range type" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -#, fuzzy -msgid "Delete a trust." -msgstr "ホストを削除します。" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -#, fuzzy -msgid "Search for trusts." -msgstr "ホストを検索します。" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -#, fuzzy -msgid "Display information about a trust." -msgstr "役割に関する情報を表示します。" - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "Range name" -msgstr "" - -msgid "First Posix ID of the range" -msgstr "" - -msgid "Number of IDs in the range" -msgstr "" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -#, fuzzy -msgid "Delete an ID range." -msgstr "役割を削除します。" - -#, fuzzy -msgid "Search for ranges." -msgstr "役割を検索します。" - -#, fuzzy -msgid "Modify ID range." -msgstr "役割を変更します。" - -#, fuzzy -msgid "Display information about a range." -msgstr "役割に関する情報を表示します。" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -msgid "Disabled" -msgstr "" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -msgid "Validity start" -msgstr "" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Validity end" -msgstr "" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -msgid "Serial" -msgstr "" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -#, fuzzy -msgid "Add a new OTP token." -msgstr "新しい役割を追加します。" - -msgid "(deprecated)" -msgstr "" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -#, fuzzy -msgid "Delete an OTP token." -msgstr "役割を削除します。" - -#, fuzzy -msgid "Search for OTP token." -msgstr "役割を検索します。" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -#, fuzzy -msgid "Modify a OTP token." -msgstr "役割を変更します。" - -msgid "Rename the OTP token object" -msgstr "" - -#, fuzzy -msgid "Display information about an OTP token." -msgstr "役割に関する情報を表示します。" - msgid "" "\n" "Sudo Rules\n" @@ -8632,6 +7896,510 @@ msgstr "" msgid "Display Sudo Rule." msgstr "sudo ルール" +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +#, fuzzy +msgid "NetBIOS name" +msgstr "ACI 名" + +msgid "Domain GUID" +msgstr "" + +msgid "Fallback primary group" +msgstr "" + +msgid "Domain name" +msgstr "" + +msgid "Trusted domain partner" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +msgid "Active Directory domain administrator" +msgstr "" + +msgid "Active Directory domain administrator's password" +msgstr "" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +#, fuzzy +msgid "Delete a trust." +msgstr "ホストを削除します。" + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +#, fuzzy +msgid "Search for trusts." +msgstr "ホストを検索します。" + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +#, fuzzy +msgid "Display information about a trust." +msgstr "役割に関する情報を表示します。" + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "" + +msgid "Last name" +msgstr "" + +msgid "Full name" +msgstr "" + +msgid "Display name" +msgstr "" + +msgid "Initials" +msgstr "" + +#, fuzzy +msgid "Kerberos principal" +msgstr "Kerberos キー" + +msgid "Kerberos principal expiration" +msgstr "" + +#, fuzzy +msgid "Email address" +msgstr "IP アドレス" + +msgid "Prompt to set the user password" +msgstr "" + +msgid "Generate a random user password" +msgstr "" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" + +msgid "Street address" +msgstr "" + +msgid "City" +msgstr "" + +msgid "State/Province" +msgstr "" + +msgid "ZIP" +msgstr "" + +msgid "Telephone Number" +msgstr "" + +msgid "Mobile Telephone Number" +msgstr "" + +msgid "Pager Number" +msgstr "" + +msgid "Fax Number" +msgstr "" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "" + +msgid "Car License" +msgstr "" + +#, fuzzy +msgid "Account disabled" +msgstr "アカウント" + +msgid "User authentication types" +msgstr "" + +msgid "Types of supported user authentication" +msgstr "" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "RADIUS proxy configuration" +msgstr "" + +msgid "RADIUS proxy username" +msgstr "" + +msgid "Department Number" +msgstr "" + +msgid "Employee Number" +msgstr "" + +msgid "Employee Type" +msgstr "" + +msgid "Preferred Language" +msgstr "" + +#, fuzzy +msgid "Kerberos keys available" +msgstr "Kerberos キー" + +msgid "Add a new user." +msgstr "新しいユーザーを追加します。" + +#, fuzzy +msgid "Don't create user private group" +msgstr "標準のユーザーグループ" + +msgid "Delete a user." +msgstr "ユーザーを削除します。" + +msgid "Disable a user account." +msgstr "ユーザーアカウントを無効化します。" + +msgid "Enable a user account." +msgstr "ユーザーアカウントを有効化します。" + +#, fuzzy +msgid "Search for users." +msgstr "ホストを検索します。" + +msgid "Self" +msgstr "" + +msgid "Display user record for current Kerberos principal" +msgstr "" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +#, fuzzy +msgid "Search for users with these member of HBAC rules." +msgstr "HBAC ルールを検索します。" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +msgid "Modify a user." +msgstr "ユーザーを変更します。" + +msgid "Rename the user object" +msgstr "" + +#, fuzzy +msgid "Display information about a user." +msgstr "役割に関する情報を表示します。" + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + msgid "Time limit of search in seconds (0 is unlimited)" msgstr "" @@ -8757,6 +8525,114 @@ msgstr "" msgid "Display the properties of a CA ACL." msgstr "HBAC ルールのプロパティーを表示します。" +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "Profile ID" +msgstr "" + +#, fuzzy +msgid "Certificate Profile to use" +msgstr "証明書" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +msgid "Profile description" +msgstr "" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +#, fuzzy +msgid "Delete a Certificate Profile." +msgstr "HBAC サービスグループを削除します。" + +#, fuzzy +msgid "Search for Certificate Profiles." +msgstr "役割を検索します。" + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +#, fuzzy +msgid "Display the properties of a Certificate Profile." +msgstr "HBAC ルールのプロパティーを表示します。" + +msgid "Write profile configuration to file" +msgstr "" + msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" msgstr "" @@ -8786,6 +8662,218 @@ msgstr "" msgid "Remove certificates from host entry" msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + msgid "Fallback to AD DC LDAP" msgstr "" @@ -8815,6 +8903,9 @@ msgid "" "to onelevel" msgstr "" +msgid "Remove users that can manage this token." +msgstr "" + msgid "Target DN subtree" msgstr "" @@ -9272,6 +9363,13 @@ msgid "" " " msgstr "" +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + msgid "Preserved user" msgstr "" @@ -9581,336 +9679,6 @@ msgstr "" msgid "Display information about a vault container." msgstr "役割に関する情報を表示します。" -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "Profile ID" -msgstr "" - -#, fuzzy -msgid "Certificate Profile to use" -msgstr "証明書" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -msgid "Profile description" -msgstr "" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -#, fuzzy -msgid "Delete a Certificate Profile." -msgstr "HBAC サービスグループを削除します。" - -#, fuzzy -msgid "Search for Certificate Profiles." -msgstr "役割を検索します。" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -#, fuzzy -msgid "Display the properties of a Certificate Profile." -msgstr "HBAC ルールのプロパティーを表示します。" - -msgid "Write profile configuration to file" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - msgid "Resolve a host name in DNS. (Deprecated)" msgstr "" @@ -11594,6 +11362,192 @@ msgid "" " ipa hostgroup-del baltimore\n" msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + msgid "" "Comma-separated list of objectclasses used to search for user entries in DS" msgstr "" @@ -11902,198 +11856,6 @@ msgstr "" msgid "comma-separated list of sudo commands to remove" msgstr "" -msgid "Active directory domain administrator's password" -msgstr "" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - msgid "" "\n" "Sudo Rules\n" @@ -12135,16 +11897,19 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" -msgid "A dictionary representing an LDAP entry" +msgid "Active directory domain administrator's password" msgstr "" -#, fuzzy -msgid "A list of LDAP entries" -msgstr "ACI 値の一覧" - -msgid "All commands should at least have a result" +msgid "GECOS field" msgstr "" +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "確認のため再び %(label)s を入力してください: " + +msgid "Passwords do not match!" +msgstr "パスワードが違います。" + msgid "No matching entries found" msgstr "" @@ -12184,106 +11949,372 @@ msgid "No file to read" msgstr "" #, python-format -msgid "%(filename)s: file not found" -msgstr "" - -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -msgid "Filename is empty" +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" #, python-format -msgid "Permission denied: %(file)s" -msgstr "" +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "%(server)s から未知のエラー %(code)d: %(error)s" -msgid "empty DNS label" -msgstr "" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "" - -msgid "cannot be longer that {} characters" -msgstr "" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "" - -msgid "options are not allowed" -msgstr "" - -#, fuzzy -msgid "invalid hostmask" -msgstr "無効なドメイン名: %s" +msgid "an internal error has occurred" +msgstr "内部エラーが発生しました" #, fuzzy, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "内部エラーが発生しました" + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "" + +#, fuzzy, python-format +msgid "error on server '%(server)s': %(error)s" msgstr "%(server)s から未知のエラー %(code)d: %(error)s" #, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "無効な JSON-RPC リクエスト: %(error)s" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" msgstr "" #, python-format msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." msgstr "" #, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Kerberos エラー: %(major)s/%(minor)s" + +msgid "did not receive Kerberos credentials" +msgstr "" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "" + +msgid "No credentials cache found" +msgstr "" + +msgid "Ticket expired" +msgstr "" + +msgid "Credentials cache permissions incorrect" +msgstr "" + +msgid "Bad format in credentials cache" +msgstr "" + +msgid "Cannot resolve KDC for requested realm" msgstr "" #, fuzzy -msgid "invalid escape code in domain name" -msgstr "無効なドメイン名: %s" - -msgid "domain name cannot be longer than 255 characters" -msgstr "" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "" - -#, fuzzy -msgid "invalid domain name" -msgstr "無効なドメイン名: %s" +msgid "Session error" +msgstr "検証エラー" #, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgid "Principal %(principal)s cannot be authenticated: %(message)s" msgstr "" #, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -msgid "invalid IP address format" +msgid "Insufficient access: %(info)s" msgstr "" #, python-format -msgid "%(port)s is not a valid port" +msgid "command '%(name)s' takes no arguments" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "" + +#, python-format +msgid "'%(name)s' is required" +msgstr "" + +#, fuzzy, python-format +msgid "invalid '%(name)s': %(error)s" +msgstr "無効な JSON-RPC リクエスト: %(error)s" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "" + +msgid "Passwords do not match" +msgstr "パスワードが違います" + +msgid "Command not implemented" +msgstr "コマンドが実装されていません" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "" + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "" + +#, python-format +msgid "%(reason)s" +msgstr "%(reason)s" + +msgid "This entry already exists" +msgstr "このエントリーはすでに存在します" + +msgid "You must enroll a host in order to create a host service" +msgstr "" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" msgstr "" msgid "" -"at least one value equal to the canonical principal name must be present" +"The realm for the principal does not match the realm for this IPA server" msgstr "" -msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgid "This command requires root access" +msgstr "" + +msgid "This is already a posix group" +msgstr "" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "" + +#, fuzzy +msgid "This entry is already enabled" +msgstr "このエントリーはすでに存在します" + +#, fuzzy +msgid "This entry is already disabled" +msgstr "このエントリーはすでに存在します" + +msgid "This entry cannot be enabled or disabled" +msgstr "" + +msgid "This entry is not a member" +msgstr "" + +msgid "A group may not be a member of itself" +msgstr "" + +#, fuzzy +msgid "This entry is already a member" +msgstr "このエントリーはすでに存在します" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "Base64 形式のデコードに失敗: %(reason)s" + +msgid "A group may not be added as a member of itself" +msgstr "" + +msgid "The default users group cannot be removed" +msgstr "" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" + +msgid "A managed group cannot have a password policy." +msgstr "" + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "" + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "" + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" + +msgid "This group already allows external members" +msgstr "" + +msgid "This group cannot be posix because it is external" +msgstr "" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "" + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" + +#, python-format +msgid "'%(attr)s' already contains one or more values" +msgstr "" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "" + +msgid "change collided with another change" +msgstr "" + +msgid "no modifications to be performed" +msgstr "" + +#, python-format +msgid "%(desc)s: %(info)s" +msgstr "%(desc)s: %(info)s" + +msgid "limits exceeded for this query" +msgstr "" + +#, python-format +msgid "%(info)s" +msgstr "%(info)s" + +msgid "modifying primary key is not allowed" +msgstr "" + +#, python-format +msgid "%(attr)s: Only one value allowed." +msgstr "" + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "" + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "" + +msgid "Not allowed on non-leaf entry" +msgstr "" + +msgid "LDAP timeout" +msgstr "" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "" + +msgid "Configured time limit exceeded" +msgstr "" + +msgid "Configured size limit exceeded" +msgstr "" + +msgid "Configured administrative server limit exceeded" +msgstr "" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "" + +msgid "Already registered" +msgstr "" + +msgid "Not registered yet" +msgstr "" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "" + +#, fuzzy, python-format +msgid "%(exception)s" +msgstr "%(reason)s" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" + +msgid "Results are truncated, try a more specific search" +msgstr "" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "" + +msgid "Client version. Used to determine if server will accept request." msgstr "" msgid "Additional instructions:" @@ -12443,329 +12474,23 @@ msgstr "" msgid "The certificate for %(ca)s is not available on this server." msgstr "" -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." +#, python-format +msgid "%(count)d variables" msgstr "" #, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "" - -#, fuzzy, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "内部エラーが発生しました" - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "" - -#, fuzzy, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "%(server)s から未知のエラー %(code)d: %(error)s" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" - -msgid "did not receive Kerberos credentials" -msgstr "" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "" - -msgid "No credentials cache found" -msgstr "" - -msgid "Ticket expired" -msgstr "" - -msgid "Credentials cache permissions incorrect" -msgstr "" - -msgid "Bad format in credentials cache" -msgstr "" - -msgid "Cannot resolve KDC for requested realm" -msgstr "" - -#, fuzzy -msgid "Session error" -msgstr "検証エラー" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" msgstr[0] "" -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "" - -#, python-format -msgid "'%(name)s' is required" -msgstr "" - -#, fuzzy, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "無効な JSON-RPC リクエスト: %(error)s" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "" - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" - -msgid "You must enroll a host in order to create a host service" -msgstr "" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "" - -msgid "This command requires root access" -msgstr "" - -msgid "This is already a posix group" -msgstr "" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgid "A dictionary representing an LDAP entry" msgstr "" #, fuzzy -msgid "This entry is already enabled" -msgstr "このエントリーはすでに存在します" +msgid "A list of LDAP entries" +msgstr "ACI 値の一覧" -#, fuzzy -msgid "This entry is already disabled" -msgstr "このエントリーはすでに存在します" - -msgid "This entry cannot be enabled or disabled" -msgstr "" - -msgid "This entry is not a member" -msgstr "" - -msgid "A group may not be a member of itself" -msgstr "" - -#, fuzzy -msgid "This entry is already a member" -msgstr "このエントリーはすでに存在します" - -msgid "A group may not be added as a member of itself" -msgstr "" - -msgid "The default users group cannot be removed" -msgstr "" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" - -msgid "A managed group cannot have a password policy." -msgstr "" - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" - -msgid "This group already allows external members" -msgstr "" - -msgid "This group cannot be posix because it is external" -msgstr "" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" - -#, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "" - -msgid "change collided with another change" -msgstr "" - -msgid "no modifications to be performed" -msgstr "" - -msgid "limits exceeded for this query" -msgstr "" - -msgid "modifying primary key is not allowed" -msgstr "" - -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "" - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "" - -msgid "Not allowed on non-leaf entry" -msgstr "" - -msgid "LDAP timeout" -msgstr "" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" - -msgid "Configured time limit exceeded" -msgstr "" - -msgid "Configured size limit exceeded" -msgstr "" - -msgid "Configured administrative server limit exceeded" -msgstr "" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "" - -msgid "Already registered" -msgstr "" - -msgid "Not registered yet" -msgstr "" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" - -#, fuzzy, python-format -msgid "%(exception)s" -msgstr "%(reason)s" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" +msgid "All commands should at least have a result" msgstr "" msgid "incorrect type" @@ -12780,6 +12505,13 @@ msgstr "" msgid "must be True or False" msgstr "" +msgid "must be an integer" +msgstr "整数である必要があります" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "少なくとも %(minvalue)d である必要があります" + #, fuzzy, python-format msgid "can be at most %(maxvalue)d" msgstr "大きくても %(maxlength)d バイトである必要があります" @@ -12802,6 +12534,25 @@ msgid "" "%(allowed)s" msgstr "" +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "パターン \"%(pattern)s\" が一致する必要があります" + +msgid "must be binary data" +msgstr "バイナリーデータである必要があります" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "少なくとも %(minlength)d バイトである必要があります" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "大きくても %(maxlength)d バイトである必要があります" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "ちょうど %(length)d バイトである必要があります" + #, fuzzy msgid "must be a certificate" msgstr "整数である必要があります" @@ -12813,13 +12564,24 @@ msgstr "" msgid "Failure decoding Certificate Signing Request: %s" msgstr "" +msgid "must be Unicode text" +msgstr "Unicode テキストである必要があります" + msgid "Leading and trailing spaces are not allowed" msgstr "" +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "少なくとも %(minlength)d 文字である必要があります" + #, fuzzy, python-format msgid "can be at most %(maxlength)d characters" msgstr "大きくても %(maxlength)d バイトである必要があります" +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "ちょうど %(length)d 文字である必要があります" + #, python-format msgid "The character %(char)r is not allowed." msgstr "" @@ -12869,26 +12631,119 @@ msgid "Service principal is required" msgstr "" #, python-format -msgid "%(count)d variables" +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +msgid "any of the configured servers" +msgstr "" + +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" msgstr "" #, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "" +msgid "Permission denied: %(file)s" +msgstr "" -msgid "Results are truncated, try a more specific search" +msgid "empty DNS label" +msgstr "" + +msgid "DNS label cannot be longer that 63 characters" msgstr "" #, python-format -msgid "Unknown option: %(option)s" +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" msgstr "" -msgid "Client version. Used to determine if server will accept request." +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "" + +msgid "cannot be longer that {} characters" +msgstr "" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "" + +msgid "invalid SSH public key" +msgstr "無効な SSH 公開鍵" + +msgid "options are not allowed" +msgstr "" + +#, fuzzy +msgid "invalid hostmask" +msgstr "無効なドメイン名: %s" + +#, fuzzy, python-format +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "%(server)s から未知のエラー %(code)d: %(error)s" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" msgstr "" #, python-format -msgid "objectclass %s not found" +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +#, fuzzy +msgid "invalid escape code in domain name" +msgstr "無効なドメイン名: %s" + +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +#, fuzzy +msgid "invalid domain name" +msgstr "無効なドメイン名: %s" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "無効なドメイン名: %s" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +msgid "invalid IP address format" +msgstr "" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" #, python-format @@ -12907,940 +12762,1259 @@ msgstr "" msgid "Retrieving CA status failed with status %d" msgstr "" +#, python-format +msgid "objectclass %s not found" +msgstr "" + +msgid "Trusting forest" +msgstr "" + +msgid "Trusted forest" +msgstr "" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +#, fuzzy +msgid "Unknown" +msgstr "未知のエラー" + +msgid "Non-Active Directory domain" +msgstr "" + +msgid "Active Directory domain" +msgstr "" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "" +msgid "Failed to authenticate to CA REST API" +msgstr "" + #, python-format msgid "Replication agreement for %(hostname)s not found" msgstr "" -msgid "Failed to authenticate to CA REST API" -msgstr "" - -msgid "One time password commands" -msgstr "" - -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" -msgstr "" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" +msgid "A list of ACI values" +msgstr "ACI 値の一覧" #, fuzzy -msgid "server roles" -msgstr "役割を検索します。" +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" +"少なくとも type, filter, subtree, targetgroup, attrs または memberof のどれか" +"が必要です" -msgid "IPA Server Roles" +msgid "ACI prefix is required" msgstr "" -msgid "IPA Server Role" +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" +"少なくとも type, filter, subtree, targetgroup, attrs または memberof のどれか" +"が必要です" + +msgid "filter and memberof are mutually exclusive" msgstr "" -msgid "IPA server role name" +msgid "group, permission and self are mutually exclusive" msgstr "" -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" +msgid "One of group, permission or self is required" msgstr "" #, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" +msgid "Group '%s' does not exist" +msgstr "グループ '%s' が存在しません" + +msgid "empty filter" +msgstr "" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "名前 \"%s\" の ACI が見つかりませんでした" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "ACI" + +#, fuzzy +msgid "ACI" +msgstr "ACI" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "ACI 値の一覧" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" msgstr[0] "" -msgid "Include IPA master entries" +#, python-format +msgid "Renamed ACI to \"%(value)s\"" msgstr "" -msgid "IPA role name" +msgid "" +"\n" +"Auto Membership Rule.\n" msgstr "" -msgid "Class of Service object used for linking policies with groups" +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" msgstr "" +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, fuzzy, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "名前 \"%s\" の ACI が見つかりませんでした" + #, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -#, fuzzy -msgid "Delete Class of Service entry" -msgstr "HBAC サービスグループを削除します。" - -#, fuzzy -msgid "Modify Class of Service entry" -msgstr "HBAC サービスグループを変更します。" - -msgid "Display Class of Service entry" -msgstr "" - -#, fuzzy -msgid "Search for Class of Service entry" -msgstr "HBAC サービスグループを検索します。" - -#, fuzzy -msgid "Password Policy" -msgstr "パスワードポリシー" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" +msgid "%s is not a valid attribute." msgstr "" msgid "" "\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" +" Add an automember rule.\n" " " msgstr "" #, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "" + +msgid "Auto Membership is not configured" +msgstr "" + msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" +"\n" +" Add conditions to an automember rule.\n" +" " msgstr "" #, python-format -msgid "The following domains do not belong to this realm: %(domains)s" +msgid "Added condition(s) to \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +msgid "Auto member rule: %s not found!" +msgstr "名前 \"%s\" の ACI が見つかりませんでした" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " msgstr "" #, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" +msgid "Removed condition(s) from \"%(value)s\"" msgstr "" msgid "" "\n" -"API Schema\n" +" Override this so we can set completed and failed.\n" +" " msgstr "" msgid "" "\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" +" Modify an automember rule.\n" +" " msgstr "" #, python-format -msgid "Results should contain primary key attribute only (\"%s\")" +msgid "Modified automember rule \"%(value)s\"" msgstr "" -msgid "Help topic" +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" msgstr "" #, fuzzy -msgid "Version" -msgstr "権限" +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "HBAC ルールを検索します。" -msgid "Parameters" +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "" + +#, fuzzy +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "役割に関する情報を表示します。" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " msgstr "" -msgid "Method of" +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" msgstr "" -msgid "Method name" +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +#, fuzzy +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "HBAC サービスグループに関する情報を表示します。" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "automount location" +msgstr "" + +msgid "automount locations" +msgstr "" + +msgid "Automount Locations" +msgstr "" + +msgid "Automount Location" +msgstr "" + +#, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "" + +msgid "automount map" +msgstr "" + +msgid "automount maps" +msgstr "" + +msgid "Automount Maps" +msgstr "" + +msgid "Automount Map" +msgstr "" + +#, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" + +msgid "Automount key object." +msgstr "" + +msgid "automount key" +msgstr "" + +msgid "automount keys" +msgstr "" + +msgid "Automount Keys" +msgstr "" + +msgid "Automount Key" +msgstr "" + +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" + +#, fuzzy, python-format +msgid "key named %(key)s already exists" +msgstr "このエントリーはすでに存在します" + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "" + +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" + +#, python-format +msgid "Added automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added automount indirect map \"%(value)s\"" +msgstr "" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "" + +#, fuzzy +msgid "Member service groups" +msgstr "HBAC サービスグループ" + +#, fuzzy +msgid "Member HBAC service groups" +msgstr "HBAC サービスグループ" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +#, fuzzy +msgid "Indirect Member HBAC service" +msgstr "HBAC サービスを検索します。" + +#, fuzzy +msgid "Indirect Member HBAC service group" +msgstr "HBAC サービスグループにメンバーを追加します。" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" +msgstr "" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "" + +#, python-format +msgid "%(parent)s: %(oname)s not found" msgstr "" #, python-format msgid "%(pkey)s: %(oname)s not found" msgstr "" -#, fuzzy -msgid "Display information about a command." -msgstr "役割に関する情報を表示します。" - -#, fuzzy -msgid "Search for commands." -msgstr "ホストを検索します。" - -msgid "Return command defaults" -msgstr "" - -#, fuzzy -msgid "Display information about a class." -msgstr "役割に関する情報を表示します。" - -#, fuzzy -msgid "Search for classes." -msgstr "役割を検索します。" - -#, fuzzy -msgid "Display information about a help topic." -msgstr "役割に関する情報を表示します。" - -#, fuzzy -msgid "Search for help topics." -msgstr "ホストを検索します。" - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -msgid "CLI name" -msgstr "ACI 名" - -msgid "Confirm (password)" -msgstr "" - -msgid "Default" -msgstr "" - -#, fuzzy -msgid "Default from" -msgstr "標準のホストグループ" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -#, fuzzy -msgid "Option group" -msgstr "ホストグループ" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" msgstr "" #, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -#, fuzzy -msgid "Display information about a command parameter." -msgstr "役割に関する情報を表示します。" - -#, fuzzy -msgid "Search command parameters." -msgstr "役割を検索します。" - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -#, fuzzy -msgid "Display information about a command output." -msgstr "役割に関する情報を表示します。" - -#, fuzzy -msgid "Search for command outputs." -msgstr "グループを検索します。" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" +msgid "attribute \"%(attribute)s\" not allowed" msgstr "" #, python-format -msgid "Malformed principal: %(error)s" +msgid "these attributes are not allowed: %(attrs)s" msgstr "" -msgid "Add target to a named service delegation." +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" msgstr "" #, python-format msgid "member %s" msgstr "" -#, fuzzy -msgid "Remove member from a named service delegation." -msgstr "HBAC サービスグループからメンバーを削除します。" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" +#, python-format +msgid "%s to add" msgstr "" #, python-format -msgid "Added service delegation rule \"%(value)s\"" +msgid "%s to remove" msgstr "" #, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation rule" +msgid "Results should contain primary key attribute only (\"%s\")" msgstr "" #, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" - msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" msgstr "" msgid "" "\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" msgstr "" msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." msgstr "" -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -msgid "Malformed principal" -msgstr "" - -msgid "{} is required by the IPA master" -msgstr "" - -#, fuzzy -msgid "service" -msgstr "HBAC サービス" - -#, fuzzy -msgid "services" -msgstr "HBAC サービス" - msgid "Principal alias" msgstr "" -msgid "Service principal alias" +msgid "User password expiration" msgstr "" -msgid "Base-64 encoded service certificate" +msgid "SSH public key fingerprint" +msgstr "" + +msgid "Base-64 encoded user certificate" +msgstr "" + +#, fuzzy +msgid "Certificate mapping data" +msgstr "証明書" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +#, fuzzy, python-format +msgid "can be at most %(len)d characters" +msgstr "大きくても %(maxlength)d バイトである必要があります" + +msgid "Issuer" +msgstr "" + +msgid "Issuer of the certificate" msgstr "" msgid "Subject" msgstr "" -msgid "Serial Number" +msgid "Subject of the certificate" msgstr "" -msgid "Serial Number (hex)" +msgid "cannot have an empty subject" msgstr "" -msgid "Issuer" +msgid "cannot specify both subject/issuer and certificate" msgstr "" -msgid "Not Before" +msgid "cannot specify both subject/issuer and ipacertmapdata" msgstr "" -msgid "Not After" +msgid "Add one or more certificate mappings to the user entry." msgstr "" -#, fuzzy -msgid "Fingerprint (SHA256)" -msgstr "フィンガープリント (SHA1)" - -msgid "Revocation reason" +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" msgstr "" -msgid "Authentication Indicators" +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" msgstr "" msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" msgstr "" -msgid "NONE value cannot be combined with other PAC types" +msgid "Make multiple ipa calls via one remote procedure call" msgstr "" -#, fuzzy -msgid "Add a new IPA service." -msgstr "新しい HBAC サービスを追加します。" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "" - -msgid "force principal name even if host not in DNS" -msgstr "" - -msgid "Skip host check" +msgid "must contain a tuple (list, dict)" msgstr "" msgid "" -"force service to be created even when host object does not exist to manage it" +"\n" +"Manage Certificate Authorities\n" msgstr "" -#, python-format -msgid "The host '%s' does not exist to add a service to." +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" msgstr "" #, fuzzy -msgid "Add a new SMB service." -msgstr "新しい HBAC サービスを追加します。" +msgid "Certificate Authority" +msgstr "証明書" -msgid "SMB service NetBIOS name" +#, fuzzy +msgid "Certificate Authorities" +msgstr "証明書" + +msgid "Name" +msgstr "" + +msgid "Name for referencing the CA" +msgstr "" + +msgid "Description of the purpose of the CA" +msgstr "" + +msgid "Authority ID" +msgstr "" + +msgid "Dogtag Authority ID" +msgstr "" + +msgid "Subject DN" +msgstr "" + +msgid "Subject Distinguished Name" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Issuer Distinguished Name" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +#, fuzzy +msgid "Certificate chain" +msgstr "証明書" + +msgid "X.509 certificate chain" +msgstr "" + +#, fuzzy +msgid "Search for CAs." +msgstr "ホストを検索します。" + +#, python-format +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "" + +msgid "Include certificate chain in output" +msgstr "" + +#, fuzzy +msgid "Display the properties of a CA." +msgstr "HBAC ルールのプロパティーを表示します。" + +#, fuzzy +msgid "Create a CA." +msgstr "新しいグループを作成します。" + +#, python-format +msgid "Created CA \"%(value)s\"" msgstr "" #, python-format -msgid "Deleted service \"%(value)s\"" +msgid "Insufficient 'add' privilege for entry '%s'." msgstr "" #, python-format -msgid "Modified service \"%(value)s\"" +msgid "Unrecognized attributes: %(attrs)s" msgstr "" #, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" +msgid "Subject DN is already used by CA '%s'" +msgstr "" + +msgid "Delete a CA (must be disabled first)." +msgstr "" + +#, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "" + +msgid "Insufficient privilege to delete a CA." +msgstr "" + +msgid "CA" +msgstr "" + +msgid "IPA CA cannot be deleted" +msgstr "" + +msgid "Must be disabled first" +msgstr "" + +#, fuzzy +msgid "Modify CA configuration." +msgstr "グループを変更します。" + +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "" + +msgid "Insufficient privilege to modify a CA." +msgstr "" + +#, fuzzy +msgid "Disable a CA." +msgstr "HBAC ルールを無効化します。" + +#, python-format +msgid "Disabled CA \"%(value)s\"" +msgstr "" + +msgid "IPA CA cannot be disabled" +msgstr "" + +#, fuzzy +msgid "Enable a CA." +msgstr "HBAC ルールを有効化します。" + +#, python-format +msgid "Enabled CA \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "" + +msgid "CA ACLs" +msgstr "" + +msgid "CA category" +msgstr "" + +msgid "CA category the ACL applies to" +msgstr "" + +msgid "CAs" +msgstr "" + +#, python-format +msgid "Added CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "" + +msgid "default CA ACL can be only disabled" +msgstr "" + +#, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" + +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" msgstr[0] "" #, python-format -msgid "Disabled service \"%(value)s\"" +msgid "Enabled CA ACL \"%(value)s\"" msgstr "" #, python-format -msgid "Added certificates to service principal \"%(value)s\"" +msgid "Disabled CA ACL \"%(value)s\"" msgstr "" #, python-format -msgid "Removed certificates from service principal \"%(value)s\"" +msgid "%i user or group added." msgstr "" -msgid "Add new principal alias to a service" -msgstr "" - -#, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Remove principal alias from a service" -msgstr "HBAC サービスグループからメンバーを削除します。" - -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Sudo Rules\n" -msgstr "sudo ルール" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -#, fuzzy -msgid "command" -msgstr "sudo コマンド" - -#, fuzzy -msgid "commands" -msgstr "sudo コマンド" - -msgid "runAs user" -msgstr "" - -#, fuzzy -msgid "runAs users" -msgstr "ユーザー" - -#, fuzzy -msgid "group runAs" -msgstr "グループ" - -#, fuzzy -msgid "runAs groups" -msgstr "ホストグループ" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" - -msgid "commands cannot be added when command category='all'" -msgstr "" +#, fuzzy, python-format +msgid "%i users or groups added." +msgstr "グループを検索します。" msgid "users cannot be added when user category='all'" msgstr "" +#, python-format +msgid "%i user or group removed." +msgstr "" + +#, python-format +msgid "%i users or groups removed." +msgstr "" + +#, python-format +msgid "%i host or hostgroup added." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "" + msgid "hosts cannot be added when host category='all'" msgstr "" -msgid "users cannot be added when runAs user or runAs group category='all'" +#, python-format +msgid "%i host or hostgroup removed." msgstr "" #, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" +msgid "%i hosts or hostgroups removed." msgstr "" #, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" +msgid "%i service added." msgstr "" #, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgid "%i services added." +msgstr "" + +msgid "services cannot be added when service category='all'" +msgstr "" + +#, python-format +msgid "%i service removed." +msgstr "" + +#, python-format +msgid "%i services removed." +msgstr "" + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, python-format +msgid "%i profiles removed." +msgstr "" + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." msgstr "" msgid "pyhbac is not installed." @@ -14056,16 +14230,6 @@ msgstr "" msgid "Name of issuing CA" msgstr "" -msgid "Base-64 encoded certificate." -msgstr "" - -#, fuzzy -msgid "Certificate chain" -msgstr "証明書" - -msgid "X.509 certificate chain" -msgstr "" - msgid "Subject email address" msgstr "" @@ -14100,18 +14264,25 @@ msgstr "" msgid "Subject Other Name" msgstr "" -msgid "Issuer DN" +msgid "Not Before" msgstr "" +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "フィンガープリント (SHA1)" + +#, fuzzy +msgid "Fingerprint (SHA256)" +msgstr "フィンガープリント (SHA1)" + msgid "Serial number (hex)" msgstr "" msgid "Request status" msgstr "" -msgid "Include certificate chain in output" -msgstr "" - msgid "" "automatically add the principal if it doesn't exist (service principals only)" msgstr "" @@ -14206,6 +14377,9 @@ msgstr "アカウント状態" msgid "Revoked" msgstr "" +msgid "Revocation reason" +msgstr "" + msgid "" "Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " "revocation reason details. " @@ -14223,6 +14397,10 @@ msgstr "" msgid "7 is not a valid revocation reason" msgstr "" +#, fuzzy +msgid "Status of the certificate" +msgstr "整数である必要があります" + msgid "Results should contain primary key attribute only (\"certificate\")" msgstr "" @@ -14452,7 +14630,111 @@ msgid "%(count)s user matched" msgid_plural "%(count)s users matched" msgstr[0] "" -msgid "Base-64 encoded user certificate" +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +#, fuzzy +msgid "Certificate Profile" +msgstr "証明書" + +#, fuzzy +msgid "Certificate Profiles" +msgstr "証明書" + +msgid "Profile configuration" +msgstr "" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." msgstr "" msgid "" @@ -14526,6 +14808,9 @@ msgstr "" msgid "Maximum hostname length" msgstr "" +msgid "Enable adding subids to new users" +msgstr "" + msgid "IPA masters" msgstr "" @@ -14599,6 +14884,23 @@ msgstr "" msgid "DNSec key master" msgstr "" +#, fuzzy +msgid "Setup SID configuration" +msgstr "グループを変更します。" + +msgid "New users and groups automatically get a SID assigned" +msgstr "" + +#, fuzzy +msgid "Add SIDs" +msgstr "新しいホストを追加します。" + +msgid "Add SIDs for existing users and groups" +msgstr "" + +msgid "NetBIOS name of the IPA domain" +msgstr "" + msgid "Empty domain is not allowed" msgstr "" @@ -14614,6 +14916,20 @@ msgstr "" msgid "Disabled domain '%(domain)s' is not allowed" msgstr "" +msgid "not allowed to enable SID generation" +msgstr "" + +msgid "" +"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " +"allowed. Empty string is not allowed." +msgstr "" + +msgid "Failed to call DBus" +msgstr "" + +msgid "Configuration of SID failed. See details in the error log" +msgstr "" + #, fuzzy msgid "The group doesn't exist" msgstr "グループ '%s' が存在しません" @@ -14639,56 +14955,1615 @@ msgstr "" msgid "SELinux user map default user not in order list" msgstr "" +#, python-format +msgid "You cannot specify %s without the --enable-sid option" +msgstr "" + +msgid "delegation" +msgstr "" + +msgid "delegations" +msgstr "" + +msgid "Delegations" +msgstr "" + +msgid "Delegation" +msgstr "" + +#, python-format +msgid "Added delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "" + msgid "" "\n" -"Groups of Sudo Commands\n" +"Domain Name System (DNS)\n" +msgstr "" + +msgid "" "\n" -"Manage groups of Sudo Commands.\n" +"Manage DNS zone and resource records.\n" +msgstr "" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" + +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "invalid IP network format" +msgstr "" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "" + +msgid "invalid address format" +msgstr "" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" + +msgid "algorithm value: allowed interval 0-255" +msgstr "" + +msgid "flags value: allowed interval 0-255" +msgstr "" + +msgid "iterations value: allowed interval 0-65535" +msgstr "" + +#, python-format +msgid "salt value: %(err)s" +msgstr "" + +#, fuzzy +msgid "invalid domain-name: not fully qualified" +msgstr "無効なドメイン名: %s" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" + +#, python-format +msgid "" +"No answers could be found in the specified lifetime for DNS reverse zone " +"%(revdns)s" +msgstr "" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" + +#, python-format +msgid "%s record" +msgstr "%s レコード" + +#, fuzzy, python-format +msgid "Raw %s records" +msgstr "%s レコード" + +#, python-format +msgid "%s Record" +msgstr "%s レコード" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "" + +msgid "Invalid number of parts!" +msgstr "" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "" + +msgid "Create reverse" +msgstr "" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "" + +msgid "Exchanger" +msgstr "" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" + +msgid "Priority (order)" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Relative weight for entries with the same priority." +msgstr "" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Target Uniform Resource Identifier" +msgstr "" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "" + +msgid "Managedby permission" +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "cannot be used when a zone is specified" +msgstr "" + +msgid "Only one zone type is allowed per zone name" +msgstr "" + +#, python-format +msgid "Added system permission \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +msgid "permission \"%(value)s\" already exists" +msgstr "このエントリーはすでに存在します" + +#, python-format +msgid "Removed system permission \"%(value)s\"" +msgstr "" + +msgid "DNS zone" +msgstr "" + +msgid "DNS zones" +msgstr "" + +msgid "DNS Zones" +msgstr "" + +msgid "DNS Zone" +msgstr "" + +msgid "Default time to live" +msgstr "" + +msgid "Time to live for records without explicit TTL definition" +msgstr "" + +msgid "setting Authoritative nameserver" +msgstr "" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "" + +msgid "" +msgstr "" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" + +#, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "is required" +msgstr "%s レコード" + +#, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "" + +msgid "DNS resource record" +msgstr "" + +msgid "DNS resource records" +msgstr "" + +msgid "DNS Resource Records" +msgstr "" + +msgid "DNS Resource Record" +msgstr "" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" + +msgid "only master zones can contain records" +msgstr "" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" + +msgid "DNS zone root record cannot be renamed" +msgstr "" + +msgid "DNS records can be only updated one at a time" +msgstr "" + +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Found '%(value)s'" +msgstr "" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "" + +msgid "DNS configuration options" +msgstr "" + +msgid "DNS Global Configuration" +msgstr "" + +msgid "IPA DNS version" +msgstr "" + +msgid "List of IPA masters configured as DNS servers" +msgstr "" + +msgid "IPA server configured as DNSSec key master" +msgstr "" + +msgid "Global DNS configuration is empty" +msgstr "" + +msgid "DNS forward zone" +msgstr "" + +msgid "DNS forward zones" +msgstr "" + +msgid "DNS Forward Zones" +msgstr "" + +msgid "DNS Forward Zone" +msgstr "" + +msgid "Please specify forwarders." +msgstr "" + +#, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "" + +msgid "IPA DNS records" +msgstr "" + +msgid "IPA location records" +msgstr "" + +msgid "Update location and IPA server DNS records" +msgstr "" + +#, fuzzy +msgid "Result of the command" +msgstr "sudo コマンド" + +msgid "Dry run" +msgstr "" + +msgid "Do not update records only return expected records" +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +msgid "DNS Servers" +msgstr "" + +msgid "DNS Server" +msgstr "" + +msgid "DNS Server name" +msgstr "" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "Search for DNS servers." +msgstr "HBAC サービスを検索します。" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +#, fuzzy +msgid "Display configuration of a DNS server." +msgstr "HBAC サービスに関する情報を表示します。" + +#, fuzzy +msgid "Add a new DNS server." +msgstr "新しいユーザーを追加します。" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "Delete a DNS server" +msgstr "ユーザーを削除します。" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" "\n" "EXAMPLES:\n" "\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" "\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" "\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" "\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" "\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" msgstr "" +msgid "groups" +msgstr "グループ" + +msgid "User Group" +msgstr "ユーザーグループ" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "" + +msgid "gid cannot be set for external group" +msgstr "" + +msgid "attribute \"gidNumber\" not allowed with --nonposix" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "グループを削除します。" + #, fuzzy -msgid "sudo command group" -msgstr "sudo コマンド" - -#, fuzzy -msgid "sudo command groups" -msgstr "sudo コマンド" +msgid "privileged group" +msgstr "グループを削除します。" #, python-format -msgid "Added Sudo Command Group \"%(value)s\"" +msgid "Modified group \"%(value)s\"" msgstr "" #, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" msgstr[0] "" +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +#, fuzzy +msgid "Not a managed group" +msgstr "新しいグループを作成します。" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "The deny type has been deprecated." +msgstr "" + +#, fuzzy +msgid "HBAC rules" +msgstr "HBAC サービス" + +#, fuzzy +msgid "HBAC Rules" +msgstr "ルール" + +#, fuzzy +msgid "HBAC Services" +msgstr "HBAC サービス" + +msgid "HBAC Service Groups" +msgstr "HBAC サービスグループ" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "HBAC ルールを削除します。" + +#, fuzzy, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "HBAC ルールを変更します。" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "" + +#, fuzzy, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "HBAC ルールを有効化します。" + +#, fuzzy, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "HBAC ルールを無効化します。" + +msgid "Access time" +msgstr "" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "HBAC サービス" + +msgid "HBAC Service" +msgstr "HBAC サービス" + +#, fuzzy, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "新しい HBAC サービスグループを追加します。" + +#, fuzzy, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "HBAC サービスグループを削除します。" + +#, fuzzy, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "HBAC サービスグループを変更します。" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" + +msgid "HBAC service group" +msgstr "HBAC サービスグループ" + +msgid "HBAC service groups" +msgstr "HBAC サービスグループ" + +msgid "HBAC Service Group" +msgstr "HBAC サービスグループ" + +#, fuzzy, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "新しい HBAC サービスグループを追加します。" + +#, fuzzy, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "HBAC サービスグループを削除します。" + +#, fuzzy, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "HBAC サービスグループを変更します。" + +#, fuzzy, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "HBAC サービスグループ" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Access granted: %s" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host" +msgstr "ホスト" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Serial Number" +msgstr "" + +msgid "Serial Number (hex)" +msgstr "" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + msgid "" "\n" "Groups of hosts.\n" @@ -14726,6 +16601,12 @@ msgid "" " ipa hostgroup-del baltimore\n" msgstr "" +msgid "host groups" +msgstr "ホストグループ" + +msgid "Host Group" +msgstr "ホストグループ" + #, python-format msgid "Added hostgroup \"%(value)s\"" msgstr "" @@ -14763,297 +16644,503 @@ msgstr "" msgid "Remove users that can manage members of this hostgroup." msgstr "" -#, python-format msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" msgstr "" msgid "" "\n" -"Set a user's password\n" +"ID ranges\n" "\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" "\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" +"There are two type of ID ranges which are both handled by this utility:\n" "\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" "\n" -"EXAMPLES:\n" +"Both types have the following attributes in common:\n" "\n" -" To reset your own password:\n" -" ipa passwd\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" "\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"and an ID range of a trusted domain may set\n" +" - auto-private-groups: [true|false|hybrid] automatic creation of private " +"groups\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" "\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" msgstr "" -msgid "The OTP if the user has a token configured" +msgid "ID Ranges" msgstr "" -#, python-format -msgid "Changed password for \"%(value)s\"" +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" msgstr "" #, fuzzy -msgid "" -"\n" -"Permissions\n" -msgstr "権限" +msgid "Auto private groups" +msgstr "ホストグループ" + +msgid "Auto creation of private groups, one of allowed values" +msgstr "" msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" msgstr "" msgid "" "\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" +" Add new ID range.\n" "\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" +" To add a new ID range you always have to specify\n" "\n" -"A permission is made up of a number of different parts:\n" +" --base-id\n" +" --range-size\n" "\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" +" Additionally\n" "\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" +" --rid-base\n" +" --secondary-rid-base\n" "\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" +" may be given for a new ID range for the local domain while\n" "\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" +" --auto-private-groups\n" "\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -#, fuzzy -msgid "" +" may be given for a new ID range for a trusted AD domain and\n" "\n" -"Managed permissions\n" -msgstr "権限" - -msgid "" +" --rid-base\n" +" --dom-sid\n" "\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" +" must be given to add a new range for a trusted AD domain.\n" "\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -#, fuzzy -msgid "must be enclosed in parentheses" -msgstr "整数である必要があります" - -#, python-format -msgid "\"%s\" is not an object type" msgstr "" #, python-format -msgid "\"%s\" is not a valid permission type" +msgid "Added ID range \"%(value)s\"" msgstr "" -#, python-format -msgid "Deprecated; use %s" +msgid "Options dom-sid and dom-name cannot be used together" msgstr "" -#, fuzzy -msgid "ACI" -msgstr "ACI" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" +msgid "Specified trusted domain name could not be found." msgstr "" -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, fuzzy, python-format -msgid "Entry %s not found" -msgstr "名前 \"%s\" の ACI が見つかりませんでした" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgid "Options dom-sid/dom-name and rid-base must be used together" msgstr "" msgid "" -"cannot specify full target filter and extra target filter simultaneously" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" msgstr "" -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, python-format -msgid "%s: group not found" -msgstr "" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" -msgstr "" - -msgid "Bad search filter" -msgstr "" - -#, fuzzy, python-format -msgid "Entry %s does not exist" -msgstr "グループ '%s' が存在しません" - msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" +"private-groups is specified" +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." msgstr "" #, python-format -msgid "Added permission \"%(value)s\"" -msgstr "" - -msgid "attrs and included attributes are mutually exclusive" +msgid "Deleted ID range \"%(value)s\"" msgstr "" #, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "" - -msgid "cannot delete managed permissions" -msgstr "" - -#, fuzzy, python-format -msgid "ACI of permission %s was not found" -msgstr "名前 \"%s\" の ACI が見つかりませんでした" - -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" msgstr[0] "" -#, python-brace-format -msgid "{role}: role not found" -msgstr "" +#, fuzzy +msgid "" +"Modify ID range.\n" +"\n" +msgstr "役割を変更します。" -#, python-brace-format -msgid "{attr}: no such attribute" +#, python-format +msgid "Modified ID range \"%(value)s\"" msgstr "" msgid "" -"\n" -"Session Support for IPA\n" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" msgstr "" +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +msgid "ID View" +msgstr "" + +msgid "system ID View" +msgstr "" + +msgid "ID Views" +msgstr "" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +msgid "Hosts the view applies to" +msgstr "" + +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +#, fuzzy +msgid "Add a new ID override." +msgstr "新しい HBAC サービスを追加します。" + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "Delete an ID override." +msgstr "HBAC ルールを削除します。" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "Modify an ID override." +msgstr "HBAC サービスを変更します。" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +#, fuzzy +msgid "Search for an ID override." +msgstr "HBAC サービスグループを検索します。" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" + +#, fuzzy +msgid "Display information about an ID override." +msgstr "HBAC サービスに関する情報を表示します。" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" + msgid "Internationalization messages" msgstr "" @@ -15069,9 +17156,6 @@ msgstr "" msgid "Are you sure you want to rebuild auto membership?" msgstr "" -msgid "Automember rebuild membership task completed" -msgstr "" - msgid "Are you sure you want to proceed with the action?" msgstr "" @@ -15243,6 +17327,9 @@ msgstr "" msgid "OK" msgstr "" +msgid "Refresh" +msgstr "更新" + msgid "Reload current settings from the server." msgstr "" @@ -15279,6 +17366,9 @@ msgstr "" msgid "Save" msgstr "" +msgid "Set" +msgstr "設定" + msgid "Show" msgstr "" @@ -15353,6 +17443,10 @@ msgstr "" msgid "Unsaved Changes" msgstr "" +#, python-brace-format +msgid "Edit ${entity}" +msgstr "${entity} の編集" + msgid "Hide details" msgstr "" @@ -15378,6 +17472,9 @@ msgstr "" msgid "Success" msgstr "" +msgid "Validation error" +msgstr "検証エラー" + msgid "Input form contains invalid or missing values." msgstr "" @@ -15400,9 +17497,24 @@ msgstr "" msgid "An error has occurred (${error})" msgstr "内部エラーが発生しました" +msgid "HTTP Error" +msgstr "HTTP エラー" + +msgid "Internal Error" +msgstr "内部エラー" + +msgid "IPA Error" +msgstr "IPA エラー" + msgid "No response" msgstr "" +msgid "Unknown Error" +msgstr "未知のエラー" + +msgid "URL" +msgstr "URL" + #, python-brace-format msgid "${primary_key} is managed by:" msgstr "" @@ -15757,6 +17869,12 @@ msgstr "" msgid "Are you sure you want to change default group?" msgstr "" +msgid "Default host group" +msgstr "標準のホストグループ" + +msgid "Default user group" +msgstr "標準のユーザーグループ" + msgid "Exclusive" msgstr "" @@ -15949,12 +18067,12 @@ msgstr "" msgid "Affiliation Changed" msgstr "" -msgid "CA" -msgstr "" - msgid "CA Compromise" msgstr "" +msgid "Certificates" +msgstr "証明書" + #, fuzzy msgid "Certificate Hold" msgstr "証明書" @@ -16177,10 +18295,6 @@ msgstr "" msgid "Add certificate mapping data" msgstr "" -#, fuzzy -msgid "Certificate mapping data" -msgstr "証明書" - msgid "Configuration string" msgstr "" @@ -16197,6 +18311,16 @@ msgstr "" msgid "Remove certificate identity mapping rules" msgstr "" +#, fuzzy +msgid "Version" +msgstr "権限" + +msgid "Group Options" +msgstr "グループオプション" + +msgid "Search Options" +msgstr "検索オプション" + #, fuzzy msgid "SELinux Options" msgstr "グループオプション" @@ -16209,6 +18333,9 @@ msgstr "検索オプション" msgid "Service Options" msgstr "検索オプション" +msgid "User Options" +msgstr "ユーザーオプション" + msgid "Forward first" msgstr "" @@ -16218,6 +18345,9 @@ msgstr "" msgid "Forward only" msgstr "" +msgid "Options" +msgstr "オプション" + msgid "Update System DNS Records" msgstr "" @@ -16582,6 +18712,9 @@ msgstr "" msgid "New Test" msgstr "" +msgid "Rules" +msgstr "ルール" + msgid "Run Test" msgstr "" @@ -16651,6 +18784,9 @@ msgstr "OTP のリセット" msgid "Generated OTP" msgstr "OTP のリセット" +msgid "Kerberos Key" +msgstr "Kerberos キー" + #, fuzzy msgid "Kerberos Key Not Present" msgstr "Kerberos キー" @@ -16667,6 +18803,9 @@ msgstr "" msgid "One-Time Password Present" msgstr "" +msgid "Reset OTP" +msgstr "OTP のリセット" + msgid "Reset One-Time Password" msgstr "" @@ -17041,6 +19180,10 @@ msgstr "" msgid "Add password policy" msgstr "パスワードポリシー" +#, fuzzy +msgid "Password Policy" +msgstr "パスワードポリシー" + #, fuzzy msgid "Remove password policies" msgstr "パスワードポリシー" @@ -17069,9 +19212,6 @@ msgstr "" msgid "Remove ID ranges" msgstr "" -msgid "Active Directory domain" -msgstr "" - msgid "Active Directory domain with POSIX attributes" msgstr "" @@ -17096,6 +19236,9 @@ msgstr "" msgid "Remove RADIUS servers" msgstr "" +msgid "Realm Domains" +msgstr "" + msgid "Check DNS" msgstr "" @@ -17278,6 +19421,34 @@ msgstr "" msgid "User categories" msgstr "" +#, fuzzy +msgid "Add subid" +msgstr "sudo ルール" + +msgid "Assigned subids" +msgstr "" + +msgid "DNA remaining" +msgstr "" + +msgid "SubGID range size" +msgstr "" + +msgid "SubGID range start" +msgstr "" + +msgid "SubUID range size" +msgstr "" + +msgid "SubUID range start" +msgstr "" + +msgid "Remaining subids" +msgstr "" + +msgid "Subordinate ID Statistics" +msgstr "" + #, fuzzy msgid "Add sudo command" msgstr "sudo コマンド" @@ -17484,6 +19655,9 @@ msgstr "" msgid "Remove topology segments" msgstr "" +msgid "Account" +msgstr "アカウント" + msgid "Add trust" msgstr "" @@ -17544,6 +19718,9 @@ msgstr "" msgid "Account Settings" msgstr "アカウント状態" +msgid "Account Status" +msgstr "アカウント状態" + msgid "Active users" msgstr "" @@ -17571,6 +19748,14 @@ msgstr "" msgid "Add user '${primary_key}' into sudo rules" msgstr "" +msgid "Auto assign subordinate ids" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to auto-assign a subordinate id to user ${object}?" +msgstr "" + msgid "Contact Settings" msgstr "" @@ -18032,9 +20217,6 @@ msgstr "" msgid "Authentication" msgstr "" -msgid "Automember" -msgstr "" - #, fuzzy msgid "Automount" msgstr "アカウント" @@ -18062,6 +20244,9 @@ msgstr "" msgid "Role-Based Access Control" msgstr "" +msgid "Subordinate IDs" +msgstr "" + #, fuzzy msgid "Sudo" msgstr "sudo ルール" @@ -18178,318 +20363,10 @@ msgstr "" msgid "Unsupported value" msgstr "" -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -#, fuzzy -msgid "invalid attribute name" -msgstr "無効なドメイン名: %s" - -msgid "invalid port number" -msgstr "" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" -msgstr "" - #, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" - -#, python-brace-format msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Access granted: %s" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." msgstr "" msgid "kerberos ticket policy settings" @@ -18661,6 +20538,1781 @@ msgstr "役割に関する情報を表示します。" msgid "Servers in location" msgstr "" +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +#, fuzzy +msgid "netgroups" +msgstr "グループ" + +#, fuzzy +msgid "Netgroup" +msgstr "グループ" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +#, fuzzy +msgid "URI" +msgstr "URL" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "" + +msgid "cannot be empty" +msgstr "" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"If the user authentication method is set to password+OTP, the user should\n" +"pass the --otp option when resetting the password.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To reset your own password when password+OTP is set as authentication " +"method:\n" +" ipa passwd --otp\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +msgid "The OTP if the user has a token configured" +msgstr "" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "" +"\n" +"Permissions\n" +msgstr "権限" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +#, fuzzy +msgid "" +"\n" +"Managed permissions\n" +msgstr "権限" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +#, fuzzy +msgid "must be enclosed in parentheses" +msgstr "整数である必要があります" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "" + +#, python-format +msgid "Deprecated; use %s" +msgstr "" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, fuzzy, python-format +msgid "Entry %s not found" +msgstr "名前 \"%s\" の ACI が見つかりませんでした" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, python-format +msgid "option was renamed; use %s" +msgstr "" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, python-format +msgid "%s: group not found" +msgstr "" + +msgid "target and targetgroup are mutually exclusive" +msgstr "" + +msgid "subtree and type are mutually exclusive" +msgstr "" + +msgid "Bad search filter" +msgstr "" + +#, fuzzy, python-format +msgid "Entry %s does not exist" +msgstr "グループ '%s' が存在しません" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, python-format +msgid "Added permission \"%(value)s\"" +msgstr "" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "" + +msgid "cannot delete managed permissions" +msgstr "" + +#, fuzzy, python-format +msgid "ACI of permission %s was not found" +msgstr "名前 \"%s\" の ACI が見つかりませんでした" + +#, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +#, fuzzy +msgid "invalid attribute name" +msgstr "無効なドメイン名: %s" + +msgid "invalid port number" +msgstr "" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "roles" +msgstr "役割" + +msgid "Role" +msgstr "" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" + +msgid "" +"\n" +"API Schema\n" +msgstr "" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +msgid "Documentation" +msgstr "" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +msgid "Help topic" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +msgid "Method name" +msgstr "" + +#, fuzzy +msgid "Display information about a command." +msgstr "役割に関する情報を表示します。" + +#, fuzzy +msgid "Search for commands." +msgstr "ホストを検索します。" + +msgid "Return command defaults" +msgstr "" + +#, python-brace-format +msgid "{oname}: {command_name} not found" +msgstr "" + +#, fuzzy +msgid "Display information about a class." +msgstr "役割に関する情報を表示します。" + +#, fuzzy +msgid "Search for classes." +msgstr "役割を検索します。" + +#, fuzzy +msgid "Display information about a help topic." +msgstr "役割に関する情報を表示します。" + +#, fuzzy +msgid "Search for help topics." +msgstr "ホストを検索します。" + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +msgid "CLI name" +msgstr "ACI 名" + +msgid "Confirm (password)" +msgstr "" + +msgid "Default" +msgstr "" + +#, fuzzy +msgid "Default from" +msgstr "標準のホストグループ" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +#, fuzzy +msgid "Option group" +msgstr "ホストグループ" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" +msgstr "" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +#, fuzzy +msgid "Display information about a command parameter." +msgstr "役割に関する情報を表示します。" + +#, fuzzy +msgid "Search command parameters." +msgstr "役割を検索します。" + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +#, fuzzy +msgid "Display information about a command output." +msgstr "役割に関する情報を表示します。" + +#, fuzzy +msgid "Search for command outputs." +msgstr "グループを検索します。" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "self service permission" +msgstr "" + +msgid "self service permissions" +msgstr "" + +#, fuzzy +msgid "Self Service Permissions" +msgstr "権限" + +msgid "Self Service Permission" +msgstr "" + +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +msgid "SELinux User Map rule" +msgstr "" + +msgid "SELinux User Map rules" +msgstr "" + +msgid "SELinux User Maps" +msgstr "" + +msgid "SELinux User Map" +msgstr "" + +#, fuzzy, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "名前 \"%s\" の ACI が見つかりませんでした" + +#, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "" + +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +#, fuzzy +msgid "server roles" +msgstr "役割を検索します。" + +msgid "IPA Server Roles" +msgstr "" + +msgid "IPA Server Role" +msgstr "" + +msgid "IPA server role name" +msgstr "" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "IPA role name" +msgstr "" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +#, python-format +msgid "authentication indicators not allowed in service \"%s\"" +msgstr "" + +msgid "Malformed principal" +msgstr "" + +msgid "{} is required by the IPA master" +msgstr "" + +#, fuzzy +msgid "service" +msgstr "HBAC サービス" + +#, fuzzy +msgid "services" +msgstr "HBAC サービス" + +msgid "Service principal alias" +msgstr "" + +msgid "Base-64 encoded service certificate" +msgstr "" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +#, fuzzy +msgid "Add a new IPA service." +msgstr "新しい HBAC サービスを追加します。" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "" + +msgid "force principal name even if host not in DNS" +msgstr "" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +#, fuzzy +msgid "Add a new SMB service." +msgstr "新しい HBAC サービスを追加します。" + +msgid "SMB service NetBIOS name" +msgstr "" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to a service" +msgstr "" + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "Remove principal alias from a service" +msgstr "HBAC サービスグループからメンバーを削除します。" + +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, fuzzy +msgid "Remove member from a named service delegation." +msgstr "HBAC サービスグループからメンバーを削除します。" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +#, fuzzy +msgid "stage users" +msgstr "ユーザー" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Subordinate ids\n" +"\n" +"Manage subordinate user and group ids for users\n" +"\n" +"EXAMPLES:\n" +"\n" +" Auto-assign a subordinate id range to current user\n" +" ipa subid-generate\n" +"\n" +" Auto-assign a subordinate id range to user alice:\n" +" ipa subid-generate --owner=alice\n" +"\n" +" Find subordinate ids for user alice:\n" +" ipa subid-find --owner=alice\n" +"\n" +" Match entry by any subordinate uid in range:\n" +" ipa subid-match --subuid=2147483649\n" +msgstr "" + +msgid "Subordinate id" +msgstr "" + +msgid "Subordinate ids" +msgstr "" + +#, fuzzy +msgid "Subordinate id description" +msgstr "グループオプション" + +msgid "Owning user of subordinate id entry" +msgstr "" + +msgid "Start value for subordinate user ID (subuid) range" +msgstr "" + +msgid "Subordinate user ID count" +msgstr "" + +msgid "Start value for subordinate group ID (subgid) range" +msgstr "" + +msgid "Subordinate group ID count" +msgstr "" + +#, python-format +msgid "" +"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." +msgstr "" + +#, python-format +msgid "'%(dn)s is not a valid user" +msgstr "" + +msgid "subgidnumber must be equal to subuidnumber" +msgstr "" + +#, fuzzy +msgid "Add a new subordinate id." +msgstr "新しいユーザーを追加します。" + +#, fuzzy, python-format +msgid "Added subordinate id \"%(value)s\"" +msgstr "sudo コマンド" + +#, fuzzy +msgid "Delete a subordinate id." +msgstr "HBAC サービスグループを削除します。" + +#, fuzzy, python-format +msgid "Deleted subordinate id \"%(value)s\"" +msgstr "HBAC サービスグループを削除します。" + +#, fuzzy +msgid "Modify a subordinate id." +msgstr "ユーザーを変更します。" + +#, fuzzy, python-format +msgid "Modified subordinate id \"%(value)s\"" +msgstr "HBAC サービスグループを変更します。" + +#, fuzzy +msgid "Search for subordinate id." +msgstr "役割を検索します。" + +#, fuzzy, python-format +msgid "%(count)d subordinate id matched" +msgid_plural "%(count)d subordinate ids matched" +msgstr[0] "HBAC サービスグループ" + +#, fuzzy +msgid "Display information about a subordinate id." +msgstr "役割に関する情報を表示します。" + +msgid "Generate and auto-assign subuid and subgid range to user entry" +msgstr "" + +msgid "Match users by any subordinate uid in their range" +msgstr "" + +msgid "SubUID match" +msgstr "" + +msgid "Match value for subordinate user ID" +msgstr "" + +msgid "Subordinate id statistics" +msgstr "" + +#, python-format +msgid "%(remaining)i remaining subordinate id ranges" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +msgid "sudo command" +msgstr "sudo コマンド" + +msgid "sudo commands" +msgstr "sudo コマンド" + +msgid "Sudo Commands" +msgstr "sudo コマンド" + +#, fuzzy, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "sudo コマンド" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +#, fuzzy +msgid "sudo command group" +msgstr "sudo コマンド" + +#, fuzzy +msgid "sudo command groups" +msgstr "sudo コマンド" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" + msgid "" "\n" "Topology\n" @@ -18875,967 +22527,6 @@ msgid "" " replication agreements\n" msgstr "" -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -#, fuzzy, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "sudo コマンド" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -#, fuzzy -msgid "Self Service Permissions" -msgstr "権限" - -msgid "Self Service Permission" -msgstr "" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" - -#, fuzzy -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" -"少なくとも type, filter, subtree, targetgroup, attrs または memberof のどれか" -"が必要です" - -msgid "ACI prefix is required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -msgid "ACI object." -msgstr "" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "ACI 値の一覧" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "グループを削除します。" - -#, fuzzy -msgid "privileged group" -msgstr "グループを削除します。" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -#, fuzzy -msgid "Not a managed group" -msgstr "新しいグループを作成します。" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -msgid "automount location" -msgstr "" - -msgid "automount locations" -msgstr "" - -msgid "Automount Locations" -msgstr "" - -msgid "Automount Location" -msgstr "" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "" - -msgid "automount map" -msgstr "" - -msgid "automount maps" -msgstr "" - -msgid "Automount Maps" -msgstr "" - -msgid "Automount Map" -msgstr "" - -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" - -msgid "Automount key object." -msgstr "" - -msgid "automount key" -msgstr "" - -msgid "automount keys" -msgstr "" - -msgid "Automount Keys" -msgstr "" - -msgid "Automount Key" -msgstr "" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, fuzzy, python-format -msgid "key named %(key)s already exists" -msgstr "このエントリーはすでに存在します" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -#, fuzzy -msgid "Add a new ID override." -msgstr "新しい HBAC サービスを追加します。" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Delete an ID override." -msgstr "HBAC ルールを削除します。" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Modify an ID override." -msgstr "HBAC サービスを変更します。" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -#, fuzzy -msgid "Search for an ID override." -msgstr "HBAC サービスグループを検索します。" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" - -#, fuzzy -msgid "Display information about an ID override." -msgstr "HBAC サービスに関する情報を表示します。" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -msgid "CA category" -msgstr "" - -msgid "CA category the ACL applies to" -msgstr "" - -msgid "CAs" -msgstr "" - -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "" - -#, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, fuzzy, python-format -msgid "%i users or groups added." -msgstr "グループを検索します。" - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, python-format -msgid "%i service added." -msgstr "" - -#, python-format -msgid "%i services added." -msgstr "" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - msgid "" "\n" "Cross-realm trusts\n" @@ -20001,12 +22692,6 @@ msgid "" " " msgstr "" -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - msgid "Type of trusted domain ID range, one of allowed values" msgstr "" @@ -20242,716 +22927,8 @@ msgid "" "itself" msgstr "" -msgid "" -"\n" -"DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "" - -msgid "DNS servers" -msgstr "" - -msgid "DNS Servers" -msgstr "" - -msgid "DNS Server" -msgstr "" - -msgid "DNS Server name" -msgstr "" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Search for DNS servers." -msgstr "HBAC サービスを検索します。" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -#, fuzzy -msgid "Display configuration of a DNS server." -msgstr "HBAC サービスに関する情報を表示します。" - -#, fuzzy -msgid "Add a new DNS server." -msgstr "新しいユーザーを追加します。" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Delete a DNS server" -msgstr "ユーザーを削除します。" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "can be at most %(len)d characters" -msgstr "大きくても %(maxlength)d バイトである必要があります" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -#, fuzzy -msgid "HBAC Services" -msgstr "HBAC サービス" - -#, fuzzy, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "新しい HBAC サービスグループを追加します。" - -#, fuzzy, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "HBAC サービスグループを削除します。" - -#, fuzzy, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "HBAC サービスグループを変更します。" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" - -#, fuzzy, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "新しい HBAC サービスグループを追加します。" - -#, fuzzy, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "HBAC サービスグループを削除します。" - -#, fuzzy, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "HBAC サービスグループを変更します。" - -#, fuzzy, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "HBAC サービスグループ" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -msgid "Delegations" -msgstr "" - -msgid "Delegation" -msgstr "" - -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" - -msgid "Role" -msgstr "" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" - -#, fuzzy -msgid "" -"Modify ID range.\n" -"\n" -msgstr "役割を変更します。" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, fuzzy -msgid "netgroups" -msgstr "グループ" - -#, fuzzy -msgid "Netgroup" -msgstr "グループ" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" +msgid "users" +msgstr "ユーザー" #, python-format msgid "Added user \"%(value)s\"" @@ -20972,11 +22949,6 @@ msgstr "" msgid "Modified user \"%(value)s\"" msgstr "" -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" - #, python-format msgid "Undeleted user account \"%(value)s\"" msgstr "" @@ -21072,12 +23044,6 @@ msgstr "" msgid "Removed certificates from user \"%(value)s\"" msgstr "" -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - msgid "Add new principal alias to the user entry" msgstr "" @@ -21092,532 +23058,6 @@ msgstr "" msgid "Removed aliases from user \"%(value)s\"" msgstr "" -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, fuzzy, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "名前 \"%s\" の ACI が見つかりませんでした" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Auto member rule: %s not found!" -msgstr "名前 \"%s\" の ACI が見つかりませんでした" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "HBAC ルールを検索します。" - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "" - -#, fuzzy -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "役割に関する情報を表示します。" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "HBAC サービスグループに関する情報を表示します。" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" -msgstr "" - -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -msgid "SELinux User Maps" -msgstr "" - -msgid "SELinux User Map" -msgstr "" - -#, fuzzy, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "名前 \"%s\" の ACI が見つかりませんでした" - -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "" - -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "" - msgid "" "\n" "Vaults\n" @@ -21959,111 +23399,159 @@ msgstr "" msgid "Checks if any of the servers has the KRA service enabled" msgstr "" -#, fuzzy -msgid "Member service groups" -msgstr "HBAC サービスグループ" - -#, fuzzy -msgid "Member HBAC service groups" -msgstr "HBAC サービスグループ" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -#, fuzzy -msgid "Indirect Member HBAC service" -msgstr "HBAC サービスを検索します。" - -#, fuzzy -msgid "Indirect Member HBAC service group" -msgstr "HBAC サービスグループにメンバーを追加します。" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" +msgid "operation not defined" msgstr "" #, python-format -msgid "container entry (%(container)s) not found" +msgid "not allowed to perform operation: %s" msgstr "" -#, python-format -msgid "%(parent)s: %(oname)s not found" +msgid "No such virtual command" msgstr "" -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "Class of Service object used for linking policies with groups" msgstr "" #, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +#, fuzzy +msgid "Delete Class of Service entry" +msgstr "HBAC サービスグループを削除します。" + +#, fuzzy +msgid "Modify Class of Service entry" +msgstr "HBAC サービスグループを変更します。" + +msgid "Display Class of Service entry" +msgstr "" + +#, fuzzy +msgid "Search for Class of Service entry" +msgstr "HBAC サービスグループを検索します。" + +msgid "password policy" +msgstr "パスワードポリシー" + +msgid "password policies" +msgstr "パスワードポリシー" + +msgid "Password Policies" +msgstr "パスワードポリシー" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +msgid "User check" +msgstr "" + +msgid "Check if the password contains the username" +msgstr "" + msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" msgstr "" -#, python-format -msgid "added attribute value to entry %(value)s" +msgid "Maximum password life must be equal to or greater than the minimum." msgstr "" -#, python-format -msgid "removed attribute values from entry %(value)s" +msgid "cannot delete global password policy" msgstr "" -msgid "one or more values to remove" +msgid "priority cannot be set on global policy" msgstr "" #, fuzzy @@ -22215,6 +23703,10 @@ msgstr "" msgid "Ignoring topology connectivity errors." msgstr "" +#, python-format +msgid "Failed to remove server from security domain: %s" +msgstr "" + msgid "Server has already been deleted" msgstr "" @@ -22250,1396 +23742,193 @@ msgstr "" msgid "Cannot hide last enabled %(name)s server." msgstr "" +#, fuzzy msgid "" "\n" -"Manage Certificate Authorities\n" +"Sudo Rules\n" +msgstr "sudo ルール" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" msgstr "" msgid "" "\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" msgstr "" msgid "" "\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" +"Each option needs to be added separately and no validation is done whether\n" +"the option is known by sudo or is in a valid format. Environment variables\n" +"also need to be set individually. For example env_keep=\"FOO BAR\" in " +"sudoers\n" +"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" +"+=BAR.\n" msgstr "" msgid "" "\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" msgstr "" msgid "" "\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" msgstr "" msgid "" "\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" msgstr "" msgid "" "\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" msgstr "" msgid "" "\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" msgstr "" msgid "" "\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" "\n" -" ipa ca-del puppet\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set multiple default Sudo options:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate' --" +"sudooption mail_badpass\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "sudo ルール" + +msgid "Sudo Rules" +msgstr "sudo ルール" + +msgid "Sudo Rule" +msgstr "sudo ルール" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" msgstr "" #, fuzzy -msgid "Certificate Authority" -msgstr "証明書" - -#, fuzzy -msgid "Certificate Authorities" -msgstr "証明書" - -msgid "Name for referencing the CA" -msgstr "" - -msgid "Description of the purpose of the CA" -msgstr "" - -msgid "Authority ID" -msgstr "" - -msgid "Dogtag Authority ID" -msgstr "" - -msgid "Subject DN" -msgstr "" - -msgid "Subject Distinguished Name" -msgstr "" - -msgid "Issuer Distinguished Name" -msgstr "" - -#, fuzzy -msgid "Search for CAs." -msgstr "ホストを検索します。" - -#, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "" - -#, fuzzy -msgid "Display the properties of a CA." -msgstr "HBAC ルールのプロパティーを表示します。" - -#, fuzzy -msgid "Create a CA." -msgstr "新しいグループを作成します。" - -#, python-format -msgid "Created CA \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "" - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -msgid "IPA CA cannot be deleted" -msgstr "" - -msgid "Must be disabled first" -msgstr "" - -#, fuzzy -msgid "Modify CA configuration." -msgstr "グループを変更します。" - -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -#, fuzzy -msgid "Disable a CA." -msgstr "HBAC ルールを無効化します。" - -#, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "" - -msgid "IPA CA cannot be disabled" -msgstr "" - -#, fuzzy -msgid "Enable a CA." -msgstr "HBAC ルールを有効化します。" - -#, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -#, fuzzy -msgid "stage users" -msgstr "ユーザー" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -#, fuzzy -msgid "URI" -msgstr "URL" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "" - -msgid "cannot be empty" -msgstr "" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "invalid IP network format" -msgstr "" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -msgid "invalid address format" -msgstr "" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -msgid "flags value: allowed interval 0-255" -msgstr "" - -msgid "iterations value: allowed interval 0-65535" -msgstr "" - -#, python-format -msgid "salt value: %(err)s" -msgstr "" - -#, fuzzy -msgid "invalid domain-name: not fully qualified" -msgstr "無効なドメイン名: %s" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" - -#, fuzzy, python-format -msgid "Raw %s records" -msgstr "%s レコード" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -msgid "Invalid number of parts!" -msgstr "" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -msgid "Create reverse" -msgstr "" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" - -msgid "Exchanger" -msgstr "" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -msgid "Priority (order)" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Relative weight for entries with the same priority." -msgstr "" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Target Uniform Resource Identifier" -msgstr "" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" - -msgid "Managedby permission" -msgstr "" - -msgid "cannot be used when a zone is specified" -msgstr "" - -msgid "Only one zone type is allowed per zone name" -msgstr "" - -#, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "このエントリーはすでに存在します" - -#, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "" - -msgid "DNS zone" -msgstr "" - -msgid "DNS zones" -msgstr "" - -msgid "DNS Zones" -msgstr "" - -msgid "DNS Zone" -msgstr "" - -msgid "Default time to live" -msgstr "" - -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -msgid "setting Authoritative nameserver" -msgstr "" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -msgid "" -msgstr "" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "is required" -msgstr "%s レコード" - -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "" - -msgid "DNS resource record" -msgstr "" - -msgid "DNS resource records" -msgstr "" - -msgid "DNS Resource Records" -msgstr "" - -msgid "DNS Resource Record" -msgstr "" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -msgid "only master zones can contain records" -msgstr "" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -msgid "DNS zone root record cannot be renamed" -msgstr "" - -msgid "DNS records can be only updated one at a time" -msgstr "" - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Found '%(value)s'" -msgstr "" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "" - -msgid "DNS configuration options" -msgstr "" - -msgid "DNS Global Configuration" -msgstr "" - -msgid "IPA DNS version" -msgstr "" - -msgid "List of IPA masters configured as DNS servers" -msgstr "" - -msgid "IPA server configured as DNSSec key master" -msgstr "" - -msgid "Global DNS configuration is empty" -msgstr "" - -msgid "DNS forward zone" -msgstr "" - -msgid "DNS forward zones" -msgstr "" - -msgid "DNS Forward Zones" -msgstr "" - -msgid "DNS Forward Zone" -msgstr "" - -msgid "Please specify forwarders." -msgstr "" - -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "" - -msgid "IPA DNS records" -msgstr "" - -msgid "IPA location records" -msgstr "" - -msgid "Update location and IPA server DNS records" -msgstr "" - -#, fuzzy -msgid "Result of the command" +msgid "command" msgstr "sudo コマンド" -msgid "Dry run" -msgstr "" +#, fuzzy +msgid "commands" +msgstr "sudo コマンド" -msgid "Do not update records only return expected records" -msgstr "" - -msgid "The deny type has been deprecated." +msgid "runAs user" msgstr "" #, fuzzy -msgid "HBAC rules" -msgstr "HBAC サービス" +msgid "runAs users" +msgstr "ユーザー" #, fuzzy -msgid "HBAC Rules" -msgstr "ルール" +msgid "group runAs" +msgstr "グループ" + +#, fuzzy +msgid "runAs groups" +msgstr "ホストグループ" #, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "HBAC ルールを削除します。" - -#, fuzzy, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "HBAC ルールを変更します。" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" msgstr[0] "" -#, fuzzy, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "HBAC ルールを有効化します。" - -#, fuzzy, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "HBAC ルールを無効化します。" - -msgid "Access time" +msgid "commands cannot be added when command category='all'" msgstr "" -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -#, fuzzy -msgid "Certificate Profile" -msgstr "証明書" - -#, fuzzy -msgid "Certificate Profiles" -msgstr "証明書" - -msgid "Profile configuration" +msgid "users cannot be added when runAs user or runAs group category='all'" msgstr "" #, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "" - -#, python-format -msgid "Imported profile \"%(value)s\"" +msgid "RunAsUser does not accept '%(name)s' as a user name" msgstr "" #, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" +msgid "RunAsUser does not accept '%(name)s' as a group name" msgstr "" #, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -msgid "must be enabled only on a single master" +msgid "RunAsGroup does not accept '%(name)s' as a group name" msgstr "" #, fuzzy @@ -23665,6 +23954,17 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + #, python-format msgid "" "\n" @@ -23684,35 +23984,6 @@ msgstr "" msgid "Topology does not allow server %(server)s to replicate with servers:" msgstr "" -msgid "Trusting forest" -msgstr "" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -#, fuzzy -msgid "Unknown" -msgstr "未知のエラー" - -msgid "Non-Active Directory domain" -msgstr "" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - msgid "" "\n" "Classes to manage trust joins using DCE-RPC calls\n" @@ -23872,6 +24143,34 @@ msgstr "" msgid "must be at least 1" msgstr "少なくとも %(minvalue)d である必要があります" +msgid "Out of memory\n" +msgstr "メモリー不足\n" + +msgid "Warning unrecognized encryption type.\n" +msgstr "" + +msgid "Warning unrecognized salt type.\n" +msgstr "" + +msgid "Out of memory!?\n" +msgstr "メモリー不足!?\n" + +msgid "Enctype comparison failed!\n" +msgstr "" + +#, fuzzy +msgid "Password is too long!\n" +msgstr "パスワードが違います。" + +msgid "Failed to create random key!\n" +msgstr "" + +msgid "Failed to create key!\n" +msgstr "" + +msgid "Bad or unsupported salt type.\n" +msgstr "" + #, c-format msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" msgstr "" @@ -23898,25 +24197,3 @@ msgstr "" msgid "Unable to initialize STARTTLS session\n" msgstr "" - -msgid "Warning unrecognized encryption type.\n" -msgstr "" - -msgid "Warning unrecognized salt type.\n" -msgstr "" - -msgid "Enctype comparison failed!\n" -msgstr "" - -#, fuzzy -msgid "Password is too long!\n" -msgstr "パスワードが違います。" - -msgid "Failed to create random key!\n" -msgstr "" - -msgid "Failed to create key!\n" -msgstr "" - -msgid "Bad or unsupported salt type.\n" -msgstr "" diff --git a/po/kn.po b/po/kn.po index 72dd28c4e..5ec0bd781 100644 --- a/po/kn.po +++ b/po/kn.po @@ -18,684 +18,427 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n!=1)\n" "X-Generator: Zanata 4.6.2\n" -#, python-format -msgid "%(count)d variables" -msgstr "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "" -#, python-format -msgid "%(info)s" -msgstr "%(info)s" +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "" -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" +#, c-format +msgid "out of memory\n" +msgstr "" -msgid "A description of this host" -msgstr "ಈ ಹೋಸ್ಟ್‌ನ ವಿವರಣೆ" +#, c-format +msgid "read error\n" +msgstr "" -msgid "A description of this host-group" -msgstr "ಈ ಹೋಸ್ಟ್-ಗ್ರೂಪ್‌ನ ವಿವರಣೆ" +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" -msgid "A description of this role-group" -msgstr "ಈ ರೋಲ್-ಗ್ರೂಪ್‌ನ ವಿವರಣೆ" +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" -msgid "A group may not be a member of itself" -msgstr "ಒಂದು ಗುಂಪು ಅದರ ಒಂದು ಸದಸ್ಯ ಆಗದಿರಬಹುದು" - -msgid "A group may not be added as a member of itself" -msgstr "ಒಂದು ಗುಂಪು ಅದರ ಒಂದು ಸದಸ್ಯನಂತೆ ಸೇರಿಸಲು ಆಗದಿರಬಹುದು" - -msgid "ACI name" -msgstr "ACI ಹೆಸರು" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "\"%s\" ಹೆಸರು ಹೊಂದಿರುವ ACI ಪತ್ತೆಯಾಗಿಲ್ಲ" - -msgid "ACIs" -msgstr "ACIs" - -msgid "Access time" -msgstr "ಪ್ರವೇಶದ ಸಮಯ" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟ್‌ಗ್ರೂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Attributes" -msgstr "ವೈಶಿಷ್ಟ್ಯಗಳು" - -msgid "Automount Keys" -msgstr "ಕೀಗಳ ಆಟೋಮೌಂಟ್" - -msgid "Automount Maps" -msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" - -msgid "BIND update policy" -msgstr "BIND update policy" - -msgid "Bad format in credentials cache" -msgstr "ಯೋಗ್ಯತಾಪತ್ರಗಳ ಕ್ಯಾಶ್‌ನಲ್ಲಿ ಜೋಡಣೆ ಸರಿಯಿಲ್ಲ" - -msgid "Base-64 encoded server certificate" -msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "Base64 ಡೆಕೋಡಿಂಗ್ ವಿಫಲಗೊಂಡಿದೆ: %(reason)s" - -msgid "Bind DN" -msgstr "ಬೈಂಡ್ DN" - -msgid "Cannot resolve KDC for requested realm" -msgstr "ಕೋರಿದ ಕ್ಷೇತ್ರ(ರೆಲ್ಮ್)ಕ್ಕಾಗಿ KDC ಯನ್ನು ಬಗೆಹರಿಸಲು ಆಗುತ್ತಿಲ್ಲ" - -msgid "Certificate" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -msgid "Certificate Subject base" -msgstr "ಪ್ರಮಾಣಪತ್ರದ ವಿಷಯ ಮೂಲ" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "ಪ್ರಮಾಣಪತ್ರದ ಕಾರ್ಯಾಚರಣೆಯನ್ನು ಪೂರ್ಣಗೊಳಿಸಲು ಆಗುತ್ತಿಲ್ಲ: %(error)s" - -msgid "Character classes" -msgstr "ಕ್ಯಾರೆಕ್ಟರ್ ಕ್ಲಾಸ್‌ಗಳು" - -msgid "Class" -msgstr "ವರ್ಗ" - -msgid "Command not implemented" -msgstr "ಆಜ್ಞೆ(ಕಮ್ಯಾಂಡ್)ಯನ್ನು ಪೂರ್ಣಗೊಳಿಸಲಾಗಿಲ್ಲ" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ರಚಿಸಲಾಗಿದೆ" - -msgid "Credentials cache permissions incorrect" -msgstr "ಯೋಗ್ಯತಾಪತ್ರಗಳ ಕ್ಯಾಶ್‌ನ ಅನುಮತಿಗಳು ಸರಿಯಿಲ್ಲ" - -msgid "DNS" -msgstr "DNS" - -msgid "Data" -msgstr "ದತ್ತಾಂಶ" - -msgid "Default shell" -msgstr "ಡೀಫಾಲ್ಟ್ ಶೆಲ್" - -msgid "Default users group" -msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟ್‌ಗ್ರೂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "Description" -msgstr "ವಿವರಣೆ" - -msgid "Email address" -msgstr "ಇಮೇಲ್ ವಿಳಾಸ" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "ಮತ್ತೊಮ್ಮೆ ಪರಿಶೀಲಿಸಲು %(label)s ಎಂಟರ್ ಮಾಡಿ:" - -msgid "Error" -msgstr "ದೋಷ" - -msgid "External host" -msgstr "ಹೊರಗಿನ ಹೋಸ್ಟ್" - -msgid "Failed members" -msgstr "ವಿಫಲಗೊಂಡ ಸದಸ್ಯರು" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "ಪ್ರಮಾಣಪತ್ರದ ಸಹಿಯ ಕೋರಿಕೆಯ ಡಿಕೋಡಿಂಗ್‌ನ ವಿಫಲತೆ: %s" - -msgid "Filter" -msgstr "ಶೋಧಕ (ಫಿಲ್ಟರ್)" - -msgid "First name" -msgstr "ಮೊದಲ ಹೆಸರು" - -msgid "GID" -msgstr "GID" - -msgid "GID (use this option to set it manually)" -msgstr "GID (ಇದನ್ನು ಮ್ಯಾನ್ಯೂವಲ್ ಆಗಿ ಸೆಟ್ ಮಾಡಲು ಈ ಆಯ್ಕೆಯನ್ನು ಬಳಸಿ)" - -msgid "Group" -msgstr "ಗುಂಪು" - -#, python-format -msgid "Group '%s' does not exist" -msgstr " '%s' ಗುಂಪು ಅಸ್ತಿತ್ವದಲ್ಲಿಲ್ಲ" - -msgid "Group container" -msgstr "ಗುಂಪಿನ ಕಂಟೇನರ್" - -msgid "Group description" -msgstr "ಗುಂಪಿನ ವಿವರಣೆ" - -msgid "Group name" -msgstr "ಗುಂಪಿನ ಹೆಸರು" - -msgid "Group to apply ACI to" -msgstr "Group to apply ACI to" - -msgid "Groups" -msgstr "ಗುಂಪುಗಳು" - -msgid "History size" -msgstr "ಇತಿಹಾಸದ ಗಾತ್ರ" - -msgid "Home directory base" -msgstr "ಹೋಮ್ ಡೈರೆಕ್ಟರೀ ಮೂಲ" - -msgid "Host Groups" -msgstr "ಹೋಸ್ಟ್ ಗುಂಪುಗಳು" - -msgid "Host category" -msgstr "ಹೋಸ್ಟ್ ವರ್ಗ" - -msgid "Host category the rule applies to" -msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಹೋಸ್ಟ್ ವರ್ಗ" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "ಹೋಸ್ಟ್ ಹಾರ್ಡ್‌ವೇರ್ ಪ್ಲ್ಯಾಟ್‌ಫಾರ್ಮ್ (e.g. \"Lenovo T61\")" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "ಹೋಸ್ಟ್ ತಾಣ (e.g. \"Baltimore, MD\")" - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "ಹೋಸ್ಟ್ ತಾಣ (e.g. \"Lab 2\")" - -msgid "Host name" -msgstr "ಹೋಸ್ಟ್ ಹೆಸರು" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "ಹೋಸ್ಟ್ ಕಾರ್ಯಕಾರಿ ವ್ಯವಸ್ಥೆ ಮತ್ತು ಆವೃತ್ತಿ (e.g. \"Fedora 9\")" - -msgid "Host-group" -msgstr "ಹೋಸ್ಟ್-ಗುಂಪು" - -msgid "Hosts" -msgstr "ಹೋಸ್ಟ್‌ಗಳು" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "ನಿಲುಕಣೆ(ಆಕ್ಸೆಸ್) ಸಾಲದಾಗಿದೆ: %(info)s" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "ಅಸಿಂಧುವಾದ JSON-RPC ಬೇಡಿಕೆ: %(error)s" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Kerberos ದೋಷ: %(major)s/%(minor)s" - -msgid "Kerberos principal" -msgstr "Kerberos principal" - -msgid "Kerberos principal name for this host" -msgstr "ಈ ಹೋಸ್ಟ್‌ಗೆ Kerberos principalನ ಹೆಸರು" - -msgid "Key" -msgstr "ಕೀ" - -msgid "LDAP URI" -msgstr "LDAP URI" - -msgid "LDAP URI of DS server to migrate from" -msgstr "LDAP URI of DS server to migrate from" - -msgid "Last name" -msgstr "ಕೊನೆಯ ಹೆಸರು" - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "Legal LDAP filter (e.g. ou=Engineering)" - -msgid "Locality" -msgstr "ಪ್ರದೇಶ" - -msgid "Location" -msgstr "ಸ್ಥಳ" - -msgid "Login shell" -msgstr "ಪ್ರವೇಶ ಶೆಲ್" - -msgid "Manage ticket policy for specific user" -msgstr "ನಿಗದಿತ ಬಳಕೆದಾರನಿಗೆ ಟಿಕೆಟ್ ಪಾಲಿಸಿಯನ್ನು ನಿರ್ವಹಿಸು" - -msgid "Map" -msgstr "ನಕ್ಷೆ" - -msgid "Max life" -msgstr "ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ" - -msgid "Max lifetime (days)" -msgstr "ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ (ದಿನಗಳು)" - -msgid "Max renew" -msgstr "ಗರಿಷ್ಟ ನವೀಕರಣ" - -msgid "Maximum password lifetime (in days)" -msgstr "ಗುಪ್ತಪದದ ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ (ದಿನಗಳಲ್ಲಿ)" - -msgid "Member groups" -msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" - -msgid "Member host-groups" -msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್-ಗ್ರೂಪ್‌ಗಳು" - -msgid "Member hosts" -msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್‌ಗಳು" - -msgid "Member of" -msgstr "ಸದಸ್ಯ" - -msgid "Member of a group" -msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" - -msgid "Member of host-groups" -msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಸದಸ್ಯ" - -msgid "Member users" -msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" - -msgid "Min length" -msgstr "ಕನಿಷ್ಟ ಉದ್ದ" - -msgid "Min lifetime (hours)" -msgstr "ಕನಿಷ್ಟ ಜೀವಿತಾವಧಿ (ಘಂಟೆಗಳು)" - -msgid "Minimum length of password" -msgstr "ಗುಪ್ತಪದದ ಕನಿಷ್ಟ ಉದ್ದ" - -msgid "Minimum number of character classes" -msgstr "ಕನಿಷ್ಟ ಸಂಖ್ಯೆಯ ಕ್ಯಾರಕ್ಟರ್ ಕ್ಲಾಸ್‌ಗಳು" - -msgid "Minimum password lifetime (in hours)" -msgstr "ಗುಪ್ತಪದದ ಕನಿಷ್ಟ ಜೀವಿತಾವಧಿ (ಘಂಟೆಗಳಲ್ಲಿ)" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟ್‌ಗ್ರೂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "Mount information" -msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" - -msgid "Mount point" -msgstr "ಮೌಂಟ್ ಪಾಯಂಟ್" - -msgid "NIS domain name" -msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" - -msgid "Name of host-group" -msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಹೆಸರು" - -msgid "Netgroup description" -msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ವಿವರಣೆ" - -msgid "Netgroup name" -msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ಹೆಸರು" - -msgid "Netgroups" -msgstr "ನೆಟ್‌ಗ್ರೂಪ್‌ಗಳು" - -msgid "No credentials cache found" -msgstr "ಕ್ಯಾಶ್‌ನಲ್ಲಿ ಯೋಗ್ಯತಾಪತ್ರಗಳು ಸಿಗುತ್ತಿಲ್ಲ" - -msgid "Only one value is allowed" -msgstr "ಕೇವಲ ಒಂದು ಬೆಲೆ ಮಾತ್ರ ಅನುಮೋದಿಸಲಾಗಿದೆ" - -msgid "Operating system" -msgstr "ಕಾರ್ಯಕಾರಿ ವ್ಯವಸ್ಥೆ" - -msgid "Parent map" -msgstr "Parent map" - -msgid "Password" -msgstr "ಗುಪ್ತಪದ" - -msgid "Password history size" -msgstr "ಗುಪ್ತಪದ ಇತಿಹಾಸದ ಗಾತ್ರ" - -msgid "Password used in bulk enrollment" -msgstr "ದೊಡ್ಡ ಪ್ರಮಾಣದ ದಾಖಲಾತಿಯಲ್ಲಿ ಬಳಸಲಾದ ಗುಪ್ತಪದ" - -msgid "Passwords do not match" -msgstr "ಗುಪ್ತಪದಗಳು ಹೊಂದಾಣಿಕೆಯಾಗುತ್ತಿಲ್ಲ" - -msgid "Passwords do not match!" -msgstr "ಗುಪ್ತಪದಗಳು ಹೊಂದಾಣಿಕೆಯಾಗುತ್ತಿಲ್ಲ!" - -msgid "Permissions" -msgstr "ಅನುಮತಿಗಳು" - -msgid "Platform" -msgstr "ಪ್ಲಾಟ್‌ಫಾರ್ಮ್" - -msgid "Principal" -msgstr "Principal" - -msgid "Principal name" -msgstr "Principal ಹೆಸರು" - -msgid "Priority" -msgstr "ಆದ್ಯತೆ" - -msgid "Reason" -msgstr "ಕಾರಣ" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "ಪ್ರಮಾಣಪತ್ರವನ್ನು (0-10) ರದ್ದು ಮಾಡಲು ಕಾರಣ" - -msgid "Request id" -msgstr "ಬೇಡಿಕೆ ID" - -msgid "Request status" -msgstr "ಬೇಡಿಕೆ ಸ್ಥಿತಿ" - -msgid "Results are truncated, try a more specific search" -msgstr "ಫಲಿತಾಂಶಗಳು ಕತ್ತರಿಸಲ್ಪಟ್ಟಿವೆ, ಹೆಚ್ಚ್ಹು ನಿರ್ದಿಷ್ಟವಾದ ಶೋಧನೆ ಪ್ರಯತ್ನಿಸಿ" - -msgid "Revocation reason" -msgstr "ರದ್ದು ಮಾಡುವುದಕ್ಕೆ ಕಾರಣ" - -msgid "Revoked" -msgstr "ರದ್ದು ಮಾಡಲಾಗಿದೆ" - -msgid "Rule name" -msgstr "ನಿಯಮದ ಹೆಸರು" - -msgid "SOA class" -msgstr "SOA class" - -msgid "SOA expire" -msgstr "SOA expire" - -msgid "SOA minimum" -msgstr "SOA minimum" - -msgid "SOA refresh" -msgstr "SOA refresh" - -msgid "SOA retry" -msgstr "SOA retry" - -msgid "SOA serial" -msgstr "SOA serial" - -msgid "Search size limit" -msgstr "ಹುಡುಕು ಗಾತ್ರ ಮಿತಿ" - -msgid "Search time limit" -msgstr "ಹುಡುಕು ಸಮಯ ಮಿತಿ" - -msgid "Serial number" -msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "ಕ್ರಮ ಸಂಖ್ಯೆ ಡೆಸಿಮಲ್‌ನಲ್ಲಿ ಅಥವಾ 0x ಮೊದಲು ಸೇರಿಸಿದ್ದಲ್ಲಿ ಹೆಕ್ಸಾಡೆಸಿಮಲ್‌ನಲ್ಲಿ" - -msgid "Service name" -msgstr "ಸೇವೆಯ ಹೆಸರು" - -msgid "Service principal" +#, fuzzy, c-format +msgid "Removing principal %s\n" msgstr "Service principal" -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "ಈ ಪ್ರಮಾಣಪತ್ರಕ್ಕಾಗಿ Service principal (e.g. HTTP/test.example.com)" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" +#, c-format +msgid "Failed to open keytab\n" msgstr "" -"Service principalನ ಸ್ವರೂಪ ಹೀಗಿಲ್ಲ: service/fully-qualified host name: " -"%(reason)s" -msgid "Services" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" +#, c-format +msgid "principal not found\n" +msgstr "" -msgid "Street address" -msgstr "ಕೇರಿ ವಿಳಾಸ" +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" -msgid "Subject" -msgstr "ವಿಷಯ" +#, c-format +msgid "Unable to remove entry\n" +msgstr "" -msgid "Subtree" -msgstr "ಉಪವೃಕ್ಷ" +#, c-format +msgid "kvno %d\n" +msgstr "" -msgid "Subtree to apply ACI to" -msgstr "Subtree to apply ACI to" +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" -msgid "Target group" -msgstr "Target ಗುಂಪು" +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" -msgid "The default users group cannot be removed" -msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪನ್ನು ತೆಗೆದುಹಾಕಲು ಆಗುವುದಿಲ್ಲ" +#, fuzzy, c-format +msgid "Unable to parse principal\n" +msgstr "Kerberos principal" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "realm not found\n" +msgstr "" + +#, fuzzy +msgid "Print debugging information" +msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" + +msgid "Debugging output" +msgstr "" msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "principalನ ಕ್ಷೇತ್ರ(ರೆಲ್ಮ್)ವು ಈ IPA ಸರ್ವರ್‌ನ ಕ್ಷೇತ್ರ(ರೆಲ್ಮ್)ಕ್ಕೆ ತಾಳೆಯಾಗುತ್ತಿಲ್ಲ" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" -msgid "This command requires root access" -msgstr "ಈ ಆಜ್ಞೆ(ಕಮ್ಯಾಂಡ್) ರೂಟ್(root) ನಿಲುಕಣೆ(ಆಕ್ಸೆಸ್) ಕೋರುತ್ತದೆ" +#, fuzzy +msgid "Kerberos Service Principal Name" +msgstr "Kerberos principal" -msgid "This entry already exists" -msgstr "ಈ ನಮೂದು ಈಗಾಗಲೇ ಅಸ್ತಿತ್ವದಲ್ಲಿದೆ" +msgid "The keytab file to remove the principcal(s) from" +msgstr "" -msgid "This is already a posix group" -msgstr "ಇದು ಈಗಾಗಲೇ posix ಗುಂಪು" +msgid "Keytab File Name" +msgstr "" -msgid "Ticket expired" -msgstr "ಟಿಕೆಟ್‌ನ ಅವಧಿ ಮುಗಿದಿದೆ" +msgid "Remove all principals in this realm" +msgstr "" -msgid "Time to live" -msgstr "ಉಳಿದಿರಬೇಕಾದ ಸಮಯ" +#, fuzzy +msgid "Realm name" +msgstr "ನಿಯಮದ ಹೆಸರು" -msgid "Type" -msgstr "ಬಗೆ" +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" -msgid "UID" -msgstr "UID" +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" -msgid "Unrevoked" -msgstr "ರದ್ದು ಮಾಡಲಾಗಿಲ್ಲ" +#, c-format +msgid "Closing keytab failed\n" +msgstr "" -msgid "User" -msgstr "ಬಳಕೆದಾರ" +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" -msgid "User Groups" -msgstr "ಬಳಕೆದಾರರ ಗುಂಪುಗಳು" +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "" -msgid "User category" -msgstr "ಬಳಕೆದಾರನ ವರ್ಗ" +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "" -msgid "User category the rule applies to" -msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಬಳಕೆದಾರನ ವರ್ಗ" +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "" -msgid "User container" -msgstr "ಬಳಕೆದಾರನ ಕಂಟೇನರ್" +#, c-format +msgid "Out of memory \n" +msgstr "" -msgid "User group" -msgstr "ಬಳಕೆದಾರ ಗುಂಪು" +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "" -msgid "User group ACI grants access to" -msgstr "User group ACI grants access to" +msgid "Simple bind failed\n" +msgstr "" -msgid "User login" -msgstr "ಬಳಕೆದಾರನ ಪ್ರವೇಶ" +msgid "SASL Bind failed\n" +msgstr "" -msgid "User name" -msgstr "ಬಳಕೆದಾರನ ಹೆಸರು" +#, c-format +msgid "Operation failed: %s\n" +msgstr "" -msgid "User password" +#, c-format +msgid "Failed to get result: %s\n" +msgstr "" + +#, c-format +msgid "Timeout exceeded." +msgstr "" + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "" + +#, c-format +msgid "Missing reply control!\n" +msgstr "" + +#, c-format +msgid "Out of Memory!\n" +msgstr "" + +#, c-format +msgid "Failed to create control!\n" +msgstr "" + +#, c-format +msgid "Failed to bind to server!\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab!\n" +msgstr "" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "" + +msgid "Failed to decode control reply!\n" +msgstr "" + +#, fuzzy, c-format +msgid "Passwords do not match!\n" +msgstr "ಗುಪ್ತಪದಗಳು ಹೊಂದಾಣಿಕೆಯಾಗುತ್ತಿಲ್ಲ!" + +#, c-format +msgid "Failed to open config file %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "" + +msgid "Failed to resolve symlink to keytab.\n" +msgstr "" + +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" + +msgid "Print as little as possible" +msgstr "" + +msgid "Output only on errors" +msgstr "" + +msgid "Output debug info" +msgstr "" + +msgid "Contact this specific KDC Server" +msgstr "" + +#, fuzzy +msgid "Server Name" +msgstr "ಸೇವೆಯ ಹೆಸರು" + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" + +msgid "Encryption types to request" +msgstr "" + +msgid "Comma separated encryption types list" +msgstr "" + +msgid "Show the list of permitted encryption types and exit" +msgstr "" + +msgid "Permitted Encryption Types" +msgstr "" + +msgid "Asks for a non-random password to use for the principal" +msgstr "" + +#, fuzzy +msgid "LDAP DN" +msgstr "LDAP URI" + +msgid "DN to bind as if not using kerberos" +msgstr "" + +#, fuzzy +msgid "LDAP password" +msgstr "ಗುಪ್ತಪದ" + +msgid "password to use if not using kerberos" +msgstr "" + +msgid "Prompt for LDAP password" +msgstr "" + +msgid "Path to the IPA CA certificate" +msgstr "" + +#, fuzzy +msgid "IPA CA certificate" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" + +msgid "url" +msgstr "" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" + +msgid "GSSAPI|EXTERNAL" +msgstr "" + +msgid "Retrieve current keys without changing them" +msgstr "" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +#, fuzzy +msgid "Enter LDAP password" msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" -msgid "User search fields" -msgstr "ಬಳಕೆದಾರನ ಶೋಧ ಫೀಲ್ಡ್‌ಗಳು" - -msgid "Users" -msgstr "ಬಳಕೆದಾರರು" - -msgid "You must enroll a host in order to create a host service" +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" msgstr "" -"ಒಂದು ಹೋಸ್ಟ್ ಸೇವೆ(ಸರ್ವಿಸ್)ಯನ್ನು ರಚಿಸುವ ಸಲುವಾಗಿ ನೀವು ಒಂದು ಹೋಸ್ಟ್ ಅನ್ನು ಸೇರಿಸಲೇಬೇಕಾಗಿದೆ" -msgid "Zone name" -msgstr "ವಲಯದ ಹೆಸರು" +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" -msgid "Zone name (FQDN)" -msgstr "ವಲಯದ ಹೆಸರು (FQDN)" +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" -msgid "an internal error has occurred" -msgstr "ಆಂತರಿಕ ದೋಷ ಉಂಟಾಗಿದೆ" +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "" +#, c-format +msgid "DNS discovery for domain %s\n" +msgstr "" + +#, c-format +msgid "Discovered server %s\n" +msgstr "" + +#, c-format +msgid "Using discovered server %s\n" +msgstr "" + +#, c-format +msgid "DNS Discovery failed\n" +msgstr "" + +#, c-format +msgid "Using server from config %s\n" +msgstr "" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "" + +#, c-format +msgid "Using provided server %s\n" +msgstr "" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "" + +#, fuzzy +msgid "New Principal Password" +msgstr "Principal ಹೆಸರು" + +msgid "Verify Principal Password" +msgstr "" + +#, c-format msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" msgstr "" -"ಕನಿಷ್ಟ ಒಂದು : ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ, ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್, attrs ಅಥವಾ memberof ಗಳ ಅಗತ್ಯವಿದೆ" -msgid "automatically add the principal if it doesn't exist" -msgstr "ಸ್ವಯಂಚಾಲಿತವಾಗಿ principal ಸೇರಿಸಿ ಅದು ಅಸ್ತಿತ್ವದಲ್ಲಿ ಇಲ್ಲದಿದ್ದಲ್ಲಿ" +#, fuzzy, c-format +msgid "Invalid Service Principal Name\n" +msgstr "Service principal" -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxlength)d ಬೈಟ್ಸ್ ಆಗಿರಬಹುದು" +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxlength)d ಅಕ್ಷರಗಳು ಇರಬಹುದು" +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxvalue)d ಆಗಿರಬಹುದು" +#, c-format +msgid "Failed to open Keytab\n" +msgstr "" -msgid "change collided with another change" -msgstr "ಬದಲಾವಣೆ ಮತ್ತೊಂದು ಬದಲಾವಣೆಯೊಂದಿಗೆ ಡಿಕ್ಕಿಹೊಡೆದಿದೆ" +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" -msgid "description" -msgstr "ವಿವರಣೆ" +#, c-format +msgid "Failed to create key material\n" +msgstr "" -msgid "did not receive Kerberos credentials" -msgstr "Kerberos ಯೋಗ್ಯತಾಪತ್ರಗಳನ್ನು ಪಡೆದಿಲ್ಲ" +#, c-format +msgid "Failed to get keytab\n" +msgstr "" -msgid "incorrect type" -msgstr "ಸರಿಯಲ್ಲದ ಬಗೆ" +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "" -msgid "limits exceeded for this query" -msgstr "ಈ ಕ್ವೇರಿಗೆ ಮಿತಿಗಳು ಮೀರಿವೆ" +#, c-format +msgid "Failed to close the keytab\n" +msgstr "" -msgid "must be True or False" -msgstr "ನಿಜ (True) ಅಥವಾ ಸುಳ್ಳು (False) ಆಗಿರಲೇಬೇಕು" - -msgid "must be Unicode text" -msgstr "ಯುನಿಕೋಡ್ ಪಠ್ಯ ಆಗಿರಲೇಬೇಕು" - -msgid "must be a decimal number" -msgstr "ದಶಾಂಶ ಸಂಖ್ಯೆ ಆಗಿರಲೇಬೇಕು" - -msgid "must be an integer" -msgstr "ಇನ್ಟೀಜರ್ ಆಗಿರಲೇಬೇಕು" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "ಕನಿಷ್ಠವಾಗಿ %(minlength)d ಬೈಟ್ಸ್ ಆಗಿರಲೇಬೇಕು" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "ಕನಿಷ್ಠವಾಗಿ %(minlength)d ಅಕ್ಷರಗಳು ಇರಲೇಬೇಕು" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "ಕನಿಷ್ಠವಾಗಿ %(minvalue)d ಆಗಿರಲೇಬೇಕು" - -msgid "must be binary data" -msgstr "ಬೈನರಿ ಡಾಟಾ ಆಗಿರಲೇಬೇಕು" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "ನಿಖರವಾಗಿ %(length)d ಬೈಟ್ಸ್ ಆಗಿರಲೇಬೇಕು" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "ನಿಖರವಾಗಿ %(length)d ಅಕ್ಷರಗಳು ಇರಲೇಬೇಕು" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "ನಮೂನೆ \"%(pattern)s\" ಹೊಂದಾಣಿಕೆಯಾಗಲೇಬೇಕು" - -msgid "no modifications to be performed" -msgstr "ಯಾವುದೇ ಬದಲಾವಣೆಗಳು ನಡೆಯಬಾರದು" - -msgid "priority cannot be set on global policy" -msgstr "ಗ್ಲೋಬಲ್ ಪಾಲಿಸಿಯಲ್ಲಿ ಆದ್ಯತೆಯನ್ನು ಸೆಟ್ ಮಾಡಲಾಗುವುದಿಲ್ಲ" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr " ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ ಮತ್ತು ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್ ಗಳು ಪರಸ್ಪರ ಪ್ರತ್ಯೇಕ" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "%(server)s ಸರ್ವರ್‌ನಿಂದ ಅಜ್ಞಾತ ದೋಷ %(code)d: %(error)s" +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "" #, c-format msgid "Out of memory!\n" @@ -721,9 +464,6 @@ msgstr "" msgid "Unable to enable SSL in LDAP\n" msgstr "" -msgid "SASL Bind failed\n" -msgstr "" - #, c-format msgid "Search for %1$s on rootdse failed with error %2$d\n" msgstr "" @@ -952,397 +692,8 @@ msgstr "" msgid "The hostname must not be: %s\n" msgstr "" -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "" - -#, c-format -msgid "Out of memory \n" -msgstr "" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "" - -msgid "Simple bind failed\n" -msgstr "" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -#, c-format -msgid "Out of Memory!\n" -msgstr "" - -#, c-format -msgid "Failed to create control!\n" -msgstr "" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "" - -msgid "Failed to decode control reply!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Passwords do not match!\n" -msgstr "ಗುಪ್ತಪದಗಳು ಹೊಂದಾಣಿಕೆಯಾಗುತ್ತಿಲ್ಲ!" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "" - -msgid "Failed to resolve symlink to keytab.\n" -msgstr "" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Output only on errors" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -#, fuzzy -msgid "Server Name" -msgstr "ಸೇವೆಯ ಹೆಸರು" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -#, fuzzy -msgid "Kerberos Service Principal Name" -msgstr "Kerberos principal" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Encryption types to request" -msgstr "" - -msgid "Comma separated encryption types list" -msgstr "" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -msgid "Permitted Encryption Types" -msgstr "" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -#, fuzzy -msgid "LDAP DN" -msgstr "LDAP URI" - -msgid "DN to bind as if not using kerberos" -msgstr "" - -#, fuzzy -msgid "LDAP password" -msgstr "ಗುಪ್ತಪದ" - -msgid "password to use if not using kerberos" -msgstr "" - -msgid "Prompt for LDAP password" -msgstr "" - -msgid "Path to the IPA CA certificate" -msgstr "" - -#, fuzzy -msgid "IPA CA certificate" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -#, fuzzy -msgid "Enter LDAP password" -msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -#, fuzzy -msgid "New Principal Password" -msgstr "Principal ಹೆಸರು" - -msgid "Verify Principal Password" -msgstr "" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, fuzzy, c-format -msgid "Invalid Service Principal Name\n" -msgstr "Service principal" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, c-format -msgid "Failed to create key material\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, fuzzy, c-format -msgid "Removing principal %s\n" -msgstr "Service principal" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, fuzzy, c-format -msgid "Unable to parse principal\n" -msgstr "Kerberos principal" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "" - -#, fuzzy -msgid "Print debugging information" -msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -#, fuzzy -msgid "Realm name" -msgstr "ನಿಯಮದ ಹೆಸರು" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "" - -#, c-format -msgid "out of memory\n" -msgstr "" - -#, c-format -msgid "read error\n" -msgstr "" +msgid "Failed members" +msgstr "ವಿಫಲಗೊಂಡ ಸದಸ್ಯರು" msgid "Failed source hosts/hostgroups" msgstr "" @@ -1466,133 +817,35 @@ msgstr "" msgid "Skipped %(key)s" msgstr "" +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +msgid "Unrevoked" +msgstr "ರದ್ದು ಮಾಡಲಾಗಿಲ್ಲ" + +msgid "Error" +msgstr "ದೋಷ" + +#, fuzzy +msgid "Input filename" +msgstr "ನಿಯಮದ ಹೆಸರು" + +msgid "File to load the certificate from." +msgstr "" + +msgid "cannot specify both raw certificate and file" +msgstr "" + msgid "Input file" msgstr "" msgid "File to load the certificate from" msgstr "" -msgid "cannot specify both raw certificate and file" -msgstr "" - #, python-format msgid "Profile configuration stored in file '%(file)s'" msgstr "" -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -msgid "Servers details:" -msgstr "" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "Add a new YubiKey OTP token." -msgstr "" - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -#, fuzzy -msgid "Maximum number of agreements per replica" -msgstr "ಕನಿಷ್ಟ ಸಂಖ್ಯೆಯ ಕ್ಯಾರಕ್ಟರ್ ಕ್ಲಾಸ್‌ಗಳು" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -msgid "Delete a user" -msgstr "" - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - msgid "Split DNS record to parts" msgstr "" @@ -1657,6 +910,134 @@ msgstr "" msgid "file to store DNS records in nsupdate format" msgstr "" +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "" + +msgid "Servers details:" +msgstr "" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "" + +#, fuzzy +msgid "User ID" +msgstr "ಬಳಕೆದಾರ" + +msgid "Password" +msgstr "ಗುಪ್ತಪದ" + +#, fuzzy +msgid "First Code" +msgstr "ಮೊದಲ ಹೆಸರು" + +msgid "Second Code" +msgstr "" + +msgid "Token ID" +msgstr "" + +msgid "python-yubico is not installed." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" + +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "Add a new YubiKey OTP token." +msgstr "" + +msgid "YubiKey slot" +msgstr "" + +msgid "No free YubiKey slot!" +msgstr "" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "" + +msgid "Topology is disconnected" +msgstr "" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "" + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "" + +#, fuzzy +msgid "Maximum number of agreements per replica" +msgstr "ಕನಿಷ್ಟ ಸಂಖ್ಯೆಯ ಕ್ಯಾರಕ್ಟರ್ ಕ್ಲಾಸ್‌ಗಳು" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "" + +msgid "Delete a user" +msgstr "" + +msgid "preserve and no-preserve cannot be both set" +msgstr "" + #, python-format msgid "Cannot read file '%(filename)s': %(exc)s" msgstr "" @@ -1770,47 +1151,29 @@ msgstr "" msgid "File containing the vault private key" msgstr "" +msgid "Data" +msgstr "ದತ್ತಾಂಶ" + msgid "Private key specified multiple times" msgstr "" msgid "Missing vault private key" msgstr "" -msgid "Write certificate (chain if --chain used) to file" +#, python-format +msgid "Enabled Sudo Rule \"%s\"" msgstr "" -#, fuzzy -msgid "Input filename" -msgstr "ನಿಯಮದ ಹೆಸರು" - -msgid "File to load the certificate from." +#, python-format +msgid "Disabled Sudo Rule \"%s\"" msgstr "" -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" msgstr "" -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -#, fuzzy -msgid "User ID" -msgstr "ಬಳಕೆದಾರ" - -#, fuzzy -msgid "First Code" -msgstr "ಮೊದಲ ಹೆಸರು" - -msgid "Second Code" -msgstr "" - -msgid "Token ID" +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" msgstr "" msgid "" @@ -1934,6 +1297,9 @@ msgid "" "targetattr REPLACES the current attributes, it does not add to them.\n" msgstr "" +msgid "ACI name" +msgstr "ACI ಹೆಸರು" + #, fuzzy msgid "Permission" msgstr "ಅನುಮತಿಗಳು" @@ -1942,15 +1308,54 @@ msgstr "ಅನುಮತಿಗಳು" msgid "Permission ACI grants access to" msgstr "User group ACI grants access to" +msgid "User group" +msgstr "ಬಳಕೆದಾರ ಗುಂಪು" + +msgid "User group ACI grants access to" +msgstr "User group ACI grants access to" + +msgid "Permissions" +msgstr "ಅನುಮತಿಗಳು" + msgid "Permissions to grant(read, write, add, delete, all)" msgstr "" msgid "Attributes to which the permission applies" msgstr "" +msgid "Attributes" +msgstr "ವೈಶಿಷ್ಟ್ಯಗಳು" + +msgid "Type" +msgstr "ಬಗೆ" + msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" msgstr "" +msgid "Member of" +msgstr "ಸದಸ್ಯ" + +msgid "Member of a group" +msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" + +msgid "Filter" +msgstr "ಶೋಧಕ (ಫಿಲ್ಟರ್)" + +msgid "Legal LDAP filter (e.g. ou=Engineering)" +msgstr "Legal LDAP filter (e.g. ou=Engineering)" + +msgid "Subtree" +msgstr "ಉಪವೃಕ್ಷ" + +msgid "Subtree to apply ACI to" +msgstr "Subtree to apply ACI to" + +msgid "Target group" +msgstr "Target ಗುಂಪು" + +msgid "Group to apply ACI to" +msgstr "Group to apply ACI to" + msgid "Target your own entry (self)" msgstr "" @@ -2043,6 +1448,248 @@ msgstr "" msgid "Location of the ACI" msgstr "" +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Description" +msgstr "ವಿವರಣೆ" + +#, fuzzy +msgid "A description of this auto member rule" +msgstr "ಈ ರೋಲ್-ಗ್ರೂಪ್‌ನ ವಿವರಣೆ" + +#, fuzzy +msgid "Default (fallback) Group" +msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" + +msgid "Default group for entries to land" +msgstr "" + +msgid "Add an automember rule." +msgstr "" + +msgid "Automember Rule" +msgstr "" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +#, fuzzy +msgid "Grouping Type" +msgstr "ಗುಂಪಿನ ಹೆಸರು" + +#, fuzzy +msgid "Grouping to which the rule applies" +msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಹೋಸ್ಟ್ ವರ್ಗ" + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +msgid "Exclusive Regex" +msgstr "" + +#, fuzzy +msgid "Attribute Key" +msgstr "ವೈಶಿಷ್ಟ್ಯಗಳು" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +msgid "Number of conditions added" +msgstr "" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +msgid "Display information about the default (fallback) automember groups." +msgstr "" + +msgid "Delete an automember rule." +msgstr "" + +msgid "List of deletions that failed" +msgstr "" + +msgid "Search for automember rules." +msgstr "" + +msgid "Modify an automember rule." +msgstr "" + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +msgid "Rights" +msgstr "" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Users" +msgstr "ಬಳಕೆದಾರರು" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Hosts" +msgstr "ಹೋಸ್ಟ್‌ಗಳು" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +msgid "Conditions that could not be removed" +msgstr "" + +msgid "Number of conditions removed" +msgstr "" + +msgid "Display information about an automember rule." +msgstr "" + msgid "" "\n" "Automount\n" @@ -2150,13 +1797,28 @@ msgid "" " ipa automountkey-del baltimore auto.share --key=man\n" msgstr "" +msgid "Key" +msgstr "ಕೀ" + #, fuzzy msgid "Automount key name." msgstr "ಕೀಗಳ ಆಟೋಮೌಂಟ್" +msgid "Mount information" +msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" + +msgid "description" +msgstr "ವಿವರಣೆ" + +msgid "Location" +msgstr "ಸ್ಥಳ" + msgid "Automount location name." msgstr "" +msgid "Map" +msgstr "ನಕ್ಷೆ" + #, fuzzy msgid "Automount map name." msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" @@ -2164,25 +1826,12 @@ msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" msgid "Create a new automount key." msgstr "" -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - msgid "Delete an automount key." msgstr "" msgid "Continuous mode: Don't stop on errors." msgstr "" -msgid "List of deletions that failed" -msgstr "" - msgid "Search for an automount key." msgstr "" @@ -2202,19 +1851,6 @@ msgstr "" msgid "Modify an automount key." msgstr "" -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "Rights" -msgstr "" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - #, fuzzy msgid "New mount information" msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" @@ -2253,6 +1889,12 @@ msgstr "" msgid "Create a new indirect mount point." msgstr "" +msgid "Mount point" +msgstr "ಮೌಂಟ್ ಪಾಯಂಟ್" + +msgid "Parent map" +msgstr "Parent map" + msgid "Name of parent automount map (default: auto.master)." msgstr "" @@ -2305,6 +1947,191 @@ msgstr "" msgid "Nested Methods to execute" msgstr "" +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +#, fuzzy +msgid "Search for existing certificates." +msgstr "ಪ್ರಮಾಣಪತ್ರವನ್ನು (0-10) ರದ್ದು ಮಾಡಲು ಕಾರಣ" + +msgid "Match cn attribute in subject" +msgstr "" + +msgid "Reason" +msgstr "ಕಾರಣ" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "ಪ್ರಮಾಣಪತ್ರವನ್ನು (0-10) ರದ್ದು ಮಾಡಲು ಕಾರಣ" + +#, fuzzy +msgid "minimum serial number" +msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" + +#, fuzzy +msgid "maximum serial number" +msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +#, fuzzy +msgid "Maximum number of certs returned" +msgstr "ಕನಿಷ್ಟ ಸಂಖ್ಯೆಯ ಕ್ಯಾರಕ್ಟರ್ ಕ್ಲಾಸ್‌ಗಳು" + +msgid "Take a revoked certificate off hold." +msgstr "" + +msgid "Serial number" +msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "ಕ್ರಮ ಸಂಖ್ಯೆ ಡೆಸಿಮಲ್‌ನಲ್ಲಿ ಅಥವಾ 0x ಮೊದಲು ಸೇರಿಸಿದ್ದಲ್ಲಿ ಹೆಕ್ಸಾಡೆಸಿಮಲ್‌ನಲ್ಲಿ" + +#, fuzzy +msgid "Submit a certificate signing request." +msgstr "ಪ್ರಮಾಣಪತ್ರದ ಸಹಿಯ ಕೋರಿಕೆಯ ಡಿಕೋಡಿಂಗ್‌ನ ವಿಫಲತೆ: %s" + +msgid "CSR" +msgstr "" + +msgid "Principal" +msgstr "Principal" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "ಈ ಪ್ರಮಾಣಪತ್ರಕ್ಕಾಗಿ Service principal (e.g. HTTP/test.example.com)" + +msgid "automatically add the principal if it doesn't exist" +msgstr "ಸ್ವಯಂಚಾಲಿತವಾಗಿ principal ಸೇರಿಸಿ ಅದು ಅಸ್ತಿತ್ವದಲ್ಲಿ ಇಲ್ಲದಿದ್ದಲ್ಲಿ" + +msgid "Dictionary mapping variable name to value" +msgstr "" + +#, fuzzy +msgid "Revoke a certificate." +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +msgid "Retrieve an existing certificate." +msgstr "" + +msgid "Output filename" +msgstr "" + +#, fuzzy +msgid "File to store the certificate in." +msgstr "ಪ್ರಮಾಣಪತ್ರವನ್ನು (0-10) ರದ್ದು ಮಾಡಲು ಕಾರಣ" + +msgid "Check the status of a certificate signing request." +msgstr "" + +msgid "Request id" +msgstr "ಬೇಡಿಕೆ ID" + msgid "" "\n" "Server configuration\n" @@ -2358,26 +2185,44 @@ msgstr "" msgid "Maximum username length" msgstr "ಕನಿಷ್ಟ ಉದ್ದ" +msgid "Home directory base" +msgstr "ಹೋಮ್ ಡೈರೆಕ್ಟರೀ ಮೂಲ" + msgid "Default location of home directories" msgstr "" +msgid "Default shell" +msgstr "ಡೀಫಾಲ್ಟ್ ಶೆಲ್" + #, fuzzy msgid "Default shell for new users" msgstr "ಡೀಫಾಲ್ಟ್ ಶೆಲ್" +msgid "Default users group" +msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" + msgid "Default group for new users" msgstr "" msgid "Default e-mail domain" msgstr "" +msgid "Search time limit" +msgstr "ಹುಡುಕು ಸಮಯ ಮಿತಿ" + msgid "" "Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" msgstr "" +msgid "Search size limit" +msgstr "ಹುಡುಕು ಗಾತ್ರ ಮಿತಿ" + msgid "Maximum number of records to search (-1 is unlimited)" msgstr "" +msgid "User search fields" +msgstr "ಬಳಕೆದಾರನ ಶೋಧ ಫೀಲ್ಡ್‌ಗಳು" + msgid "A comma-separated list of fields to search in when searching for users" msgstr "" @@ -2391,6 +2236,9 @@ msgstr "" msgid "Enable migration mode" msgstr "" +msgid "Certificate Subject base" +msgstr "ಪ್ರಮಾಣಪತ್ರದ ವಿಷಯ ಮೂಲ" + msgid "Base for certificate subjects (OU=Test,O=Example)" msgstr "" @@ -2789,6 +2637,12 @@ msgstr "" msgid "Zone refresh interval" msgstr "" +msgid "Zone name" +msgstr "ವಲಯದ ಹೆಸರು" + +msgid "Zone name (FQDN)" +msgstr "ವಲಯದ ಹೆಸರು (FQDN)" + msgid "Reverse zone IP network" msgstr "" @@ -2819,6 +2673,9 @@ msgstr "" msgid "Record name" msgstr "ನಿಯಮದ ಹೆಸರು" +msgid "Time to live" +msgstr "ಉಳಿದಿರಬೇಕಾದ ಸಮಯ" + msgid "Records" msgstr "" @@ -3252,6 +3109,9 @@ msgstr "" msgid "SRV Priority" msgstr "ಆದ್ಯತೆ" +msgid "Priority" +msgstr "ಆದ್ಯತೆ" + msgid "SRV Weight" msgstr "" @@ -3367,28 +3227,46 @@ msgstr "" msgid "Administrator e-mail address" msgstr "" +msgid "SOA serial" +msgstr "SOA serial" + #, fuzzy msgid "SOA record serial number" msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" +msgid "SOA refresh" +msgstr "SOA refresh" + #, fuzzy msgid "SOA record refresh time" msgstr "SOA refresh" +msgid "SOA retry" +msgstr "SOA retry" + #, fuzzy msgid "SOA record retry time" msgstr "SOA retry" +msgid "SOA expire" +msgstr "SOA expire" + #, fuzzy msgid "SOA record expire time" msgstr "SOA expire" +msgid "SOA minimum" +msgstr "SOA minimum" + msgid "How long should negative responses be cached" msgstr "" msgid "Time to live for records at zone apex" msgstr "" +msgid "BIND update policy" +msgstr "BIND update policy" + msgid "Dynamic update" msgstr "" @@ -3547,6 +3425,324 @@ msgstr "" msgid "Display information about a DNS zone (SOA record)." msgstr "" +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "Group name" +msgstr "ಗುಂಪಿನ ಹೆಸರು" + +msgid "Group description" +msgstr "ಗುಂಪಿನ ವಿವರಣೆ" + +msgid "GID" +msgstr "GID" + +msgid "GID (use this option to set it manually)" +msgstr "GID (ಇದನ್ನು ಮ್ಯಾನ್ಯೂವಲ್ ಆಗಿ ಸೆಟ್ ಮಾಡಲು ಈ ಆಯ್ಕೆಯನ್ನು ಬಳಸಿ)" + +msgid "Member users" +msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" + +msgid "Member groups" +msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" + +#, fuzzy +msgid "Member of groups" +msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" + +msgid "Roles" +msgstr "" + +#, fuzzy +msgid "Member of netgroups" +msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಸದಸ್ಯ" + +#, fuzzy +msgid "Member of Sudo rule" +msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" + +#, fuzzy +msgid "Member of HBAC rule" +msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" + +#, fuzzy +msgid "Indirect Member users" +msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" + +#, fuzzy +msgid "Indirect Member groups" +msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" + +#, fuzzy +msgid "Indirect Member of group" +msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" + +#, fuzzy +msgid "Indirect Member of netgroup" +msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" + +#, fuzzy +msgid "Indirect Member of role" +msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +msgid "Create a new group." +msgstr "" + +msgid "Create as a non-POSIX group" +msgstr "" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +#, fuzzy +msgid "Add members to a group." +msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" + +#, fuzzy +msgid "External member" +msgstr "ಹೊರಗಿನ ಹೋಸ್ಟ್" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +#, fuzzy +msgid "member user" +msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" + +msgid "users to add" +msgstr "" + +#, fuzzy +msgid "member group" +msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" + +msgid "groups to add" +msgstr "" + +msgid "Members that could not be added" +msgstr "" + +msgid "Number of members added" +msgstr "" + +#, fuzzy +msgid "Delete group." +msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" + +msgid "Detach a managed group from a user." +msgstr "" + +msgid "Search for groups." +msgstr "" + +msgid "search for private groups" +msgstr "" + +msgid "search for POSIX groups" +msgstr "" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +msgid "search for non-POSIX groups" +msgstr "" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "user" +msgstr "" + +msgid "Search for groups with these member users." +msgstr "" + +msgid "Search for groups without these member users." +msgstr "" + +#, fuzzy +msgid "group" +msgstr "ಗುಂಪು" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +#, fuzzy +msgid "netgroup" +msgstr "ನೆಟ್‌ಗ್ರೂಪ್‌ಗಳು" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +msgid "HBAC rule" +msgstr "" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +#, fuzzy +msgid "Modify a group." +msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +#, fuzzy +msgid "Remove members from a group." +msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "" + +msgid "Number of members removed" +msgstr "" + +msgid "Display information about a named group." +msgstr "" + msgid "" "\n" "Host-based access control\n" @@ -3597,6 +3793,9 @@ msgid "" " ipa hbacrule-del allow_server\n" msgstr "" +msgid "Rule name" +msgstr "ನಿಯಮದ ಹೆಸರು" + #, fuzzy msgid "Rule type" msgstr "ನಿಯಮದ ಹೆಸರು" @@ -3604,6 +3803,18 @@ msgstr "ನಿಯಮದ ಹೆಸರು" msgid "Rule type (allow)" msgstr "" +msgid "User category" +msgstr "ಬಳಕೆದಾರನ ವರ್ಗ" + +msgid "User category the rule applies to" +msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಬಳಕೆದಾರನ ವರ್ಗ" + +msgid "Host category" +msgstr "ಹೋಸ್ಟ್ ವರ್ಗ" + +msgid "Host category the rule applies to" +msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಹೋಸ್ಟ್ ವರ್ಗ" + #, fuzzy msgid "Service category" msgstr "ಬಳಕೆದಾರನ ವರ್ಗ" @@ -3615,14 +3826,23 @@ msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಬಳಕೆದಾರ msgid "Enabled" msgstr "" +msgid "User Groups" +msgstr "ಬಳಕೆದಾರರ ಗುಂಪುಗಳು" + +msgid "Host Groups" +msgstr "ಹೋಸ್ಟ್ ಗುಂಪುಗಳು" + +msgid "Services" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + #, fuzzy msgid "Service Groups" msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" -msgid "Create a new HBAC rule." -msgstr "" +msgid "External host" +msgstr "ಹೊರಗಿನ ಹೋಸ್ಟ್" -msgid "Suppress processing of membership attributes." +msgid "Create a new HBAC rule." msgstr "" msgid "Add target hosts and hostgroups to an HBAC rule." @@ -3643,12 +3863,6 @@ msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್-ಗ್ರೂಪ್‌ಗಳು" msgid "host groups to add" msgstr "ಹೋಸ್ಟ್ ಗುಂಪುಗಳು" -msgid "Members that could not be added" -msgstr "" - -msgid "Number of members added" -msgstr "" - msgid "Add services to an HBAC rule." msgstr "" @@ -3668,20 +3882,6 @@ msgstr "" msgid "Add users and groups to an HBAC rule." msgstr "" -#, fuzzy -msgid "member user" -msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" - -msgid "users to add" -msgstr "" - -#, fuzzy -msgid "member group" -msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" - -msgid "groups to add" -msgstr "" - msgid "Delete an HBAC rule." msgstr "" @@ -3706,12 +3906,6 @@ msgstr "" msgid "host groups to remove" msgstr "" -msgid "Members that could not be removed" -msgstr "" - -msgid "Number of members removed" -msgstr "" - msgid "Remove service and service groups from an HBAC rule." msgstr "" @@ -3724,12 +3918,6 @@ msgstr "" msgid "Remove users and groups from an HBAC rule." msgstr "" -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - msgid "Display the properties of an HBAC rule." msgstr "" @@ -3756,6 +3944,9 @@ msgid "" " ipa hbacsvc-del tftp\n" msgstr "" +msgid "Service name" +msgstr "ಸೇವೆಯ ಹೆಸರು" + #, fuzzy msgid "HBAC service" msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" @@ -3841,6 +4032,243 @@ msgstr "" msgid "Display information about an HBAC service group." msgstr "" +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +msgid "User name" +msgstr "ಬಳಕೆದಾರನ ಹೆಸರು" + +#, fuzzy +msgid "Target host" +msgstr "Target ಗುಂಪು" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +msgid "Warning" +msgstr "" + +msgid "Matched rules" +msgstr "" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + msgid "" "\n" "Hosts/Machines\n" @@ -3905,6 +4333,39 @@ msgid "" " ipa host-allow-create-keytab test2 --users=tuser1\n" msgstr "" +msgid "Host name" +msgstr "ಹೋಸ್ಟ್ ಹೆಸರು" + +msgid "A description of this host" +msgstr "ಈ ಹೋಸ್ಟ್‌ನ ವಿವರಣೆ" + +msgid "Locality" +msgstr "ಪ್ರದೇಶ" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "ಹೋಸ್ಟ್ ತಾಣ (e.g. \"Baltimore, MD\")" + +msgid "Host location (e.g. \"Lab 2\")" +msgstr "ಹೋಸ್ಟ್ ತಾಣ (e.g. \"Lab 2\")" + +msgid "Platform" +msgstr "ಪ್ಲಾಟ್‌ಫಾರ್ಮ್" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "ಹೋಸ್ಟ್ ಹಾರ್ಡ್‌ವೇರ್ ಪ್ಲ್ಯಾಟ್‌ಫಾರ್ಮ್ (e.g. \"Lenovo T61\")" + +msgid "Operating system" +msgstr "ಕಾರ್ಯಕಾರಿ ವ್ಯವಸ್ಥೆ" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "ಹೋಸ್ಟ್ ಕಾರ್ಯಕಾರಿ ವ್ಯವಸ್ಥೆ ಮತ್ತು ಆವೃತ್ತಿ (e.g. \"Fedora 9\")" + +msgid "User password" +msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" + +msgid "Password used in bulk enrollment" +msgstr "ದೊಡ್ಡ ಪ್ರಮಾಣದ ದಾಖಲಾತಿಯಲ್ಲಿ ಬಳಸಲಾದ ಗುಪ್ತಪದ" + #, fuzzy msgid "Generate a random password to be used in bulk enrollment" msgstr "ದೊಡ್ಡ ಪ್ರಮಾಣದ ದಾಖಲಾತಿಯಲ್ಲಿ ಬಳಸಲಾದ ಗುಪ್ತಪದ" @@ -3913,6 +4374,15 @@ msgstr "ದೊಡ್ಡ ಪ್ರಮಾಣದ ದಾಖಲಾತಿಯಲ್ಲ msgid "Random password" msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" +msgid "Certificate" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +msgid "Base-64 encoded server certificate" +msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" + +msgid "Principal name" +msgstr "Principal ಹೆಸರು" + #, fuzzy msgid "MAC address" msgstr "ಇಮೇಲ್ ವಿಳಾಸ" @@ -3923,6 +4393,9 @@ msgstr "" msgid "SSH public key" msgstr "" +msgid "Class" +msgstr "ವರ್ಗ" + msgid "" "Host category (semantics placed on this attribute are for local " "interpretation)" @@ -3943,39 +4416,13 @@ msgstr "" msgid "Client credentials may be delegated to the service" msgstr "" -msgid "Roles" -msgstr "" - -#, fuzzy -msgid "Member of netgroups" +msgid "Member of host-groups" msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಸದಸ್ಯ" -#, fuzzy -msgid "Member of Sudo rule" -msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" - -#, fuzzy -msgid "Member of HBAC rule" -msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" - -#, fuzzy -msgid "Indirect Member of netgroup" -msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" - #, fuzzy msgid "Indirect Member of host-group" msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಸದಸ್ಯ" -#, fuzzy -msgid "Indirect Member of role" -msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - msgid "Keytab" msgstr "" @@ -4066,46 +4513,30 @@ msgstr "" msgid "Search for hosts without these member of host groups." msgstr "" -#, fuzzy -msgid "netgroup" -msgstr "ನೆಟ್‌ಗ್ರೂಪ್‌ಗಳು" - msgid "Search for hosts with these member of netgroups." msgstr "" msgid "Search for hosts without these member of netgroups." msgstr "" -msgid "role" -msgstr "" - msgid "Search for hosts with these member of roles." msgstr "" msgid "Search for hosts without these member of roles." msgstr "" -msgid "HBAC rule" -msgstr "" - msgid "Search for hosts with these member of HBAC rules." msgstr "" msgid "Search for hosts without these member of HBAC rules." msgstr "" -msgid "sudo rule" -msgstr "" - msgid "Search for hosts with these member of sudo rules." msgstr "" msgid "Search for hosts without these member of sudo rules." msgstr "" -msgid "user" -msgstr "" - msgid "Search for hosts with these enrolled by users." msgstr "" @@ -4130,6 +4561,9 @@ msgstr "" msgid "Modify information about a host." msgstr "" +msgid "Kerberos principal name for this host" +msgstr "ಈ ಹೋಸ್ಟ್‌ಗೆ Kerberos principalನ ಹೆಸರು" + msgid "Update DNS entries" msgstr "" @@ -4174,6 +4608,21 @@ msgid "" " ipa hostgroup-del baltimore\n" msgstr "" +msgid "Host-group" +msgstr "ಹೋಸ್ಟ್-ಗುಂಪು" + +msgid "Name of host-group" +msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಹೆಸರು" + +msgid "A description of this host-group" +msgstr "ಈ ಹೋಸ್ಟ್-ಗ್ರೂಪ್‌ನ ವಿವರಣೆ" + +msgid "Member hosts" +msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್‌ಗಳು" + +msgid "Member host-groups" +msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್-ಗ್ರೂಪ್‌ಗಳು" + #, fuzzy msgid "Indirect Member hosts" msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್‌ಗಳು" @@ -4248,6 +4697,232 @@ msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಸದಸ್ಯ" msgid "Display information about a hostgroup." msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +#, fuzzy +msgid "Range name" +msgstr "ನಿಯಮದ ಹೆಸರು" + +msgid "First Posix ID of the range" +msgstr "" + +msgid "Number of IDs in the range" +msgstr "" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +msgid "Range type" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "Delete an ID range." +msgstr "" + +msgid "Search for ranges." +msgstr "" + +msgid "Modify ID range." +msgstr "" + +msgid "Display information about a range." +msgstr "" + msgid "" "\n" "ID Views\n" @@ -4268,6 +4943,12 @@ msgstr "" msgid "Group ID Number" msgstr "ಗುಂಪಿನ ಹೆಸರು" +msgid "User login" +msgstr "ಬಳಕೆದಾರನ ಪ್ರವೇಶ" + +msgid "UID" +msgstr "UID" + #, fuzzy msgid "User ID Number" msgstr "ಬಳಕೆದಾರನ ಹೆಸರು" @@ -4279,6 +4960,9 @@ msgstr "" msgid "Home directory" msgstr "ಹೋಮ್ ಡೈರೆಕ್ಟರೀ ಮೂಲ" +msgid "Login shell" +msgstr "ಪ್ರವೇಶ ಶೆಲ್" + msgid "ID View Name" msgstr "" @@ -4490,9 +5174,18 @@ msgid "" " ipa krbtpolicy-mod admin --maxlife=3600\n" msgstr "" +msgid "Manage ticket policy for specific user" +msgstr "ನಿಗದಿತ ಬಳಕೆದಾರನಿಗೆ ಟಿಕೆಟ್ ಪಾಲಿಸಿಯನ್ನು ನಿರ್ವಹಿಸು" + +msgid "Max life" +msgstr "ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ" + msgid "Maximum ticket life (seconds)" msgstr "" +msgid "Max renew" +msgstr "ಗರಿಷ್ಟ ನವೀಕರಣ" + msgid "Maximum renewable age (seconds)" msgstr "" @@ -4602,13 +5295,28 @@ msgstr "" msgid "Migrate users and groups from DS to IPA." msgstr "" +msgid "LDAP URI" +msgstr "LDAP URI" + +msgid "LDAP URI of DS server to migrate from" +msgstr "LDAP URI of DS server to migrate from" + #, fuzzy msgid "bind password" msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" +msgid "Bind DN" +msgstr "ಬೈಂಡ್ DN" + +msgid "User container" +msgstr "ಬಳಕೆದಾರನ ಕಂಟೇನರ್" + msgid "DN of container for users in DS relative to base DN" msgstr "" +msgid "Group container" +msgstr "ಗುಂಪಿನ ಕಂಟೇನರ್" + msgid "DN of container for groups in DS relative to base DN" msgstr "" @@ -4723,9 +5431,6 @@ msgid "" "retrieve and print all attributes from the server. Affects command output." msgstr "" -msgid "Dictionary mapping variable name to value" -msgstr "" - msgid "Total number of variables env (>= count)" msgstr "" @@ -4766,6 +5471,15 @@ msgid "" " ipa netgroup-del admins\n" msgstr "" +msgid "Netgroup name" +msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ಹೆಸರು" + +msgid "Netgroup description" +msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ವಿವರಣೆ" + +msgid "NIS domain name" +msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" + msgid "IPA unique ID" msgstr "" @@ -4830,10 +5544,6 @@ msgstr "" msgid "Search for netgroups without these member users." msgstr "" -#, fuzzy -msgid "group" -msgstr "ಗುಂಪು" - msgid "Search for netgroups with these member groups." msgstr "" @@ -4930,6 +5640,149 @@ msgstr "" msgid "Show the current OTP configuration." msgstr "" +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Manager" +msgstr "" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +msgid "Disabled" +msgstr "" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +msgid "Validity start" +msgstr "" + +msgid "First date/time the token can be used" +msgstr "" + +msgid "Validity end" +msgstr "" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "" + +msgid "Token model (informational only)" +msgstr "" + +#, fuzzy +msgid "Serial" +msgstr "SOA serial" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +msgid "Add a new OTP token." +msgstr "" + +msgid "(deprecated)" +msgstr "" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +msgid "Delete an OTP token." +msgstr "" + +msgid "Search for OTP token." +msgstr "" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +msgid "Modify a OTP token." +msgstr "" + +msgid "Rename the OTP token object" +msgstr "" + +msgid "Display information about an OTP token." +msgstr "" + msgid "" "\n" "YubiKey Tokens\n" @@ -5380,10 +6233,43 @@ msgid "" " ipa pwpolicy-mod --minclasses=2 localadmins\n" msgstr "" +msgid "Group" +msgstr "ಗುಂಪು" + #, fuzzy msgid "Manage password policy for specific group" msgstr "ನಿಗದಿತ ಬಳಕೆದಾರನಿಗೆ ಟಿಕೆಟ್ ಪಾಲಿಸಿಯನ್ನು ನಿರ್ವಹಿಸು" +msgid "Max lifetime (days)" +msgstr "ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ (ದಿನಗಳು)" + +msgid "Maximum password lifetime (in days)" +msgstr "ಗುಪ್ತಪದದ ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ (ದಿನಗಳಲ್ಲಿ)" + +msgid "Min lifetime (hours)" +msgstr "ಕನಿಷ್ಟ ಜೀವಿತಾವಧಿ (ಘಂಟೆಗಳು)" + +msgid "Minimum password lifetime (in hours)" +msgstr "ಗುಪ್ತಪದದ ಕನಿಷ್ಟ ಜೀವಿತಾವಧಿ (ಘಂಟೆಗಳಲ್ಲಿ)" + +msgid "History size" +msgstr "ಇತಿಹಾಸದ ಗಾತ್ರ" + +msgid "Password history size" +msgstr "ಗುಪ್ತಪದ ಇತಿಹಾಸದ ಗಾತ್ರ" + +msgid "Character classes" +msgstr "ಕ್ಯಾರೆಕ್ಟರ್ ಕ್ಲಾಸ್‌ಗಳು" + +msgid "Minimum number of character classes" +msgstr "ಕನಿಷ್ಟ ಸಂಖ್ಯೆಯ ಕ್ಯಾರಕ್ಟರ್ ಕ್ಲಾಸ್‌ಗಳು" + +msgid "Min length" +msgstr "ಕನಿಷ್ಟ ಉದ್ದ" + +msgid "Minimum length of password" +msgstr "ಗುಪ್ತಪದದ ಕನಿಷ್ಟ ಉದ್ದ" + msgid "Priority of the policy (higher number means lower priority" msgstr "" @@ -5428,6 +6314,9 @@ msgstr "" msgid "Display information about password policy." msgstr "" +msgid "User" +msgstr "ಬಳಕೆದಾರ" + #, fuzzy msgid "Display effective policy for a specific user" msgstr "ನಿಗದಿತ ಬಳಕೆದಾರನಿಗೆ ಟಿಕೆಟ್ ಪಾಲಿಸಿಯನ್ನು ನಿರ್ವಹಿಸು" @@ -5599,6 +6488,9 @@ msgstr "" msgid "Role name" msgstr "ನಿಯಮದ ಹೆಸರು" +msgid "A description of this role-group" +msgstr "ಈ ರೋಲ್-ಗ್ರೂಪ್‌ನ ವಿವರಣೆ" + msgid "Privileges" msgstr "" @@ -5871,6 +6763,9 @@ msgid "" "httpd.keytab\n" msgstr "" +msgid "Service principal" +msgstr "Service principal" + msgid "PAC type" msgstr "" @@ -6644,1676 +7539,6 @@ msgstr "" msgid "Display Sudo Command Group." msgstr "" -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -#, fuzzy -msgid "Full name" -msgstr "ನಿಯಮದ ಹೆಸರು" - -#, fuzzy -msgid "Display name" -msgstr "ಮೊದಲ ಹೆಸರು" - -msgid "Initials" -msgstr "" - -#, fuzzy -msgid "Kerberos principal expiration" -msgstr "Kerberos principal" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -msgid "City" -msgstr "" - -msgid "State/Province" -msgstr "" - -msgid "ZIP" -msgstr "" - -msgid "Telephone Number" -msgstr "" - -msgid "Mobile Telephone Number" -msgstr "" - -#, fuzzy -msgid "Pager Number" -msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" - -#, fuzzy -msgid "Fax Number" -msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "" - -msgid "Manager" -msgstr "" - -msgid "Car License" -msgstr "" - -#, fuzzy -msgid "Account disabled" -msgstr "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -msgid "User authentication types" -msgstr "" - -msgid "Types of supported user authentication" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "RADIUS proxy configuration" -msgstr "" - -msgid "RADIUS proxy username" -msgstr "" - -msgid "Department Number" -msgstr "" - -msgid "Employee Number" -msgstr "" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -#, fuzzy -msgid "Member of groups" -msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" - -#, fuzzy -msgid "Indirect Member of group" -msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" - -msgid "Kerberos keys available" -msgstr "" - -msgid "Add a new user." -msgstr "" - -#, fuzzy -msgid "Don't create user private group" -msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" - -msgid "Delete a user." -msgstr "" - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -msgid "Search for users." -msgstr "" - -msgid "Self" -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -msgid "Modify a user." -msgstr "" - -msgid "Rename the user object" -msgstr "" - -msgid "Display information about a user." -msgstr "" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -#, fuzzy -msgid "A description of this auto member rule" -msgstr "ಈ ರೋಲ್-ಗ್ರೂಪ್‌ನ ವಿವರಣೆ" - -#, fuzzy -msgid "Default (fallback) Group" -msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" - -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -msgid "Automember Rule" -msgstr "" - -#, fuzzy -msgid "Grouping Type" -msgstr "ಗುಂಪಿನ ಹೆಸರು" - -#, fuzzy -msgid "Grouping to which the rule applies" -msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಹೋಸ್ಟ್ ವರ್ಗ" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -#, fuzzy -msgid "Attribute Key" -msgstr "ವೈಶಿಷ್ಟ್ಯಗಳು" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -msgid "Delete an automember rule." -msgstr "" - -msgid "Search for automember rules." -msgstr "" - -msgid "Modify an automember rule." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -msgid "Number of conditions removed" -msgstr "" - -msgid "Display information about an automember rule." -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -#, fuzzy -msgid "Search for existing certificates." -msgstr "ಪ್ರಮಾಣಪತ್ರವನ್ನು (0-10) ರದ್ದು ಮಾಡಲು ಕಾರಣ" - -msgid "Match cn attribute in subject" -msgstr "" - -#, fuzzy -msgid "minimum serial number" -msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" - -#, fuzzy -msgid "maximum serial number" -msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -#, fuzzy -msgid "Maximum number of certs returned" -msgstr "ಕನಿಷ್ಟ ಸಂಖ್ಯೆಯ ಕ್ಯಾರಕ್ಟರ್ ಕ್ಲಾಸ್‌ಗಳು" - -msgid "Take a revoked certificate off hold." -msgstr "" - -#, fuzzy -msgid "Submit a certificate signing request." -msgstr "ಪ್ರಮಾಣಪತ್ರದ ಸಹಿಯ ಕೋರಿಕೆಯ ಡಿಕೋಡಿಂಗ್‌ನ ವಿಫಲತೆ: %s" - -msgid "CSR" -msgstr "" - -#, fuzzy -msgid "Revoke a certificate." -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -msgid "Retrieve an existing certificate." -msgstr "" - -msgid "Output filename" -msgstr "" - -#, fuzzy -msgid "File to store the certificate in." -msgstr "ಪ್ರಮಾಣಪತ್ರವನ್ನು (0-10) ರದ್ದು ಮಾಡಲು ಕಾರಣ" - -msgid "Check the status of a certificate signing request." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -#, fuzzy -msgid "Indirect Member users" -msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" - -#, fuzzy -msgid "Indirect Member groups" -msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" - -msgid "Create a new group." -msgstr "" - -msgid "Create as a non-POSIX group" -msgstr "" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -#, fuzzy -msgid "Add members to a group." -msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" - -#, fuzzy -msgid "External member" -msgstr "ಹೊರಗಿನ ಹೋಸ್ಟ್" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -#, fuzzy -msgid "Delete group." -msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" - -msgid "Detach a managed group from a user." -msgstr "" - -msgid "Search for groups." -msgstr "" - -msgid "search for private groups" -msgstr "" - -msgid "search for POSIX groups" -msgstr "" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -msgid "search for non-POSIX groups" -msgstr "" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -#, fuzzy -msgid "Modify a group." -msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -#, fuzzy -msgid "Remove members from a group." -msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" - -msgid "Display information about a named group." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -#, fuzzy -msgid "Target host" -msgstr "Target ಗುಂಪು" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Warning" -msgstr "" - -msgid "Matched rules" -msgstr "" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -#, fuzzy -msgid "NetBIOS name" -msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ಹೆಸರು" - -msgid "Domain GUID" -msgstr "" - -msgid "Fallback primary group" -msgstr "" - -#, fuzzy -msgid "Domain name" -msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -msgid "Active Directory domain administrator" -msgstr "" - -msgid "Active Directory domain administrator's password" -msgstr "" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "Range type" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -msgid "Delete a trust." -msgstr "" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -msgid "Search for trusts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -msgid "Display information about a trust." -msgstr "" - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -#, fuzzy -msgid "Range name" -msgstr "ನಿಯಮದ ಹೆಸರು" - -msgid "First Posix ID of the range" -msgstr "" - -msgid "Number of IDs in the range" -msgstr "" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "Delete an ID range." -msgstr "" - -msgid "Search for ranges." -msgstr "" - -msgid "Modify ID range." -msgstr "" - -msgid "Display information about a range." -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -msgid "Disabled" -msgstr "" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -msgid "Validity start" -msgstr "" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Validity end" -msgstr "" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -#, fuzzy -msgid "Serial" -msgstr "SOA serial" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -msgid "Add a new OTP token." -msgstr "" - -msgid "(deprecated)" -msgstr "" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -msgid "Delete an OTP token." -msgstr "" - -msgid "Search for OTP token." -msgstr "" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -msgid "Modify a OTP token." -msgstr "" - -msgid "Rename the OTP token object" -msgstr "" - -msgid "Display information about an OTP token." -msgstr "" - msgid "" "\n" "Sudo Rules\n" @@ -8537,6 +7762,507 @@ msgstr "" msgid "Display Sudo Rule." msgstr "" +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +#, fuzzy +msgid "NetBIOS name" +msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ಹೆಸರು" + +msgid "Domain GUID" +msgstr "" + +msgid "Fallback primary group" +msgstr "" + +#, fuzzy +msgid "Domain name" +msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" + +msgid "Trusted domain partner" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +msgid "Active Directory domain administrator" +msgstr "" + +msgid "Active Directory domain administrator's password" +msgstr "" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +msgid "Delete a trust." +msgstr "" + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +msgid "Search for trusts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +msgid "Display information about a trust." +msgstr "" + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "ಮೊದಲ ಹೆಸರು" + +msgid "Last name" +msgstr "ಕೊನೆಯ ಹೆಸರು" + +#, fuzzy +msgid "Full name" +msgstr "ನಿಯಮದ ಹೆಸರು" + +#, fuzzy +msgid "Display name" +msgstr "ಮೊದಲ ಹೆಸರು" + +msgid "Initials" +msgstr "" + +msgid "Kerberos principal" +msgstr "Kerberos principal" + +#, fuzzy +msgid "Kerberos principal expiration" +msgstr "Kerberos principal" + +msgid "Email address" +msgstr "ಇಮೇಲ್ ವಿಳಾಸ" + +msgid "Prompt to set the user password" +msgstr "" + +msgid "Generate a random user password" +msgstr "" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" + +msgid "Street address" +msgstr "ಕೇರಿ ವಿಳಾಸ" + +msgid "City" +msgstr "" + +msgid "State/Province" +msgstr "" + +msgid "ZIP" +msgstr "" + +msgid "Telephone Number" +msgstr "" + +msgid "Mobile Telephone Number" +msgstr "" + +#, fuzzy +msgid "Pager Number" +msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" + +#, fuzzy +msgid "Fax Number" +msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "" + +msgid "Car License" +msgstr "" + +#, fuzzy +msgid "Account disabled" +msgstr "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +msgid "User authentication types" +msgstr "" + +msgid "Types of supported user authentication" +msgstr "" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "RADIUS proxy configuration" +msgstr "" + +msgid "RADIUS proxy username" +msgstr "" + +msgid "Department Number" +msgstr "" + +msgid "Employee Number" +msgstr "" + +msgid "Employee Type" +msgstr "" + +msgid "Preferred Language" +msgstr "" + +msgid "Kerberos keys available" +msgstr "" + +msgid "Add a new user." +msgstr "" + +#, fuzzy +msgid "Don't create user private group" +msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" + +msgid "Delete a user." +msgstr "" + +msgid "Disable a user account." +msgstr "" + +msgid "Enable a user account." +msgstr "" + +msgid "Search for users." +msgstr "" + +msgid "Self" +msgstr "" + +msgid "Display user record for current Kerberos principal" +msgstr "" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +msgid "Search for users with these member of HBAC rules." +msgstr "" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +msgid "Modify a user." +msgstr "" + +msgid "Rename the user object" +msgstr "" + +msgid "Display information about a user." +msgstr "" + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + msgid "Time limit of search in seconds (0 is unlimited)" msgstr "" @@ -8660,6 +8386,114 @@ msgstr "" msgid "Display the properties of a CA ACL." msgstr "" +#, fuzzy +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "ಈ ಪ್ರಮಾಣಪತ್ರಕ್ಕಾಗಿ Service principal (e.g. HTTP/test.example.com)" + +msgid "Profile ID" +msgstr "" + +#, fuzzy +msgid "Certificate Profile to use" +msgstr "ಪ್ರಮಾಣಪತ್ರದ ವಿಷಯ ಮೂಲ" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +#, fuzzy +msgid "Profile description" +msgstr "ಗುಂಪಿನ ವಿವರಣೆ" + +#, fuzzy +msgid "Brief description of this profile" +msgstr "ಈ ರೋಲ್-ಗ್ರೂಪ್‌ನ ವಿವರಣೆ" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +msgid "Search for Certificate Profiles." +msgstr "" + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" msgstr "" @@ -8689,6 +8523,218 @@ msgstr "" msgid "Remove certificates from host entry" msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + msgid "Fallback to AD DC LDAP" msgstr "" @@ -8718,6 +8764,9 @@ msgid "" "to onelevel" msgstr "" +msgid "Remove users that can manage this token." +msgstr "" + msgid "Target DN subtree" msgstr "" @@ -9158,6 +9207,13 @@ msgid "" " " msgstr "" +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + #, fuzzy msgid "Preserved user" msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" @@ -9461,336 +9517,6 @@ msgstr "" msgid "Display information about a vault container." msgstr "" -#, fuzzy -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "ಈ ಪ್ರಮಾಣಪತ್ರಕ್ಕಾಗಿ Service principal (e.g. HTTP/test.example.com)" - -msgid "Profile ID" -msgstr "" - -#, fuzzy -msgid "Certificate Profile to use" -msgstr "ಪ್ರಮಾಣಪತ್ರದ ವಿಷಯ ಮೂಲ" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -#, fuzzy -msgid "Profile description" -msgstr "ಗುಂಪಿನ ವಿವರಣೆ" - -#, fuzzy -msgid "Brief description of this profile" -msgstr "ಈ ರೋಲ್-ಗ್ರೂಪ್‌ನ ವಿವರಣೆ" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -msgid "Search for Certificate Profiles." -msgstr "" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - msgid "Resolve a host name in DNS. (Deprecated)" msgstr "" @@ -10953,6 +10679,9 @@ msgstr "ಉಳಿದಿರಬೇಕಾದ ಸಮಯ" msgid "SOA record time to live" msgstr "ಉಳಿದಿರಬೇಕಾದ ಸಮಯ" +msgid "SOA class" +msgstr "SOA class" + #, fuzzy msgid "SOA record class" msgstr "SOA class" @@ -11482,6 +11211,192 @@ msgid "" " ipa hostgroup-del baltimore\n" msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + msgid "" "Comma-separated list of objectclasses used to search for user entries in DS" msgstr "" @@ -11791,198 +11706,6 @@ msgstr "" msgid "comma-separated list of sudo commands to remove" msgstr "" -msgid "Active directory domain administrator's password" -msgstr "" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - msgid "" "\n" "Sudo Rules\n" @@ -12024,14 +11747,18 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" -msgid "A dictionary representing an LDAP entry" +msgid "Active directory domain administrator's password" msgstr "" -msgid "A list of LDAP entries" +msgid "GECOS field" msgstr "" -msgid "All commands should at least have a result" -msgstr "" +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "ಮತ್ತೊಮ್ಮೆ ಪರಿಶೀಲಿಸಲು %(label)s ಎಂಟರ್ ಮಾಡಿ:" + +msgid "Passwords do not match!" +msgstr "ಗುಪ್ತಪದಗಳು ಹೊಂದಾಣಿಕೆಯಾಗುತ್ತಿಲ್ಲ!" msgid "No matching entries found" msgstr "" @@ -12069,112 +11796,375 @@ msgid "No file to read" msgstr "" #, python-format -msgid "%(filename)s: file not found" -msgstr "" - -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -msgid "Filename is empty" +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" #, python-format -msgid "Permission denied: %(file)s" -msgstr "" +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "%(server)s ಸರ್ವರ್‌ನಿಂದ ಅಜ್ಞಾತ ದೋಷ %(code)d: %(error)s" -msgid "empty DNS label" -msgstr "" +msgid "an internal error has occurred" +msgstr "ಆಂತರಿಕ ದೋಷ ಉಂಟಾಗಿದೆ" -msgid "DNS label cannot be longer that 63 characters" -msgstr "" +#, fuzzy, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "ಆಂತರಿಕ ದೋಷ ಉಂಟಾಗಿದೆ" #, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "" - -#, fuzzy -msgid "cannot be longer that {} characters" -msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxlength)d ಅಕ್ಷರಗಳು ಇರಬಹುದು" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "" - -msgid "invalid SSH public key" -msgstr "" - -msgid "options are not allowed" -msgstr "" - -msgid "invalid hostmask" +msgid "unknown command '%(name)s'" msgstr "" #, fuzzy, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" +msgid "error on server '%(server)s': %(error)s" msgstr "%(server)s ಸರ್ವರ್‌ನಿಂದ ಅಜ್ಞಾತ ದೋಷ %(code)d: %(error)s" #, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "ಅಸಿಂಧುವಾದ JSON-RPC ಬೇಡಿಕೆ: %(error)s" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" msgstr "" #, python-format msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." msgstr "" #, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Kerberos ದೋಷ: %(major)s/%(minor)s" + +msgid "did not receive Kerberos credentials" +msgstr "Kerberos ಯೋಗ್ಯತಾಪತ್ರಗಳನ್ನು ಪಡೆದಿಲ್ಲ" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" msgstr "" -msgid "invalid escape code in domain name" +msgid "No credentials cache found" +msgstr "ಕ್ಯಾಶ್‌ನಲ್ಲಿ ಯೋಗ್ಯತಾಪತ್ರಗಳು ಸಿಗುತ್ತಿಲ್ಲ" + +msgid "Ticket expired" +msgstr "ಟಿಕೆಟ್‌ನ ಅವಧಿ ಮುಗಿದಿದೆ" + +msgid "Credentials cache permissions incorrect" +msgstr "ಯೋಗ್ಯತಾಪತ್ರಗಳ ಕ್ಯಾಶ್‌ನ ಅನುಮತಿಗಳು ಸರಿಯಿಲ್ಲ" + +msgid "Bad format in credentials cache" +msgstr "ಯೋಗ್ಯತಾಪತ್ರಗಳ ಕ್ಯಾಶ್‌ನಲ್ಲಿ ಜೋಡಣೆ ಸರಿಯಿಲ್ಲ" + +msgid "Cannot resolve KDC for requested realm" +msgstr "ಕೋರಿದ ಕ್ಷೇತ್ರ(ರೆಲ್ಮ್)ಕ್ಕಾಗಿ KDC ಯನ್ನು ಬಗೆಹರಿಸಲು ಆಗುತ್ತಿಲ್ಲ" + +msgid "Session error" msgstr "" -msgid "domain name cannot be longer than 255 characters" +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" msgstr "" -msgid "DNS label cannot be longer than 63 characters" +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "ನಿಲುಕಣೆ(ಆಕ್ಸೆಸ್) ಸಾಲದಾಗಿದೆ: %(info)s" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "" + +#, python-format +msgid "'%(name)s' is required" +msgstr "" + +#, fuzzy, python-format +msgid "invalid '%(name)s': %(error)s" +msgstr "ಅಸಿಂಧುವಾದ JSON-RPC ಬೇಡಿಕೆ: %(error)s" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "" + +msgid "Passwords do not match" +msgstr "ಗುಪ್ತಪದಗಳು ಹೊಂದಾಣಿಕೆಯಾಗುತ್ತಿಲ್ಲ" + +msgid "Command not implemented" +msgstr "ಆಜ್ಞೆ(ಕಮ್ಯಾಂಡ್)ಯನ್ನು ಪೂರ್ಣಗೊಳಿಸಲಾಗಿಲ್ಲ" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "" + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "" + +#, python-format +msgid "%(reason)s" +msgstr "%(reason)s" + +msgid "This entry already exists" +msgstr "ಈ ನಮೂದು ಈಗಾಗಲೇ ಅಸ್ತಿತ್ವದಲ್ಲಿದೆ" + +msgid "You must enroll a host in order to create a host service" +msgstr "" +"ಒಂದು ಹೋಸ್ಟ್ ಸೇವೆ(ಸರ್ವಿಸ್)ಯನ್ನು ರಚಿಸುವ ಸಲುವಾಗಿ ನೀವು ಒಂದು ಹೋಸ್ಟ್ ಅನ್ನು ಸೇರಿಸಲೇಬೇಕಾಗಿದೆ" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" +"Service principalನ ಸ್ವರೂಪ ಹೀಗಿಲ್ಲ: service/fully-qualified host name: " +"%(reason)s" + +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "principalನ ಕ್ಷೇತ್ರ(ರೆಲ್ಮ್)ವು ಈ IPA ಸರ್ವರ್‌ನ ಕ್ಷೇತ್ರ(ರೆಲ್ಮ್)ಕ್ಕೆ ತಾಳೆಯಾಗುತ್ತಿಲ್ಲ" + +msgid "This command requires root access" +msgstr "ಈ ಆಜ್ಞೆ(ಕಮ್ಯಾಂಡ್) ರೂಟ್(root) ನಿಲುಕಣೆ(ಆಕ್ಸೆಸ್) ಕೋರುತ್ತದೆ" + +msgid "This is already a posix group" +msgstr "ಇದು ಈಗಾಗಲೇ posix ಗುಂಪು" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" msgstr "" #, fuzzy -msgid "invalid domain name" -msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" +msgid "This entry is already enabled" +msgstr "ಈ ನಮೂದು ಈಗಾಗಲೇ ಅಸ್ತಿತ್ವದಲ್ಲಿದೆ" + +#, fuzzy +msgid "This entry is already disabled" +msgstr "ಈ ನಮೂದು ಈಗಾಗಲೇ ಅಸ್ತಿತ್ವದಲ್ಲಿದೆ" + +msgid "This entry cannot be enabled or disabled" +msgstr "" + +msgid "This entry is not a member" +msgstr "" + +msgid "A group may not be a member of itself" +msgstr "ಒಂದು ಗುಂಪು ಅದರ ಒಂದು ಸದಸ್ಯ ಆಗದಿರಬಹುದು" + +#, fuzzy +msgid "This entry is already a member" +msgstr "ಈ ನಮೂದು ಈಗಾಗಲೇ ಅಸ್ತಿತ್ವದಲ್ಲಿದೆ" #, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgid "Base64 decoding failed: %(reason)s" +msgstr "Base64 ಡೆಕೋಡಿಂಗ್ ವಿಫಲಗೊಂಡಿದೆ: %(reason)s" + +msgid "A group may not be added as a member of itself" +msgstr "ಒಂದು ಗುಂಪು ಅದರ ಒಂದು ಸದಸ್ಯನಂತೆ ಸೇರಿಸಲು ಆಗದಿರಬಹುದು" + +msgid "The default users group cannot be removed" +msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪನ್ನು ತೆಗೆದುಹಾಕಲು ಆಗುವುದಿಲ್ಲ" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" + +msgid "A managed group cannot have a password policy." msgstr "" #, python-format -msgid "invalid domain-name: %s" +msgid "'%(entry)s' doesn't have a certificate." msgstr "" #, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -msgid "invalid IP address format" +msgid "Unable to create private group. A group '%(group)s' already exists." msgstr "" #, python-format -msgid "%(port)s is not a valid port" -msgstr "" - msgid "" -"at least one value equal to the canonical principal name must be present" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" msgstr "" -msgid "realm or UPN suffix overlaps with trusted domain namespace" +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" + +msgid "This group already allows external members" +msgstr "" + +msgid "This group cannot be posix because it is external" +msgstr "" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "" + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" + +#, python-format +msgid "'%(attr)s' already contains one or more values" +msgstr "" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "" + +msgid "change collided with another change" +msgstr "ಬದಲಾವಣೆ ಮತ್ತೊಂದು ಬದಲಾವಣೆಯೊಂದಿಗೆ ಡಿಕ್ಕಿಹೊಡೆದಿದೆ" + +msgid "no modifications to be performed" +msgstr "ಯಾವುದೇ ಬದಲಾವಣೆಗಳು ನಡೆಯಬಾರದು" + +#, fuzzy, python-format +msgid "%(desc)s: %(info)s" +msgstr "%(info)s" + +msgid "limits exceeded for this query" +msgstr "ಈ ಕ್ವೇರಿಗೆ ಮಿತಿಗಳು ಮೀರಿವೆ" + +#, python-format +msgid "%(info)s" +msgstr "%(info)s" + +msgid "modifying primary key is not allowed" +msgstr "" + +#, fuzzy, python-format +msgid "%(attr)s: Only one value allowed." +msgstr "ಕೇವಲ ಒಂದು ಬೆಲೆ ಮಾತ್ರ ಅನುಮೋದಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "" + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "" + +msgid "Not allowed on non-leaf entry" +msgstr "" + +msgid "LDAP timeout" +msgstr "" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "" + +msgid "Configured time limit exceeded" +msgstr "" + +msgid "Configured size limit exceeded" +msgstr "" + +msgid "Configured administrative server limit exceeded" +msgstr "" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "ಪ್ರಮಾಣಪತ್ರದ ಕಾರ್ಯಾಚರಣೆಯನ್ನು ಪೂರ್ಣಗೊಳಿಸಲು ಆಗುತ್ತಿಲ್ಲ: %(error)s" + +#, fuzzy, python-format +msgid "Certificate format error: %(error)s" +msgstr "ಪ್ರಮಾಣಪತ್ರದ ಕಾರ್ಯಾಚರಣೆಯನ್ನು ಪೂರ್ಣಗೊಳಿಸಲು ಆಗುತ್ತಿಲ್ಲ: %(error)s" + +msgid "Already registered" +msgstr "" + +msgid "Not registered yet" +msgstr "" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "" + +#, fuzzy, python-format +msgid "%(exception)s" +msgstr "%(reason)s" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" + +msgid "Results are truncated, try a more specific search" +msgstr "ಫಲಿತಾಂಶಗಳು ಕತ್ತರಿಸಲ್ಪಟ್ಟಿವೆ, ಹೆಚ್ಚ್ಹು ನಿರ್ದಿಷ್ಟವಾದ ಶೋಧನೆ ಪ್ರಯತ್ನಿಸಿ" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "" + +msgid "Client version. Used to determine if server will accept request." msgstr "" msgid "Additional instructions:" @@ -12334,275 +12324,51 @@ msgstr "" msgid "The certificate for %(ca)s is not available on this server." msgstr "" -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." -msgstr "" - #, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "" +msgid "%(count)d variables" +msgstr "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" #, fuzzy, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "ಆಂತರಿಕ ದೋಷ ಉಂಟಾಗಿದೆ" +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -#, python-format -msgid "unknown command '%(name)s'" +msgid "A dictionary representing an LDAP entry" msgstr "" -#, fuzzy, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "%(server)s ಸರ್ವರ್‌ನಿಂದ ಅಜ್ಞಾತ ದೋಷ %(code)d: %(error)s" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" +msgid "A list of LDAP entries" msgstr "" -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" +msgid "All commands should at least have a result" msgstr "" -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "" +msgid "incorrect type" +msgstr "ಸರಿಯಲ್ಲದ ಬಗೆ" -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "" - -msgid "Session error" -msgstr "" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "" - -#, python-format -msgid "'%(name)s' is required" -msgstr "" - -#, fuzzy, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "ಅಸಿಂಧುವಾದ JSON-RPC ಬೇಡಿಕೆ: %(error)s" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "" - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "" - -#, fuzzy -msgid "This entry is already enabled" -msgstr "ಈ ನಮೂದು ಈಗಾಗಲೇ ಅಸ್ತಿತ್ವದಲ್ಲಿದೆ" - -#, fuzzy -msgid "This entry is already disabled" -msgstr "ಈ ನಮೂದು ಈಗಾಗಲೇ ಅಸ್ತಿತ್ವದಲ್ಲಿದೆ" - -msgid "This entry cannot be enabled or disabled" -msgstr "" - -msgid "This entry is not a member" -msgstr "" - -#, fuzzy -msgid "This entry is already a member" -msgstr "ಈ ನಮೂದು ಈಗಾಗಲೇ ಅಸ್ತಿತ್ವದಲ್ಲಿದೆ" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" - -msgid "A managed group cannot have a password policy." -msgstr "" - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" - -msgid "This group already allows external members" -msgstr "" - -msgid "This group cannot be posix because it is external" -msgstr "" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" - -#, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "" - -#, fuzzy, python-format -msgid "%(desc)s: %(info)s" -msgstr "%(info)s" - -msgid "modifying primary key is not allowed" -msgstr "" - -#, fuzzy, python-format -msgid "%(attr)s: Only one value allowed." +msgid "Only one value is allowed" msgstr "ಕೇವಲ ಒಂದು ಬೆಲೆ ಮಾತ್ರ ಅನುಮೋದಿಸಲಾಗಿದೆ" -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "" - -msgid "Not allowed on non-leaf entry" -msgstr "" - -msgid "LDAP timeout" -msgstr "" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" - -msgid "Configured time limit exceeded" -msgstr "" - -msgid "Configured size limit exceeded" -msgstr "" - -msgid "Configured administrative server limit exceeded" -msgstr "" - -#, fuzzy, python-format -msgid "Certificate format error: %(error)s" -msgstr "ಪ್ರಮಾಣಪತ್ರದ ಕಾರ್ಯಾಚರಣೆಯನ್ನು ಪೂರ್ಣಗೊಳಿಸಲು ಆಗುತ್ತಿಲ್ಲ: %(error)s" - -msgid "Already registered" -msgstr "" - -msgid "Not registered yet" -msgstr "" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" - -#, fuzzy, python-format -msgid "%(exception)s" -msgstr "%(reason)s" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" - msgid "this option is deprecated" msgstr "" +msgid "must be True or False" +msgstr "ನಿಜ (True) ಅಥವಾ ಸುಳ್ಳು (False) ಆಗಿರಲೇಬೇಕು" + +msgid "must be an integer" +msgstr "ಇನ್ಟೀಜರ್ ಆಗಿರಲೇಬೇಕು" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "ಕನಿಷ್ಠವಾಗಿ %(minvalue)d ಆಗಿರಲೇಬೇಕು" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxvalue)d ಆಗಿರಬಹುದು" + +msgid "must be a decimal number" +msgstr "ದಶಾಂಶ ಸಂಖ್ಯೆ ಆಗಿರಲೇಬೇಕು" + #, fuzzy, python-format msgid "must be at least %(minvalue)s" msgstr "ಕನಿಷ್ಠವಾಗಿ %(minvalue)d ಆಗಿರಲೇಬೇಕು" @@ -12617,6 +12383,25 @@ msgid "" "%(allowed)s" msgstr "" +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "ನಮೂನೆ \"%(pattern)s\" ಹೊಂದಾಣಿಕೆಯಾಗಲೇಬೇಕು" + +msgid "must be binary data" +msgstr "ಬೈನರಿ ಡಾಟಾ ಆಗಿರಲೇಬೇಕು" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "ಕನಿಷ್ಠವಾಗಿ %(minlength)d ಬೈಟ್ಸ್ ಆಗಿರಲೇಬೇಕು" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxlength)d ಬೈಟ್ಸ್ ಆಗಿರಬಹುದು" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "ನಿಖರವಾಗಿ %(length)d ಬೈಟ್ಸ್ ಆಗಿರಲೇಬೇಕು" + #, fuzzy msgid "must be a certificate" msgstr "ಇನ್ಟೀಜರ್ ಆಗಿರಲೇಬೇಕು" @@ -12625,9 +12410,28 @@ msgstr "ಇನ್ಟೀಜರ್ ಆಗಿರಲೇಬೇಕು" msgid "must be a certificate signing request" msgstr "ಪ್ರಮಾಣಪತ್ರದ ಸಹಿಯ ಕೋರಿಕೆಯ ಡಿಕೋಡಿಂಗ್‌ನ ವಿಫಲತೆ: %s" +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "ಪ್ರಮಾಣಪತ್ರದ ಸಹಿಯ ಕೋರಿಕೆಯ ಡಿಕೋಡಿಂಗ್‌ನ ವಿಫಲತೆ: %s" + +msgid "must be Unicode text" +msgstr "ಯುನಿಕೋಡ್ ಪಠ್ಯ ಆಗಿರಲೇಬೇಕು" + msgid "Leading and trailing spaces are not allowed" msgstr "" +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "ಕನಿಷ್ಠವಾಗಿ %(minlength)d ಅಕ್ಷರಗಳು ಇರಲೇಬೇಕು" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxlength)d ಅಕ್ಷರಗಳು ಇರಬಹುದು" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "ನಿಖರವಾಗಿ %(length)d ಅಕ್ಷರಗಳು ಇರಲೇಬೇಕು" + #, python-format msgid "The character %(char)r is not allowed." msgstr "" @@ -12678,21 +12482,119 @@ msgstr "" msgid "Service principal is required" msgstr "Service principal" +#, python-format +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +msgid "any of the configured servers" +msgstr "" + +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" +msgstr "" + +#, python-format +msgid "Permission denied: %(file)s" +msgstr "" + +msgid "empty DNS label" +msgstr "" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "" + +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" + +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "" + +#, fuzzy +msgid "cannot be longer that {} characters" +msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxlength)d ಅಕ್ಷರಗಳು ಇರಬಹುದು" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "" + +msgid "invalid SSH public key" +msgstr "" + +msgid "options are not allowed" +msgstr "" + +msgid "invalid hostmask" +msgstr "" + #, fuzzy, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "%(server)s ಸರ್ವರ್‌ನಿಂದ ಅಜ್ಞಾತ ದೋಷ %(code)d: %(error)s" #, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -msgid "Client version. Used to determine if server will accept request." +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" msgstr "" #, python-format -msgid "objectclass %s not found" +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +msgid "invalid escape code in domain name" +msgstr "" + +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +#, fuzzy +msgid "invalid domain name" +msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +msgid "invalid IP address format" +msgstr "" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" #, python-format @@ -12711,958 +12613,1277 @@ msgstr "" msgid "Retrieving CA status failed with status %d" msgstr "" +#, python-format +msgid "objectclass %s not found" +msgstr "" + +msgid "Trusting forest" +msgstr "" + +msgid "Trusted forest" +msgstr "" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +msgid "Unknown" +msgstr "" + +msgid "Non-Active Directory domain" +msgstr "" + +msgid "Active Directory domain" +msgstr "" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "" +msgid "Failed to authenticate to CA REST API" +msgstr "" + #, python-format msgid "Replication agreement for %(hostname)s not found" msgstr "" -msgid "Failed to authenticate to CA REST API" -msgstr "" +#, fuzzy +msgid "A list of ACI values" +msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" -msgid "One time password commands" -msgstr "" +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr " ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ ಮತ್ತು ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್ ಗಳು ಪರಸ್ಪರ ಪ್ರತ್ಯೇಕ" -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" +msgid "ACI prefix is required" msgstr "" msgid "" -"\n" -"IPA server roles\n" -msgstr "" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" - -msgid "server roles" -msgstr "" - -msgid "IPA Server Roles" -msgstr "" - -msgid "IPA Server Role" -msgstr "" - -msgid "IPA server role name" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" msgstr "" +"ಕನಿಷ್ಟ ಒಂದು : ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ, ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್, attrs ಅಥವಾ memberof ಗಳ ಅಗತ್ಯವಿದೆ" #, fuzzy -msgid "Role status" -msgstr "ಬೇಡಿಕೆ ಸ್ಥಿತಿ" +msgid "filter and memberof are mutually exclusive" +msgstr " ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ ಮತ್ತು ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್ ಗಳು ಪರಸ್ಪರ ಪ್ರತ್ಯೇಕ" -msgid "Status of the role" -msgstr "" +#, fuzzy +msgid "group, permission and self are mutually exclusive" +msgstr " ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ ಮತ್ತು ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್ ಗಳು ಪರಸ್ಪರ ಪ್ರತ್ಯೇಕ" -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" +msgid "One of group, permission or self is required" msgstr "" #, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" +msgid "Group '%s' does not exist" +msgstr " '%s' ಗುಂಪು ಅಸ್ತಿತ್ವದಲ್ಲಿಲ್ಲ" -msgid "Include IPA master entries" -msgstr "" - -msgid "roles" -msgstr "" - -#, fuzzy -msgid "IPA role name" -msgstr "ನಿಯಮದ ಹೆಸರು" - -msgid "Class of Service object used for linking policies with groups" +msgid "empty filter" msgstr "" #, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgid "Syntax Error: %(error)s" msgstr "" -msgid "Add Class of Service entry" +#, python-format +msgid "invalid DN (%s)" msgstr "" -msgid "Delete Class of Service entry" +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "\"%s\" ಹೆಸರು ಹೊಂದಿರುವ ACI ಪತ್ತೆಯಾಗಿಲ್ಲ" + +msgid "ACI object." msgstr "" -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" +msgid "ACIs" +msgstr "ACIs" #, fuzzy -msgid "password policy" -msgstr "ಗುಪ್ತಪದ" +msgid "ACI" +msgstr "ACIs" -msgid "password policies" -msgstr "" +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ರಚಿಸಲಾಗಿದೆ" -#, fuzzy -msgid "Password Policies" -msgstr "ಗುಪ್ತಪದ" +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" -#, fuzzy -msgid "Password Policy" -msgstr "ಗುಪ್ತಪದ" +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" -#, fuzzy -msgid "Max repeat" -msgstr "ಗರಿಷ್ಟ ನವೀಕರಣ" +#, fuzzy, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -#, fuzzy -msgid "Maximum number of same consecutive characters" -msgstr "ಕನಿಷ್ಟ ಸಂಖ್ಯೆಯ ಕ್ಯಾರಕ್ಟರ್ ಕ್ಲಾಸ್‌ಗಳು" - -#, fuzzy -msgid "Max sequence" -msgstr "ಗರಿಷ್ಟ ನವೀಕರಣ" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -#, fuzzy -msgid "User check" -msgstr "ಬಳಕೆದಾರನ ಹೆಸರು" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -#, fuzzy -msgid "Maximum password life must be greater than minimum." -msgstr "ಗುಪ್ತಪದದ ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ (ದಿನಗಳಲ್ಲಿ)" - -#, fuzzy -msgid "cannot delete global password policy" -msgstr "ಗ್ಲೋಬಲ್ ಪಾಲಿಸಿಯಲ್ಲಿ ಆದ್ಯತೆಯನ್ನು ಸೆಟ್ ಮಾಡಲಾಗುವುದಿಲ್ಲ" +#, fuzzy, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ರಚಿಸಲಾಗಿದೆ" msgid "" "\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" +"Auto Membership Rule.\n" msgstr "" msgid "" "\n" -" Modify realm domains\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" "\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" "\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, fuzzy, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "\"%s\" ಹೆಸರು ಹೊಂದಿರುವ ACI ಪತ್ತೆಯಾಗಿಲ್ಲ" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Auto Membership is not configured" +msgstr "" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Auto member rule: %s not found!" +msgstr "\"%s\" ಹೆಸರು ಹೊಂದಿರುವ ACI ಪತ್ತೆಯಾಗಿಲ್ಲ" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟ್‌ಗ್ರೂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" " " msgstr "" #, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " msgstr "" #, python-format -msgid "The following domains do not belong to this realm: %(domains)s" +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +#, fuzzy +msgid "automount location" +msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" + +#, fuzzy +msgid "automount locations" +msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" + +#, fuzzy +msgid "Automount Locations" +msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" + +#, fuzzy +msgid "Automount Location" +msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" + +#, fuzzy, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +msgid "automount map" +msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" + +#, fuzzy +msgid "automount maps" +msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" + +msgid "Automount Maps" +msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" + +#, fuzzy +msgid "Automount Map" +msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" + +#, fuzzy, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +msgid "Automount key object." +msgstr "ಕೀಗಳ ಆಟೋಮೌಂಟ್" + +#, fuzzy +msgid "automount key" +msgstr "ಕೀಗಳ ಆಟೋಮೌಂಟ್" + +#, fuzzy +msgid "automount keys" +msgstr "ಕೀಗಳ ಆಟೋಮೌಂಟ್" + +msgid "Automount Keys" +msgstr "ಕೀಗಳ ಆಟೋಮೌಂಟ್" + +#, fuzzy +msgid "Automount Key" +msgstr "ಕೀಗಳ ಆಟೋಮೌಂಟ್" + +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" + +#, fuzzy, python-format +msgid "key named %(key)s already exists" +msgstr "ಈ ನಮೂದು ಈಗಾಗಲೇ ಅಸ್ತಿತ್ವದಲ್ಲಿದೆ" + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" msgstr "" #, python-format msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." +"More than one entry with key %(key)s found, use --info to select specific " +"entry." msgstr "" -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." +#, fuzzy, python-format +msgid "Added automount key \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Added automount indirect map \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "mount point is relative to parent map, cannot begin with /" msgstr "" -msgid "IPA server domain cannot be omitted" -msgstr "" +#, fuzzy, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" -msgid "IPA server domain cannot be deleted" -msgstr "" +#, fuzzy, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "" +msgstr[1] "" #, fuzzy -msgid "Documentation" -msgstr "ಸ್ಥಳ" +msgid "Member service groups" +msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" -msgid "Exclude from" +#, fuzzy +msgid "Member HBAC service groups" +msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" + +#, fuzzy +msgid "Member ID user overrides" +msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" + +msgid "Indirect Member ID user overrides" msgstr "" -msgid "Include in" +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" msgstr "" #, python-format -msgid "Results should contain primary key attribute only (\"%s\")" +msgid "container entry (%(container)s) not found" msgstr "" -msgid "Help topic" +#, python-format +msgid "%(parent)s: %(oname)s not found" msgstr "" -#, fuzzy -msgid "Version" -msgstr "ಅನುಮತಿಗಳು" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -msgid "Method name" -msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ಹೆಸರು" - #, python-format msgid "%(pkey)s: %(oname)s not found" msgstr "" -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -#, fuzzy -msgid "Search for classes." -msgstr "ಕ್ಯಾರೆಕ್ಟರ್ ಕ್ಲಾಸ್‌ಗಳು" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -#, fuzzy -msgid "Required" -msgstr "ಬೇಡಿಕೆ ID" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -msgid "CLI name" -msgstr "ACI ಹೆಸರು" - -#, fuzzy -msgid "Confirm (password)" -msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" - -#, fuzzy -msgid "Default" -msgstr "ಡೀಫಾಲ್ಟ್ ಶೆಲ್" - -#, fuzzy -msgid "Default from" -msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" msgstr "" #, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." +msgid "attribute \"%(attribute)s\" not allowed" msgstr "" #, python-format -msgid "%(command_name)s: %(oname)s not found" +msgid "these attributes are not allowed: %(attrs)s" msgstr "" -msgid "Display information about a command output." +msgid "attribute is not configurable" msgstr "" -msgid "Search for command outputs." +msgid "No such attribute on this entry" msgstr "" -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -#, fuzzy -msgid "Member principals" -msgstr "Kerberos principal" - #, python-format -msgid "Malformed principal: %(error)s" +msgid "Rename the %(ldap_obj_name)s object" msgstr "" -msgid "Add target to a named service delegation." +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" msgstr "" #, fuzzy, python-format msgid "member %s" msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್‌ಗಳು" -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, fuzzy, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "privileged service delegation rule" +#, python-format +msgid "%s to add" msgstr "" #, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, fuzzy, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "privileged service delegation target" +msgid "%s to remove" msgstr "" #, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" +#, python-format msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" msgstr "" msgid "" "\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" msgstr "" +#, fuzzy +msgid "must be TRUE or FALSE" +msgstr "ನಿಜ (True) ಅಥವಾ ಸುಳ್ಳು (False) ಆಗಿರಲೇಬೇಕು" + msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." msgstr "" -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -#, fuzzy -msgid "Malformed principal" -msgstr "Service principal" - -msgid "{} is required by the IPA master" -msgstr "" - -#, fuzzy -msgid "service" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -#, fuzzy -msgid "services" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - #, fuzzy msgid "Principal alias" msgstr "Principal ಹೆಸರು" #, fuzzy -msgid "Service principal alias" -msgstr "Service principal" +msgid "User password expiration" +msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" + +msgid "SSH public key fingerprint" +msgstr "" #, fuzzy -msgid "Base-64 encoded service certificate" +msgid "Base-64 encoded user certificate" msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" #, fuzzy -msgid "Serial Number" -msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" +msgid "Certificate mapping data" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" #, fuzzy -msgid "Serial Number (hex)" -msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" +msgid "SMB Home Directory" +msgstr "ಹೋಮ್ ಡೈರೆಕ್ಟರೀ ಮೂಲ" + +#, fuzzy +msgid "SMB Home Directory Drive" +msgstr "ಹೋಮ್ ಡೈರೆಕ್ಟರೀ ಮೂಲ" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +#, fuzzy, python-format +msgid "can be at most %(len)d characters" +msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxlength)d ಅಕ್ಷರಗಳು ಇರಬಹುದು" msgid "Issuer" msgstr "" -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -msgid "Fingerprint (SHA1)" -msgstr "" - -msgid "Fingerprint (SHA256)" -msgstr "" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "" - -msgid "Add a new IPA service." -msgstr "" - #, fuzzy -msgid "force principal name even if host not in DNS" -msgstr "ಈ ಹೋಸ್ಟ್‌ಗೆ Kerberos principalನ ಹೆಸರು" +msgid "Issuer of the certificate" +msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" -msgid "Skip host check" +msgid "Subject" +msgstr "ವಿಷಯ" + +msgid "Subject of the certificate" msgstr "" -msgid "" -"force service to be created even when host object does not exist to manage it" +msgid "cannot have an empty subject" msgstr "" -#, python-format -msgid "The host '%s' does not exist to add a service to." +msgid "cannot specify both subject/issuer and certificate" msgstr "" -msgid "Add a new SMB service." +msgid "cannot specify both subject/issuer and ipacertmapdata" msgstr "" -#, fuzzy -msgid "SMB service NetBIOS name" -msgstr "ಸೇವೆಯ ಹೆಸರು" +msgid "Add one or more certificate mappings to the user entry." +msgstr "" #, fuzzy, python-format -msgid "Modified service \"%(value)s\"" +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, fuzzy, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +#, fuzzy +msgid "Certificate Authority" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +#, fuzzy +msgid "Certificate Authorities" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +msgid "Name" +msgstr "" + +msgid "Name for referencing the CA" +msgstr "" + +#, fuzzy +msgid "Description of the purpose of the CA" +msgstr "ಈ ಹೋಸ್ಟ್‌ನ ವಿವರಣೆ" + +msgid "Authority ID" +msgstr "" + +msgid "Dogtag Authority ID" +msgstr "" + +#, fuzzy +msgid "Subject DN" +msgstr "ವಿಷಯ" + +msgid "Subject Distinguished Name" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Issuer Distinguished Name" +msgstr "" + +#, fuzzy +msgid "Base-64 encoded certificate." +msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" + +#, fuzzy +msgid "Certificate chain" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Search for CAs." +msgstr "" + #, fuzzy, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -#, fuzzy, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" +msgid "Include certificate chain in output" +msgstr "" + +msgid "Display the properties of a CA." +msgstr "" + +msgid "Create a CA." +msgstr "" #, fuzzy, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" +msgid "Created CA \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ರಚಿಸಲಾಗಿದೆ" #, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to a service" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Remove principal alias from a service" -msgstr "" - -#, fuzzy, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" +msgid "Insufficient 'add' privilege for entry '%s'." msgstr "" #, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgid "Unrecognized attributes: %(attrs)s" +msgstr "" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "" + +msgid "Delete a CA (must be disabled first)." msgstr "" #, fuzzy, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" +msgid "Deleted CA \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "Insufficient privilege to delete a CA." +msgstr "" + +msgid "CA" +msgstr "" + +msgid "IPA CA cannot be deleted" +msgstr "" + +msgid "Must be disabled first" +msgstr "" + +msgid "Modify CA configuration." +msgstr "" #, fuzzy, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" +msgid "Modified CA \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "Insufficient privilege to modify a CA." +msgstr "" + +msgid "Disable a CA." +msgstr "" #, fuzzy, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" +msgid "Disabled CA \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "IPA CA cannot be disabled" +msgstr "" + +msgid "Enable a CA." +msgstr "" + +#, fuzzy, python-format +msgid "Enabled CA \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ರಚಿಸಲಾಗಿದೆ" -#, python-format msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "" + +msgid "CA ACLs" msgstr "" #, fuzzy -msgid "users" -msgstr "ಬಳಕೆದಾರರು" - -msgid "command" -msgstr "" - -msgid "commands" -msgstr "" - -msgid "runAs user" -msgstr "" +msgid "CA category" +msgstr "ಹೋಸ್ಟ್ ವರ್ಗ" #, fuzzy -msgid "runAs users" -msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" +msgid "CA category the ACL applies to" +msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಹೋಸ್ಟ್ ವರ್ಗ" -#, fuzzy -msgid "group runAs" -msgstr "ನೆಟ್‌ಗ್ರೂಪ್‌ಗಳು" +msgid "CAs" +msgstr "" -#, fuzzy -msgid "runAs groups" -msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" +#, fuzzy, python-format +msgid "Added CA ACL \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "default CA ACL can be only disabled" +msgstr "" + +#, fuzzy, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" #, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" msgstr[0] "" msgstr[1] "" -msgid "commands cannot be added when command category='all'" +#, fuzzy, python-format +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ರಚಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%i user or group added." +msgstr "" + +#, python-format +msgid "%i users or groups added." msgstr "" msgid "users cannot be added when user category='all'" msgstr "" +#, python-format +msgid "%i user or group removed." +msgstr "" + +#, python-format +msgid "%i users or groups removed." +msgstr "" + +#, python-format +msgid "%i host or hostgroup added." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "" + msgid "hosts cannot be added when host category='all'" msgstr "" -msgid "users cannot be added when runAs user or runAs group category='all'" +#, python-format +msgid "%i host or hostgroup removed." msgstr "" #, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" +msgid "%i hosts or hostgroups removed." +msgstr "" + +#, fuzzy, python-format +msgid "%i service added." +msgstr "ಸೇವೆಯ ಹೆಸರು" + +#, fuzzy, python-format +msgid "%i services added." +msgstr "ಸೇವೆಯ ಹೆಸರು" + +msgid "services cannot be added when service category='all'" msgstr "" #, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" +msgid "%i service removed." msgstr "" #, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgid "%i services removed." +msgstr "" + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, python-format +msgid "%i profiles removed." +msgstr "" + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." msgstr "" msgid "pyhbac is not installed." @@ -13878,17 +14099,6 @@ msgstr "" msgid "Name of issuing CA" msgstr "" -#, fuzzy -msgid "Base-64 encoded certificate." -msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" - -#, fuzzy -msgid "Certificate chain" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -msgid "X.509 certificate chain" -msgstr "" - #, fuzzy msgid "Subject email address" msgstr "ಇಮೇಲ್ ವಿಳಾಸ" @@ -13931,15 +14141,24 @@ msgstr "Kerberos principal" msgid "Subject Other Name" msgstr "" -msgid "Issuer DN" +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" msgstr "" #, fuzzy msgid "Serial number (hex)" msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" -msgid "Include certificate chain in output" -msgstr "" +msgid "Request status" +msgstr "ಬೇಡಿಕೆ ಸ್ಥಿತಿ" #, fuzzy msgid "" @@ -14033,6 +14252,12 @@ msgstr "" msgid "Status" msgstr "" +msgid "Revoked" +msgstr "ರದ್ದು ಮಾಡಲಾಗಿದೆ" + +msgid "Revocation reason" +msgstr "ರದ್ದು ಮಾಡುವುದಕ್ಕೆ ಕಾರಣ" + #, fuzzy msgid "" "Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " @@ -14052,6 +14277,10 @@ msgstr "" msgid "7 is not a valid revocation reason" msgstr "ರದ್ದು ಮಾಡುವುದಕ್ಕೆ ಕಾರಣ" +#, fuzzy +msgid "Status of the certificate" +msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" + msgid "Results should contain primary key attribute only (\"certificate\")" msgstr "" @@ -14283,9 +14512,114 @@ msgid_plural "%(count)s users matched" msgstr[0] "" msgstr[1] "" +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + #, fuzzy -msgid "Base-64 encoded user certificate" -msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" +msgid "Certificate Profile" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +#, fuzzy +msgid "Certificate Profiles" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +msgid "Profile configuration" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +#, fuzzy, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, fuzzy, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, fuzzy +msgid "Certificate profiles cannot be renamed" +msgstr "ಪ್ರಮಾಣಪತ್ರದ ಕಾರ್ಯಾಚರಣೆಯನ್ನು ಪೂರ್ಣಗೊಳಿಸಲು ಆಗುತ್ತಿಲ್ಲ: %(error)s" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" msgid "" "\n" @@ -14360,6 +14694,9 @@ msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" msgid "Maximum hostname length" msgstr "ಕನಿಷ್ಟ ಉದ್ದ" +msgid "Enable adding subids to new users" +msgstr "" + msgid "IPA masters" msgstr "" @@ -14432,6 +14769,22 @@ msgstr "" msgid "DNSec key master" msgstr "" +#, fuzzy +msgid "Setup SID configuration" +msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" + +msgid "New users and groups automatically get a SID assigned" +msgstr "" + +msgid "Add SIDs" +msgstr "" + +msgid "Add SIDs for existing users and groups" +msgstr "" + +msgid "NetBIOS name of the IPA domain" +msgstr "" + msgid "Empty domain is not allowed" msgstr "" @@ -14447,6 +14800,21 @@ msgstr "" msgid "Disabled domain '%(domain)s' is not allowed" msgstr "" +msgid "not allowed to enable SID generation" +msgstr "" + +msgid "" +"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " +"allowed. Empty string is not allowed." +msgstr "" + +#, fuzzy +msgid "Failed to call DBus" +msgstr "ವಿಫಲಗೊಂಡ ಸದಸ್ಯರು" + +msgid "Configuration of SID failed. See details in the error log" +msgstr "" + #, fuzzy msgid "The group doesn't exist" msgstr " '%s' ಗುಂಪು ಅಸ್ತಿತ್ವದಲ್ಲಿಲ್ಲ" @@ -14472,55 +14840,1629 @@ msgstr "" msgid "SELinux user map default user not in order list" msgstr "" -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" +#, python-format +msgid "You cannot specify %s without the --enable-sid option" msgstr "" -msgid "sudo command group" +msgid "delegation" msgstr "" -msgid "sudo command groups" +msgid "delegations" +msgstr "" + +msgid "Delegations" +msgstr "" + +msgid "Delegation" msgstr "" #, fuzzy, python-format -msgid "Added Sudo Command Group \"%(value)s\"" +msgid "Added delegation \"%(value)s\"" msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" #, fuzzy, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" #, fuzzy, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" +msgid "Modified delegation \"%(value)s\"" msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" #, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" msgstr[0] "" msgstr[1] "" +msgid "" +"\n" +"Domain Name System (DNS)\n" +msgstr "" + +msgid "" +"\n" +"Manage DNS zone and resource records.\n" +msgstr "" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" + +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "invalid IP network format" +msgstr "" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "" + +msgid "invalid address format" +msgstr "" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" + +msgid "algorithm value: allowed interval 0-255" +msgstr "" + +msgid "flags value: allowed interval 0-255" +msgstr "" + +msgid "iterations value: allowed interval 0-65535" +msgstr "" + +#, python-format +msgid "salt value: %(err)s" +msgstr "" + +msgid "invalid domain-name: not fully qualified" +msgstr "" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" + +#, python-format +msgid "" +"No answers could be found in the specified lifetime for DNS reverse zone " +"%(revdns)s" +msgstr "" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" + +#, python-format +msgid "%s record" +msgstr "" + +#, python-format +msgid "Raw %s records" +msgstr "" + +#, python-format +msgid "%s Record" +msgstr "" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "" + +msgid "Invalid number of parts!" +msgstr "" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "" + +msgid "Create reverse" +msgstr "" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "" + +msgid "Exchanger" +msgstr "" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" + +#, fuzzy +msgid "Priority (order)" +msgstr "ಆದ್ಯತೆ" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Relative weight for entries with the same priority." +msgstr "" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Target Uniform Resource Identifier" +msgstr "" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "" + +msgid "Managedby permission" +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "cannot be used when a zone is specified" +msgstr "" + +#, fuzzy +msgid "Only one zone type is allowed per zone name" +msgstr "ಕೇವಲ ಒಂದು ಬೆಲೆ ಮಾತ್ರ ಅನುಮೋದಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Added system permission \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "permission \"%(value)s\" already exists" +msgstr "ಈ ನಮೂದು ಈಗಾಗಲೇ ಅಸ್ತಿತ್ವದಲ್ಲಿದೆ" + +#, fuzzy, python-format +msgid "Removed system permission \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "DNS zone" +msgstr "" + +msgid "DNS zones" +msgstr "" + +msgid "DNS Zones" +msgstr "" + +msgid "DNS Zone" +msgstr "" + +#, fuzzy +msgid "Default time to live" +msgstr "ಉಳಿದಿರಬೇಕಾದ ಸಮಯ" + +msgid "Time to live for records without explicit TTL definition" +msgstr "" + +msgid "setting Authoritative nameserver" +msgstr "" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "" + +msgid "" +msgstr "" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "is required" +msgstr "" + +#, fuzzy, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "DNS resource record" +msgstr "" + +msgid "DNS resource records" +msgstr "" + +msgid "DNS Resource Records" +msgstr "" + +msgid "DNS Resource Record" +msgstr "" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" + +msgid "only master zones can contain records" +msgstr "" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" + +msgid "DNS zone root record cannot be renamed" +msgstr "" + +msgid "DNS records can be only updated one at a time" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "" + +#, fuzzy, python-format +msgid "Found '%(value)s'" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "" + +msgid "DNS configuration options" +msgstr "" + +msgid "DNS Global Configuration" +msgstr "" + +msgid "IPA DNS version" +msgstr "" + +msgid "List of IPA masters configured as DNS servers" +msgstr "" + +msgid "IPA server configured as DNSSec key master" +msgstr "" + +msgid "Global DNS configuration is empty" +msgstr "" + +msgid "DNS forward zone" +msgstr "" + +msgid "DNS forward zones" +msgstr "" + +msgid "DNS Forward Zones" +msgstr "" + +msgid "DNS Forward Zone" +msgstr "" + +msgid "Please specify forwarders." +msgstr "" + +#, fuzzy, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "" + +msgid "IPA DNS records" +msgstr "" + +msgid "IPA location records" +msgstr "" + +msgid "Update location and IPA server DNS records" +msgstr "" + +msgid "Result of the command" +msgstr "" + +msgid "Dry run" +msgstr "" + +msgid "Do not update records only return expected records" +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +#, fuzzy +msgid "DNS Servers" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +msgid "DNS Server" +msgstr "" + +#, fuzzy +msgid "DNS Server name" +msgstr "ಸೇವೆಯ ಹೆಸರು" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, fuzzy, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "Search for DNS servers." +msgstr "" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, fuzzy, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Delete a DNS server" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +#, fuzzy +msgid "groups" +msgstr "ಗುಂಪುಗಳು" + +#, fuzzy +msgid "User Group" +msgstr "ಬಳಕೆದಾರರ ಗುಂಪುಗಳು" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "gid cannot be set for external group" +msgstr "" + +msgid "attribute \"gidNumber\" not allowed with --nonposix" +msgstr "" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy +msgid "privileged group" +msgstr "Target ಗುಂಪು" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, fuzzy, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" +msgstr "" + +#, fuzzy +msgid "HBAC Services" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +#, fuzzy +msgid "HBAC Service Groups" +msgstr "ಬಳಕೆದಾರರ ಗುಂಪುಗಳು" + +#, fuzzy, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ರಚಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "Access time" +msgstr "ಪ್ರವೇಶದ ಸಮಯ" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +#, fuzzy +msgid "HBAC services" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +#, fuzzy +msgid "HBAC Service" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +#, fuzzy, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +msgid "HBAC service group" +msgstr "ಬಳಕೆದಾರ ಗುಂಪು" + +#, fuzzy +msgid "HBAC service groups" +msgstr "ಬಳಕೆದಾರ ಗುಂಪು" + +msgid "HBAC Service Group" +msgstr "" + +#, fuzzy, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, fuzzy, python-format +msgid "Access granted: %s" +msgstr "ಪ್ರವೇಶದ ಸಮಯ" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +#, fuzzy +msgid "Host" +msgstr "ಹೋಸ್ಟ್‌ಗಳು" + +#, fuzzy +msgid "Base-64 encoded host certificate" +msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" + +#, fuzzy +msgid "Serial Number" +msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" + +#, fuzzy +msgid "Serial Number (hex)" +msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, fuzzy +msgid "Password cannot be set on enrolled host." +msgstr "ದೊಡ್ಡ ಪ್ರಮಾಣದ ದಾಖಲಾತಿಯಲ್ಲಿ ಬಳಸಲಾದ ಗುಪ್ತಪದ" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, fuzzy, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, fuzzy, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + msgid "" "\n" "Groups of hosts.\n" @@ -14566,12 +16508,20 @@ msgstr "ಹೋಸ್ಟ್ ಗುಂಪುಗಳು" msgid "Host Group" msgstr "ಹೋಸ್ಟ್ ಗುಂಪುಗಳು" +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟ್‌ಗ್ರೂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + #, python-format msgid "" "netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " "common namespace" msgstr "" +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟ್‌ಗ್ರೂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + #, fuzzy msgid "hostgroup" msgstr "ಹೋಸ್ಟ್-ಗುಂಪು" @@ -14580,6 +16530,10 @@ msgstr "ಹೋಸ್ಟ್-ಗುಂಪು" msgid "privileged hostgroup" msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್-ಗ್ರೂಪ್‌ಗಳು" +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟ್‌ಗ್ರೂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + #, python-format msgid "%(count)d hostgroup matched" msgid_plural "%(count)d hostgroups matched" @@ -14592,302 +16546,504 @@ msgstr "" msgid "Remove users that can manage members of this hostgroup." msgstr "" -#, python-format msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" msgstr "" msgid "" "\n" -"Set a user's password\n" +"ID ranges\n" "\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" "\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" +"There are two type of ID ranges which are both handled by this utility:\n" "\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" "\n" -"EXAMPLES:\n" +"Both types have the following attributes in common:\n" "\n" -" To reset your own password:\n" -" ipa passwd\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" "\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"and an ID range of a trusted domain may set\n" +" - auto-private-groups: [true|false|hybrid] automatic creation of private " +"groups\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" "\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" msgstr "" -msgid "The OTP if the user has a token configured" +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +#, fuzzy +msgid "local domain range" +msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +#, fuzzy +msgid "Auto private groups" +msgstr "ಬಳಕೆದಾರ ಗುಂಪು" + +msgid "Auto creation of private groups, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --auto-private-groups\n" +"\n" +" may be given for a new ID range for a trusted AD domain and\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" msgstr "" #, fuzzy, python-format -msgid "Changed password for \"%(value)s\"" +msgid "Added ID range \"%(value)s\"" msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" -#, fuzzy -msgid "" -"\n" -"Permissions\n" -msgstr "ಅನುಮತಿಗಳು" +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" msgstr "" msgid "" -"\n" -"A permission may not contain other permissions.\n" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" msgstr "" msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" msgstr "" msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." msgstr "" msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" +"private-groups is specified" +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" msgstr "" msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Managed permissions\n" -msgstr "ಅನುಮತಿಗಳು" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -#, fuzzy -msgid "must be enclosed in parentheses" -msgstr "ಇನ್ಟೀಜರ್ ಆಗಿರಲೇಬೇಕು" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, python-format -msgid "\"%s\" is not a valid permission type" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." msgstr "" #, fuzzy, python-format -msgid "Deprecated; use %s" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" +msgid "Deleted ID range \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" -#, fuzzy -msgid "ACI" -msgstr "ACIs" +#, fuzzy, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" +msgid "" +"Modify ID range.\n" +"\n" msgstr "" #, fuzzy, python-format -msgid "Entry %s not found" -msgstr "\"%s\" ಹೆಸರು ಹೊಂದಿರುವ ACI ಪತ್ತೆಯಾಗಿಲ್ಲ" +msgid "Modified ID range \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" msgstr "" msgid "" -"cannot specify full target filter and extra target filter simultaneously" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." msgstr "" -#, python-format -msgid "option was renamed; use %s" +msgid "Options dom-sid and secondary-rid-base cannot be used together" msgstr "" -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" +msgid "Options dom-sid and rid-base must be used together" msgstr "" -#, python-format -msgid "%s: group not found" +msgid "ID View" +msgstr "" + +msgid "system ID View" +msgstr "" + +msgid "ID Views" +msgstr "" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" msgstr "" #, fuzzy -msgid "target and targetgroup are mutually exclusive" -msgstr " ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ ಮತ್ತು ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್ ಗಳು ಪರಸ್ಪರ ಪ್ರತ್ಯೇಕ" - -#, fuzzy -msgid "subtree and type are mutually exclusive" -msgstr " ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ ಮತ್ತು ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್ ಗಳು ಪರಸ್ಪರ ಪ್ರತ್ಯೇಕ" - -#, fuzzy -msgid "Bad search filter" -msgstr "ಬಳಕೆದಾರನ ಶೋಧ ಫೀಲ್ಡ್‌ಗಳು" +msgid "Hosts the view applies to" +msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಹೋಸ್ಟ್ ವರ್ಗ" #, fuzzy, python-format -msgid "Entry %s does not exist" -msgstr " '%s' ಗುಂಪು ಅಸ್ತಿತ್ವದಲ್ಲಿಲ್ಲ" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, fuzzy, python-format -msgid "Added permission \"%(value)s\"" +msgid "Added ID View \"%(value)s\"" msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" -#, fuzzy -msgid "attrs and included attributes are mutually exclusive" -msgstr " ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ ಮತ್ತು ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್ ಗಳು ಪರಸ್ಪರ ಪ್ರತ್ಯೇಕ" +#, fuzzy, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" #, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "cannot delete managed permissions" -msgstr "" - -#, fuzzy, python-format -msgid "ACI of permission %s was not found" -msgstr "\"%s\" ಹೆಸರು ಹೊಂದಿರುವ ACI ಪತ್ತೆಯಾಗಿಲ್ಲ" - -#, fuzzy, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" msgstr[0] "" msgstr[1] "" -#, python-brace-format -msgid "{role}: role not found" +msgid "Default Trust View cannot be applied on hosts" msgstr "" -#, python-brace-format -msgid "{attr}: no such attribute" +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." msgstr "" msgid "" -"\n" -"Session Support for IPA\n" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." msgstr "" +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, fuzzy, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Delete an ID override." +msgstr "" + +#, fuzzy, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "Modify an ID override." +msgstr "" + +#, fuzzy, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, fuzzy, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + msgid "Internationalization messages" msgstr "" @@ -14903,9 +17059,6 @@ msgstr "" msgid "Are you sure you want to rebuild auto membership?" msgstr "" -msgid "Automember rebuild membership task completed" -msgstr "" - msgid "Are you sure you want to proceed with the action?" msgstr "" @@ -15830,9 +17983,6 @@ msgstr "Principal" msgid "Affiliation Changed" msgstr "" -msgid "CA" -msgstr "" - msgid "CA Compromise" msgstr "" @@ -16062,10 +18212,6 @@ msgstr "" msgid "Add certificate mapping data" msgstr "" -#, fuzzy -msgid "Certificate mapping data" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - msgid "Configuration string" msgstr "" @@ -16082,6 +18228,10 @@ msgstr "" msgid "Remove certificate identity mapping rules" msgstr "" +#, fuzzy +msgid "Version" +msgstr "ಅನುಮತಿಗಳು" + #, fuzzy msgid "Group Options" msgstr "ಗುಂಪಿನ ವಿವರಣೆ" @@ -16291,6 +18441,9 @@ msgstr "ಗುಂಪಿನ ವಿವರಣೆ" msgid "External" msgstr "ಹೊರಗಿನ ಹೋಸ್ಟ್" +msgid "Groups" +msgstr "ಗುಂಪುಗಳು" + #, fuzzy msgid "Group categories" msgstr "ಗುಂಪಿನ ಕಂಟೇನರ್" @@ -16816,14 +18969,13 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "" -#, fuzzy -msgid "Host" -msgstr "ಹೋಸ್ಟ್‌ಗಳು" - #, fuzzy msgid "Netgroup Settings" msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ವಿವರಣೆ" +msgid "Netgroups" +msgstr "ನೆಟ್‌ಗ್ರೂಪ್‌ಗಳು" + #, fuzzy msgid "Remove netgroups" msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" @@ -16940,6 +19092,10 @@ msgstr "" msgid "Add password policy" msgstr "" +#, fuzzy +msgid "Password Policy" +msgstr "ಗುಪ್ತಪದ" + msgid "Remove password policies" msgstr "" @@ -16967,9 +19123,6 @@ msgstr "" msgid "Remove ID ranges" msgstr "" -msgid "Active Directory domain" -msgstr "" - msgid "Active Directory domain with POSIX attributes" msgstr "" @@ -16995,6 +19148,9 @@ msgstr "" msgid "Remove RADIUS servers" msgstr "" +msgid "Realm Domains" +msgstr "" + msgid "Check DNS" msgstr "" @@ -17179,6 +19335,34 @@ msgstr "" msgid "User categories" msgstr "ಬಳಕೆದಾರನ ವರ್ಗ" +#, fuzzy +msgid "Add subid" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +msgid "Assigned subids" +msgstr "" + +msgid "DNA remaining" +msgstr "" + +msgid "SubGID range size" +msgstr "" + +msgid "SubGID range start" +msgstr "" + +msgid "SubUID range size" +msgstr "" + +msgid "SubUID range start" +msgstr "" + +msgid "Remaining subids" +msgstr "" + +msgid "Subordinate ID Statistics" +msgstr "" + msgid "Add sudo command" msgstr "" @@ -17470,6 +19654,14 @@ msgstr "" msgid "Add user '${primary_key}' into sudo rules" msgstr "" +msgid "Auto assign subordinate ids" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to auto-assign a subordinate id to user ${object}?" +msgstr "" + msgid "Contact Settings" msgstr "" @@ -17935,13 +20127,13 @@ msgstr "" msgid "Authentication" msgstr "" -msgid "Automember" -msgstr "" - #, fuzzy msgid "Automount" msgstr "ಕೀಗಳ ಆಟೋಮೌಂಟ್" +msgid "DNS" +msgstr "DNS" + msgid "Host-Based Access Control" msgstr "" @@ -17961,6 +20153,9 @@ msgstr "" msgid "Role-Based Access Control" msgstr "" +msgid "Subordinate IDs" +msgstr "" + msgid "Sudo" msgstr "" @@ -18078,321 +20273,12 @@ msgstr "ಬೇಡಿಕೆ ID" msgid "Unsupported value" msgstr "" -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -#, fuzzy -msgid "invalid port number" -msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" -msgstr "" - -#, fuzzy, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - #, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -#, python-brace-format msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." msgstr "" -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, fuzzy, python-format -msgid "Access granted: %s" -msgstr "ಪ್ರವೇಶದ ಸಮಯ" - msgid "kerberos ticket policy settings" msgstr "" @@ -18572,6 +20458,1798 @@ msgstr "" msgid "Servers in location" msgstr "" +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +#, fuzzy +msgid "Invalid LDAP URI." +msgstr "LDAP URI" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +#, fuzzy +msgid "netgroups" +msgstr "ನೆಟ್‌ಗ್ರೂಪ್‌ಗಳು" + +#, fuzzy +msgid "Netgroup" +msgstr "ನೆಟ್‌ಗ್ರೂಪ್‌ಗಳು" + +#, fuzzy, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +#, fuzzy +msgid "URI" +msgstr "UID" + +#, fuzzy, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "cannot be empty" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"If the user authentication method is set to password+OTP, the user should\n" +"pass the --otp option when resetting the password.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To reset your own password when password+OTP is set as authentication " +"method:\n" +" ipa passwd --otp\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +msgid "The OTP if the user has a token configured" +msgstr "" + +#, fuzzy, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy +msgid "" +"\n" +"Permissions\n" +msgstr "ಅನುಮತಿಗಳು" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +#, fuzzy +msgid "" +"\n" +"Managed permissions\n" +msgstr "ಅನುಮತಿಗಳು" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +#, fuzzy +msgid "must be enclosed in parentheses" +msgstr "ಇನ್ಟೀಜರ್ ಆಗಿರಲೇಬೇಕು" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "" + +#, fuzzy, python-format +msgid "Deprecated; use %s" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, fuzzy, python-format +msgid "Entry %s not found" +msgstr "\"%s\" ಹೆಸರು ಹೊಂದಿರುವ ACI ಪತ್ತೆಯಾಗಿಲ್ಲ" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, python-format +msgid "option was renamed; use %s" +msgstr "" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, python-format +msgid "%s: group not found" +msgstr "" + +#, fuzzy +msgid "target and targetgroup are mutually exclusive" +msgstr " ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ ಮತ್ತು ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್ ಗಳು ಪರಸ್ಪರ ಪ್ರತ್ಯೇಕ" + +#, fuzzy +msgid "subtree and type are mutually exclusive" +msgstr " ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ ಮತ್ತು ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್ ಗಳು ಪರಸ್ಪರ ಪ್ರತ್ಯೇಕ" + +#, fuzzy +msgid "Bad search filter" +msgstr "ಬಳಕೆದಾರನ ಶೋಧ ಫೀಲ್ಡ್‌ಗಳು" + +#, fuzzy, python-format +msgid "Entry %s does not exist" +msgstr " '%s' ಗುಂಪು ಅಸ್ತಿತ್ವದಲ್ಲಿಲ್ಲ" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, fuzzy, python-format +msgid "Added permission \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy +msgid "attrs and included attributes are mutually exclusive" +msgstr " ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ ಮತ್ತು ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್ ಗಳು ಪರಸ್ಪರ ಪ್ರತ್ಯೇಕ" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "cannot delete managed permissions" +msgstr "" + +#, fuzzy, python-format +msgid "ACI of permission %s was not found" +msgstr "\"%s\" ಹೆಸರು ಹೊಂದಿರುವ ACI ಪತ್ತೆಯಾಗಿಲ್ಲ" + +#, fuzzy, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, fuzzy, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +#, fuzzy +msgid "invalid port number" +msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, fuzzy, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "Role" +msgstr "" + +#, fuzzy, python-format +msgid "Added role \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Modified role \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +msgid "" +"\n" +"API Schema\n" +msgstr "" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +#, fuzzy +msgid "Documentation" +msgstr "ಸ್ಥಳ" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +msgid "Help topic" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +#, fuzzy +msgid "Method name" +msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ಹೆಸರು" + +msgid "Display information about a command." +msgstr "" + +msgid "Search for commands." +msgstr "" + +msgid "Return command defaults" +msgstr "" + +#, python-brace-format +msgid "{oname}: {command_name} not found" +msgstr "" + +msgid "Display information about a class." +msgstr "" + +#, fuzzy +msgid "Search for classes." +msgstr "ಕ್ಯಾರೆಕ್ಟರ್ ಕ್ಲಾಸ್‌ಗಳು" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +#, fuzzy +msgid "Required" +msgstr "ಬೇಡಿಕೆ ID" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +msgid "CLI name" +msgstr "ACI ಹೆಸರು" + +#, fuzzy +msgid "Confirm (password)" +msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" + +#, fuzzy +msgid "Default" +msgstr "ಡೀಫಾಲ್ಟ್ ಶೆಲ್" + +#, fuzzy +msgid "Default from" +msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" +msgstr "" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command output." +msgstr "" + +msgid "Search for command outputs." +msgstr "" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "self service permission" +msgstr "" + +msgid "self service permissions" +msgstr "" + +#, fuzzy +msgid "Self Service Permissions" +msgstr "ಅನುಮತಿಗಳು" + +msgid "Self Service Permission" +msgstr "" + +#, fuzzy, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +msgid "SELinux User Map rule" +msgstr "" + +msgid "SELinux User Map rules" +msgstr "" + +msgid "SELinux User Maps" +msgstr "" + +msgid "SELinux User Map" +msgstr "" + +#, fuzzy, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "\"%s\" ಹೆಸರು ಹೊಂದಿರುವ ACI ಪತ್ತೆಯಾಗಿಲ್ಲ" + +#, fuzzy, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +msgid "server roles" +msgstr "" + +msgid "IPA Server Roles" +msgstr "" + +msgid "IPA Server Role" +msgstr "" + +msgid "IPA server role name" +msgstr "" + +#, fuzzy +msgid "Role status" +msgstr "ಬೇಡಿಕೆ ಸ್ಥಿತಿ" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +#, fuzzy +msgid "IPA role name" +msgstr "ನಿಯಮದ ಹೆಸರು" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +#, python-format +msgid "authentication indicators not allowed in service \"%s\"" +msgstr "" + +#, fuzzy +msgid "Malformed principal" +msgstr "Service principal" + +msgid "{} is required by the IPA master" +msgstr "" + +#, fuzzy +msgid "service" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +#, fuzzy +msgid "services" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +#, fuzzy +msgid "Service principal alias" +msgstr "Service principal" + +#, fuzzy +msgid "Base-64 encoded service certificate" +msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +msgid "Add a new IPA service." +msgstr "" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy +msgid "force principal name even if host not in DNS" +msgstr "ಈ ಹೋಸ್ಟ್‌ಗೆ Kerberos principalನ ಹೆಸರು" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +msgid "Add a new SMB service." +msgstr "" + +#, fuzzy +msgid "SMB service NetBIOS name" +msgstr "ಸೇವೆಯ ಹೆಸರು" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Modified service \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +#, fuzzy, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to a service" +msgstr "" + +#, fuzzy, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Remove principal alias from a service" +msgstr "" + +#, fuzzy, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +#, fuzzy +msgid "Member principals" +msgstr "Kerberos principal" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, fuzzy, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, fuzzy, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +#, fuzzy +msgid "Stage Users" +msgstr "ಬಳಕೆದಾರರು" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +#, fuzzy +msgid "stage users" +msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" + +#, fuzzy, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +#, fuzzy, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, fuzzy, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Subordinate ids\n" +"\n" +"Manage subordinate user and group ids for users\n" +"\n" +"EXAMPLES:\n" +"\n" +" Auto-assign a subordinate id range to current user\n" +" ipa subid-generate\n" +"\n" +" Auto-assign a subordinate id range to user alice:\n" +" ipa subid-generate --owner=alice\n" +"\n" +" Find subordinate ids for user alice:\n" +" ipa subid-find --owner=alice\n" +"\n" +" Match entry by any subordinate uid in range:\n" +" ipa subid-match --subuid=2147483649\n" +msgstr "" + +msgid "Subordinate id" +msgstr "" + +msgid "Subordinate ids" +msgstr "" + +#, fuzzy +msgid "Subordinate id description" +msgstr "ಗುಂಪಿನ ವಿವರಣೆ" + +msgid "Owning user of subordinate id entry" +msgstr "" + +msgid "Start value for subordinate user ID (subuid) range" +msgstr "" + +msgid "Subordinate user ID count" +msgstr "" + +msgid "Start value for subordinate group ID (subgid) range" +msgstr "" + +msgid "Subordinate group ID count" +msgstr "" + +#, python-format +msgid "" +"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." +msgstr "" + +#, python-format +msgid "'%(dn)s is not a valid user" +msgstr "" + +msgid "subgidnumber must be equal to subuidnumber" +msgstr "" + +msgid "Add a new subordinate id." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added subordinate id \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Delete a subordinate id." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted subordinate id \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "Modify a subordinate id." +msgstr "" + +#, fuzzy, python-format +msgid "Modified subordinate id \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, fuzzy +msgid "Search for subordinate id." +msgstr "ಕ್ಯಾರೆಕ್ಟರ್ ಕ್ಲಾಸ್‌ಗಳು" + +#, fuzzy, python-format +msgid "%(count)d subordinate id matched" +msgid_plural "%(count)d subordinate ids matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +msgid "Display information about a subordinate id." +msgstr "" + +msgid "Generate and auto-assign subuid and subgid range to user entry" +msgstr "" + +msgid "Match users by any subordinate uid in their range" +msgstr "" + +msgid "SubUID match" +msgstr "" + +msgid "Match value for subordinate user ID" +msgstr "" + +msgid "Subordinate id statistics" +msgstr "" + +#, python-format +msgid "%(remaining)i remaining subordinate id ranges" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +msgid "sudo command" +msgstr "" + +msgid "sudo commands" +msgstr "" + +msgid "Sudo Commands" +msgstr "" + +#, fuzzy, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, fuzzy, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + msgid "" "\n" "Topology\n" @@ -18788,975 +22466,6 @@ msgid "" " replication agreements\n" msgstr "" -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -msgid "sudo command" -msgstr "" - -msgid "sudo commands" -msgstr "" - -msgid "Sudo Commands" -msgstr "" - -#, fuzzy, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -#, fuzzy -msgid "Self Service Permissions" -msgstr "ಅನುಮತಿಗಳು" - -msgid "Self Service Permission" -msgstr "" - -#, fuzzy, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "A list of ACI values" -msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "ACI prefix is required" -msgstr "" - -#, fuzzy -msgid "filter and memberof are mutually exclusive" -msgstr " ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ ಮತ್ತು ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್ ಗಳು ಪರಸ್ಪರ ಪ್ರತ್ಯೇಕ" - -#, fuzzy -msgid "group, permission and self are mutually exclusive" -msgstr " ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ ಮತ್ತು ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್ ಗಳು ಪರಸ್ಪರ ಪ್ರತ್ಯೇಕ" - -msgid "One of group, permission or self is required" -msgstr "" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -msgid "ACI object." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -#, fuzzy, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ರಚಿಸಲಾಗಿದೆ" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -#, fuzzy -msgid "groups" -msgstr "ಗುಂಪುಗಳು" - -#, fuzzy -msgid "User Group" -msgstr "ಬಳಕೆದಾರರ ಗುಂಪುಗಳು" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, fuzzy -msgid "privileged group" -msgstr "Target ಗುಂಪು" - -#, fuzzy, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, fuzzy, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -msgid "Not a managed group" -msgstr "" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -#, fuzzy -msgid "automount location" -msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" - -#, fuzzy -msgid "automount locations" -msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" - -#, fuzzy -msgid "Automount Locations" -msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" - -#, fuzzy -msgid "Automount Location" -msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" - -#, fuzzy, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "automount map" -msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" - -#, fuzzy -msgid "automount maps" -msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" - -#, fuzzy -msgid "Automount Map" -msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" - -#, fuzzy, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "Automount key object." -msgstr "ಕೀಗಳ ಆಟೋಮೌಂಟ್" - -#, fuzzy -msgid "automount key" -msgstr "ಕೀಗಳ ಆಟೋಮೌಂಟ್" - -#, fuzzy -msgid "automount keys" -msgstr "ಕೀಗಳ ಆಟೋಮೌಂಟ್" - -#, fuzzy -msgid "Automount Key" -msgstr "ಕೀಗಳ ಆಟೋಮೌಂಟ್" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, fuzzy, python-format -msgid "key named %(key)s already exists" -msgstr "ಈ ನಮೂದು ಈಗಾಗಲೇ ಅಸ್ತಿತ್ವದಲ್ಲಿದೆ" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, fuzzy, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" -msgstr[1] "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -#, fuzzy -msgid "Hosts the view applies to" -msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಹೋಸ್ಟ್ ವರ್ಗ" - -#, fuzzy, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Delete an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "Modify an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -#, fuzzy -msgid "Invalid LDAP URI." -msgstr "LDAP URI" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -#, fuzzy -msgid "CA category" -msgstr "ಹೋಸ್ಟ್ ವರ್ಗ" - -#, fuzzy -msgid "CA category the ACL applies to" -msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಹೋಸ್ಟ್ ವರ್ಗ" - -msgid "CAs" -msgstr "" - -#, fuzzy, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, fuzzy, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ರಚಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, python-format -msgid "%i users or groups added." -msgstr "" - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, fuzzy, python-format -msgid "%i service added." -msgstr "ಸೇವೆಯ ಹೆಸರು" - -#, fuzzy, python-format -msgid "%i services added." -msgstr "ಸೇವೆಯ ಹೆಸರು" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - msgid "" "\n" "Cross-realm trusts\n" @@ -19922,12 +22631,6 @@ msgid "" " " msgstr "" -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - msgid "Type of trusted domain ID range, one of allowed values" msgstr "" @@ -20168,749 +22871,28 @@ msgid "" "itself" msgstr "" -msgid "" -"\n" -"DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "" - -msgid "DNS servers" -msgstr "" - #, fuzzy -msgid "DNS Servers" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -msgid "DNS Server" -msgstr "" - -#, fuzzy -msgid "DNS Server name" -msgstr "ಸೇವೆಯ ಹೆಸರು" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, fuzzy, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "Search for DNS servers." -msgstr "" +msgid "users" +msgstr "ಬಳಕೆದಾರರು" #, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, fuzzy, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Delete a DNS server" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -#, fuzzy -msgid "Base-64 encoded host certificate" -msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" - -msgid "SSH public key fingerprint" -msgstr "" - -#, fuzzy, python-format -msgid "can be at most %(len)d characters" -msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxlength)d ಅಕ್ಷರಗಳು ಇರಬಹುದು" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, fuzzy -msgid "Password cannot be set on enrolled host." -msgstr "ದೊಡ್ಡ ಪ್ರಮಾಣದ ದಾಖಲಾತಿಯಲ್ಲಿ ಬಳಸಲಾದ ಗುಪ್ತಪದ" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, fuzzy, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -#, fuzzy -msgid "HBAC services" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -#, fuzzy -msgid "HBAC Services" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -#, fuzzy -msgid "HBAC Service" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -#, fuzzy, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "HBAC service group" -msgstr "ಬಳಕೆದಾರ ಗುಂಪು" - -#, fuzzy -msgid "HBAC service groups" -msgstr "ಬಳಕೆದಾರ ಗುಂಪು" - -#, fuzzy -msgid "HBAC Service Groups" -msgstr "ಬಳಕೆದಾರರ ಗುಂಪುಗಳು" - -msgid "HBAC Service Group" -msgstr "" - -#, fuzzy, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -msgid "Delegations" -msgstr "" - -msgid "Delegation" -msgstr "" - -#, fuzzy, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, fuzzy, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -msgid "Role" -msgstr "" - -#, fuzzy, python-format -msgid "Added role \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified role \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -#, fuzzy -msgid "local domain range" -msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -msgid "Added ID range \"%(value)s\"" +msgid "Added user \"%(value)s\"" msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, fuzzy -msgid "netgroups" -msgstr "ನೆಟ್‌ಗ್ರೂಪ್‌ಗಳು" - -#, fuzzy -msgid "Netgroup" -msgstr "ನೆಟ್‌ಗ್ರೂಪ್‌ಗಳು" - -#, fuzzy, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - msgid "Default group for new users is not POSIX" msgstr "" +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + #, python-format msgid "%s: user is already preserved" msgstr "" -#, fuzzy, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" #, fuzzy, python-format msgid "Undeleted user account \"%(value)s\"" @@ -21009,12 +22991,6 @@ msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾ msgid "Removed certificates from user \"%(value)s\"" msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - msgid "Add new principal alias to the user entry" msgstr "" @@ -21029,532 +23005,6 @@ msgstr "" msgid "Removed aliases from user \"%(value)s\"" msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, fuzzy, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "\"%s\" ಹೆಸರು ಹೊಂದಿರುವ ACI ಪತ್ತೆಯಾಗಿಲ್ಲ" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Auto member rule: %s not found!" -msgstr "\"%s\" ಹೆಸರು ಹೊಂದಿರುವ ACI ಪತ್ತೆಯಾಗಿಲ್ಲ" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟ್‌ಗ್ರೂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" -msgstr "" - -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -msgid "SELinux User Maps" -msgstr "" - -msgid "SELinux User Map" -msgstr "" - -#, fuzzy, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "\"%s\" ಹೆಸರು ಹೊಂದಿರುವ ACI ಪತ್ತೆಯಾಗಿಲ್ಲ" - -#, fuzzy, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - msgid "" "\n" "Vaults\n" @@ -21902,111 +23352,165 @@ msgstr "" msgid "Checks if any of the servers has the KRA service enabled" msgstr "" -#, fuzzy -msgid "Member service groups" -msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" - -#, fuzzy -msgid "Member HBAC service groups" -msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" - -#, fuzzy -msgid "Member ID user overrides" -msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" +msgid "operation not defined" msgstr "" #, python-format -msgid "container entry (%(container)s) not found" +msgid "not allowed to perform operation: %s" msgstr "" -#, python-format -msgid "%(parent)s: %(oname)s not found" +msgid "No such virtual command" msgstr "" -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "Class of Service object used for linking policies with groups" msgstr "" #, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +#, fuzzy +msgid "password policy" +msgstr "ಗುಪ್ತಪದ" + +msgid "password policies" +msgstr "" + +#, fuzzy +msgid "Password Policies" +msgstr "ಗುಪ್ತಪದ" + +#, fuzzy +msgid "Max repeat" +msgstr "ಗರಿಷ್ಟ ನವೀಕರಣ" + +#, fuzzy +msgid "Maximum number of same consecutive characters" +msgstr "ಕನಿಷ್ಟ ಸಂಖ್ಯೆಯ ಕ್ಯಾರಕ್ಟರ್ ಕ್ಲಾಸ್‌ಗಳು" + +#, fuzzy +msgid "Max sequence" +msgstr "ಗರಿಷ್ಟ ನವೀಕರಣ" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +#, fuzzy +msgid "User check" +msgstr "ಬಳಕೆದಾರನ ಹೆಸರು" + +msgid "Check if the password contains the username" +msgstr "" + msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" msgstr "" -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" +#, fuzzy +msgid "Maximum password life must be equal to or greater than the minimum." +msgstr "ಗುಪ್ತಪದದ ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ (ದಿನಗಳಲ್ಲಿ)" -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" +#, fuzzy +msgid "cannot delete global password policy" +msgstr "ಗ್ಲೋಬಲ್ ಪಾಲಿಸಿಯಲ್ಲಿ ಆದ್ಯತೆಯನ್ನು ಸೆಟ್ ಮಾಡಲಾಗುವುದಿಲ್ಲ" -msgid "one or more values to remove" -msgstr "" +msgid "priority cannot be set on global policy" +msgstr "ಗ್ಲೋಬಲ್ ಪಾಲಿಸಿಯಲ್ಲಿ ಆದ್ಯತೆಯನ್ನು ಸೆಟ್ ಮಾಡಲಾಗುವುದಿಲ್ಲ" msgid "" "\n" @@ -22155,6 +23659,10 @@ msgstr "" msgid "Ignoring topology connectivity errors." msgstr "" +#, python-format +msgid "Failed to remove server from security domain: %s" +msgstr "" + msgid "Server has already been deleted" msgstr "" @@ -22193,1404 +23701,189 @@ msgstr "" msgid "" "\n" -"Manage Certificate Authorities\n" +"Sudo Rules\n" msgstr "" msgid "" "\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" msgstr "" msgid "" "\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" msgstr "" msgid "" "\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" +"Each option needs to be added separately and no validation is done whether\n" +"the option is known by sudo or is in a valid format. Environment variables\n" +"also need to be set individually. For example env_keep=\"FOO BAR\" in " +"sudoers\n" +"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" +"+=BAR.\n" msgstr "" msgid "" "\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" msgstr "" msgid "" "\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" msgstr "" msgid "" "\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" msgstr "" msgid "" "\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" msgstr "" msgid "" "\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" "\n" -" ipa ca-del puppet\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" msgstr "" -#, fuzzy -msgid "Certificate Authority" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -#, fuzzy -msgid "Certificate Authorities" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -msgid "Name for referencing the CA" +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" msgstr "" -#, fuzzy -msgid "Description of the purpose of the CA" -msgstr "ಈ ಹೋಸ್ಟ್‌ನ ವಿವರಣೆ" - -msgid "Authority ID" +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" msgstr "" -msgid "Dogtag Authority ID" +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" msgstr "" -#, fuzzy -msgid "Subject DN" -msgstr "ವಿಷಯ" - -msgid "Subject Distinguished Name" +msgid "" +"\n" +" Set multiple default Sudo options:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate' --" +"sudooption mail_badpass\n" msgstr "" -msgid "Issuer Distinguished Name" +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" msgstr "" -msgid "Search for CAs." +msgid "this option has been deprecated." msgstr "" -#, fuzzy, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -msgid "Display the properties of a CA." +msgid "sudo rules" msgstr "" -msgid "Create a CA." +msgid "Sudo Rules" msgstr "" -#, fuzzy, python-format -msgid "Created CA \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ರಚಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." +msgid "Sudo Rule" msgstr "" #, python-format -msgid "Unrecognized attributes: %(attrs)s" +msgid "order must be a unique value (%(order)d already used by %(rule)s)" msgstr "" +#, fuzzy, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + #, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -msgid "IPA CA cannot be deleted" -msgstr "" - -msgid "Must be disabled first" -msgstr "" - -msgid "Modify CA configuration." -msgstr "" - -#, fuzzy, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -msgid "Disable a CA." -msgstr "" - -#, fuzzy, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "IPA CA cannot be disabled" -msgstr "" - -msgid "Enable a CA." -msgstr "" - -#, fuzzy, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ರಚಿಸಲಾಗಿದೆ" - msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +msgid "command" +msgstr "" + +msgid "commands" +msgstr "" + +msgid "runAs user" msgstr "" #, fuzzy -msgid "Stage Users" -msgstr "ಬಳಕೆದಾರರು" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -#, fuzzy -msgid "stage users" +msgid "runAs users" msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" -#, fuzzy, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" +#, fuzzy +msgid "group runAs" +msgstr "ನೆಟ್‌ಗ್ರೂಪ್‌ಗಳು" #, fuzzy -msgid "must be TRUE or FALSE" -msgstr "ನಿಜ (True) ಅಥವಾ ಸುಳ್ಳು (False) ಆಗಿರಲೇಬೇಕು" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -#, fuzzy -msgid "User password expiration" -msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -#, fuzzy -msgid "SMB Home Directory" -msgstr "ಹೋಮ್ ಡೈರೆಕ್ಟರೀ ಮೂಲ" - -#, fuzzy -msgid "SMB Home Directory Drive" -msgstr "ಹೋಮ್ ಡೈರೆಕ್ಟರೀ ಮೂಲ" +msgid "runAs groups" +msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" #, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -#, fuzzy -msgid "Issuer of the certificate" -msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -#, fuzzy -msgid "URI" -msgstr "UID" - -#, fuzzy, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "cannot be empty" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" msgstr[0] "" msgstr[1] "" -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" +msgid "commands cannot be added when command category='all'" msgstr "" -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "invalid IP network format" -msgstr "" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -msgid "invalid address format" -msgstr "" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -msgid "flags value: allowed interval 0-255" -msgstr "" - -msgid "iterations value: allowed interval 0-65535" +msgid "users cannot be added when runAs user or runAs group category='all'" msgstr "" #, python-format -msgid "salt value: %(err)s" -msgstr "" - -msgid "invalid domain-name: not fully qualified" -msgstr "" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgid "RunAsUser does not accept '%(name)s' as a user name" msgstr "" #, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgid "RunAsUser does not accept '%(name)s' as a group name" msgstr "" #, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" - -#, python-format -msgid "%s record" -msgstr "" - -#, python-format -msgid "Raw %s records" -msgstr "" - -#, python-format -msgid "%s Record" -msgstr "" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -msgid "Invalid number of parts!" -msgstr "" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -msgid "Create reverse" -msgstr "" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" - -msgid "Exchanger" -msgstr "" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -#, fuzzy -msgid "Priority (order)" -msgstr "ಆದ್ಯತೆ" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Relative weight for entries with the same priority." -msgstr "" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Target Uniform Resource Identifier" -msgstr "" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" - -msgid "Managedby permission" -msgstr "" - -msgid "cannot be used when a zone is specified" -msgstr "" - -#, fuzzy -msgid "Only one zone type is allowed per zone name" -msgstr "ಕೇವಲ ಒಂದು ಬೆಲೆ ಮಾತ್ರ ಅನುಮೋದಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "ಈ ನಮೂದು ಈಗಾಗಲೇ ಅಸ್ತಿತ್ವದಲ್ಲಿದೆ" - -#, fuzzy, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "DNS zone" -msgstr "" - -msgid "DNS zones" -msgstr "" - -msgid "DNS Zones" -msgstr "" - -msgid "DNS Zone" -msgstr "" - -#, fuzzy -msgid "Default time to live" -msgstr "ಉಳಿದಿರಬೇಕಾದ ಸಮಯ" - -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -msgid "setting Authoritative nameserver" -msgstr "" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -msgid "" -msgstr "" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "is required" -msgstr "" - -#, fuzzy, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "DNS resource record" -msgstr "" - -msgid "DNS resource records" -msgstr "" - -msgid "DNS Resource Records" -msgstr "" - -msgid "DNS Resource Record" -msgstr "" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -msgid "only master zones can contain records" -msgstr "" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -msgid "DNS zone root record cannot be renamed" -msgstr "" - -msgid "DNS records can be only updated one at a time" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "" - -#, fuzzy, python-format -msgid "Found '%(value)s'" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "" - -msgid "DNS configuration options" -msgstr "" - -msgid "DNS Global Configuration" -msgstr "" - -msgid "IPA DNS version" -msgstr "" - -msgid "List of IPA masters configured as DNS servers" -msgstr "" - -msgid "IPA server configured as DNSSec key master" -msgstr "" - -msgid "Global DNS configuration is empty" -msgstr "" - -msgid "DNS forward zone" -msgstr "" - -msgid "DNS forward zones" -msgstr "" - -msgid "DNS Forward Zones" -msgstr "" - -msgid "DNS Forward Zone" -msgstr "" - -msgid "Please specify forwarders." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "" - -msgid "IPA DNS records" -msgstr "" - -msgid "IPA location records" -msgstr "" - -msgid "Update location and IPA server DNS records" -msgstr "" - -msgid "Result of the command" -msgstr "" - -msgid "Dry run" -msgstr "" - -msgid "Do not update records only return expected records" -msgstr "" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, fuzzy, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ರಚಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -#, fuzzy -msgid "Certificate Profile" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -#, fuzzy -msgid "Certificate Profiles" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -msgid "Profile configuration" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -#, fuzzy, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, fuzzy, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, fuzzy -msgid "Certificate profiles cannot be renamed" -msgstr "ಪ್ರಮಾಣಪತ್ರದ ಕಾರ್ಯಾಚರಣೆಯನ್ನು ಪೂರ್ಣಗೊಳಿಸಲು ಆಗುತ್ತಿಲ್ಲ: %(error)s" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -msgid "must be enabled only on a single master" +msgid "RunAsGroup does not accept '%(name)s' as a group name" msgstr "" #, fuzzy @@ -23616,6 +23909,17 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + #, python-format msgid "" "\n" @@ -23635,34 +23939,6 @@ msgstr "" msgid "Topology does not allow server %(server)s to replicate with servers:" msgstr "" -msgid "Trusting forest" -msgstr "" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Unknown" -msgstr "" - -msgid "Non-Active Directory domain" -msgstr "" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - msgid "" "\n" "Classes to manage trust joins using DCE-RPC calls\n" @@ -23822,33 +24098,6 @@ msgstr "" msgid "must be at least 1" msgstr "ಕನಿಷ್ಠವಾಗಿ %(minvalue)d ಆಗಿರಲೇಬೇಕು" -#, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -msgid "Unable to initialize STARTTLS session\n" -msgstr "" - msgid "Out of memory\n" msgstr "" @@ -23876,3 +24125,30 @@ msgstr "" msgid "Bad or unsupported salt type.\n" msgstr "" + +#, c-format +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "" + +msgid "" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" +msgstr "" + +msgid "Unable to initialize STARTTLS session\n" +msgstr "" diff --git a/po/mr.po b/po/mr.po index 53cfe86a5..4f4d15bd0 100644 --- a/po/mr.po +++ b/po/mr.po @@ -14,87 +14,418 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" -msgid " ipa --help" -msgstr " ipa --help" +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "" -msgid "A string searched in all relevant object attributes" -msgstr "एक शब्द सर्व संबंधित ऑब्जेक्ट गुणधर्मात शोधला" +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "" -msgid "Command name" -msgstr "आदेशाचे नाव " +#, c-format +msgid "out of memory\n" +msgstr "" -msgid "Deprecated options" -msgstr "वापरात नसलेले पर्याय" +#, c-format +msgid "read error\n" +msgstr "" -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "सत्यापित करण्यासाठी आपण पुन्हा %(label)s प्रविष्ट करा:" +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "अवैध JSON-RPC विनंती : %(error)s" +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Kerberos त्रुटी: %(major)s/%(minor)s" +#, c-format +msgid "Removing principal %s\n" +msgstr "" -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "न आढळलेले किंवा अवैध HTTP Referer, %(referer)s" +#, c-format +msgid "Failed to open keytab\n" +msgstr "" -msgid "No file to read" -msgstr "कोणतीही फाइल वाचण्यासाठी नाही " +#, c-format +msgid "principal not found\n" +msgstr "" -msgid "No matching entries found" -msgstr "कोणतेही जुळणारे नोंदी आढळले" +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" -msgid "Passwords do not match!" +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "realm not found\n" +msgstr "" + +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" +msgstr "" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "Kerberos Service Principal Name" +msgstr "" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +msgid "Realm name" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "" + +#, c-format +msgid "Out of memory \n" +msgstr "" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "" + +msgid "Simple bind failed\n" +msgstr "" + +msgid "SASL Bind failed\n" +msgstr "" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "" + +#, c-format +msgid "Failed to get result: %s\n" +msgstr "" + +#, c-format +msgid "Timeout exceeded." +msgstr "" + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "" + +#, c-format +msgid "Missing reply control!\n" +msgstr "" + +#, c-format +msgid "Out of Memory!\n" +msgstr "" + +#, c-format +msgid "Failed to create control!\n" +msgstr "" + +#, c-format +msgid "Failed to bind to server!\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab!\n" +msgstr "" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "" + +msgid "Failed to decode control reply!\n" +msgstr "" + +#, fuzzy, c-format +msgid "Passwords do not match!\n" msgstr "पासवर्ड जुळत नाही!" -msgid "Positional arguments" -msgstr "positional वितर्क" +#, c-format +msgid "Failed to open config file %s\n" +msgstr "" -#, python-format -msgid "Same as --%s" -msgstr "--%s सारखा" +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "" -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "सेवा '%(service)s' Kerberos माहितीकोष आढली नाही" +msgid "Failed to resolve symlink to keytab.\n" +msgstr "" -msgid "The topic or command name." -msgstr "विषय किंवा आदेशाचे नाव" +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" -msgid "To get command help, use:" -msgstr "आदेशा संबधित मिळवण्यासाठी, वापरा:" +msgid "Print as little as possible" +msgstr "" -msgid "Topic commands:" -msgstr "विषय आदेश:" +msgid "Output only on errors" +msgstr "" -msgid "Topic or Command" -msgstr "विषय किंवा आदेश" +msgid "Output debug info" +msgstr "" -msgid "an internal error has occurred" -msgstr "एक अंतर्गत त्रुटी आली आहे" +msgid "Contact this specific KDC Server" +msgstr "" -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "एक अंतर्गत त्रुटी '%(server)s' वरील सर्व्हर वर आली आहे " +msgid "Server Name" +msgstr "" -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "'%(uri)s' ला जोडणी अपयशी : %(error)s" +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" -msgid "did not receive Kerberos credentials" -msgstr "Kerberos credentials प्राप्त झाले नाहीत" +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "सर्व्हरवर त्रुटी '%(server)s': %(error)s" +msgid "Encryption types to request" +msgstr "" -#, python-format -msgid "unknown command '%(name)s'" -msgstr "अनोळखी आदेश '%(name)s'" +msgid "Comma separated encryption types list" +msgstr "" + +msgid "Show the list of permitted encryption types and exit" +msgstr "" + +msgid "Permitted Encryption Types" +msgstr "" + +msgid "Asks for a non-random password to use for the principal" +msgstr "" + +msgid "LDAP DN" +msgstr "" + +msgid "DN to bind as if not using kerberos" +msgstr "" + +msgid "LDAP password" +msgstr "" + +msgid "password to use if not using kerberos" +msgstr "" + +msgid "Prompt for LDAP password" +msgstr "" + +msgid "Path to the IPA CA certificate" +msgstr "" + +msgid "IPA CA certificate" +msgstr "" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" + +msgid "url" +msgstr "" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" + +msgid "GSSAPI|EXTERNAL" +msgstr "" + +msgid "Retrieve current keys without changing them" +msgstr "" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +msgid "Enter LDAP password" +msgstr "" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "" + +#, c-format +msgid "DNS discovery for domain %s\n" +msgstr "" + +#, c-format +msgid "Discovered server %s\n" +msgstr "" + +#, c-format +msgid "Using discovered server %s\n" +msgstr "" + +#, c-format +msgid "DNS Discovery failed\n" +msgstr "" + +#, c-format +msgid "Using server from config %s\n" +msgstr "" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "" + +#, c-format +msgid "Using provided server %s\n" +msgstr "" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "" + +msgid "New Principal Password" +msgstr "" + +msgid "Verify Principal Password" +msgstr "" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" + +#, c-format +msgid "Failed to create key material\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "" #, c-format msgid "Out of memory!\n" @@ -120,9 +451,6 @@ msgstr "" msgid "Unable to enable SSL in LDAP\n" msgstr "" -msgid "SASL Bind failed\n" -msgstr "" - #, c-format msgid "Search for %1$s on rootdse failed with error %2$d\n" msgstr "" @@ -348,389 +676,6 @@ msgstr "" msgid "The hostname must not be: %s\n" msgstr "" -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "" - -#, c-format -msgid "Out of memory \n" -msgstr "" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "" - -msgid "Simple bind failed\n" -msgstr "" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -#, c-format -msgid "Out of Memory!\n" -msgstr "" - -#, c-format -msgid "Failed to create control!\n" -msgstr "" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "" - -msgid "Failed to decode control reply!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Passwords do not match!\n" -msgstr "पासवर्ड जुळत नाही!" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "" - -msgid "Failed to resolve symlink to keytab.\n" -msgstr "" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Output only on errors" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -msgid "Server Name" -msgstr "" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Encryption types to request" -msgstr "" - -msgid "Comma separated encryption types list" -msgstr "" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -msgid "Permitted Encryption Types" -msgstr "" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -msgid "LDAP DN" -msgstr "" - -msgid "DN to bind as if not using kerberos" -msgstr "" - -msgid "LDAP password" -msgstr "" - -msgid "password to use if not using kerberos" -msgstr "" - -msgid "Prompt for LDAP password" -msgstr "" - -msgid "Path to the IPA CA certificate" -msgstr "" - -msgid "IPA CA certificate" -msgstr "" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -msgid "Enter LDAP password" -msgstr "" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -msgid "New Principal Password" -msgstr "" - -msgid "Verify Principal Password" -msgstr "" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, c-format -msgid "Failed to create key material\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -msgid "Realm name" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "" - -#, c-format -msgid "out of memory\n" -msgstr "" - -#, c-format -msgid "read error\n" -msgstr "" - msgid "Failed members" msgstr "" @@ -846,132 +791,34 @@ msgstr "" msgid "Skipped %(key)s" msgstr "" +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +msgid "Unrevoked" +msgstr "" + +msgid "Error" +msgstr "" + +msgid "Input filename" +msgstr "" + +msgid "File to load the certificate from." +msgstr "" + +msgid "cannot specify both raw certificate and file" +msgstr "" + msgid "Input file" msgstr "" msgid "File to load the certificate from" msgstr "" -msgid "cannot specify both raw certificate and file" -msgstr "" - #, python-format msgid "Profile configuration stored in file '%(file)s'" msgstr "" -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -msgid "Servers details:" -msgstr "" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "Add a new YubiKey OTP token." -msgstr "" - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -msgid "Maximum number of agreements per replica" -msgstr "" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -msgid "Delete a user" -msgstr "" - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - msgid "Split DNS record to parts" msgstr "" @@ -1036,6 +883,131 @@ msgstr "" msgid "file to store DNS records in nsupdate format" msgstr "" +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "" + +msgid "Servers details:" +msgstr "" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "" + +msgid "User ID" +msgstr "" + +msgid "Password" +msgstr "" + +msgid "First Code" +msgstr "" + +msgid "Second Code" +msgstr "" + +msgid "Token ID" +msgstr "" + +msgid "python-yubico is not installed." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" + +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "Add a new YubiKey OTP token." +msgstr "" + +msgid "YubiKey slot" +msgstr "" + +msgid "No free YubiKey slot!" +msgstr "" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "" + +msgid "Topology is disconnected" +msgstr "" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "" + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "" + +msgid "Maximum number of agreements per replica" +msgstr "" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "" + +msgid "Delete a user" +msgstr "" + +msgid "preserve and no-preserve cannot be both set" +msgstr "" + #, python-format msgid "Cannot read file '%(filename)s': %(exc)s" msgstr "" @@ -1155,47 +1127,20 @@ msgstr "" msgid "Missing vault private key" msgstr "" -msgid "Write certificate (chain if --chain used) to file" +#, python-format +msgid "Enabled Sudo Rule \"%s\"" msgstr "" -msgid "Unrevoked" +#, python-format +msgid "Disabled Sudo Rule \"%s\"" msgstr "" -msgid "Error" +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" msgstr "" -msgid "Input filename" -msgstr "" - -msgid "File to load the certificate from." -msgstr "" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -msgid "User ID" -msgstr "" - -msgid "Password" -msgstr "" - -msgid "First Code" -msgstr "" - -msgid "Second Code" -msgstr "" - -msgid "Token ID" +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" msgstr "" msgid "" @@ -1438,6 +1383,9 @@ msgid "" " " msgstr "" +msgid "A string searched in all relevant object attributes" +msgstr "एक शब्द सर्व संबंधित ऑब्जेक्ट गुणधर्मात शोधला" + msgid "Primary key only" msgstr "" @@ -1465,6 +1413,243 @@ msgstr "" msgid "Location of the ACI" msgstr "" +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Description" +msgstr "" + +msgid "A description of this auto member rule" +msgstr "" + +msgid "Default (fallback) Group" +msgstr "" + +msgid "Default group for entries to land" +msgstr "" + +msgid "Add an automember rule." +msgstr "" + +msgid "Automember Rule" +msgstr "" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +msgid "Grouping Type" +msgstr "" + +msgid "Grouping to which the rule applies" +msgstr "" + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +msgid "Exclusive Regex" +msgstr "" + +msgid "Attribute Key" +msgstr "" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +msgid "Number of conditions added" +msgstr "" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +msgid "Display information about the default (fallback) automember groups." +msgstr "" + +msgid "Delete an automember rule." +msgstr "" + +msgid "List of deletions that failed" +msgstr "" + +msgid "Search for automember rules." +msgstr "" + +msgid "Modify an automember rule." +msgstr "" + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +msgid "Rights" +msgstr "" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Users" +msgstr "" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Hosts" +msgstr "" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +msgid "Conditions that could not be removed" +msgstr "" + +msgid "Number of conditions removed" +msgstr "" + +msgid "Display information about an automember rule." +msgstr "" + msgid "" "\n" "Automount\n" @@ -1596,31 +1781,15 @@ msgstr "" msgid "Automount map name." msgstr "" -msgid "Description" -msgstr "" - msgid "Create a new automount key." msgstr "" -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - msgid "Delete an automount key." msgstr "" msgid "Continuous mode: Don't stop on errors." msgstr "" -msgid "List of deletions that failed" -msgstr "" - msgid "Search for an automount key." msgstr "" @@ -1639,19 +1808,6 @@ msgstr "" msgid "Modify an automount key." msgstr "" -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "Rights" -msgstr "" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - msgid "New mount information" msgstr "" @@ -1746,6 +1902,184 @@ msgstr "" msgid "Nested Methods to execute" msgstr "" +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +msgid "Search for existing certificates." +msgstr "" + +msgid "Match cn attribute in subject" +msgstr "" + +msgid "Reason" +msgstr "" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "" + +msgid "minimum serial number" +msgstr "" + +msgid "maximum serial number" +msgstr "" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Maximum number of certs returned" +msgstr "" + +msgid "Take a revoked certificate off hold." +msgstr "" + +msgid "Serial number" +msgstr "" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +msgid "Submit a certificate signing request." +msgstr "" + +msgid "CSR" +msgstr "" + +msgid "Principal" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +msgid "Dictionary mapping variable name to value" +msgstr "" + +msgid "Revoke a certificate." +msgstr "" + +msgid "Retrieve an existing certificate." +msgstr "" + +msgid "Output filename" +msgstr "" + +msgid "File to store the certificate in." +msgstr "" + +msgid "Check the status of a certificate signing request." +msgstr "" + +msgid "Request id" +msgstr "" + msgid "" "\n" "Server configuration\n" @@ -3006,6 +3340,306 @@ msgstr "" msgid "Display information about a DNS zone (SOA record)." msgstr "" +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "Group name" +msgstr "" + +msgid "Group description" +msgstr "" + +msgid "GID" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "" + +msgid "Member users" +msgstr "" + +msgid "Member groups" +msgstr "" + +msgid "Member of groups" +msgstr "" + +msgid "Roles" +msgstr "" + +msgid "Member of netgroups" +msgstr "" + +msgid "Member of Sudo rule" +msgstr "" + +msgid "Member of HBAC rule" +msgstr "" + +msgid "Indirect Member users" +msgstr "" + +msgid "Indirect Member groups" +msgstr "" + +msgid "Indirect Member of group" +msgstr "" + +msgid "Indirect Member of netgroup" +msgstr "" + +msgid "Indirect Member of role" +msgstr "" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +msgid "Create a new group." +msgstr "" + +msgid "Create as a non-POSIX group" +msgstr "" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +msgid "Add members to a group." +msgstr "" + +msgid "External member" +msgstr "" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +msgid "member user" +msgstr "" + +msgid "users to add" +msgstr "" + +msgid "member group" +msgstr "" + +msgid "groups to add" +msgstr "" + +msgid "Members that could not be added" +msgstr "" + +msgid "Number of members added" +msgstr "" + +msgid "Delete group." +msgstr "" + +msgid "Detach a managed group from a user." +msgstr "" + +msgid "Search for groups." +msgstr "" + +msgid "search for private groups" +msgstr "" + +msgid "search for POSIX groups" +msgstr "" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +msgid "search for non-POSIX groups" +msgstr "" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "user" +msgstr "" + +msgid "Search for groups with these member users." +msgstr "" + +msgid "Search for groups without these member users." +msgstr "" + +msgid "group" +msgstr "" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +msgid "netgroup" +msgstr "" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +msgid "HBAC rule" +msgstr "" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +msgid "Modify a group." +msgstr "" + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +msgid "Remove members from a group." +msgstr "" + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "" + +msgid "Number of members removed" +msgstr "" + +msgid "Display information about a named group." +msgstr "" + msgid "" "\n" "Host-based access control\n" @@ -3086,15 +3720,9 @@ msgstr "" msgid "Enabled" msgstr "" -msgid "Users" -msgstr "" - msgid "User Groups" msgstr "" -msgid "Hosts" -msgstr "" - msgid "Host Groups" msgstr "" @@ -3110,9 +3738,6 @@ msgstr "" msgid "Create a new HBAC rule." msgstr "" -msgid "Suppress processing of membership attributes." -msgstr "" - msgid "Add target hosts and hostgroups to an HBAC rule." msgstr "" @@ -3128,12 +3753,6 @@ msgstr "" msgid "host groups to add" msgstr "" -msgid "Members that could not be added" -msgstr "" - -msgid "Number of members added" -msgstr "" - msgid "Add services to an HBAC rule." msgstr "" @@ -3152,18 +3771,6 @@ msgstr "" msgid "Add users and groups to an HBAC rule." msgstr "" -msgid "member user" -msgstr "" - -msgid "users to add" -msgstr "" - -msgid "member group" -msgstr "" - -msgid "groups to add" -msgstr "" - msgid "Delete an HBAC rule." msgstr "" @@ -3188,12 +3795,6 @@ msgstr "" msgid "host groups to remove" msgstr "" -msgid "Members that could not be removed" -msgstr "" - -msgid "Number of members removed" -msgstr "" - msgid "Remove service and service groups from an HBAC rule." msgstr "" @@ -3206,12 +3807,6 @@ msgstr "" msgid "Remove users and groups from an HBAC rule." msgstr "" -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - msgid "Display the properties of an HBAC rule." msgstr "" @@ -3320,6 +3915,242 @@ msgstr "" msgid "Display information about an HBAC service group." msgstr "" +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +msgid "User name" +msgstr "" + +msgid "Target host" +msgstr "" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +msgid "Warning" +msgstr "" + +msgid "Matched rules" +msgstr "" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + msgid "" "\n" "Hosts/Machines\n" @@ -3467,33 +4298,9 @@ msgstr "" msgid "Member of host-groups" msgstr "" -msgid "Roles" -msgstr "" - -msgid "Member of netgroups" -msgstr "" - -msgid "Member of Sudo rule" -msgstr "" - -msgid "Member of HBAC rule" -msgstr "" - -msgid "Indirect Member of netgroup" -msgstr "" - msgid "Indirect Member of host-group" msgstr "" -msgid "Indirect Member of role" -msgstr "" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - msgid "Keytab" msgstr "" @@ -3583,45 +4390,30 @@ msgstr "" msgid "Search for hosts without these member of host groups." msgstr "" -msgid "netgroup" -msgstr "" - msgid "Search for hosts with these member of netgroups." msgstr "" msgid "Search for hosts without these member of netgroups." msgstr "" -msgid "role" -msgstr "" - msgid "Search for hosts with these member of roles." msgstr "" msgid "Search for hosts without these member of roles." msgstr "" -msgid "HBAC rule" -msgstr "" - msgid "Search for hosts with these member of HBAC rules." msgstr "" msgid "Search for hosts without these member of HBAC rules." msgstr "" -msgid "sudo rule" -msgstr "" - msgid "Search for hosts with these member of sudo rules." msgstr "" msgid "Search for hosts without these member of sudo rules." msgstr "" -msgid "user" -msgstr "" - msgid "Search for hosts with these enrolled by users." msgstr "" @@ -3773,6 +4565,232 @@ msgstr "" msgid "Display information about a hostgroup." msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +#, fuzzy +msgid "Range name" +msgstr "आदेशाचे नाव " + +msgid "First Posix ID of the range" +msgstr "" + +msgid "Number of IDs in the range" +msgstr "" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +msgid "Range type" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "Delete an ID range." +msgstr "" + +msgid "Search for ranges." +msgstr "" + +msgid "Modify ID range." +msgstr "" + +msgid "Display information about a range." +msgstr "" + msgid "" "\n" "ID Views\n" @@ -3789,12 +4807,6 @@ msgstr "" msgid "Anchor to override" msgstr "" -msgid "Group name" -msgstr "" - -msgid "GID" -msgstr "" - msgid "Group ID Number" msgstr "" @@ -4019,9 +5031,6 @@ msgid "" " ipa krbtpolicy-mod admin --maxlife=3600\n" msgstr "" -msgid "User name" -msgstr "" - msgid "Manage ticket policy for specific user" msgstr "" @@ -4277,9 +5286,6 @@ msgid "" "retrieve and print all attributes from the server. Affects command output." msgstr "" -msgid "Dictionary mapping variable name to value" -msgstr "" - msgid "Total number of variables env (>= count)" msgstr "" @@ -4384,9 +5390,6 @@ msgstr "" msgid "Search for netgroups without these member users." msgstr "" -msgid "group" -msgstr "" - msgid "Search for netgroups with these member groups." msgstr "" @@ -4480,6 +5483,149 @@ msgstr "" msgid "Show the current OTP configuration." msgstr "" +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Manager" +msgstr "" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +msgid "Disabled" +msgstr "" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +msgid "Validity start" +msgstr "" + +msgid "First date/time the token can be used" +msgstr "" + +msgid "Validity end" +msgstr "" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "" + +msgid "Token model (informational only)" +msgstr "" + +msgid "Serial" +msgstr "" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +msgid "Add a new OTP token." +msgstr "" + +#, fuzzy +msgid "(deprecated)" +msgstr "वापरात नसलेले पर्याय" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +msgid "Delete an OTP token." +msgstr "" + +msgid "Search for OTP token." +msgstr "" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +msgid "Modify a OTP token." +msgstr "" + +msgid "Rename the OTP token object" +msgstr "" + +msgid "Display information about an OTP token." +msgstr "" + msgid "" "\n" "YubiKey Tokens\n" @@ -5163,12 +6309,6 @@ msgstr "" msgid "A description of this role-group" msgstr "" -msgid "Member users" -msgstr "" - -msgid "Member groups" -msgstr "" - msgid "Privileges" msgstr "" @@ -5435,9 +6575,6 @@ msgid "" "httpd.keytab\n" msgstr "" -msgid "Principal" -msgstr "" - msgid "Service principal" msgstr "" @@ -6174,9 +7311,6 @@ msgstr "" msgid "Sudo Command Group" msgstr "" -msgid "Group description" -msgstr "" - #, fuzzy msgid "Commands" msgstr "आदेशाचे नाव " @@ -6218,1685 +7352,6 @@ msgstr "" msgid "Display Sudo Command Group." msgstr "" -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -msgid "First name" -msgstr "" - -msgid "Last name" -msgstr "" - -msgid "Full name" -msgstr "" - -msgid "Display name" -msgstr "" - -msgid "Initials" -msgstr "" - -msgid "Kerberos principal" -msgstr "" - -msgid "Kerberos principal expiration" -msgstr "" - -msgid "Email address" -msgstr "" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -msgid "Street address" -msgstr "" - -msgid "City" -msgstr "" - -msgid "State/Province" -msgstr "" - -msgid "ZIP" -msgstr "" - -msgid "Telephone Number" -msgstr "" - -msgid "Mobile Telephone Number" -msgstr "" - -msgid "Pager Number" -msgstr "" - -msgid "Fax Number" -msgstr "" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "" - -msgid "Manager" -msgstr "" - -msgid "Car License" -msgstr "" - -msgid "Account disabled" -msgstr "" - -msgid "User authentication types" -msgstr "" - -msgid "Types of supported user authentication" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "RADIUS proxy configuration" -msgstr "" - -msgid "RADIUS proxy username" -msgstr "" - -msgid "Department Number" -msgstr "" - -msgid "Employee Number" -msgstr "" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -msgid "Member of groups" -msgstr "" - -msgid "Indirect Member of group" -msgstr "" - -msgid "Kerberos keys available" -msgstr "" - -msgid "Add a new user." -msgstr "" - -msgid "Don't create user private group" -msgstr "" - -msgid "Delete a user." -msgstr "" - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -msgid "Search for users." -msgstr "" - -msgid "Self" -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -msgid "Modify a user." -msgstr "" - -msgid "Rename the user object" -msgstr "" - -msgid "Display information about a user." -msgstr "" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "A description of this auto member rule" -msgstr "" - -msgid "Default (fallback) Group" -msgstr "" - -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -msgid "Automember Rule" -msgstr "" - -msgid "Grouping Type" -msgstr "" - -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -msgid "Attribute Key" -msgstr "" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -msgid "Delete an automember rule." -msgstr "" - -msgid "Search for automember rules." -msgstr "" - -msgid "Modify an automember rule." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -msgid "Number of conditions removed" -msgstr "" - -msgid "Display information about an automember rule." -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -msgid "Search for existing certificates." -msgstr "" - -msgid "Match cn attribute in subject" -msgstr "" - -msgid "Reason" -msgstr "" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -msgid "minimum serial number" -msgstr "" - -msgid "maximum serial number" -msgstr "" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -msgid "Serial number" -msgstr "" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -msgid "Submit a certificate signing request." -msgstr "" - -msgid "CSR" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -msgid "Revoke a certificate." -msgstr "" - -msgid "Retrieve an existing certificate." -msgstr "" - -msgid "Output filename" -msgstr "" - -msgid "File to store the certificate in." -msgstr "" - -msgid "Check the status of a certificate signing request." -msgstr "" - -msgid "Request id" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "GID (use this option to set it manually)" -msgstr "" - -msgid "Indirect Member users" -msgstr "" - -msgid "Indirect Member groups" -msgstr "" - -msgid "Create a new group." -msgstr "" - -msgid "Create as a non-POSIX group" -msgstr "" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Add members to a group." -msgstr "" - -msgid "External member" -msgstr "" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -msgid "Delete group." -msgstr "" - -msgid "Detach a managed group from a user." -msgstr "" - -msgid "Search for groups." -msgstr "" - -msgid "search for private groups" -msgstr "" - -msgid "search for POSIX groups" -msgstr "" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -msgid "search for non-POSIX groups" -msgstr "" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "Modify a group." -msgstr "" - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -msgid "Remove members from a group." -msgstr "" - -msgid "Display information about a named group." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -msgid "Target host" -msgstr "" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Warning" -msgstr "" - -msgid "Matched rules" -msgstr "" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -msgid "NetBIOS name" -msgstr "" - -msgid "Domain GUID" -msgstr "" - -msgid "Fallback primary group" -msgstr "" - -#, fuzzy -msgid "Domain name" -msgstr "आदेशाचे नाव " - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -msgid "Active Directory domain administrator" -msgstr "" - -msgid "Active Directory domain administrator's password" -msgstr "" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "Range type" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -msgid "Delete a trust." -msgstr "" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -msgid "Search for trusts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -msgid "Display information about a trust." -msgstr "" - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -#, fuzzy -msgid "Range name" -msgstr "आदेशाचे नाव " - -msgid "First Posix ID of the range" -msgstr "" - -msgid "Number of IDs in the range" -msgstr "" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "Delete an ID range." -msgstr "" - -msgid "Search for ranges." -msgstr "" - -msgid "Modify ID range." -msgstr "" - -msgid "Display information about a range." -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -msgid "Disabled" -msgstr "" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -msgid "Validity start" -msgstr "" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Validity end" -msgstr "" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -msgid "Serial" -msgstr "" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -msgid "Add a new OTP token." -msgstr "" - -#, fuzzy -msgid "(deprecated)" -msgstr "वापरात नसलेले पर्याय" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -msgid "Delete an OTP token." -msgstr "" - -msgid "Search for OTP token." -msgstr "" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -msgid "Modify a OTP token." -msgstr "" - -msgid "Rename the OTP token object" -msgstr "" - -msgid "Display information about an OTP token." -msgstr "" - msgid "" "\n" "Sudo Rules\n" @@ -8109,6 +7564,499 @@ msgstr "" msgid "Display Sudo Rule." msgstr "" +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +msgid "NetBIOS name" +msgstr "" + +msgid "Domain GUID" +msgstr "" + +msgid "Fallback primary group" +msgstr "" + +#, fuzzy +msgid "Domain name" +msgstr "आदेशाचे नाव " + +msgid "Trusted domain partner" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +msgid "Active Directory domain administrator" +msgstr "" + +msgid "Active Directory domain administrator's password" +msgstr "" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +msgid "Delete a trust." +msgstr "" + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +msgid "Search for trusts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +msgid "Display information about a trust." +msgstr "" + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "" + +msgid "Last name" +msgstr "" + +msgid "Full name" +msgstr "" + +msgid "Display name" +msgstr "" + +msgid "Initials" +msgstr "" + +msgid "Kerberos principal" +msgstr "" + +msgid "Kerberos principal expiration" +msgstr "" + +msgid "Email address" +msgstr "" + +msgid "Prompt to set the user password" +msgstr "" + +msgid "Generate a random user password" +msgstr "" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" + +msgid "Street address" +msgstr "" + +msgid "City" +msgstr "" + +msgid "State/Province" +msgstr "" + +msgid "ZIP" +msgstr "" + +msgid "Telephone Number" +msgstr "" + +msgid "Mobile Telephone Number" +msgstr "" + +msgid "Pager Number" +msgstr "" + +msgid "Fax Number" +msgstr "" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "" + +msgid "Car License" +msgstr "" + +msgid "Account disabled" +msgstr "" + +msgid "User authentication types" +msgstr "" + +msgid "Types of supported user authentication" +msgstr "" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "RADIUS proxy configuration" +msgstr "" + +msgid "RADIUS proxy username" +msgstr "" + +msgid "Department Number" +msgstr "" + +msgid "Employee Number" +msgstr "" + +msgid "Employee Type" +msgstr "" + +msgid "Preferred Language" +msgstr "" + +msgid "Kerberos keys available" +msgstr "" + +msgid "Add a new user." +msgstr "" + +msgid "Don't create user private group" +msgstr "" + +msgid "Delete a user." +msgstr "" + +msgid "Disable a user account." +msgstr "" + +msgid "Enable a user account." +msgstr "" + +msgid "Search for users." +msgstr "" + +msgid "Self" +msgstr "" + +msgid "Display user record for current Kerberos principal" +msgstr "" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +msgid "Search for users with these member of HBAC rules." +msgstr "" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +msgid "Modify a user." +msgstr "" + +msgid "Rename the user object" +msgstr "" + +msgid "Display information about a user." +msgstr "" + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + msgid "Time limit of search in seconds (0 is unlimited)" msgstr "" @@ -8226,6 +8174,110 @@ msgstr "" msgid "Display the properties of a CA ACL." msgstr "" +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "Profile ID" +msgstr "" + +msgid "Certificate Profile to use" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +msgid "Profile description" +msgstr "" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +msgid "Search for Certificate Profiles." +msgstr "" + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" msgstr "" @@ -8255,6 +8307,218 @@ msgstr "" msgid "Remove certificates from host entry" msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + msgid "Fallback to AD DC LDAP" msgstr "" @@ -8282,6 +8546,9 @@ msgid "" "to onelevel" msgstr "" +msgid "Remove users that can manage this token." +msgstr "" + msgid "Target DN subtree" msgstr "" @@ -8712,6 +8979,13 @@ msgid "" " " msgstr "" +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + msgid "Preserved user" msgstr "" @@ -9002,332 +9276,6 @@ msgstr "" msgid "Display information about a vault container." msgstr "" -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "Profile ID" -msgstr "" - -msgid "Certificate Profile to use" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -msgid "Profile description" -msgstr "" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -msgid "Search for Certificate Profiles." -msgstr "" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - msgid "Resolve a host name in DNS. (Deprecated)" msgstr "" @@ -11006,6 +10954,192 @@ msgid "" " ipa hostgroup-del baltimore\n" msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + msgid "" "Comma-separated list of objectclasses used to search for user entries in DS" msgstr "" @@ -11312,198 +11446,6 @@ msgstr "" msgid "comma-separated list of sudo commands to remove" msgstr "" -msgid "Active directory domain administrator's password" -msgstr "" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - msgid "" "\n" "Sudo Rules\n" @@ -11545,284 +11487,52 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" -msgid "A dictionary representing an LDAP entry" +msgid "Active directory domain administrator's password" msgstr "" -msgid "A list of LDAP entries" -msgstr "" - -msgid "All commands should at least have a result" +msgid "GECOS field" msgstr "" #, python-format -msgid "%(filename)s: file not found" -msgstr "" +msgid "Enter %(label)s again to verify: " +msgstr "सत्यापित करण्यासाठी आपण पुन्हा %(label)s प्रविष्ट करा:" -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" +msgid "Passwords do not match!" +msgstr "पासवर्ड जुळत नाही!" -msgid "Filename is empty" -msgstr "" +msgid "No matching entries found" +msgstr "कोणतेही जुळणारे नोंदी आढळले" + +msgid "Topic or Command" +msgstr "विषय किंवा आदेश" + +msgid "The topic or command name." +msgstr "विषय किंवा आदेशाचे नाव" + +msgid "Topic commands:" +msgstr "विषय आदेश:" + +msgid "To get command help, use:" +msgstr "आदेशा संबधित मिळवण्यासाठी, वापरा:" + +msgid " ipa --help" +msgstr " ipa --help" + +msgid "Command name" +msgstr "आदेशाचे नाव " + +msgid "Positional arguments" +msgstr "positional वितर्क" #, python-format -msgid "Permission denied: %(file)s" -msgstr "" +msgid "Same as --%s" +msgstr "--%s सारखा" -msgid "empty DNS label" -msgstr "" +msgid "Deprecated options" +msgstr "वापरात नसलेले पर्याय" -msgid "DNS label cannot be longer that 63 characters" -msgstr "" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "" - -msgid "cannot be longer that {} characters" -msgstr "" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "" - -msgid "invalid SSH public key" -msgstr "" - -msgid "options are not allowed" -msgstr "" - -msgid "invalid hostmask" -msgstr "" - -#, fuzzy, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "सर्व्हरवर त्रुटी '%(server)s': %(error)s" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" - -msgid "invalid escape code in domain name" -msgstr "" - -msgid "domain name cannot be longer than 255 characters" -msgstr "" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "" - -msgid "invalid domain name" -msgstr "" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -msgid "invalid IP address format" -msgstr "" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" - -msgid "Additional instructions:" -msgstr "" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, fuzzy, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "सर्व्हरवर त्रुटी '%(server)s': %(error)s" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "" - -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." -msgstr "" +msgid "No file to read" +msgstr "कोणतीही फाइल वाचण्यासाठी नाही " #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" @@ -11832,16 +11542,54 @@ msgstr "" msgid "unknown error %(code)d from %(server)s: %(error)s" msgstr "सर्व्हरवर त्रुटी '%(server)s': %(error)s" +msgid "an internal error has occurred" +msgstr "एक अंतर्गत त्रुटी आली आहे" + +#, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "एक अंतर्गत त्रुटी '%(server)s' वरील सर्व्हर वर आली आहे " + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "अनोळखी आदेश '%(name)s'" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "सर्व्हरवर त्रुटी '%(server)s': %(error)s" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "'%(uri)s' ला जोडणी अपयशी : %(error)s" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "अवैध JSON-RPC विनंती : %(error)s" + #, python-format msgid "error marshalling data for XML-RPC transport: %(error)s" msgstr "" +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "न आढळलेले किंवा अवैध HTTP Referer, %(referer)s" + #, python-format msgid "" "System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" "\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." msgstr "" +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Kerberos त्रुटी: %(major)s/%(minor)s" + +msgid "did not receive Kerberos credentials" +msgstr "Kerberos credentials प्राप्त झाले नाहीत" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "सेवा '%(service)s' Kerberos माहितीकोष आढली नाही" + msgid "No credentials cache found" msgstr "" @@ -12144,6 +11892,192 @@ msgid "" "prevents a trust to '%(conflict)s'" msgstr "" +msgid "Results are truncated, try a more specific search" +msgstr "" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "" + +msgid "Client version. Used to determine if server will accept request." +msgstr "" + +msgid "Additional instructions:" +msgstr "" + +#, python-format +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" + +#, fuzzy, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "सर्व्हरवर त्रुटी '%(server)s': %(error)s" + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "%(line)s" +msgstr "" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "" + +#, python-format +msgid "%(count)d variables" +msgstr "" + +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "" +msgstr[1] "" + +msgid "A dictionary representing an LDAP entry" +msgstr "" + +msgid "A list of LDAP entries" +msgstr "" + +msgid "All commands should at least have a result" +msgstr "" + msgid "incorrect type" msgstr "" @@ -12275,27 +12209,116 @@ msgid "Service principal is required" msgstr "" #, python-format -msgid "%(count)d variables" +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +msgid "any of the configured servers" +msgstr "" + +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" msgstr "" #, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "" -msgstr[1] "" +msgid "Permission denied: %(file)s" +msgstr "" -msgid "Results are truncated, try a more specific search" +msgid "empty DNS label" +msgstr "" + +msgid "DNS label cannot be longer that 63 characters" msgstr "" #, python-format -msgid "Unknown option: %(option)s" +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" msgstr "" -msgid "Client version. Used to determine if server will accept request." +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "" + +msgid "cannot be longer that {} characters" +msgstr "" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "" + +msgid "invalid SSH public key" +msgstr "" + +msgid "options are not allowed" +msgstr "" + +msgid "invalid hostmask" +msgstr "" + +#, fuzzy, python-format +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "सर्व्हरवर त्रुटी '%(server)s': %(error)s" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" msgstr "" #, python-format -msgid "objectclass %s not found" +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +msgid "invalid escape code in domain name" +msgstr "" + +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +msgid "invalid domain name" +msgstr "" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +msgid "invalid IP address format" +msgstr "" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" #, python-format @@ -12314,946 +12337,1242 @@ msgstr "" msgid "Retrieving CA status failed with status %d" msgstr "" +#, python-format +msgid "objectclass %s not found" +msgstr "" + +msgid "Trusting forest" +msgstr "" + +msgid "Trusted forest" +msgstr "" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +msgid "Unknown" +msgstr "" + +msgid "Non-Active Directory domain" +msgstr "" + +msgid "Active Directory domain" +msgstr "" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "" +msgid "Failed to authenticate to CA REST API" +msgstr "" + #, python-format msgid "Replication agreement for %(hostname)s not found" msgstr "" -msgid "Failed to authenticate to CA REST API" +msgid "A list of ACI values" msgstr "" -msgid "One time password commands" +msgid "type, filter, subtree and targetgroup are mutually exclusive" msgstr "" -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" +msgid "ACI prefix is required" msgstr "" msgid "" -"\n" -"IPA server roles\n" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" msgstr "" -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgid "filter and memberof are mutually exclusive" msgstr "" -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" +msgid "group, permission and self are mutually exclusive" msgstr "" -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" - -msgid "server roles" -msgstr "" - -msgid "IPA Server Roles" -msgstr "" - -msgid "IPA Server Role" -msgstr "" - -msgid "IPA server role name" -msgstr "" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" +msgid "One of group, permission or self is required" msgstr "" #, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" +msgid "Group '%s' does not exist" +msgstr "" + +msgid "empty filter" +msgstr "" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "" + +msgid "ACI" +msgstr "" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" msgstr[0] "" msgstr[1] "" -msgid "Include IPA master entries" +#, python-format +msgid "Renamed ACI to \"%(value)s\"" msgstr "" -msgid "roles" +msgid "" +"\n" +"Auto Membership Rule.\n" msgstr "" -msgid "IPA role name" +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" msgstr "" -msgid "Class of Service object used for linking policies with groups" +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" msgstr "" #, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgid "%(otype)s \"%(oname)s\" not found" msgstr "" -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -msgid "password policy" -msgstr "" - -msgid "password policies" -msgstr "" - -msgid "Password Policies" -msgstr "" - -msgid "Password Policy" -msgstr "" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" +#, python-format +msgid "%s is not a valid attribute." msgstr "" msgid "" "\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" +" Add an automember rule.\n" " " msgstr "" #, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "" + +msgid "Auto Membership is not configured" +msgstr "" + msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" +"\n" +" Add conditions to an automember rule.\n" +" " msgstr "" #, python-format -msgid "The following domains do not belong to this realm: %(domains)s" +msgid "Added condition(s) to \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "automount location" +msgstr "" + +msgid "automount locations" +msgstr "" + +msgid "Automount Locations" +msgstr "" + +msgid "Automount Location" +msgstr "" + +#, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "automount map" +msgstr "" + +msgid "automount maps" +msgstr "" + +msgid "Automount Maps" +msgstr "" + +msgid "Automount Map" +msgstr "" + +#, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Automount key object." +msgstr "" + +msgid "automount key" +msgstr "" + +msgid "automount keys" +msgstr "" + +msgid "Automount Keys" +msgstr "" + +msgid "Automount Key" msgstr "" #, python-format msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" msgstr "" #, python-format -msgid "Results should contain primary key attribute only (\"%s\")" +msgid "key named %(key)s already exists" msgstr "" -msgid "Help topic" +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" msgstr "" -msgid "Version" +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." msgstr "" -msgid "Parameters" +#, python-format +msgid "Added automount key \"%(value)s\"" msgstr "" -msgid "Method of" +#, python-format +msgid "Added automount indirect map \"%(value)s\"" msgstr "" -#, fuzzy -msgid "Method name" -msgstr "आदेशाचे नाव " +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Member service groups" +msgstr "" + +msgid "Member HBAC service groups" +msgstr "" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" +msgstr "" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "" #, python-format msgid "%(pkey)s: %(oname)s not found" msgstr "" -msgid "Display information about a command." -msgstr "" - -#, fuzzy -msgid "Search for commands." -msgstr "विषय किंवा आदेश" - -msgid "Return command defaults" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -msgid "Search for classes." -msgstr "" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -msgid "CLI name" -msgstr "आदेशाचे नाव " - -msgid "Confirm (password)" -msgstr "" - -msgid "Default" -msgstr "" - -msgid "Default from" -msgstr "" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -#, fuzzy -msgid "Positional argument" -msgstr "positional वितर्क" - #, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." +msgid "%(oname)s with name \"%(pkey)s\" already exists" msgstr "" #, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command output." -msgstr "" - -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" +msgid "attribute \"%(attribute)s\" not allowed" msgstr "" #, python-format -msgid "Malformed principal: %(error)s" +msgid "these attributes are not allowed: %(attrs)s" msgstr "" -msgid "Add target to a named service delegation." +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" msgstr "" #, python-format msgid "member %s" msgstr "" -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" +#, python-format +msgid "%s to add" msgstr "" #, python-format -msgid "Added service delegation rule \"%(value)s\"" +msgid "%s to remove" msgstr "" #, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation rule" +msgid "Results should contain primary key attribute only (\"%s\")" msgstr "" #, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" msgstr "" msgid "" "\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" msgstr "" msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -msgid "Malformed principal" -msgstr "" - -msgid "{} is required by the IPA master" -msgstr "" - -msgid "service" -msgstr "" - -msgid "services" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." msgstr "" msgid "Principal alias" msgstr "" -msgid "Service principal alias" +msgid "User password expiration" msgstr "" -msgid "Base-64 encoded service certificate" +msgid "SSH public key fingerprint" msgstr "" -msgid "Subject" +msgid "Base-64 encoded user certificate" msgstr "" -msgid "Serial Number" +msgid "Certificate mapping data" msgstr "" -msgid "Serial Number (hex)" +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +#, python-format +msgid "can be at most %(len)d characters" msgstr "" msgid "Issuer" msgstr "" -msgid "Not Before" +msgid "Issuer of the certificate" msgstr "" -msgid "Not After" +msgid "Subject" msgstr "" -msgid "Fingerprint (SHA1)" +msgid "Subject of the certificate" msgstr "" -msgid "Fingerprint (SHA256)" +msgid "cannot have an empty subject" msgstr "" -msgid "Revocation reason" +msgid "cannot specify both subject/issuer and certificate" msgstr "" -msgid "Authentication Indicators" +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" msgstr "" msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" msgstr "" -msgid "NONE value cannot be combined with other PAC types" +msgid "Make multiple ipa calls via one remote procedure call" msgstr "" -msgid "Add a new IPA service." -msgstr "" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "" - -msgid "force principal name even if host not in DNS" -msgstr "" - -msgid "Skip host check" +msgid "must contain a tuple (list, dict)" msgstr "" msgid "" -"force service to be created even when host object does not exist to manage it" +"\n" +"Manage Certificate Authorities\n" +msgstr "" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +msgid "Certificate Authority" +msgstr "" + +msgid "Certificate Authorities" +msgstr "" + +msgid "Name" +msgstr "" + +msgid "Name for referencing the CA" +msgstr "" + +msgid "Description of the purpose of the CA" +msgstr "" + +msgid "Authority ID" +msgstr "" + +msgid "Dogtag Authority ID" +msgstr "" + +msgid "Subject DN" +msgstr "" + +msgid "Subject Distinguished Name" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Issuer Distinguished Name" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +msgid "Certificate chain" +msgstr "" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Search for CAs." msgstr "" #, python-format -msgid "The host '%s' does not exist to add a service to." +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include certificate chain in output" msgstr "" -msgid "Add a new SMB service." +msgid "Display the properties of a CA." msgstr "" -msgid "SMB service NetBIOS name" +msgid "Create a CA." msgstr "" #, python-format -msgid "Deleted service \"%(value)s\"" +msgid "Created CA \"%(value)s\"" msgstr "" #, python-format -msgid "Modified service \"%(value)s\"" +msgid "Insufficient 'add' privilege for entry '%s'." msgstr "" #, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" +msgid "Unrecognized attributes: %(attrs)s" +msgstr "" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "" + +msgid "Delete a CA (must be disabled first)." +msgstr "" + +#, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "" + +msgid "Insufficient privilege to delete a CA." +msgstr "" + +msgid "CA" +msgstr "" + +msgid "IPA CA cannot be deleted" +msgstr "" + +msgid "Must be disabled first" +msgstr "" + +msgid "Modify CA configuration." +msgstr "" + +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "" + +msgid "Insufficient privilege to modify a CA." +msgstr "" + +msgid "Disable a CA." +msgstr "" + +#, python-format +msgid "Disabled CA \"%(value)s\"" +msgstr "" + +msgid "IPA CA cannot be disabled" +msgstr "" + +msgid "Enable a CA." +msgstr "" + +#, python-format +msgid "Enabled CA \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "" + +msgid "CA ACLs" +msgstr "" + +msgid "CA category" +msgstr "" + +msgid "CA category the ACL applies to" +msgstr "" + +msgid "CAs" +msgstr "" + +#, python-format +msgid "Added CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "" + +msgid "default CA ACL can be only disabled" +msgstr "" + +#, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" + +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" msgstr[0] "" msgstr[1] "" #, python-format -msgid "Disabled service \"%(value)s\"" +msgid "Enabled CA ACL \"%(value)s\"" msgstr "" #, python-format -msgid "Added certificates to service principal \"%(value)s\"" +msgid "Disabled CA ACL \"%(value)s\"" msgstr "" #, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to a service" +msgid "%i user or group added." msgstr "" #, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a service" -msgstr "" - -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" -msgstr "" - -#, fuzzy -msgid "command" -msgstr "विषय आदेश:" - -#, fuzzy -msgid "commands" -msgstr "विषय आदेश:" - -msgid "runAs user" -msgstr "" - -msgid "runAs users" -msgstr "" - -msgid "group runAs" -msgstr "" - -msgid "runAs groups" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "commands cannot be added when command category='all'" +msgid "%i users or groups added." msgstr "" msgid "users cannot be added when user category='all'" msgstr "" +#, python-format +msgid "%i user or group removed." +msgstr "" + +#, python-format +msgid "%i users or groups removed." +msgstr "" + +#, python-format +msgid "%i host or hostgroup added." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "" + msgid "hosts cannot be added when host category='all'" msgstr "" -msgid "users cannot be added when runAs user or runAs group category='all'" +#, python-format +msgid "%i host or hostgroup removed." msgstr "" #, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" +msgid "%i hosts or hostgroups removed." msgstr "" #, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" +msgid "%i service added." msgstr "" #, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgid "%i services added." +msgstr "" + +msgid "services cannot be added when service category='all'" +msgstr "" + +#, python-format +msgid "%i service removed." +msgstr "" + +#, python-format +msgid "%i services removed." +msgstr "" + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, python-format +msgid "%i profiles removed." +msgstr "" + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." msgstr "" msgid "pyhbac is not installed." @@ -13470,15 +13789,6 @@ msgstr "" msgid "Name of issuing CA" msgstr "" -msgid "Base-64 encoded certificate." -msgstr "" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - msgid "Subject email address" msgstr "" @@ -13512,7 +13822,16 @@ msgstr "" msgid "Subject Other Name" msgstr "" -msgid "Issuer DN" +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" msgstr "" msgid "Serial number (hex)" @@ -13521,9 +13840,6 @@ msgstr "" msgid "Request status" msgstr "" -msgid "Include certificate chain in output" -msgstr "" - msgid "" "automatically add the principal if it doesn't exist (service principals only)" msgstr "" @@ -13618,6 +13934,9 @@ msgstr "" msgid "Revoked" msgstr "" +msgid "Revocation reason" +msgstr "" + msgid "" "Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " "revocation reason details. " @@ -13635,6 +13954,9 @@ msgstr "" msgid "7 is not a valid revocation reason" msgstr "" +msgid "Status of the certificate" +msgstr "" + msgid "Results should contain primary key attribute only (\"certificate\")" msgstr "" @@ -13865,7 +14187,110 @@ msgid_plural "%(count)s users matched" msgstr[0] "" msgstr[1] "" -msgid "Base-64 encoded user certificate" +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +msgid "Certificate Profile" +msgstr "" + +msgid "Certificate Profiles" +msgstr "" + +msgid "Profile configuration" +msgstr "" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." msgstr "" msgid "" @@ -13938,6 +14363,9 @@ msgstr "" msgid "Maximum hostname length" msgstr "" +msgid "Enable adding subids to new users" +msgstr "" + msgid "IPA masters" msgstr "" @@ -14010,6 +14438,21 @@ msgstr "" msgid "DNSec key master" msgstr "" +msgid "Setup SID configuration" +msgstr "" + +msgid "New users and groups automatically get a SID assigned" +msgstr "" + +msgid "Add SIDs" +msgstr "" + +msgid "Add SIDs for existing users and groups" +msgstr "" + +msgid "NetBIOS name of the IPA domain" +msgstr "" + msgid "Empty domain is not allowed" msgstr "" @@ -14025,6 +14468,21 @@ msgstr "" msgid "Disabled domain '%(domain)s' is not allowed" msgstr "" +msgid "not allowed to enable SID generation" +msgstr "" + +msgid "" +"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " +"allowed. Empty string is not allowed." +msgstr "" + +#, fuzzy +msgid "Failed to call DBus" +msgstr "कोणतीही फाइल वाचण्यासाठी नाही " + +msgid "Configuration of SID failed. See details in the error log" +msgstr "" + msgid "The group doesn't exist" msgstr "" @@ -14049,55 +14507,1611 @@ msgstr "सर्व्हरवर त्रुटी '%(server)s': %(error)s" msgid "SELinux user map default user not in order list" msgstr "" +#, python-format +msgid "You cannot specify %s without the --enable-sid option" +msgstr "" + +msgid "delegation" +msgstr "" + +msgid "delegations" +msgstr "" + +#, fuzzy +msgid "Delegations" +msgstr "वापरात नसलेले पर्याय" + +msgid "Delegation" +msgstr "" + +#, python-format +msgid "Added delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "" +msgstr[1] "" + msgid "" "\n" -"Groups of Sudo Commands\n" +"Domain Name System (DNS)\n" +msgstr "" + +msgid "" "\n" -"Manage groups of Sudo Commands.\n" +"Manage DNS zone and resource records.\n" +msgstr "" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" + +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "invalid IP network format" +msgstr "" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "" + +msgid "invalid address format" +msgstr "" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" + +msgid "algorithm value: allowed interval 0-255" +msgstr "" + +msgid "flags value: allowed interval 0-255" +msgstr "" + +msgid "iterations value: allowed interval 0-65535" +msgstr "" + +#, python-format +msgid "salt value: %(err)s" +msgstr "" + +msgid "invalid domain-name: not fully qualified" +msgstr "" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" + +#, python-format +msgid "" +"No answers could be found in the specified lifetime for DNS reverse zone " +"%(revdns)s" +msgstr "" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" + +#, python-format +msgid "%s record" +msgstr "" + +#, python-format +msgid "Raw %s records" +msgstr "" + +#, python-format +msgid "%s Record" +msgstr "" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "" + +msgid "Invalid number of parts!" +msgstr "" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "" + +msgid "Create reverse" +msgstr "" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "" + +msgid "Exchanger" +msgstr "" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" + +msgid "Priority (order)" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Relative weight for entries with the same priority." +msgstr "" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Target Uniform Resource Identifier" +msgstr "" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "" + +msgid "Managedby permission" +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "cannot be used when a zone is specified" +msgstr "" + +msgid "Only one zone type is allowed per zone name" +msgstr "" + +#, python-format +msgid "Added system permission \"%(value)s\"" +msgstr "" + +#, python-format +msgid "permission \"%(value)s\" already exists" +msgstr "" + +#, python-format +msgid "Removed system permission \"%(value)s\"" +msgstr "" + +msgid "DNS zone" +msgstr "" + +msgid "DNS zones" +msgstr "" + +msgid "DNS Zones" +msgstr "" + +msgid "DNS Zone" +msgstr "" + +msgid "Default time to live" +msgstr "" + +msgid "Time to live for records without explicit TTL definition" +msgstr "" + +msgid "setting Authoritative nameserver" +msgstr "" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "" + +msgid "" +msgstr "" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" + +#, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "" + +msgid "is required" +msgstr "" + +#, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "" + +msgid "DNS resource record" +msgstr "" + +msgid "DNS resource records" +msgstr "" + +msgid "DNS Resource Records" +msgstr "" + +msgid "DNS Resource Record" +msgstr "" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" + +msgid "only master zones can contain records" +msgstr "" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" + +msgid "DNS zone root record cannot be renamed" +msgstr "" + +msgid "DNS records can be only updated one at a time" +msgstr "" + +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Found '%(value)s'" +msgstr "" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "" + +msgid "DNS configuration options" +msgstr "" + +msgid "DNS Global Configuration" +msgstr "" + +msgid "IPA DNS version" +msgstr "" + +msgid "List of IPA masters configured as DNS servers" +msgstr "" + +msgid "IPA server configured as DNSSec key master" +msgstr "" + +msgid "Global DNS configuration is empty" +msgstr "" + +msgid "DNS forward zone" +msgstr "" + +msgid "DNS forward zones" +msgstr "" + +msgid "DNS Forward Zones" +msgstr "" + +msgid "DNS Forward Zone" +msgstr "" + +msgid "Please specify forwarders." +msgstr "" + +#, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "" + +msgid "IPA DNS records" +msgstr "" + +msgid "IPA location records" +msgstr "" + +msgid "Update location and IPA server DNS records" +msgstr "" + +msgid "Result of the command" +msgstr "" + +msgid "Dry run" +msgstr "" + +msgid "Do not update records only return expected records" +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +msgid "DNS Servers" +msgstr "" + +msgid "DNS Server" +msgstr "" + +msgid "DNS Server name" +msgstr "" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +msgid "Search for DNS servers." +msgstr "" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "" + +msgid "Delete a DNS server" +msgstr "" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" "\n" "EXAMPLES:\n" "\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" "\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" "\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" "\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" "\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" msgstr "" -msgid "sudo command group" +msgid "groups" msgstr "" -msgid "sudo command groups" +msgid "User Group" msgstr "" #, python-format -msgid "Added Sudo Command Group \"%(value)s\"" +msgid "Added group \"%(value)s\"" +msgstr "" + +msgid "gid cannot be set for external group" +msgstr "" + +msgid "attribute \"gidNumber\" not allowed with --nonposix" msgstr "" #, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" +msgid "Deleted group \"%(value)s\"" +msgstr "" + +msgid "privileged group" msgstr "" #, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" +msgid "Modified group \"%(value)s\"" msgstr "" #, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" msgstr[0] "" msgstr[1] "" +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" +msgstr "" + +msgid "HBAC Services" +msgstr "" + +msgid "HBAC Service Groups" +msgstr "" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "" + +msgid "Access time" +msgstr "" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "" + +msgid "HBAC Service" +msgstr "" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC service group" +msgstr "" + +msgid "HBAC service groups" +msgstr "" + +msgid "HBAC Service Group" +msgstr "" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Access granted: %s" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host" +msgstr "" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Serial Number" +msgstr "" + +msgid "Serial Number (hex)" +msgstr "" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + msgid "" "\n" "Groups of hosts.\n" @@ -14177,294 +16191,501 @@ msgstr "" msgid "Remove users that can manage members of this hostgroup." msgstr "" -#, python-format msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" msgstr "" msgid "" "\n" -"Set a user's password\n" +"ID ranges\n" "\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" "\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" +"There are two type of ID ranges which are both handled by this utility:\n" "\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" "\n" -"EXAMPLES:\n" +"Both types have the following attributes in common:\n" "\n" -" To reset your own password:\n" -" ipa passwd\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" "\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"and an ID range of a trusted domain may set\n" +" - auto-private-groups: [true|false|hybrid] automatic creation of private " +"groups\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" "\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" msgstr "" -msgid "The OTP if the user has a token configured" +msgid "ID Ranges" msgstr "" -#, python-format -msgid "Changed password for \"%(value)s\"" +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "Auto private groups" +msgstr "" + +msgid "Auto creation of private groups, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" msgstr "" msgid "" "\n" -"Permissions\n" -msgstr "" - -msgid "" +" Add new ID range.\n" "\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -msgid "" +" To add a new ID range you always have to specify\n" "\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" +" --base-id\n" +" --range-size\n" "\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" +" Additionally\n" "\n" -"A permission is made up of a number of different parts:\n" +" --rid-base\n" +" --secondary-rid-base\n" "\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" +" may be given for a new ID range for the local domain while\n" "\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" +" --auto-private-groups\n" "\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" +" may be given for a new ID range for a trusted AD domain and\n" "\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" +" --rid-base\n" +" --dom-sid\n" "\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -msgid "" +" must be given to add a new range for a trusted AD domain.\n" "\n" -"Managed permissions\n" +msgstr "" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" msgstr "" msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" msgstr "" msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" msgstr "" msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." msgstr "" msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" +"private-groups is specified" msgstr "" -msgid "must be enclosed in parentheses" +msgid "Options secondary-rid-base and rid-base must be used together" msgstr "" -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -#, fuzzy, python-format -msgid "Deprecated; use %s" -msgstr "वापरात नसलेले पर्याय" - -msgid "ACI" -msgstr "" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, python-format -msgid "Entry %s not found" -msgstr "" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgid "Primary RID range and secondary RID range cannot overlap" msgstr "" msgid "" -"cannot specify full target filter and extra target filter simultaneously" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." msgstr "" #, python-format -msgid "option was renamed; use %s" +msgid "Deleted ID range \"%(value)s\"" msgstr "" #, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, python-format -msgid "%s: group not found" -msgstr "" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" -msgstr "" - -msgid "Bad search filter" -msgstr "" - -#, python-format -msgid "Entry %s does not exist" -msgstr "" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, python-format -msgid "Added permission \"%(value)s\"" -msgstr "" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "" - -msgid "cannot delete managed permissions" -msgstr "" - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "" - -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" msgstr[0] "" msgstr[1] "" -#, python-brace-format -msgid "{role}: role not found" +msgid "" +"Modify ID range.\n" +"\n" msgstr "" -#, python-brace-format -msgid "{attr}: no such attribute" +#, python-format +msgid "Modified ID range \"%(value)s\"" msgstr "" msgid "" -"\n" -"Session Support for IPA\n" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" msgstr "" +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +msgid "ID View" +msgstr "" + +msgid "system ID View" +msgstr "" + +msgid "ID Views" +msgstr "" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +msgid "Hosts the view applies to" +msgstr "" + +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "" + +msgid "Delete an ID override." +msgstr "" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "" + +msgid "Modify an ID override." +msgstr "" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + msgid "Internationalization messages" msgstr "" @@ -14480,9 +16701,6 @@ msgstr "" msgid "Are you sure you want to rebuild auto membership?" msgstr "" -msgid "Automember rebuild membership task completed" -msgstr "" - msgid "Are you sure you want to proceed with the action?" msgstr "" @@ -15372,9 +17590,6 @@ msgstr "" msgid "Affiliation Changed" msgstr "" -msgid "CA" -msgstr "" - msgid "CA Compromise" msgstr "" @@ -15585,9 +17800,6 @@ msgstr "" msgid "Add certificate mapping data" msgstr "" -msgid "Certificate mapping data" -msgstr "" - msgid "Configuration string" msgstr "" @@ -15604,6 +17816,9 @@ msgstr "" msgid "Remove certificate identity mapping rules" msgstr "" +msgid "Version" +msgstr "" + msgid "Group Options" msgstr "" @@ -16317,9 +18532,6 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "" -msgid "Host" -msgstr "" - msgid "Netgroup Settings" msgstr "" @@ -16438,6 +18650,9 @@ msgstr "" msgid "Add password policy" msgstr "" +msgid "Password Policy" +msgstr "" + msgid "Remove password policies" msgstr "" @@ -16465,9 +18680,6 @@ msgstr "" msgid "Remove ID ranges" msgstr "" -msgid "Active Directory domain" -msgstr "" - msgid "Active Directory domain with POSIX attributes" msgstr "" @@ -16492,6 +18704,9 @@ msgstr "" msgid "Remove RADIUS servers" msgstr "" +msgid "Realm Domains" +msgstr "" + msgid "Check DNS" msgstr "" @@ -16664,6 +18879,33 @@ msgstr "" msgid "User categories" msgstr "" +msgid "Add subid" +msgstr "" + +msgid "Assigned subids" +msgstr "" + +msgid "DNA remaining" +msgstr "" + +msgid "SubGID range size" +msgstr "" + +msgid "SubGID range start" +msgstr "" + +msgid "SubUID range size" +msgstr "" + +msgid "SubUID range start" +msgstr "" + +msgid "Remaining subids" +msgstr "" + +msgid "Subordinate ID Statistics" +msgstr "" + msgid "Add sudo command" msgstr "" @@ -16949,6 +19191,14 @@ msgstr "" msgid "Add user '${primary_key}' into sudo rules" msgstr "" +msgid "Auto assign subordinate ids" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to auto-assign a subordinate id to user ${object}?" +msgstr "" + msgid "Contact Settings" msgstr "" @@ -17403,9 +19653,6 @@ msgstr "" msgid "Authentication" msgstr "" -msgid "Automember" -msgstr "" - msgid "Automount" msgstr "" @@ -17430,6 +19677,9 @@ msgstr "" msgid "Role-Based Access Control" msgstr "" +msgid "Subordinate IDs" +msgstr "" + msgid "Sudo" msgstr "" @@ -17541,318 +19791,10 @@ msgstr "" msgid "Unsupported value" msgstr "" -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -msgid "invalid port number" -msgstr "" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" -msgstr "" - #, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -#, python-brace-format msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Access granted: %s" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." msgstr "" msgid "kerberos ticket policy settings" @@ -18020,6 +19962,1769 @@ msgstr "" msgid "Servers in location" msgstr "" +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +msgid "netgroups" +msgstr "" + +msgid "Netgroup" +msgstr "" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +msgid "URI" +msgstr "" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "" + +msgid "cannot be empty" +msgstr "" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"If the user authentication method is set to password+OTP, the user should\n" +"pass the --otp option when resetting the password.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To reset your own password when password+OTP is set as authentication " +"method:\n" +" ipa passwd --otp\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +msgid "The OTP if the user has a token configured" +msgstr "" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Permissions\n" +msgstr "" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +msgid "" +"\n" +"Managed permissions\n" +msgstr "" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "must be enclosed in parentheses" +msgstr "" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "" + +#, fuzzy, python-format +msgid "Deprecated; use %s" +msgstr "वापरात नसलेले पर्याय" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, python-format +msgid "Entry %s not found" +msgstr "" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, python-format +msgid "option was renamed; use %s" +msgstr "" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, python-format +msgid "%s: group not found" +msgstr "" + +msgid "target and targetgroup are mutually exclusive" +msgstr "" + +msgid "subtree and type are mutually exclusive" +msgstr "" + +msgid "Bad search filter" +msgstr "" + +#, python-format +msgid "Entry %s does not exist" +msgstr "" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, python-format +msgid "Added permission \"%(value)s\"" +msgstr "" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "" + +msgid "cannot delete managed permissions" +msgstr "" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "" + +#, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +msgid "invalid port number" +msgstr "" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "Role" +msgstr "" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"API Schema\n" +msgstr "" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +msgid "Documentation" +msgstr "" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +msgid "Help topic" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +#, fuzzy +msgid "Method name" +msgstr "आदेशाचे नाव " + +msgid "Display information about a command." +msgstr "" + +#, fuzzy +msgid "Search for commands." +msgstr "विषय किंवा आदेश" + +msgid "Return command defaults" +msgstr "" + +#, python-brace-format +msgid "{oname}: {command_name} not found" +msgstr "" + +msgid "Display information about a class." +msgstr "" + +msgid "Search for classes." +msgstr "" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +msgid "CLI name" +msgstr "आदेशाचे नाव " + +msgid "Confirm (password)" +msgstr "" + +msgid "Default" +msgstr "" + +msgid "Default from" +msgstr "" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +#, fuzzy +msgid "Positional argument" +msgstr "positional वितर्क" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command output." +msgstr "" + +msgid "Search for command outputs." +msgstr "" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "self service permission" +msgstr "" + +msgid "self service permissions" +msgstr "" + +msgid "Self Service Permissions" +msgstr "" + +msgid "Self Service Permission" +msgstr "" + +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +msgid "SELinux User Map rule" +msgstr "" + +msgid "SELinux User Map rules" +msgstr "" + +msgid "SELinux User Maps" +msgstr "" + +msgid "SELinux User Map" +msgstr "" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "" + +#, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +msgid "server roles" +msgstr "" + +msgid "IPA Server Roles" +msgstr "" + +msgid "IPA Server Role" +msgstr "" + +msgid "IPA server role name" +msgstr "" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "IPA role name" +msgstr "" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +#, python-format +msgid "authentication indicators not allowed in service \"%s\"" +msgstr "" + +msgid "Malformed principal" +msgstr "" + +msgid "{} is required by the IPA master" +msgstr "" + +msgid "service" +msgstr "" + +msgid "services" +msgstr "" + +msgid "Service principal alias" +msgstr "" + +msgid "Base-64 encoded service certificate" +msgstr "" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +msgid "Add a new IPA service." +msgstr "" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "" + +msgid "force principal name even if host not in DNS" +msgstr "" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +msgid "Add a new SMB service." +msgstr "" + +msgid "SMB service NetBIOS name" +msgstr "" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to a service" +msgstr "" + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a service" +msgstr "" + +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Subordinate ids\n" +"\n" +"Manage subordinate user and group ids for users\n" +"\n" +"EXAMPLES:\n" +"\n" +" Auto-assign a subordinate id range to current user\n" +" ipa subid-generate\n" +"\n" +" Auto-assign a subordinate id range to user alice:\n" +" ipa subid-generate --owner=alice\n" +"\n" +" Find subordinate ids for user alice:\n" +" ipa subid-find --owner=alice\n" +"\n" +" Match entry by any subordinate uid in range:\n" +" ipa subid-match --subuid=2147483649\n" +msgstr "" + +msgid "Subordinate id" +msgstr "" + +msgid "Subordinate ids" +msgstr "" + +msgid "Subordinate id description" +msgstr "" + +msgid "Owning user of subordinate id entry" +msgstr "" + +msgid "Start value for subordinate user ID (subuid) range" +msgstr "" + +msgid "Subordinate user ID count" +msgstr "" + +msgid "Start value for subordinate group ID (subgid) range" +msgstr "" + +msgid "Subordinate group ID count" +msgstr "" + +#, python-format +msgid "" +"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." +msgstr "" + +#, python-format +msgid "'%(dn)s is not a valid user" +msgstr "" + +msgid "subgidnumber must be equal to subuidnumber" +msgstr "" + +msgid "Add a new subordinate id." +msgstr "" + +#, python-format +msgid "Added subordinate id \"%(value)s\"" +msgstr "" + +msgid "Delete a subordinate id." +msgstr "" + +#, python-format +msgid "Deleted subordinate id \"%(value)s\"" +msgstr "" + +msgid "Modify a subordinate id." +msgstr "" + +#, python-format +msgid "Modified subordinate id \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "Search for subordinate id." +msgstr "विषय किंवा आदेश" + +#, python-format +msgid "%(count)d subordinate id matched" +msgid_plural "%(count)d subordinate ids matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about a subordinate id." +msgstr "" + +msgid "Generate and auto-assign subuid and subgid range to user entry" +msgstr "" + +msgid "Match users by any subordinate uid in their range" +msgstr "" + +msgid "SubUID match" +msgstr "" + +msgid "Match value for subordinate user ID" +msgstr "" + +msgid "Subordinate id statistics" +msgstr "" + +#, python-format +msgid "%(remaining)i remaining subordinate id ranges" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +#, fuzzy +msgid "sudo command" +msgstr "विषय आदेश:" + +#, fuzzy +msgid "sudo commands" +msgstr "विषय आदेश:" + +#, fuzzy +msgid "Sudo Commands" +msgstr "विषय आदेश:" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + msgid "" "\n" "Topology\n" @@ -18236,1005 +21941,6 @@ msgid "" " replication agreements\n" msgstr "" -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -#, fuzzy -msgid "sudo command" -msgstr "विषय आदेश:" - -#, fuzzy -msgid "sudo commands" -msgstr "विषय आदेश:" - -#, fuzzy -msgid "Sudo Commands" -msgstr "विषय आदेश:" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -msgid "Self Service Permissions" -msgstr "" - -msgid "Self Service Permission" -msgstr "" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - -msgid "A list of ACI values" -msgstr "" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -msgid "ACI prefix is required" -msgstr "" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "groups" -msgstr "" - -msgid "User Group" -msgstr "" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "" - -msgid "privileged group" -msgstr "" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -msgid "Not a managed group" -msgstr "" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -msgid "automount location" -msgstr "" - -msgid "automount locations" -msgstr "" - -msgid "Automount Locations" -msgstr "" - -msgid "Automount Location" -msgstr "" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "automount map" -msgstr "" - -msgid "automount maps" -msgstr "" - -msgid "Automount Maps" -msgstr "" - -msgid "Automount Map" -msgstr "" - -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Automount key object." -msgstr "" - -msgid "automount key" -msgstr "" - -msgid "automount keys" -msgstr "" - -msgid "Automount Keys" -msgstr "" - -msgid "Automount Key" -msgstr "" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, python-format -msgid "key named %(key)s already exists" -msgstr "" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" -msgstr[1] "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -msgid "Delete an ID override." -msgstr "" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -msgid "Modify an ID override." -msgstr "" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -msgid "CA category" -msgstr "" - -msgid "CA category the ACL applies to" -msgstr "" - -msgid "CAs" -msgstr "" - -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, python-format -msgid "%i users or groups added." -msgstr "" - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, python-format -msgid "%i service added." -msgstr "" - -#, python-format -msgid "%i services added." -msgstr "" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - msgid "" "\n" "Cross-realm trusts\n" @@ -19400,12 +22106,6 @@ msgid "" " " msgstr "" -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - msgid "Type of trusted domain ID range, one of allowed values" msgstr "" @@ -19642,737 +22342,9 @@ msgid "" "itself" msgstr "" -msgid "" -"\n" -"DNS server configuration\n" +msgid "users" msgstr "" -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "" - -msgid "DNS servers" -msgstr "" - -msgid "DNS Servers" -msgstr "" - -msgid "DNS Server" -msgstr "" - -msgid "DNS Server name" -msgstr "" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "" - -msgid "Search for DNS servers." -msgstr "" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "" - -msgid "Delete a DNS server" -msgstr "" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "" - -msgid "HBAC Services" -msgstr "" - -msgid "HBAC Service" -msgstr "" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -msgid "HBAC service group" -msgstr "" - -msgid "HBAC service groups" -msgstr "" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" -msgstr "" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -#, fuzzy -msgid "Delegations" -msgstr "वापरात नसलेले पर्याय" - -msgid "Delegation" -msgstr "" - -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Role" -msgstr "" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -msgid "netgroups" -msgstr "" - -msgid "Netgroup" -msgstr "" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - #, python-format msgid "Added user \"%(value)s\"" msgstr "" @@ -20392,12 +22364,6 @@ msgstr "" msgid "Modified user \"%(value)s\"" msgstr "" -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" -msgstr[1] "" - #, python-format msgid "Undeleted user account \"%(value)s\"" msgstr "" @@ -20493,12 +22459,6 @@ msgstr "" msgid "Removed certificates from user \"%(value)s\"" msgstr "" -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - msgid "Add new principal alias to the user entry" msgstr "" @@ -20513,532 +22473,6 @@ msgstr "" msgid "Removed aliases from user \"%(value)s\"" msgstr "" -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" -msgstr "" - -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -msgid "SELinux User Maps" -msgstr "" - -msgid "SELinux User Map" -msgstr "" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "" - -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "" - msgid "" "\n" "Vaults\n" @@ -21381,107 +22815,156 @@ msgstr "" msgid "Checks if any of the servers has the KRA service enabled" msgstr "" -msgid "Member service groups" -msgstr "" - -msgid "Member HBAC service groups" -msgstr "" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" +msgid "operation not defined" msgstr "" #, python-format -msgid "container entry (%(container)s) not found" +msgid "not allowed to perform operation: %s" msgstr "" -#, python-format -msgid "%(parent)s: %(oname)s not found" +msgid "No such virtual command" msgstr "" -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "Class of Service object used for linking policies with groups" msgstr "" #, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +msgid "password policy" +msgstr "" + +msgid "password policies" +msgstr "" + +msgid "Password Policies" +msgstr "" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +msgid "User check" +msgstr "" + +msgid "Check if the password contains the username" +msgstr "" + msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" msgstr "" -#, python-format -msgid "added attribute value to entry %(value)s" +msgid "Maximum password life must be equal to or greater than the minimum." msgstr "" -#, python-format -msgid "removed attribute values from entry %(value)s" +msgid "cannot delete global password policy" msgstr "" -msgid "one or more values to remove" +msgid "priority cannot be set on global policy" msgstr "" msgid "" @@ -21628,6 +23111,10 @@ msgstr "" msgid "Ignoring topology connectivity errors." msgstr "" +#, fuzzy, python-format +msgid "Failed to remove server from security domain: %s" +msgstr "सर्व्हरवर त्रुटी '%(server)s': %(error)s" + msgid "Server has already been deleted" msgstr "" @@ -21665,1389 +23152,188 @@ msgstr "" msgid "" "\n" -"Manage Certificate Authorities\n" +"Sudo Rules\n" msgstr "" msgid "" "\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" msgstr "" msgid "" "\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" msgstr "" msgid "" "\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" +"Each option needs to be added separately and no validation is done whether\n" +"the option is known by sudo or is in a valid format. Environment variables\n" +"also need to be set individually. For example env_keep=\"FOO BAR\" in " +"sudoers\n" +"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" +"+=BAR.\n" msgstr "" msgid "" "\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" msgstr "" msgid "" "\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" msgstr "" msgid "" "\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" msgstr "" msgid "" "\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" msgstr "" msgid "" "\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" "\n" -" ipa ca-del puppet\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" msgstr "" -msgid "Certificate Authority" +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" msgstr "" -msgid "Certificate Authorities" +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" msgstr "" -msgid "Name for referencing the CA" +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" msgstr "" -msgid "Description of the purpose of the CA" +msgid "" +"\n" +" Set multiple default Sudo options:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate' --" +"sudooption mail_badpass\n" msgstr "" -msgid "Authority ID" +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" msgstr "" -msgid "Dogtag Authority ID" +msgid "this option has been deprecated." msgstr "" -msgid "Subject DN" +msgid "sudo rules" msgstr "" -msgid "Subject Distinguished Name" +msgid "Sudo Rules" msgstr "" -msgid "Issuer Distinguished Name" -msgstr "" - -msgid "Search for CAs." +msgid "Sudo Rule" msgstr "" #, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +#, fuzzy +msgid "command" +msgstr "विषय आदेश:" + +#, fuzzy +msgid "commands" +msgstr "विषय आदेश:" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +msgid "group runAs" +msgstr "" + +msgid "runAs groups" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" msgstr[0] "" msgstr[1] "" -msgid "Display the properties of a CA." +msgid "commands cannot be added when command category='all'" msgstr "" -msgid "Create a CA." +msgid "users cannot be added when runAs user or runAs group category='all'" msgstr "" #, python-format -msgid "Created CA \"%(value)s\"" +msgid "RunAsUser does not accept '%(name)s' as a user name" msgstr "" #, python-format -msgid "Insufficient 'add' privilege for entry '%s'." +msgid "RunAsUser does not accept '%(name)s' as a group name" msgstr "" #, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -msgid "IPA CA cannot be deleted" -msgstr "" - -msgid "Must be disabled first" -msgstr "" - -msgid "Modify CA configuration." -msgstr "" - -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -msgid "Disable a CA." -msgstr "" - -#, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "" - -msgid "IPA CA cannot be disabled" -msgstr "" - -msgid "Enable a CA." -msgstr "" - -#, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -msgid "URI" -msgstr "" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "" - -msgid "cannot be empty" -msgstr "" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "invalid IP network format" -msgstr "" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -msgid "invalid address format" -msgstr "" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -msgid "flags value: allowed interval 0-255" -msgstr "" - -msgid "iterations value: allowed interval 0-65535" -msgstr "" - -#, python-format -msgid "salt value: %(err)s" -msgstr "" - -msgid "invalid domain-name: not fully qualified" -msgstr "" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" - -#, python-format -msgid "%s record" -msgstr "" - -#, python-format -msgid "Raw %s records" -msgstr "" - -#, python-format -msgid "%s Record" -msgstr "" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -msgid "Invalid number of parts!" -msgstr "" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -msgid "Create reverse" -msgstr "" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" - -msgid "Exchanger" -msgstr "" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -msgid "Priority (order)" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Relative weight for entries with the same priority." -msgstr "" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Target Uniform Resource Identifier" -msgstr "" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" - -msgid "Managedby permission" -msgstr "" - -msgid "cannot be used when a zone is specified" -msgstr "" - -msgid "Only one zone type is allowed per zone name" -msgstr "" - -#, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "" - -#, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "" - -#, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "" - -msgid "DNS zone" -msgstr "" - -msgid "DNS zones" -msgstr "" - -msgid "DNS Zones" -msgstr "" - -msgid "DNS Zone" -msgstr "" - -msgid "Default time to live" -msgstr "" - -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -msgid "setting Authoritative nameserver" -msgstr "" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -msgid "" -msgstr "" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "" - -msgid "is required" -msgstr "" - -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "" - -msgid "DNS resource record" -msgstr "" - -msgid "DNS resource records" -msgstr "" - -msgid "DNS Resource Records" -msgstr "" - -msgid "DNS Resource Record" -msgstr "" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -msgid "only master zones can contain records" -msgstr "" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -msgid "DNS zone root record cannot be renamed" -msgstr "" - -msgid "DNS records can be only updated one at a time" -msgstr "" - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Found '%(value)s'" -msgstr "" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "" - -msgid "DNS configuration options" -msgstr "" - -msgid "DNS Global Configuration" -msgstr "" - -msgid "IPA DNS version" -msgstr "" - -msgid "List of IPA masters configured as DNS servers" -msgstr "" - -msgid "IPA server configured as DNSSec key master" -msgstr "" - -msgid "Global DNS configuration is empty" -msgstr "" - -msgid "DNS forward zone" -msgstr "" - -msgid "DNS forward zones" -msgstr "" - -msgid "DNS Forward Zones" -msgstr "" - -msgid "DNS Forward Zone" -msgstr "" - -msgid "Please specify forwarders." -msgstr "" - -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "" - -msgid "IPA DNS records" -msgstr "" - -msgid "IPA location records" -msgstr "" - -msgid "Update location and IPA server DNS records" -msgstr "" - -msgid "Result of the command" -msgstr "" - -msgid "Dry run" -msgstr "" - -msgid "Do not update records only return expected records" -msgstr "" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -msgid "Certificate Profile" -msgstr "" - -msgid "Certificate Profiles" -msgstr "" - -msgid "Profile configuration" -msgstr "" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -msgid "must be enabled only on a single master" +msgid "RunAsGroup does not accept '%(name)s' as a group name" msgstr "" msgid "Request must be a dict" @@ -23071,6 +23357,17 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + #, python-format msgid "" "\n" @@ -23090,34 +23387,6 @@ msgstr "" msgid "Topology does not allow server %(server)s to replicate with servers:" msgstr "" -msgid "Trusting forest" -msgstr "" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Unknown" -msgstr "" - -msgid "Non-Active Directory domain" -msgstr "" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - msgid "" "\n" "Classes to manage trust joins using DCE-RPC calls\n" @@ -23276,33 +23545,6 @@ msgstr "" msgid "must be at least 1" msgstr "" -#, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -msgid "Unable to initialize STARTTLS session\n" -msgstr "" - msgid "Out of memory\n" msgstr "" @@ -23330,3 +23572,30 @@ msgstr "" msgid "Bad or unsupported salt type.\n" msgstr "" + +#, c-format +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "" + +msgid "" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" +msgstr "" + +msgid "Unable to initialize STARTTLS session\n" +msgstr "" diff --git a/po/nl.po b/po/nl.po index 37fac21bf..a27fff8cb 100644 --- a/po/nl.po +++ b/po/nl.po @@ -14,9 +14,419 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" -msgid "Passwords do not match!" +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "" + +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "" + +#, c-format +msgid "out of memory\n" +msgstr "" + +#, c-format +msgid "read error\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "" + +#, c-format +msgid "principal not found\n" +msgstr "" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "realm not found\n" +msgstr "" + +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" +msgstr "" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "Kerberos Service Principal Name" +msgstr "" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +msgid "Realm name" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "" + +#, c-format +msgid "Out of memory \n" +msgstr "" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "" + +msgid "Simple bind failed\n" +msgstr "" + +msgid "SASL Bind failed\n" +msgstr "" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "" + +#, c-format +msgid "Failed to get result: %s\n" +msgstr "" + +#, c-format +msgid "Timeout exceeded." +msgstr "" + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "" + +#, c-format +msgid "Missing reply control!\n" +msgstr "" + +#, c-format +msgid "Out of Memory!\n" +msgstr "" + +#, c-format +msgid "Failed to create control!\n" +msgstr "" + +#, c-format +msgid "Failed to bind to server!\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab!\n" +msgstr "" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "" + +msgid "Failed to decode control reply!\n" +msgstr "" + +#, fuzzy, c-format +msgid "Passwords do not match!\n" msgstr "Wachtwoorden komen niet overeen!" +#, c-format +msgid "Failed to open config file %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "" + +msgid "Failed to resolve symlink to keytab.\n" +msgstr "" + +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" + +msgid "Print as little as possible" +msgstr "" + +msgid "Output only on errors" +msgstr "" + +msgid "Output debug info" +msgstr "" + +msgid "Contact this specific KDC Server" +msgstr "" + +msgid "Server Name" +msgstr "" + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" + +msgid "Encryption types to request" +msgstr "" + +msgid "Comma separated encryption types list" +msgstr "" + +msgid "Show the list of permitted encryption types and exit" +msgstr "" + +msgid "Permitted Encryption Types" +msgstr "" + +msgid "Asks for a non-random password to use for the principal" +msgstr "" + +msgid "LDAP DN" +msgstr "" + +msgid "DN to bind as if not using kerberos" +msgstr "" + +msgid "LDAP password" +msgstr "" + +msgid "password to use if not using kerberos" +msgstr "" + +msgid "Prompt for LDAP password" +msgstr "" + +msgid "Path to the IPA CA certificate" +msgstr "" + +msgid "IPA CA certificate" +msgstr "" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" + +msgid "url" +msgstr "" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" + +msgid "GSSAPI|EXTERNAL" +msgstr "" + +msgid "Retrieve current keys without changing them" +msgstr "" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +msgid "Enter LDAP password" +msgstr "" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "" + +#, c-format +msgid "DNS discovery for domain %s\n" +msgstr "" + +#, c-format +msgid "Discovered server %s\n" +msgstr "" + +#, c-format +msgid "Using discovered server %s\n" +msgstr "" + +#, c-format +msgid "DNS Discovery failed\n" +msgstr "" + +#, c-format +msgid "Using server from config %s\n" +msgstr "" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "" + +#, c-format +msgid "Using provided server %s\n" +msgstr "" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "" + +msgid "New Principal Password" +msgstr "" + +msgid "Verify Principal Password" +msgstr "" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" + +#, c-format +msgid "Failed to create key material\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "" + #, c-format msgid "Out of memory!\n" msgstr "" @@ -41,9 +451,6 @@ msgstr "" msgid "Unable to enable SSL in LDAP\n" msgstr "" -msgid "SASL Bind failed\n" -msgstr "" - #, c-format msgid "Search for %1$s on rootdse failed with error %2$d\n" msgstr "" @@ -269,389 +676,6 @@ msgstr "" msgid "The hostname must not be: %s\n" msgstr "" -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "" - -#, c-format -msgid "Out of memory \n" -msgstr "" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "" - -msgid "Simple bind failed\n" -msgstr "" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -#, c-format -msgid "Out of Memory!\n" -msgstr "" - -#, c-format -msgid "Failed to create control!\n" -msgstr "" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "" - -msgid "Failed to decode control reply!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Passwords do not match!\n" -msgstr "Wachtwoorden komen niet overeen!" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "" - -msgid "Failed to resolve symlink to keytab.\n" -msgstr "" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Output only on errors" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -msgid "Server Name" -msgstr "" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Encryption types to request" -msgstr "" - -msgid "Comma separated encryption types list" -msgstr "" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -msgid "Permitted Encryption Types" -msgstr "" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -msgid "LDAP DN" -msgstr "" - -msgid "DN to bind as if not using kerberos" -msgstr "" - -msgid "LDAP password" -msgstr "" - -msgid "password to use if not using kerberos" -msgstr "" - -msgid "Prompt for LDAP password" -msgstr "" - -msgid "Path to the IPA CA certificate" -msgstr "" - -msgid "IPA CA certificate" -msgstr "" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -msgid "Enter LDAP password" -msgstr "" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -msgid "New Principal Password" -msgstr "" - -msgid "Verify Principal Password" -msgstr "" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, c-format -msgid "Failed to create key material\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -msgid "Realm name" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "" - -#, c-format -msgid "out of memory\n" -msgstr "" - -#, c-format -msgid "read error\n" -msgstr "" - msgid "Failed members" msgstr "" @@ -766,132 +790,34 @@ msgstr "" msgid "Skipped %(key)s" msgstr "" +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +msgid "Unrevoked" +msgstr "" + +msgid "Error" +msgstr "" + +msgid "Input filename" +msgstr "" + +msgid "File to load the certificate from." +msgstr "" + +msgid "cannot specify both raw certificate and file" +msgstr "" + msgid "Input file" msgstr "" msgid "File to load the certificate from" msgstr "" -msgid "cannot specify both raw certificate and file" -msgstr "" - #, python-format msgid "Profile configuration stored in file '%(file)s'" msgstr "" -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -msgid "Servers details:" -msgstr "" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "Add a new YubiKey OTP token." -msgstr "" - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -msgid "Maximum number of agreements per replica" -msgstr "" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -msgid "Delete a user" -msgstr "" - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - msgid "Split DNS record to parts" msgstr "" @@ -956,6 +882,131 @@ msgstr "" msgid "file to store DNS records in nsupdate format" msgstr "" +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "" + +msgid "Servers details:" +msgstr "" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "" + +msgid "User ID" +msgstr "" + +msgid "Password" +msgstr "" + +msgid "First Code" +msgstr "" + +msgid "Second Code" +msgstr "" + +msgid "Token ID" +msgstr "" + +msgid "python-yubico is not installed." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" + +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "Add a new YubiKey OTP token." +msgstr "" + +msgid "YubiKey slot" +msgstr "" + +msgid "No free YubiKey slot!" +msgstr "" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "" + +msgid "Topology is disconnected" +msgstr "" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "" + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "" + +msgid "Maximum number of agreements per replica" +msgstr "" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "" + +msgid "Delete a user" +msgstr "" + +msgid "preserve and no-preserve cannot be both set" +msgstr "" + #, python-format msgid "Cannot read file '%(filename)s': %(exc)s" msgstr "" @@ -1075,47 +1126,20 @@ msgstr "" msgid "Missing vault private key" msgstr "" -msgid "Write certificate (chain if --chain used) to file" +#, python-format +msgid "Enabled Sudo Rule \"%s\"" msgstr "" -msgid "Unrevoked" +#, python-format +msgid "Disabled Sudo Rule \"%s\"" msgstr "" -msgid "Error" +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" msgstr "" -msgid "Input filename" -msgstr "" - -msgid "File to load the certificate from." -msgstr "" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -msgid "User ID" -msgstr "" - -msgid "Password" -msgstr "" - -msgid "First Code" -msgstr "" - -msgid "Second Code" -msgstr "" - -msgid "Token ID" +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" msgstr "" msgid "" @@ -1387,6 +1411,243 @@ msgstr "" msgid "Location of the ACI" msgstr "" +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Description" +msgstr "" + +msgid "A description of this auto member rule" +msgstr "" + +msgid "Default (fallback) Group" +msgstr "" + +msgid "Default group for entries to land" +msgstr "" + +msgid "Add an automember rule." +msgstr "" + +msgid "Automember Rule" +msgstr "" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +msgid "Grouping Type" +msgstr "" + +msgid "Grouping to which the rule applies" +msgstr "" + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +msgid "Exclusive Regex" +msgstr "" + +msgid "Attribute Key" +msgstr "" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +msgid "Number of conditions added" +msgstr "" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +msgid "Display information about the default (fallback) automember groups." +msgstr "" + +msgid "Delete an automember rule." +msgstr "" + +msgid "List of deletions that failed" +msgstr "" + +msgid "Search for automember rules." +msgstr "" + +msgid "Modify an automember rule." +msgstr "" + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +msgid "Rights" +msgstr "" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Users" +msgstr "" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Hosts" +msgstr "" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +msgid "Conditions that could not be removed" +msgstr "" + +msgid "Number of conditions removed" +msgstr "" + +msgid "Display information about an automember rule." +msgstr "" + msgid "" "\n" "Automount\n" @@ -1518,31 +1779,15 @@ msgstr "" msgid "Automount map name." msgstr "" -msgid "Description" -msgstr "" - msgid "Create a new automount key." msgstr "" -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - msgid "Delete an automount key." msgstr "" msgid "Continuous mode: Don't stop on errors." msgstr "" -msgid "List of deletions that failed" -msgstr "" - msgid "Search for an automount key." msgstr "" @@ -1561,19 +1806,6 @@ msgstr "" msgid "Modify an automount key." msgstr "" -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "Rights" -msgstr "" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - msgid "New mount information" msgstr "" @@ -1668,6 +1900,184 @@ msgstr "" msgid "Nested Methods to execute" msgstr "" +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +msgid "Search for existing certificates." +msgstr "" + +msgid "Match cn attribute in subject" +msgstr "" + +msgid "Reason" +msgstr "" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "" + +msgid "minimum serial number" +msgstr "" + +msgid "maximum serial number" +msgstr "" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Maximum number of certs returned" +msgstr "" + +msgid "Take a revoked certificate off hold." +msgstr "" + +msgid "Serial number" +msgstr "" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +msgid "Submit a certificate signing request." +msgstr "" + +msgid "CSR" +msgstr "" + +msgid "Principal" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +msgid "Dictionary mapping variable name to value" +msgstr "" + +msgid "Revoke a certificate." +msgstr "" + +msgid "Retrieve an existing certificate." +msgstr "" + +msgid "Output filename" +msgstr "" + +msgid "File to store the certificate in." +msgstr "" + +msgid "Check the status of a certificate signing request." +msgstr "" + +msgid "Request id" +msgstr "" + msgid "" "\n" "Server configuration\n" @@ -2926,6 +3336,306 @@ msgstr "" msgid "Display information about a DNS zone (SOA record)." msgstr "" +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "Group name" +msgstr "" + +msgid "Group description" +msgstr "" + +msgid "GID" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "" + +msgid "Member users" +msgstr "" + +msgid "Member groups" +msgstr "" + +msgid "Member of groups" +msgstr "" + +msgid "Roles" +msgstr "" + +msgid "Member of netgroups" +msgstr "" + +msgid "Member of Sudo rule" +msgstr "" + +msgid "Member of HBAC rule" +msgstr "" + +msgid "Indirect Member users" +msgstr "" + +msgid "Indirect Member groups" +msgstr "" + +msgid "Indirect Member of group" +msgstr "" + +msgid "Indirect Member of netgroup" +msgstr "" + +msgid "Indirect Member of role" +msgstr "" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +msgid "Create a new group." +msgstr "" + +msgid "Create as a non-POSIX group" +msgstr "" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +msgid "Add members to a group." +msgstr "" + +msgid "External member" +msgstr "" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +msgid "member user" +msgstr "" + +msgid "users to add" +msgstr "" + +msgid "member group" +msgstr "" + +msgid "groups to add" +msgstr "" + +msgid "Members that could not be added" +msgstr "" + +msgid "Number of members added" +msgstr "" + +msgid "Delete group." +msgstr "" + +msgid "Detach a managed group from a user." +msgstr "" + +msgid "Search for groups." +msgstr "" + +msgid "search for private groups" +msgstr "" + +msgid "search for POSIX groups" +msgstr "" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +msgid "search for non-POSIX groups" +msgstr "" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "user" +msgstr "" + +msgid "Search for groups with these member users." +msgstr "" + +msgid "Search for groups without these member users." +msgstr "" + +msgid "group" +msgstr "" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +msgid "netgroup" +msgstr "" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +msgid "HBAC rule" +msgstr "" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +msgid "Modify a group." +msgstr "" + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +msgid "Remove members from a group." +msgstr "" + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "" + +msgid "Number of members removed" +msgstr "" + +msgid "Display information about a named group." +msgstr "" + msgid "" "\n" "Host-based access control\n" @@ -3006,15 +3716,9 @@ msgstr "" msgid "Enabled" msgstr "" -msgid "Users" -msgstr "" - msgid "User Groups" msgstr "" -msgid "Hosts" -msgstr "" - msgid "Host Groups" msgstr "" @@ -3030,9 +3734,6 @@ msgstr "" msgid "Create a new HBAC rule." msgstr "" -msgid "Suppress processing of membership attributes." -msgstr "" - msgid "Add target hosts and hostgroups to an HBAC rule." msgstr "" @@ -3048,12 +3749,6 @@ msgstr "" msgid "host groups to add" msgstr "" -msgid "Members that could not be added" -msgstr "" - -msgid "Number of members added" -msgstr "" - msgid "Add services to an HBAC rule." msgstr "" @@ -3072,18 +3767,6 @@ msgstr "" msgid "Add users and groups to an HBAC rule." msgstr "" -msgid "member user" -msgstr "" - -msgid "users to add" -msgstr "" - -msgid "member group" -msgstr "" - -msgid "groups to add" -msgstr "" - msgid "Delete an HBAC rule." msgstr "" @@ -3108,12 +3791,6 @@ msgstr "" msgid "host groups to remove" msgstr "" -msgid "Members that could not be removed" -msgstr "" - -msgid "Number of members removed" -msgstr "" - msgid "Remove service and service groups from an HBAC rule." msgstr "" @@ -3126,12 +3803,6 @@ msgstr "" msgid "Remove users and groups from an HBAC rule." msgstr "" -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - msgid "Display the properties of an HBAC rule." msgstr "" @@ -3240,6 +3911,242 @@ msgstr "" msgid "Display information about an HBAC service group." msgstr "" +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +msgid "User name" +msgstr "" + +msgid "Target host" +msgstr "" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +msgid "Warning" +msgstr "" + +msgid "Matched rules" +msgstr "" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + msgid "" "\n" "Hosts/Machines\n" @@ -3387,33 +4294,9 @@ msgstr "" msgid "Member of host-groups" msgstr "" -msgid "Roles" -msgstr "" - -msgid "Member of netgroups" -msgstr "" - -msgid "Member of Sudo rule" -msgstr "" - -msgid "Member of HBAC rule" -msgstr "" - -msgid "Indirect Member of netgroup" -msgstr "" - msgid "Indirect Member of host-group" msgstr "" -msgid "Indirect Member of role" -msgstr "" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - msgid "Keytab" msgstr "" @@ -3503,45 +4386,30 @@ msgstr "" msgid "Search for hosts without these member of host groups." msgstr "" -msgid "netgroup" -msgstr "" - msgid "Search for hosts with these member of netgroups." msgstr "" msgid "Search for hosts without these member of netgroups." msgstr "" -msgid "role" -msgstr "" - msgid "Search for hosts with these member of roles." msgstr "" msgid "Search for hosts without these member of roles." msgstr "" -msgid "HBAC rule" -msgstr "" - msgid "Search for hosts with these member of HBAC rules." msgstr "" msgid "Search for hosts without these member of HBAC rules." msgstr "" -msgid "sudo rule" -msgstr "" - msgid "Search for hosts with these member of sudo rules." msgstr "" msgid "Search for hosts without these member of sudo rules." msgstr "" -msgid "user" -msgstr "" - msgid "Search for hosts with these enrolled by users." msgstr "" @@ -3693,6 +4561,231 @@ msgstr "" msgid "Display information about a hostgroup." msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "Range name" +msgstr "" + +msgid "First Posix ID of the range" +msgstr "" + +msgid "Number of IDs in the range" +msgstr "" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +msgid "Range type" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "Delete an ID range." +msgstr "" + +msgid "Search for ranges." +msgstr "" + +msgid "Modify ID range." +msgstr "" + +msgid "Display information about a range." +msgstr "" + msgid "" "\n" "ID Views\n" @@ -3709,12 +4802,6 @@ msgstr "" msgid "Anchor to override" msgstr "" -msgid "Group name" -msgstr "" - -msgid "GID" -msgstr "" - msgid "Group ID Number" msgstr "" @@ -3939,9 +5026,6 @@ msgid "" " ipa krbtpolicy-mod admin --maxlife=3600\n" msgstr "" -msgid "User name" -msgstr "" - msgid "Manage ticket policy for specific user" msgstr "" @@ -4197,9 +5281,6 @@ msgid "" "retrieve and print all attributes from the server. Affects command output." msgstr "" -msgid "Dictionary mapping variable name to value" -msgstr "" - msgid "Total number of variables env (>= count)" msgstr "" @@ -4303,9 +5384,6 @@ msgstr "" msgid "Search for netgroups without these member users." msgstr "" -msgid "group" -msgstr "" - msgid "Search for netgroups with these member groups." msgstr "" @@ -4399,6 +5477,148 @@ msgstr "" msgid "Show the current OTP configuration." msgstr "" +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Manager" +msgstr "" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +msgid "Disabled" +msgstr "" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +msgid "Validity start" +msgstr "" + +msgid "First date/time the token can be used" +msgstr "" + +msgid "Validity end" +msgstr "" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "" + +msgid "Token model (informational only)" +msgstr "" + +msgid "Serial" +msgstr "" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +msgid "Add a new OTP token." +msgstr "" + +msgid "(deprecated)" +msgstr "" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +msgid "Delete an OTP token." +msgstr "" + +msgid "Search for OTP token." +msgstr "" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +msgid "Modify a OTP token." +msgstr "" + +msgid "Rename the OTP token object" +msgstr "" + +msgid "Display information about an OTP token." +msgstr "" + msgid "" "\n" "YubiKey Tokens\n" @@ -5079,12 +6299,6 @@ msgstr "" msgid "A description of this role-group" msgstr "" -msgid "Member users" -msgstr "" - -msgid "Member groups" -msgstr "" - msgid "Privileges" msgstr "" @@ -5351,9 +6565,6 @@ msgid "" "httpd.keytab\n" msgstr "" -msgid "Principal" -msgstr "" - msgid "Service principal" msgstr "" @@ -6088,9 +7299,6 @@ msgstr "" msgid "Sudo Command Group" msgstr "" -msgid "Group description" -msgstr "" - msgid "Commands" msgstr "" @@ -6131,1682 +7339,6 @@ msgstr "" msgid "Display Sudo Command Group." msgstr "" -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -msgid "First name" -msgstr "" - -msgid "Last name" -msgstr "" - -msgid "Full name" -msgstr "" - -msgid "Display name" -msgstr "" - -msgid "Initials" -msgstr "" - -msgid "Kerberos principal" -msgstr "" - -msgid "Kerberos principal expiration" -msgstr "" - -msgid "Email address" -msgstr "" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -msgid "Street address" -msgstr "" - -msgid "City" -msgstr "" - -msgid "State/Province" -msgstr "" - -msgid "ZIP" -msgstr "" - -msgid "Telephone Number" -msgstr "" - -msgid "Mobile Telephone Number" -msgstr "" - -msgid "Pager Number" -msgstr "" - -msgid "Fax Number" -msgstr "" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "" - -msgid "Manager" -msgstr "" - -msgid "Car License" -msgstr "" - -msgid "Account disabled" -msgstr "" - -msgid "User authentication types" -msgstr "" - -msgid "Types of supported user authentication" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "RADIUS proxy configuration" -msgstr "" - -msgid "RADIUS proxy username" -msgstr "" - -msgid "Department Number" -msgstr "" - -msgid "Employee Number" -msgstr "" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -msgid "Member of groups" -msgstr "" - -msgid "Indirect Member of group" -msgstr "" - -msgid "Kerberos keys available" -msgstr "" - -msgid "Add a new user." -msgstr "" - -msgid "Don't create user private group" -msgstr "" - -msgid "Delete a user." -msgstr "" - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -msgid "Search for users." -msgstr "" - -msgid "Self" -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -msgid "Modify a user." -msgstr "" - -msgid "Rename the user object" -msgstr "" - -msgid "Display information about a user." -msgstr "" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "A description of this auto member rule" -msgstr "" - -msgid "Default (fallback) Group" -msgstr "" - -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -msgid "Automember Rule" -msgstr "" - -msgid "Grouping Type" -msgstr "" - -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -msgid "Attribute Key" -msgstr "" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -msgid "Delete an automember rule." -msgstr "" - -msgid "Search for automember rules." -msgstr "" - -msgid "Modify an automember rule." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -msgid "Number of conditions removed" -msgstr "" - -msgid "Display information about an automember rule." -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -msgid "Search for existing certificates." -msgstr "" - -msgid "Match cn attribute in subject" -msgstr "" - -msgid "Reason" -msgstr "" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -msgid "minimum serial number" -msgstr "" - -msgid "maximum serial number" -msgstr "" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -msgid "Serial number" -msgstr "" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -msgid "Submit a certificate signing request." -msgstr "" - -msgid "CSR" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -msgid "Revoke a certificate." -msgstr "" - -msgid "Retrieve an existing certificate." -msgstr "" - -msgid "Output filename" -msgstr "" - -msgid "File to store the certificate in." -msgstr "" - -msgid "Check the status of a certificate signing request." -msgstr "" - -msgid "Request id" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "GID (use this option to set it manually)" -msgstr "" - -msgid "Indirect Member users" -msgstr "" - -msgid "Indirect Member groups" -msgstr "" - -msgid "Create a new group." -msgstr "" - -msgid "Create as a non-POSIX group" -msgstr "" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Add members to a group." -msgstr "" - -msgid "External member" -msgstr "" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -msgid "Delete group." -msgstr "" - -msgid "Detach a managed group from a user." -msgstr "" - -msgid "Search for groups." -msgstr "" - -msgid "search for private groups" -msgstr "" - -msgid "search for POSIX groups" -msgstr "" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -msgid "search for non-POSIX groups" -msgstr "" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "Modify a group." -msgstr "" - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -msgid "Remove members from a group." -msgstr "" - -msgid "Display information about a named group." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -msgid "Target host" -msgstr "" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Warning" -msgstr "" - -msgid "Matched rules" -msgstr "" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -msgid "NetBIOS name" -msgstr "" - -msgid "Domain GUID" -msgstr "" - -msgid "Fallback primary group" -msgstr "" - -msgid "Domain name" -msgstr "" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -msgid "Active Directory domain administrator" -msgstr "" - -msgid "Active Directory domain administrator's password" -msgstr "" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "Range type" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -msgid "Delete a trust." -msgstr "" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -msgid "Search for trusts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -msgid "Display information about a trust." -msgstr "" - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "Range name" -msgstr "" - -msgid "First Posix ID of the range" -msgstr "" - -msgid "Number of IDs in the range" -msgstr "" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "Delete an ID range." -msgstr "" - -msgid "Search for ranges." -msgstr "" - -msgid "Modify ID range." -msgstr "" - -msgid "Display information about a range." -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -msgid "Disabled" -msgstr "" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -msgid "Validity start" -msgstr "" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Validity end" -msgstr "" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -msgid "Serial" -msgstr "" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -msgid "Add a new OTP token." -msgstr "" - -msgid "(deprecated)" -msgstr "" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -msgid "Delete an OTP token." -msgstr "" - -msgid "Search for OTP token." -msgstr "" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -msgid "Modify a OTP token." -msgstr "" - -msgid "Rename the OTP token object" -msgstr "" - -msgid "Display information about an OTP token." -msgstr "" - msgid "" "\n" "Sudo Rules\n" @@ -8017,6 +7549,498 @@ msgstr "" msgid "Display Sudo Rule." msgstr "" +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +msgid "NetBIOS name" +msgstr "" + +msgid "Domain GUID" +msgstr "" + +msgid "Fallback primary group" +msgstr "" + +msgid "Domain name" +msgstr "" + +msgid "Trusted domain partner" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +msgid "Active Directory domain administrator" +msgstr "" + +msgid "Active Directory domain administrator's password" +msgstr "" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +msgid "Delete a trust." +msgstr "" + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +msgid "Search for trusts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +msgid "Display information about a trust." +msgstr "" + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "" + +msgid "Last name" +msgstr "" + +msgid "Full name" +msgstr "" + +msgid "Display name" +msgstr "" + +msgid "Initials" +msgstr "" + +msgid "Kerberos principal" +msgstr "" + +msgid "Kerberos principal expiration" +msgstr "" + +msgid "Email address" +msgstr "" + +msgid "Prompt to set the user password" +msgstr "" + +msgid "Generate a random user password" +msgstr "" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" + +msgid "Street address" +msgstr "" + +msgid "City" +msgstr "" + +msgid "State/Province" +msgstr "" + +msgid "ZIP" +msgstr "" + +msgid "Telephone Number" +msgstr "" + +msgid "Mobile Telephone Number" +msgstr "" + +msgid "Pager Number" +msgstr "" + +msgid "Fax Number" +msgstr "" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "" + +msgid "Car License" +msgstr "" + +msgid "Account disabled" +msgstr "" + +msgid "User authentication types" +msgstr "" + +msgid "Types of supported user authentication" +msgstr "" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "RADIUS proxy configuration" +msgstr "" + +msgid "RADIUS proxy username" +msgstr "" + +msgid "Department Number" +msgstr "" + +msgid "Employee Number" +msgstr "" + +msgid "Employee Type" +msgstr "" + +msgid "Preferred Language" +msgstr "" + +msgid "Kerberos keys available" +msgstr "" + +msgid "Add a new user." +msgstr "" + +msgid "Don't create user private group" +msgstr "" + +msgid "Delete a user." +msgstr "" + +msgid "Disable a user account." +msgstr "" + +msgid "Enable a user account." +msgstr "" + +msgid "Search for users." +msgstr "" + +msgid "Self" +msgstr "" + +msgid "Display user record for current Kerberos principal" +msgstr "" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +msgid "Search for users with these member of HBAC rules." +msgstr "" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +msgid "Modify a user." +msgstr "" + +msgid "Rename the user object" +msgstr "" + +msgid "Display information about a user." +msgstr "" + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + msgid "Time limit of search in seconds (0 is unlimited)" msgstr "" @@ -8133,6 +8157,110 @@ msgstr "" msgid "Display the properties of a CA ACL." msgstr "" +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "Profile ID" +msgstr "" + +msgid "Certificate Profile to use" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +msgid "Profile description" +msgstr "" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +msgid "Search for Certificate Profiles." +msgstr "" + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" msgstr "" @@ -8162,6 +8290,218 @@ msgstr "" msgid "Remove certificates from host entry" msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + msgid "Fallback to AD DC LDAP" msgstr "" @@ -8189,6 +8529,9 @@ msgid "" "to onelevel" msgstr "" +msgid "Remove users that can manage this token." +msgstr "" + msgid "Target DN subtree" msgstr "" @@ -8619,6 +8962,13 @@ msgid "" " " msgstr "" +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + msgid "Preserved user" msgstr "" @@ -8909,332 +9259,6 @@ msgstr "" msgid "Display information about a vault container." msgstr "" -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "Profile ID" -msgstr "" - -msgid "Certificate Profile to use" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -msgid "Profile description" -msgstr "" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -msgid "Search for Certificate Profiles." -msgstr "" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - msgid "Resolve a host name in DNS. (Deprecated)" msgstr "" @@ -10913,6 +10937,192 @@ msgid "" " ipa hostgroup-del baltimore\n" msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + msgid "" "Comma-separated list of objectclasses used to search for user entries in DS" msgstr "" @@ -11219,198 +11429,6 @@ msgstr "" msgid "comma-separated list of sudo commands to remove" msgstr "" -msgid "Active directory domain administrator's password" -msgstr "" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - msgid "" "\n" "Sudo Rules\n" @@ -11452,19 +11470,19 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" -msgid "A dictionary representing an LDAP entry" +msgid "Active directory domain administrator's password" msgstr "" -msgid "A list of LDAP entries" -msgstr "" - -msgid "All commands should at least have a result" +msgid "GECOS field" msgstr "" #, python-format msgid "Enter %(label)s again to verify: " msgstr "" +msgid "Passwords do not match!" +msgstr "Wachtwoorden komen niet overeen!" + msgid "No matching entries found" msgstr "" @@ -11499,276 +11517,6 @@ msgstr "" msgid "No file to read" msgstr "" -#, python-format -msgid "%(filename)s: file not found" -msgstr "" - -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -msgid "Filename is empty" -msgstr "" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "" - -msgid "empty DNS label" -msgstr "" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "" - -msgid "cannot be longer that {} characters" -msgstr "" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "" - -msgid "invalid SSH public key" -msgstr "" - -msgid "options are not allowed" -msgstr "" - -msgid "invalid hostmask" -msgstr "" - -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" - -msgid "invalid escape code in domain name" -msgstr "" - -msgid "domain name cannot be longer than 255 characters" -msgstr "" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "" - -msgid "invalid domain name" -msgstr "" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -msgid "invalid IP address format" -msgstr "" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" - -msgid "Additional instructions:" -msgstr "" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "" - -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." -msgstr "" - #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" @@ -12126,6 +11874,192 @@ msgid "" "prevents a trust to '%(conflict)s'" msgstr "" +msgid "Results are truncated, try a more specific search" +msgstr "" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "" + +msgid "Client version. Used to determine if server will accept request." +msgstr "" + +msgid "Additional instructions:" +msgstr "" + +#, python-format +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" + +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "%(line)s" +msgstr "" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "" + +#, python-format +msgid "%(count)d variables" +msgstr "" + +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "" +msgstr[1] "" + +msgid "A dictionary representing an LDAP entry" +msgstr "" + +msgid "A list of LDAP entries" +msgstr "" + +msgid "All commands should at least have a result" +msgstr "" + msgid "incorrect type" msgstr "" @@ -12257,27 +12191,116 @@ msgid "Service principal is required" msgstr "" #, python-format -msgid "%(count)d variables" +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +msgid "any of the configured servers" +msgstr "" + +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" msgstr "" #, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "" -msgstr[1] "" +msgid "Permission denied: %(file)s" +msgstr "" -msgid "Results are truncated, try a more specific search" +msgid "empty DNS label" +msgstr "" + +msgid "DNS label cannot be longer that 63 characters" msgstr "" #, python-format -msgid "Unknown option: %(option)s" +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" msgstr "" -msgid "Client version. Used to determine if server will accept request." +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "" + +msgid "cannot be longer that {} characters" +msgstr "" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "" + +msgid "invalid SSH public key" +msgstr "" + +msgid "options are not allowed" +msgstr "" + +msgid "invalid hostmask" msgstr "" #, python-format -msgid "objectclass %s not found" +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +msgid "invalid escape code in domain name" +msgstr "" + +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +msgid "invalid domain name" +msgstr "" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +msgid "invalid IP address format" +msgstr "" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" #, python-format @@ -12296,940 +12319,1242 @@ msgstr "" msgid "Retrieving CA status failed with status %d" msgstr "" +#, python-format +msgid "objectclass %s not found" +msgstr "" + +msgid "Trusting forest" +msgstr "" + +msgid "Trusted forest" +msgstr "" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +msgid "Unknown" +msgstr "" + +msgid "Non-Active Directory domain" +msgstr "" + +msgid "Active Directory domain" +msgstr "" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "" +msgid "Failed to authenticate to CA REST API" +msgstr "" + #, python-format msgid "Replication agreement for %(hostname)s not found" msgstr "" -msgid "Failed to authenticate to CA REST API" +msgid "A list of ACI values" msgstr "" -msgid "One time password commands" +msgid "type, filter, subtree and targetgroup are mutually exclusive" msgstr "" -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" +msgid "ACI prefix is required" msgstr "" msgid "" -"\n" -"IPA server roles\n" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" msgstr "" -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgid "filter and memberof are mutually exclusive" msgstr "" -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" +msgid "group, permission and self are mutually exclusive" msgstr "" -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" - -msgid "server roles" -msgstr "" - -msgid "IPA Server Roles" -msgstr "" - -msgid "IPA Server Role" -msgstr "" - -msgid "IPA server role name" -msgstr "" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" +msgid "One of group, permission or self is required" msgstr "" #, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" +msgid "Group '%s' does not exist" +msgstr "" + +msgid "empty filter" +msgstr "" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "" + +msgid "ACI" +msgstr "" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" msgstr[0] "" msgstr[1] "" -msgid "Include IPA master entries" +#, python-format +msgid "Renamed ACI to \"%(value)s\"" msgstr "" -msgid "roles" +msgid "" +"\n" +"Auto Membership Rule.\n" msgstr "" -msgid "IPA role name" +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" msgstr "" -msgid "Class of Service object used for linking policies with groups" +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" msgstr "" #, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgid "%(otype)s \"%(oname)s\" not found" msgstr "" -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -msgid "password policy" -msgstr "" - -msgid "password policies" -msgstr "" - -msgid "Password Policies" -msgstr "" - -msgid "Password Policy" -msgstr "" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" +#, python-format +msgid "%s is not a valid attribute." msgstr "" msgid "" "\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" +" Add an automember rule.\n" " " msgstr "" #, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "" + +msgid "Auto Membership is not configured" +msgstr "" + msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" +"\n" +" Add conditions to an automember rule.\n" +" " msgstr "" #, python-format -msgid "The following domains do not belong to this realm: %(domains)s" +msgid "Added condition(s) to \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "automount location" +msgstr "" + +msgid "automount locations" +msgstr "" + +msgid "Automount Locations" +msgstr "" + +msgid "Automount Location" +msgstr "" + +#, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "automount map" +msgstr "" + +msgid "automount maps" +msgstr "" + +msgid "Automount Maps" +msgstr "" + +msgid "Automount Map" +msgstr "" + +#, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Automount key object." +msgstr "" + +msgid "automount key" +msgstr "" + +msgid "automount keys" +msgstr "" + +msgid "Automount Keys" +msgstr "" + +msgid "Automount Key" msgstr "" #, python-format msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" msgstr "" #, python-format -msgid "Results should contain primary key attribute only (\"%s\")" +msgid "key named %(key)s already exists" msgstr "" -msgid "Help topic" +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" msgstr "" -msgid "Version" +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." msgstr "" -msgid "Parameters" +#, python-format +msgid "Added automount key \"%(value)s\"" msgstr "" -msgid "Method of" +#, python-format +msgid "Added automount indirect map \"%(value)s\"" msgstr "" -msgid "Method name" +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Member service groups" +msgstr "" + +msgid "Member HBAC service groups" +msgstr "" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" +msgstr "" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "" + +#, python-format +msgid "%(parent)s: %(oname)s not found" msgstr "" #, python-format msgid "%(pkey)s: %(oname)s not found" msgstr "" -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -msgid "Search for classes." -msgstr "" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -msgid "CLI name" -msgstr "" - -msgid "Confirm (password)" -msgstr "" - -msgid "Default" -msgstr "" - -msgid "Default from" -msgstr "" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" msgstr "" #, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." +msgid "attribute \"%(attribute)s\" not allowed" msgstr "" #, python-format -msgid "%(command_name)s: %(oname)s not found" +msgid "these attributes are not allowed: %(attrs)s" msgstr "" -msgid "Display information about a command output." +msgid "attribute is not configurable" msgstr "" -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" +msgid "No such attribute on this entry" msgstr "" #, python-format -msgid "Malformed principal: %(error)s" +msgid "Rename the %(ldap_obj_name)s object" msgstr "" -msgid "Add target to a named service delegation." +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" msgstr "" #, python-format msgid "member %s" msgstr "" -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" +#, python-format +msgid "%s to add" msgstr "" #, python-format -msgid "Added service delegation rule \"%(value)s\"" +msgid "%s to remove" msgstr "" #, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation rule" +msgid "Results should contain primary key attribute only (\"%s\")" msgstr "" #, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" msgstr "" msgid "" "\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" msgstr "" msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -msgid "Malformed principal" -msgstr "" - -msgid "{} is required by the IPA master" -msgstr "" - -msgid "service" -msgstr "" - -msgid "services" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." msgstr "" msgid "Principal alias" msgstr "" -msgid "Service principal alias" +msgid "User password expiration" msgstr "" -msgid "Base-64 encoded service certificate" +msgid "SSH public key fingerprint" msgstr "" -msgid "Subject" +msgid "Base-64 encoded user certificate" msgstr "" -msgid "Serial Number" +msgid "Certificate mapping data" msgstr "" -msgid "Serial Number (hex)" +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +#, python-format +msgid "can be at most %(len)d characters" msgstr "" msgid "Issuer" msgstr "" -msgid "Not Before" +msgid "Issuer of the certificate" msgstr "" -msgid "Not After" +msgid "Subject" msgstr "" -msgid "Fingerprint (SHA1)" +msgid "Subject of the certificate" msgstr "" -msgid "Fingerprint (SHA256)" +msgid "cannot have an empty subject" msgstr "" -msgid "Revocation reason" +msgid "cannot specify both subject/issuer and certificate" msgstr "" -msgid "Authentication Indicators" +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" msgstr "" msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" msgstr "" -msgid "NONE value cannot be combined with other PAC types" +msgid "Make multiple ipa calls via one remote procedure call" msgstr "" -msgid "Add a new IPA service." -msgstr "" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "" - -msgid "force principal name even if host not in DNS" -msgstr "" - -msgid "Skip host check" +msgid "must contain a tuple (list, dict)" msgstr "" msgid "" -"force service to be created even when host object does not exist to manage it" +"\n" +"Manage Certificate Authorities\n" +msgstr "" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +msgid "Certificate Authority" +msgstr "" + +msgid "Certificate Authorities" +msgstr "" + +msgid "Name" +msgstr "" + +msgid "Name for referencing the CA" +msgstr "" + +msgid "Description of the purpose of the CA" +msgstr "" + +msgid "Authority ID" +msgstr "" + +msgid "Dogtag Authority ID" +msgstr "" + +msgid "Subject DN" +msgstr "" + +msgid "Subject Distinguished Name" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Issuer Distinguished Name" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +msgid "Certificate chain" +msgstr "" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Search for CAs." msgstr "" #, python-format -msgid "The host '%s' does not exist to add a service to." +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include certificate chain in output" msgstr "" -msgid "Add a new SMB service." +msgid "Display the properties of a CA." msgstr "" -msgid "SMB service NetBIOS name" +msgid "Create a CA." msgstr "" #, python-format -msgid "Deleted service \"%(value)s\"" +msgid "Created CA \"%(value)s\"" msgstr "" #, python-format -msgid "Modified service \"%(value)s\"" +msgid "Insufficient 'add' privilege for entry '%s'." msgstr "" #, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" +msgid "Unrecognized attributes: %(attrs)s" +msgstr "" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "" + +msgid "Delete a CA (must be disabled first)." +msgstr "" + +#, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "" + +msgid "Insufficient privilege to delete a CA." +msgstr "" + +msgid "CA" +msgstr "" + +msgid "IPA CA cannot be deleted" +msgstr "" + +msgid "Must be disabled first" +msgstr "" + +msgid "Modify CA configuration." +msgstr "" + +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "" + +msgid "Insufficient privilege to modify a CA." +msgstr "" + +msgid "Disable a CA." +msgstr "" + +#, python-format +msgid "Disabled CA \"%(value)s\"" +msgstr "" + +msgid "IPA CA cannot be disabled" +msgstr "" + +msgid "Enable a CA." +msgstr "" + +#, python-format +msgid "Enabled CA \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "" + +msgid "CA ACLs" +msgstr "" + +msgid "CA category" +msgstr "" + +msgid "CA category the ACL applies to" +msgstr "" + +msgid "CAs" +msgstr "" + +#, python-format +msgid "Added CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "" + +msgid "default CA ACL can be only disabled" +msgstr "" + +#, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" + +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" msgstr[0] "" msgstr[1] "" #, python-format -msgid "Disabled service \"%(value)s\"" +msgid "Enabled CA ACL \"%(value)s\"" msgstr "" #, python-format -msgid "Added certificates to service principal \"%(value)s\"" +msgid "Disabled CA ACL \"%(value)s\"" msgstr "" #, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to a service" +msgid "%i user or group added." msgstr "" #, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a service" -msgstr "" - -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" -msgstr "" - -msgid "command" -msgstr "" - -msgid "commands" -msgstr "" - -msgid "runAs user" -msgstr "" - -msgid "runAs users" -msgstr "" - -msgid "group runAs" -msgstr "" - -msgid "runAs groups" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "commands cannot be added when command category='all'" +msgid "%i users or groups added." msgstr "" msgid "users cannot be added when user category='all'" msgstr "" +#, python-format +msgid "%i user or group removed." +msgstr "" + +#, python-format +msgid "%i users or groups removed." +msgstr "" + +#, python-format +msgid "%i host or hostgroup added." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "" + msgid "hosts cannot be added when host category='all'" msgstr "" -msgid "users cannot be added when runAs user or runAs group category='all'" +#, python-format +msgid "%i host or hostgroup removed." msgstr "" #, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" +msgid "%i hosts or hostgroups removed." msgstr "" #, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" +msgid "%i service added." msgstr "" #, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgid "%i services added." +msgstr "" + +msgid "services cannot be added when service category='all'" +msgstr "" + +#, python-format +msgid "%i service removed." +msgstr "" + +#, python-format +msgid "%i services removed." +msgstr "" + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, python-format +msgid "%i profiles removed." +msgstr "" + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." msgstr "" msgid "pyhbac is not installed." @@ -13445,15 +13770,6 @@ msgstr "" msgid "Name of issuing CA" msgstr "" -msgid "Base-64 encoded certificate." -msgstr "" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - msgid "Subject email address" msgstr "" @@ -13487,7 +13803,16 @@ msgstr "" msgid "Subject Other Name" msgstr "" -msgid "Issuer DN" +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" msgstr "" msgid "Serial number (hex)" @@ -13496,9 +13821,6 @@ msgstr "" msgid "Request status" msgstr "" -msgid "Include certificate chain in output" -msgstr "" - msgid "" "automatically add the principal if it doesn't exist (service principals only)" msgstr "" @@ -13592,6 +13914,9 @@ msgstr "" msgid "Revoked" msgstr "" +msgid "Revocation reason" +msgstr "" + msgid "" "Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " "revocation reason details. " @@ -13609,6 +13934,9 @@ msgstr "" msgid "7 is not a valid revocation reason" msgstr "" +msgid "Status of the certificate" +msgstr "" + msgid "Results should contain primary key attribute only (\"certificate\")" msgstr "" @@ -13839,7 +14167,110 @@ msgid_plural "%(count)s users matched" msgstr[0] "" msgstr[1] "" -msgid "Base-64 encoded user certificate" +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +msgid "Certificate Profile" +msgstr "" + +msgid "Certificate Profiles" +msgstr "" + +msgid "Profile configuration" +msgstr "" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." msgstr "" msgid "" @@ -13912,6 +14343,9 @@ msgstr "" msgid "Maximum hostname length" msgstr "" +msgid "Enable adding subids to new users" +msgstr "" + msgid "IPA masters" msgstr "" @@ -13984,6 +14418,21 @@ msgstr "" msgid "DNSec key master" msgstr "" +msgid "Setup SID configuration" +msgstr "" + +msgid "New users and groups automatically get a SID assigned" +msgstr "" + +msgid "Add SIDs" +msgstr "" + +msgid "Add SIDs for existing users and groups" +msgstr "" + +msgid "NetBIOS name of the IPA domain" +msgstr "" + msgid "Empty domain is not allowed" msgstr "" @@ -13999,6 +14448,20 @@ msgstr "" msgid "Disabled domain '%(domain)s' is not allowed" msgstr "" +msgid "not allowed to enable SID generation" +msgstr "" + +msgid "" +"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " +"allowed. Empty string is not allowed." +msgstr "" + +msgid "Failed to call DBus" +msgstr "" + +msgid "Configuration of SID failed. See details in the error log" +msgstr "" + msgid "The group doesn't exist" msgstr "" @@ -14023,55 +14486,1610 @@ msgstr "" msgid "SELinux user map default user not in order list" msgstr "" +#, python-format +msgid "You cannot specify %s without the --enable-sid option" +msgstr "" + +msgid "delegation" +msgstr "" + +msgid "delegations" +msgstr "" + +msgid "Delegations" +msgstr "" + +msgid "Delegation" +msgstr "" + +#, python-format +msgid "Added delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "" +msgstr[1] "" + msgid "" "\n" -"Groups of Sudo Commands\n" +"Domain Name System (DNS)\n" +msgstr "" + +msgid "" "\n" -"Manage groups of Sudo Commands.\n" +"Manage DNS zone and resource records.\n" +msgstr "" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" + +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "invalid IP network format" +msgstr "" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "" + +msgid "invalid address format" +msgstr "" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" + +msgid "algorithm value: allowed interval 0-255" +msgstr "" + +msgid "flags value: allowed interval 0-255" +msgstr "" + +msgid "iterations value: allowed interval 0-65535" +msgstr "" + +#, python-format +msgid "salt value: %(err)s" +msgstr "" + +msgid "invalid domain-name: not fully qualified" +msgstr "" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" + +#, python-format +msgid "" +"No answers could be found in the specified lifetime for DNS reverse zone " +"%(revdns)s" +msgstr "" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" + +#, python-format +msgid "%s record" +msgstr "" + +#, python-format +msgid "Raw %s records" +msgstr "" + +#, python-format +msgid "%s Record" +msgstr "" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "" + +msgid "Invalid number of parts!" +msgstr "" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "" + +msgid "Create reverse" +msgstr "" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "" + +msgid "Exchanger" +msgstr "" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" + +msgid "Priority (order)" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Relative weight for entries with the same priority." +msgstr "" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Target Uniform Resource Identifier" +msgstr "" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "" + +msgid "Managedby permission" +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "cannot be used when a zone is specified" +msgstr "" + +msgid "Only one zone type is allowed per zone name" +msgstr "" + +#, python-format +msgid "Added system permission \"%(value)s\"" +msgstr "" + +#, python-format +msgid "permission \"%(value)s\" already exists" +msgstr "" + +#, python-format +msgid "Removed system permission \"%(value)s\"" +msgstr "" + +msgid "DNS zone" +msgstr "" + +msgid "DNS zones" +msgstr "" + +msgid "DNS Zones" +msgstr "" + +msgid "DNS Zone" +msgstr "" + +msgid "Default time to live" +msgstr "" + +msgid "Time to live for records without explicit TTL definition" +msgstr "" + +msgid "setting Authoritative nameserver" +msgstr "" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "" + +msgid "" +msgstr "" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" + +#, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "" + +msgid "is required" +msgstr "" + +#, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "" + +msgid "DNS resource record" +msgstr "" + +msgid "DNS resource records" +msgstr "" + +msgid "DNS Resource Records" +msgstr "" + +msgid "DNS Resource Record" +msgstr "" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" + +msgid "only master zones can contain records" +msgstr "" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" + +msgid "DNS zone root record cannot be renamed" +msgstr "" + +msgid "DNS records can be only updated one at a time" +msgstr "" + +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Found '%(value)s'" +msgstr "" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "" + +msgid "DNS configuration options" +msgstr "" + +msgid "DNS Global Configuration" +msgstr "" + +msgid "IPA DNS version" +msgstr "" + +msgid "List of IPA masters configured as DNS servers" +msgstr "" + +msgid "IPA server configured as DNSSec key master" +msgstr "" + +msgid "Global DNS configuration is empty" +msgstr "" + +msgid "DNS forward zone" +msgstr "" + +msgid "DNS forward zones" +msgstr "" + +msgid "DNS Forward Zones" +msgstr "" + +msgid "DNS Forward Zone" +msgstr "" + +msgid "Please specify forwarders." +msgstr "" + +#, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "" + +msgid "IPA DNS records" +msgstr "" + +msgid "IPA location records" +msgstr "" + +msgid "Update location and IPA server DNS records" +msgstr "" + +msgid "Result of the command" +msgstr "" + +msgid "Dry run" +msgstr "" + +msgid "Do not update records only return expected records" +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +msgid "DNS Servers" +msgstr "" + +msgid "DNS Server" +msgstr "" + +msgid "DNS Server name" +msgstr "" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +msgid "Search for DNS servers." +msgstr "" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "" + +msgid "Delete a DNS server" +msgstr "" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" "\n" "EXAMPLES:\n" "\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" "\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" "\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" "\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" "\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" msgstr "" -msgid "sudo command group" +msgid "groups" msgstr "" -msgid "sudo command groups" +msgid "User Group" msgstr "" #, python-format -msgid "Added Sudo Command Group \"%(value)s\"" +msgid "Added group \"%(value)s\"" +msgstr "" + +msgid "gid cannot be set for external group" +msgstr "" + +msgid "attribute \"gidNumber\" not allowed with --nonposix" msgstr "" #, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" +msgid "Deleted group \"%(value)s\"" +msgstr "" + +msgid "privileged group" msgstr "" #, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" +msgid "Modified group \"%(value)s\"" msgstr "" #, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" msgstr[0] "" msgstr[1] "" +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" +msgstr "" + +msgid "HBAC Services" +msgstr "" + +msgid "HBAC Service Groups" +msgstr "" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "" + +msgid "Access time" +msgstr "" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "" + +msgid "HBAC Service" +msgstr "" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC service group" +msgstr "" + +msgid "HBAC service groups" +msgstr "" + +msgid "HBAC Service Group" +msgstr "" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Access granted: %s" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host" +msgstr "" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Serial Number" +msgstr "" + +msgid "Serial Number (hex)" +msgstr "" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + msgid "" "\n" "Groups of hosts.\n" @@ -14151,294 +16169,501 @@ msgstr "" msgid "Remove users that can manage members of this hostgroup." msgstr "" -#, python-format msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" msgstr "" msgid "" "\n" -"Set a user's password\n" +"ID ranges\n" "\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" "\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" +"There are two type of ID ranges which are both handled by this utility:\n" "\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" "\n" -"EXAMPLES:\n" +"Both types have the following attributes in common:\n" "\n" -" To reset your own password:\n" -" ipa passwd\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" "\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"and an ID range of a trusted domain may set\n" +" - auto-private-groups: [true|false|hybrid] automatic creation of private " +"groups\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" "\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" msgstr "" -msgid "The OTP if the user has a token configured" +msgid "ID Ranges" msgstr "" -#, python-format -msgid "Changed password for \"%(value)s\"" +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "Auto private groups" +msgstr "" + +msgid "Auto creation of private groups, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" msgstr "" msgid "" "\n" -"Permissions\n" -msgstr "" - -msgid "" +" Add new ID range.\n" "\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -msgid "" +" To add a new ID range you always have to specify\n" "\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" +" --base-id\n" +" --range-size\n" "\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" +" Additionally\n" "\n" -"A permission is made up of a number of different parts:\n" +" --rid-base\n" +" --secondary-rid-base\n" "\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" +" may be given for a new ID range for the local domain while\n" "\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" +" --auto-private-groups\n" "\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" +" may be given for a new ID range for a trusted AD domain and\n" "\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" +" --rid-base\n" +" --dom-sid\n" "\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -msgid "" +" must be given to add a new range for a trusted AD domain.\n" "\n" -"Managed permissions\n" +msgstr "" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" msgstr "" msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" msgstr "" msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" msgstr "" msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." msgstr "" msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" +"private-groups is specified" msgstr "" -msgid "must be enclosed in parentheses" +msgid "Options secondary-rid-base and rid-base must be used together" msgstr "" -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -#, python-format -msgid "Deprecated; use %s" -msgstr "" - -msgid "ACI" -msgstr "" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, python-format -msgid "Entry %s not found" -msgstr "" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgid "Primary RID range and secondary RID range cannot overlap" msgstr "" msgid "" -"cannot specify full target filter and extra target filter simultaneously" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." msgstr "" #, python-format -msgid "option was renamed; use %s" +msgid "Deleted ID range \"%(value)s\"" msgstr "" #, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, python-format -msgid "%s: group not found" -msgstr "" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" -msgstr "" - -msgid "Bad search filter" -msgstr "" - -#, python-format -msgid "Entry %s does not exist" -msgstr "" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, python-format -msgid "Added permission \"%(value)s\"" -msgstr "" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "" - -msgid "cannot delete managed permissions" -msgstr "" - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "" - -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" msgstr[0] "" msgstr[1] "" -#, python-brace-format -msgid "{role}: role not found" +msgid "" +"Modify ID range.\n" +"\n" msgstr "" -#, python-brace-format -msgid "{attr}: no such attribute" +#, python-format +msgid "Modified ID range \"%(value)s\"" msgstr "" msgid "" -"\n" -"Session Support for IPA\n" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" msgstr "" +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +msgid "ID View" +msgstr "" + +msgid "system ID View" +msgstr "" + +msgid "ID Views" +msgstr "" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +msgid "Hosts the view applies to" +msgstr "" + +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "" + +msgid "Delete an ID override." +msgstr "" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "" + +msgid "Modify an ID override." +msgstr "" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + msgid "Internationalization messages" msgstr "" @@ -14454,9 +16679,6 @@ msgstr "" msgid "Are you sure you want to rebuild auto membership?" msgstr "" -msgid "Automember rebuild membership task completed" -msgstr "" - msgid "Are you sure you want to proceed with the action?" msgstr "" @@ -15346,9 +17568,6 @@ msgstr "" msgid "Affiliation Changed" msgstr "" -msgid "CA" -msgstr "" - msgid "CA Compromise" msgstr "" @@ -15558,9 +17777,6 @@ msgstr "" msgid "Add certificate mapping data" msgstr "" -msgid "Certificate mapping data" -msgstr "" - msgid "Configuration string" msgstr "" @@ -15577,6 +17793,9 @@ msgstr "" msgid "Remove certificate identity mapping rules" msgstr "" +msgid "Version" +msgstr "" + msgid "Group Options" msgstr "" @@ -16286,9 +18505,6 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "" -msgid "Host" -msgstr "" - msgid "Netgroup Settings" msgstr "" @@ -16407,6 +18623,9 @@ msgstr "" msgid "Add password policy" msgstr "" +msgid "Password Policy" +msgstr "" + msgid "Remove password policies" msgstr "" @@ -16434,9 +18653,6 @@ msgstr "" msgid "Remove ID ranges" msgstr "" -msgid "Active Directory domain" -msgstr "" - msgid "Active Directory domain with POSIX attributes" msgstr "" @@ -16461,6 +18677,9 @@ msgstr "" msgid "Remove RADIUS servers" msgstr "" +msgid "Realm Domains" +msgstr "" + msgid "Check DNS" msgstr "" @@ -16633,6 +18852,33 @@ msgstr "" msgid "User categories" msgstr "" +msgid "Add subid" +msgstr "" + +msgid "Assigned subids" +msgstr "" + +msgid "DNA remaining" +msgstr "" + +msgid "SubGID range size" +msgstr "" + +msgid "SubGID range start" +msgstr "" + +msgid "SubUID range size" +msgstr "" + +msgid "SubUID range start" +msgstr "" + +msgid "Remaining subids" +msgstr "" + +msgid "Subordinate ID Statistics" +msgstr "" + msgid "Add sudo command" msgstr "" @@ -16917,6 +19163,14 @@ msgstr "" msgid "Add user '${primary_key}' into sudo rules" msgstr "" +msgid "Auto assign subordinate ids" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to auto-assign a subordinate id to user ${object}?" +msgstr "" + msgid "Contact Settings" msgstr "" @@ -17371,9 +19625,6 @@ msgstr "" msgid "Authentication" msgstr "" -msgid "Automember" -msgstr "" - msgid "Automount" msgstr "" @@ -17398,6 +19649,9 @@ msgstr "" msgid "Role-Based Access Control" msgstr "" +msgid "Subordinate IDs" +msgstr "" + msgid "Sudo" msgstr "" @@ -17509,318 +19763,10 @@ msgstr "" msgid "Unsupported value" msgstr "" -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -msgid "invalid port number" -msgstr "" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" -msgstr "" - #, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -#, python-brace-format msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Access granted: %s" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." msgstr "" msgid "kerberos ticket policy settings" @@ -17987,6 +19933,1761 @@ msgstr "" msgid "Servers in location" msgstr "" +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +msgid "netgroups" +msgstr "" + +msgid "Netgroup" +msgstr "" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +msgid "URI" +msgstr "" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "" + +msgid "cannot be empty" +msgstr "" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"If the user authentication method is set to password+OTP, the user should\n" +"pass the --otp option when resetting the password.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To reset your own password when password+OTP is set as authentication " +"method:\n" +" ipa passwd --otp\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +msgid "The OTP if the user has a token configured" +msgstr "" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Permissions\n" +msgstr "" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +msgid "" +"\n" +"Managed permissions\n" +msgstr "" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "must be enclosed in parentheses" +msgstr "" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "" + +#, python-format +msgid "Deprecated; use %s" +msgstr "" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, python-format +msgid "Entry %s not found" +msgstr "" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, python-format +msgid "option was renamed; use %s" +msgstr "" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, python-format +msgid "%s: group not found" +msgstr "" + +msgid "target and targetgroup are mutually exclusive" +msgstr "" + +msgid "subtree and type are mutually exclusive" +msgstr "" + +msgid "Bad search filter" +msgstr "" + +#, python-format +msgid "Entry %s does not exist" +msgstr "" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, python-format +msgid "Added permission \"%(value)s\"" +msgstr "" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "" + +msgid "cannot delete managed permissions" +msgstr "" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "" + +#, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +msgid "invalid port number" +msgstr "" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "Role" +msgstr "" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"API Schema\n" +msgstr "" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +msgid "Documentation" +msgstr "" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +msgid "Help topic" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +msgid "Method name" +msgstr "" + +msgid "Display information about a command." +msgstr "" + +msgid "Search for commands." +msgstr "" + +msgid "Return command defaults" +msgstr "" + +#, python-brace-format +msgid "{oname}: {command_name} not found" +msgstr "" + +msgid "Display information about a class." +msgstr "" + +msgid "Search for classes." +msgstr "" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +msgid "CLI name" +msgstr "" + +msgid "Confirm (password)" +msgstr "" + +msgid "Default" +msgstr "" + +msgid "Default from" +msgstr "" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" +msgstr "" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command output." +msgstr "" + +msgid "Search for command outputs." +msgstr "" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "self service permission" +msgstr "" + +msgid "self service permissions" +msgstr "" + +msgid "Self Service Permissions" +msgstr "" + +msgid "Self Service Permission" +msgstr "" + +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +msgid "SELinux User Map rule" +msgstr "" + +msgid "SELinux User Map rules" +msgstr "" + +msgid "SELinux User Maps" +msgstr "" + +msgid "SELinux User Map" +msgstr "" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "" + +#, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +msgid "server roles" +msgstr "" + +msgid "IPA Server Roles" +msgstr "" + +msgid "IPA Server Role" +msgstr "" + +msgid "IPA server role name" +msgstr "" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "IPA role name" +msgstr "" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +#, python-format +msgid "authentication indicators not allowed in service \"%s\"" +msgstr "" + +msgid "Malformed principal" +msgstr "" + +msgid "{} is required by the IPA master" +msgstr "" + +msgid "service" +msgstr "" + +msgid "services" +msgstr "" + +msgid "Service principal alias" +msgstr "" + +msgid "Base-64 encoded service certificate" +msgstr "" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +msgid "Add a new IPA service." +msgstr "" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "" + +msgid "force principal name even if host not in DNS" +msgstr "" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +msgid "Add a new SMB service." +msgstr "" + +msgid "SMB service NetBIOS name" +msgstr "" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to a service" +msgstr "" + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a service" +msgstr "" + +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Subordinate ids\n" +"\n" +"Manage subordinate user and group ids for users\n" +"\n" +"EXAMPLES:\n" +"\n" +" Auto-assign a subordinate id range to current user\n" +" ipa subid-generate\n" +"\n" +" Auto-assign a subordinate id range to user alice:\n" +" ipa subid-generate --owner=alice\n" +"\n" +" Find subordinate ids for user alice:\n" +" ipa subid-find --owner=alice\n" +"\n" +" Match entry by any subordinate uid in range:\n" +" ipa subid-match --subuid=2147483649\n" +msgstr "" + +msgid "Subordinate id" +msgstr "" + +msgid "Subordinate ids" +msgstr "" + +msgid "Subordinate id description" +msgstr "" + +msgid "Owning user of subordinate id entry" +msgstr "" + +msgid "Start value for subordinate user ID (subuid) range" +msgstr "" + +msgid "Subordinate user ID count" +msgstr "" + +msgid "Start value for subordinate group ID (subgid) range" +msgstr "" + +msgid "Subordinate group ID count" +msgstr "" + +#, python-format +msgid "" +"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." +msgstr "" + +#, python-format +msgid "'%(dn)s is not a valid user" +msgstr "" + +msgid "subgidnumber must be equal to subuidnumber" +msgstr "" + +msgid "Add a new subordinate id." +msgstr "" + +#, python-format +msgid "Added subordinate id \"%(value)s\"" +msgstr "" + +msgid "Delete a subordinate id." +msgstr "" + +#, python-format +msgid "Deleted subordinate id \"%(value)s\"" +msgstr "" + +msgid "Modify a subordinate id." +msgstr "" + +#, python-format +msgid "Modified subordinate id \"%(value)s\"" +msgstr "" + +msgid "Search for subordinate id." +msgstr "" + +#, python-format +msgid "%(count)d subordinate id matched" +msgid_plural "%(count)d subordinate ids matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about a subordinate id." +msgstr "" + +msgid "Generate and auto-assign subuid and subgid range to user entry" +msgstr "" + +msgid "Match users by any subordinate uid in their range" +msgstr "" + +msgid "SubUID match" +msgstr "" + +msgid "Match value for subordinate user ID" +msgstr "" + +msgid "Subordinate id statistics" +msgstr "" + +#, python-format +msgid "%(remaining)i remaining subordinate id ranges" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +msgid "sudo command" +msgstr "" + +msgid "sudo commands" +msgstr "" + +msgid "Sudo Commands" +msgstr "" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + msgid "" "\n" "Topology\n" @@ -18203,1002 +21904,6 @@ msgid "" " replication agreements\n" msgstr "" -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -msgid "sudo command" -msgstr "" - -msgid "sudo commands" -msgstr "" - -msgid "Sudo Commands" -msgstr "" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -msgid "Self Service Permissions" -msgstr "" - -msgid "Self Service Permission" -msgstr "" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - -msgid "A list of ACI values" -msgstr "" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -msgid "ACI prefix is required" -msgstr "" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "groups" -msgstr "" - -msgid "User Group" -msgstr "" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "" - -msgid "privileged group" -msgstr "" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -msgid "Not a managed group" -msgstr "" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -msgid "automount location" -msgstr "" - -msgid "automount locations" -msgstr "" - -msgid "Automount Locations" -msgstr "" - -msgid "Automount Location" -msgstr "" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "automount map" -msgstr "" - -msgid "automount maps" -msgstr "" - -msgid "Automount Maps" -msgstr "" - -msgid "Automount Map" -msgstr "" - -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Automount key object." -msgstr "" - -msgid "automount key" -msgstr "" - -msgid "automount keys" -msgstr "" - -msgid "Automount Keys" -msgstr "" - -msgid "Automount Key" -msgstr "" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, python-format -msgid "key named %(key)s already exists" -msgstr "" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" -msgstr[1] "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -msgid "Delete an ID override." -msgstr "" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -msgid "Modify an ID override." -msgstr "" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -msgid "CA category" -msgstr "" - -msgid "CA category the ACL applies to" -msgstr "" - -msgid "CAs" -msgstr "" - -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, python-format -msgid "%i users or groups added." -msgstr "" - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, python-format -msgid "%i service added." -msgstr "" - -#, python-format -msgid "%i services added." -msgstr "" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - msgid "" "\n" "Cross-realm trusts\n" @@ -19364,12 +22069,6 @@ msgid "" " " msgstr "" -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - msgid "Type of trusted domain ID range, one of allowed values" msgstr "" @@ -19606,736 +22305,9 @@ msgid "" "itself" msgstr "" -msgid "" -"\n" -"DNS server configuration\n" +msgid "users" msgstr "" -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "" - -msgid "DNS servers" -msgstr "" - -msgid "DNS Servers" -msgstr "" - -msgid "DNS Server" -msgstr "" - -msgid "DNS Server name" -msgstr "" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "" - -msgid "Search for DNS servers." -msgstr "" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "" - -msgid "Delete a DNS server" -msgstr "" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "" - -msgid "HBAC Services" -msgstr "" - -msgid "HBAC Service" -msgstr "" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -msgid "HBAC service group" -msgstr "" - -msgid "HBAC service groups" -msgstr "" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" -msgstr "" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -msgid "Delegations" -msgstr "" - -msgid "Delegation" -msgstr "" - -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Role" -msgstr "" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -msgid "netgroups" -msgstr "" - -msgid "Netgroup" -msgstr "" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - #, python-format msgid "Added user \"%(value)s\"" msgstr "" @@ -20355,12 +22327,6 @@ msgstr "" msgid "Modified user \"%(value)s\"" msgstr "" -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" -msgstr[1] "" - #, python-format msgid "Undeleted user account \"%(value)s\"" msgstr "" @@ -20456,12 +22422,6 @@ msgstr "" msgid "Removed certificates from user \"%(value)s\"" msgstr "" -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - msgid "Add new principal alias to the user entry" msgstr "" @@ -20476,532 +22436,6 @@ msgstr "" msgid "Removed aliases from user \"%(value)s\"" msgstr "" -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" -msgstr "" - -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -msgid "SELinux User Maps" -msgstr "" - -msgid "SELinux User Map" -msgstr "" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "" - -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "" - msgid "" "\n" "Vaults\n" @@ -21344,107 +22778,156 @@ msgstr "" msgid "Checks if any of the servers has the KRA service enabled" msgstr "" -msgid "Member service groups" -msgstr "" - -msgid "Member HBAC service groups" -msgstr "" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" +msgid "operation not defined" msgstr "" #, python-format -msgid "container entry (%(container)s) not found" +msgid "not allowed to perform operation: %s" msgstr "" -#, python-format -msgid "%(parent)s: %(oname)s not found" +msgid "No such virtual command" msgstr "" -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "Class of Service object used for linking policies with groups" msgstr "" #, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +msgid "password policy" +msgstr "" + +msgid "password policies" +msgstr "" + +msgid "Password Policies" +msgstr "" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +msgid "User check" +msgstr "" + +msgid "Check if the password contains the username" +msgstr "" + msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" msgstr "" -#, python-format -msgid "added attribute value to entry %(value)s" +msgid "Maximum password life must be equal to or greater than the minimum." msgstr "" -#, python-format -msgid "removed attribute values from entry %(value)s" +msgid "cannot delete global password policy" msgstr "" -msgid "one or more values to remove" +msgid "priority cannot be set on global policy" msgstr "" msgid "" @@ -21591,6 +23074,10 @@ msgstr "" msgid "Ignoring topology connectivity errors." msgstr "" +#, python-format +msgid "Failed to remove server from security domain: %s" +msgstr "" + msgid "Server has already been deleted" msgstr "" @@ -21628,1389 +23115,186 @@ msgstr "" msgid "" "\n" -"Manage Certificate Authorities\n" +"Sudo Rules\n" msgstr "" msgid "" "\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" msgstr "" msgid "" "\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" msgstr "" msgid "" "\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" +"Each option needs to be added separately and no validation is done whether\n" +"the option is known by sudo or is in a valid format. Environment variables\n" +"also need to be set individually. For example env_keep=\"FOO BAR\" in " +"sudoers\n" +"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" +"+=BAR.\n" msgstr "" msgid "" "\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" msgstr "" msgid "" "\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" msgstr "" msgid "" "\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" msgstr "" msgid "" "\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" msgstr "" msgid "" "\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" "\n" -" ipa ca-del puppet\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" msgstr "" -msgid "Certificate Authority" +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" msgstr "" -msgid "Certificate Authorities" +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" msgstr "" -msgid "Name for referencing the CA" +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" msgstr "" -msgid "Description of the purpose of the CA" +msgid "" +"\n" +" Set multiple default Sudo options:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate' --" +"sudooption mail_badpass\n" msgstr "" -msgid "Authority ID" +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" msgstr "" -msgid "Dogtag Authority ID" +msgid "this option has been deprecated." msgstr "" -msgid "Subject DN" +msgid "sudo rules" msgstr "" -msgid "Subject Distinguished Name" +msgid "Sudo Rules" msgstr "" -msgid "Issuer Distinguished Name" -msgstr "" - -msgid "Search for CAs." +msgid "Sudo Rule" msgstr "" #, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +msgid "command" +msgstr "" + +msgid "commands" +msgstr "" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +msgid "group runAs" +msgstr "" + +msgid "runAs groups" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" msgstr[0] "" msgstr[1] "" -msgid "Display the properties of a CA." +msgid "commands cannot be added when command category='all'" msgstr "" -msgid "Create a CA." +msgid "users cannot be added when runAs user or runAs group category='all'" msgstr "" #, python-format -msgid "Created CA \"%(value)s\"" +msgid "RunAsUser does not accept '%(name)s' as a user name" msgstr "" #, python-format -msgid "Insufficient 'add' privilege for entry '%s'." +msgid "RunAsUser does not accept '%(name)s' as a group name" msgstr "" #, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -msgid "IPA CA cannot be deleted" -msgstr "" - -msgid "Must be disabled first" -msgstr "" - -msgid "Modify CA configuration." -msgstr "" - -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -msgid "Disable a CA." -msgstr "" - -#, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "" - -msgid "IPA CA cannot be disabled" -msgstr "" - -msgid "Enable a CA." -msgstr "" - -#, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -msgid "URI" -msgstr "" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "" - -msgid "cannot be empty" -msgstr "" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "invalid IP network format" -msgstr "" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -msgid "invalid address format" -msgstr "" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -msgid "flags value: allowed interval 0-255" -msgstr "" - -msgid "iterations value: allowed interval 0-65535" -msgstr "" - -#, python-format -msgid "salt value: %(err)s" -msgstr "" - -msgid "invalid domain-name: not fully qualified" -msgstr "" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" - -#, python-format -msgid "%s record" -msgstr "" - -#, python-format -msgid "Raw %s records" -msgstr "" - -#, python-format -msgid "%s Record" -msgstr "" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -msgid "Invalid number of parts!" -msgstr "" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -msgid "Create reverse" -msgstr "" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" - -msgid "Exchanger" -msgstr "" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -msgid "Priority (order)" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Relative weight for entries with the same priority." -msgstr "" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Target Uniform Resource Identifier" -msgstr "" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" - -msgid "Managedby permission" -msgstr "" - -msgid "cannot be used when a zone is specified" -msgstr "" - -msgid "Only one zone type is allowed per zone name" -msgstr "" - -#, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "" - -#, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "" - -#, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "" - -msgid "DNS zone" -msgstr "" - -msgid "DNS zones" -msgstr "" - -msgid "DNS Zones" -msgstr "" - -msgid "DNS Zone" -msgstr "" - -msgid "Default time to live" -msgstr "" - -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -msgid "setting Authoritative nameserver" -msgstr "" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -msgid "" -msgstr "" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "" - -msgid "is required" -msgstr "" - -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "" - -msgid "DNS resource record" -msgstr "" - -msgid "DNS resource records" -msgstr "" - -msgid "DNS Resource Records" -msgstr "" - -msgid "DNS Resource Record" -msgstr "" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -msgid "only master zones can contain records" -msgstr "" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -msgid "DNS zone root record cannot be renamed" -msgstr "" - -msgid "DNS records can be only updated one at a time" -msgstr "" - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Found '%(value)s'" -msgstr "" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "" - -msgid "DNS configuration options" -msgstr "" - -msgid "DNS Global Configuration" -msgstr "" - -msgid "IPA DNS version" -msgstr "" - -msgid "List of IPA masters configured as DNS servers" -msgstr "" - -msgid "IPA server configured as DNSSec key master" -msgstr "" - -msgid "Global DNS configuration is empty" -msgstr "" - -msgid "DNS forward zone" -msgstr "" - -msgid "DNS forward zones" -msgstr "" - -msgid "DNS Forward Zones" -msgstr "" - -msgid "DNS Forward Zone" -msgstr "" - -msgid "Please specify forwarders." -msgstr "" - -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "" - -msgid "IPA DNS records" -msgstr "" - -msgid "IPA location records" -msgstr "" - -msgid "Update location and IPA server DNS records" -msgstr "" - -msgid "Result of the command" -msgstr "" - -msgid "Dry run" -msgstr "" - -msgid "Do not update records only return expected records" -msgstr "" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -msgid "Certificate Profile" -msgstr "" - -msgid "Certificate Profiles" -msgstr "" - -msgid "Profile configuration" -msgstr "" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -msgid "must be enabled only on a single master" +msgid "RunAsGroup does not accept '%(name)s' as a group name" msgstr "" msgid "Request must be a dict" @@ -23034,6 +23318,17 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + #, python-format msgid "" "\n" @@ -23053,34 +23348,6 @@ msgstr "" msgid "Topology does not allow server %(server)s to replicate with servers:" msgstr "" -msgid "Trusting forest" -msgstr "" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Unknown" -msgstr "" - -msgid "Non-Active Directory domain" -msgstr "" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - msgid "" "\n" "Classes to manage trust joins using DCE-RPC calls\n" @@ -23239,33 +23506,6 @@ msgstr "" msgid "must be at least 1" msgstr "" -#, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -msgid "Unable to initialize STARTTLS session\n" -msgstr "" - msgid "Out of memory\n" msgstr "" @@ -23293,3 +23533,30 @@ msgstr "" msgid "Bad or unsupported salt type.\n" msgstr "" + +#, c-format +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "" + +msgid "" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" +msgstr "" + +msgid "Unable to initialize STARTTLS session\n" +msgstr "" diff --git a/po/pa.po b/po/pa.po index 49aa1d60a..106866e65 100644 --- a/po/pa.po +++ b/po/pa.po @@ -14,59 +14,426 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" -msgid "AD domain controller" -msgstr "AD ਡੋਮੇਨ ਕੰਟਰੋਲਰ" +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "" -msgid "CIFS server denied your credentials" -msgstr "CIFS ਨੇ ਤੁਹਾਡੀ ਸਨਦ ਤੋਂ ਇਨਕਾਰ ਕੀਤਾ" +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "" -msgid "Failed to create key!\n" +#, fuzzy, c-format +msgid "out of memory\n" +msgstr "ਮੈਮੋਰੀ ਖ਼ਤਮ ਹੋਈ\n" + +#, c-format +msgid "read error\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#, fuzzy, c-format +msgid "Failed to open keytab\n" msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" -msgid "File containing the new vault password" -msgstr "ਫ਼ਾਈਲ ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ ਰੱਖਦੀ ਹੈ" +#, c-format +msgid "principal not found\n" +msgstr "" -msgid "Hello world" -msgstr "ਹੈਲੋ ਵਰਲਡ" +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" -msgid "Invalid vault type" -msgstr "ਗ਼ਲਤ ਵਾਲਟ ਕਿਸਮ" +#, fuzzy, c-format +msgid "Unable to remove entry\n" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" -msgid "New vault password" +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "realm not found\n" +msgstr "" + +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" +msgstr "" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "Kerberos Service Principal Name" +msgstr "" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +msgid "Realm name" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "" + +#, fuzzy, c-format +msgid "Out of memory \n" +msgstr "ਮੈਮੋਰੀ ਖ਼ਤਮ ਹੋਈ\n" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "" + +msgid "Simple bind failed\n" +msgstr "" + +msgid "SASL Bind failed\n" +msgstr "" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "" + +#, fuzzy, c-format +msgid "Failed to get result: %s\n" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, c-format +msgid "Timeout exceeded." +msgstr "" + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "" + +#, fuzzy, c-format +msgid "Failed to parse result: %s\n" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "" + +#, c-format +msgid "Missing reply control!\n" +msgstr "" + +#, fuzzy, c-format +msgid "Out of Memory!\n" +msgstr "ਮੈਮੋਰੀ ਖ਼ਤਮ ਹੋਈ!\n" + +#, fuzzy, c-format +msgid "Failed to create control!\n" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, fuzzy, c-format +msgid "Failed to bind to server!\n" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, fuzzy, c-format +msgid "Failed to get keytab!\n" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "" + +#, fuzzy, c-format +msgid "Failed to retrieve any keys" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, fuzzy +msgid "Failed to decode control reply!\n" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, c-format +msgid "Passwords do not match!\n" +msgstr "" + +#, c-format +msgid "Failed to open config file %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "" + +#, fuzzy +msgid "Failed to resolve symlink to keytab.\n" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" + +msgid "Print as little as possible" +msgstr "" + +msgid "Output only on errors" +msgstr "" + +msgid "Output debug info" +msgstr "" + +msgid "Contact this specific KDC Server" +msgstr "" + +msgid "Server Name" +msgstr "" + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" + +msgid "Encryption types to request" +msgstr "" + +msgid "Comma separated encryption types list" +msgstr "" + +msgid "Show the list of permitted encryption types and exit" +msgstr "" + +msgid "Permitted Encryption Types" +msgstr "" + +msgid "Asks for a non-random password to use for the principal" +msgstr "" + +msgid "LDAP DN" +msgstr "" + +msgid "DN to bind as if not using kerberos" +msgstr "" + +msgid "LDAP password" +msgstr "" + +msgid "password to use if not using kerberos" +msgstr "" + +msgid "Prompt for LDAP password" +msgstr "" + +msgid "Path to the IPA CA certificate" +msgstr "" + +msgid "IPA CA certificate" +msgstr "" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" + +msgid "url" +msgstr "" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" + +msgid "GSSAPI|EXTERNAL" +msgstr "" + +msgid "Retrieve current keys without changing them" +msgstr "" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "" + +#, fuzzy, c-format +msgid "Supported encryption types:\n" +msgstr "ਚੇਤਾਵਨੀ ਅਣਪਛਾਤੀ ਇੰਕ੍ਰਿਪਸ਼ਨ ਕਿਸਮ।\n" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +msgid "Enter LDAP password" +msgstr "" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "" + +#, c-format +msgid "DNS discovery for domain %s\n" +msgstr "" + +#, c-format +msgid "Discovered server %s\n" +msgstr "" + +#, c-format +msgid "Using discovered server %s\n" +msgstr "" + +#, c-format +msgid "DNS Discovery failed\n" +msgstr "" + +#, c-format +msgid "Using server from config %s\n" +msgstr "" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "" + +#, c-format +msgid "Using provided server %s\n" +msgstr "" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "" + +#, fuzzy +msgid "New Principal Password" msgstr "ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ" -msgid "Old vault private key" -msgstr "ਪੁਰਾਣੀ ਵਾਲਟ ਪ੍ਰਾਈਵੇਟ ਕੁੰਜੀ" +msgid "Verify Principal Password" +msgstr "" -msgid "Our domain is not configured" -msgstr "ਸਾਡੀ ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" -msgid "Out of memory\n" -msgstr "ਮੈਮੋਰੀ ਖ਼ਤਮ ਹੋਈ\n" +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" + +#, fuzzy, c-format +msgid "Failed to open Keytab\n" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" + +#, fuzzy, c-format +msgid "Failed to create key material\n" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, fuzzy, c-format +msgid "Failed to get keytab\n" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, fuzzy, c-format +msgid "Failed to add key to the keytab\n" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, fuzzy, c-format +msgid "Failed to close the keytab\n" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "" #, c-format msgid "Out of memory!\n" msgstr "ਮੈਮੋਰੀ ਖ਼ਤਮ ਹੋਈ!\n" -msgid "Trust setup" -msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "ਅਣਪਛਾਤੀ ਚੋਣ: %(option)s" - -msgid "Warning unrecognized encryption type.\n" -msgstr "ਚੇਤਾਵਨੀ ਅਣਪਛਾਤੀ ਇੰਕ੍ਰਿਪਸ਼ਨ ਕਿਸਮ।\n" - -msgid "Warning unrecognized salt type.\n" -msgstr "ਚੇਤਾਵਨੀ ਅਣਪਛਾਤੀ salt ਕਿਸਮ ਹੈ।\n" - -msgid "domain is not configured" -msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" - -msgid "no trusted domain is configured" -msgstr "ਕੋਈ ਟਰੱਸਟਡ ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਕੀਤੀ ਹੈ" - #, c-format msgid "No permission to join this host to the IPA domain.\n" msgstr "" @@ -87,9 +454,6 @@ msgstr "ਮੈਮੋਰੀ ਖ਼ਤਮ ਹੋਈ!\n" msgid "Unable to enable SSL in LDAP\n" msgstr "" -msgid "SASL Bind failed\n" -msgstr "" - #, c-format msgid "Search for %1$s on rootdse failed with error %2$d\n" msgstr "" @@ -316,392 +680,6 @@ msgstr "" msgid "The hostname must not be: %s\n" msgstr "" -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "" - -#, fuzzy, c-format -msgid "Out of memory \n" -msgstr "ਮੈਮੋਰੀ ਖ਼ਤਮ ਹੋਈ\n" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "" - -msgid "Simple bind failed\n" -msgstr "" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to get result: %s\n" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to parse result: %s\n" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Out of Memory!\n" -msgstr "ਮੈਮੋਰੀ ਖ਼ਤਮ ਹੋਈ!\n" - -#, fuzzy, c-format -msgid "Failed to create control!\n" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, fuzzy, c-format -msgid "Failed to bind to server!\n" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, fuzzy, c-format -msgid "Failed to get keytab!\n" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to retrieve any keys" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, fuzzy -msgid "Failed to decode control reply!\n" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, c-format -msgid "Passwords do not match!\n" -msgstr "" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "" - -#, fuzzy -msgid "Failed to resolve symlink to keytab.\n" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Output only on errors" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -msgid "Server Name" -msgstr "" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Encryption types to request" -msgstr "" - -msgid "Comma separated encryption types list" -msgstr "" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -msgid "Permitted Encryption Types" -msgstr "" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -msgid "LDAP DN" -msgstr "" - -msgid "DN to bind as if not using kerberos" -msgstr "" - -msgid "LDAP password" -msgstr "" - -msgid "password to use if not using kerberos" -msgstr "" - -msgid "Prompt for LDAP password" -msgstr "" - -msgid "Path to the IPA CA certificate" -msgstr "" - -msgid "IPA CA certificate" -msgstr "" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Supported encryption types:\n" -msgstr "ਚੇਤਾਵਨੀ ਅਣਪਛਾਤੀ ਇੰਕ੍ਰਿਪਸ਼ਨ ਕਿਸਮ।\n" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -msgid "Enter LDAP password" -msgstr "" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -#, fuzzy -msgid "New Principal Password" -msgstr "ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ" - -msgid "Verify Principal Password" -msgstr "" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to open Keytab\n" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to create key material\n" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, fuzzy, c-format -msgid "Failed to get keytab\n" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, fuzzy, c-format -msgid "Failed to add key to the keytab\n" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, fuzzy, c-format -msgid "Failed to close the keytab\n" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to open keytab\n" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, fuzzy, c-format -msgid "Unable to remove entry\n" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -msgid "Realm name" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "" - -#, fuzzy, c-format -msgid "out of memory\n" -msgstr "ਮੈਮੋਰੀ ਖ਼ਤਮ ਹੋਈ\n" - -#, c-format -msgid "read error\n" -msgstr "" - msgid "Failed members" msgstr "" @@ -821,132 +799,34 @@ msgstr "" msgid "Skipped %(key)s" msgstr "" +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +msgid "Unrevoked" +msgstr "" + +msgid "Error" +msgstr "" + +msgid "Input filename" +msgstr "" + +msgid "File to load the certificate from." +msgstr "" + +msgid "cannot specify both raw certificate and file" +msgstr "" + msgid "Input file" msgstr "" msgid "File to load the certificate from" msgstr "" -msgid "cannot specify both raw certificate and file" -msgstr "" - #, python-format msgid "Profile configuration stored in file '%(file)s'" msgstr "" -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -msgid "Servers details:" -msgstr "" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "Add a new YubiKey OTP token." -msgstr "" - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -msgid "Maximum number of agreements per replica" -msgstr "" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -msgid "Delete a user" -msgstr "" - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - msgid "Split DNS record to parts" msgstr "" @@ -1011,6 +891,131 @@ msgstr "" msgid "file to store DNS records in nsupdate format" msgstr "" +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "" + +msgid "Servers details:" +msgstr "" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "" + +msgid "User ID" +msgstr "" + +msgid "Password" +msgstr "" + +msgid "First Code" +msgstr "" + +msgid "Second Code" +msgstr "" + +msgid "Token ID" +msgstr "" + +msgid "python-yubico is not installed." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" + +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "Add a new YubiKey OTP token." +msgstr "" + +msgid "YubiKey slot" +msgstr "" + +msgid "No free YubiKey slot!" +msgstr "" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "" + +msgid "Topology is disconnected" +msgstr "" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "" + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "" + +msgid "Maximum number of agreements per replica" +msgstr "" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "" + +msgid "Delete a user" +msgstr "" + +msgid "preserve and no-preserve cannot be both set" +msgstr "" + #, python-format msgid "Cannot read file '%(filename)s': %(exc)s" msgstr "" @@ -1071,6 +1076,15 @@ msgstr "ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ" msgid "File containing the old vault password" msgstr "ਫ਼ਾਈਲ ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ ਰੱਖਦੀ ਹੈ" +msgid "New vault password" +msgstr "ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ" + +msgid "File containing the new vault password" +msgstr "ਫ਼ਾਈਲ ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ ਰੱਖਦੀ ਹੈ" + +msgid "Old vault private key" +msgstr "ਪੁਰਾਣੀ ਵਾਲਟ ਪ੍ਰਾਈਵੇਟ ਕੁੰਜੀ" + #, fuzzy msgid "File containing the old vault private key" msgstr "ਫ਼ਾਈਲ ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ ਰੱਖਦੀ ਹੈ" @@ -1106,6 +1120,9 @@ msgid "" "Size of data exceeds the limit. Current vault data size limit is %(limit)d B" msgstr "" +msgid "Invalid vault type" +msgstr "ਗ਼ਲਤ ਵਾਲਟ ਕਿਸਮ" + msgid "Retrieve a data from a vault." msgstr "" @@ -1130,47 +1147,20 @@ msgstr "" msgid "Missing vault private key" msgstr "ਪੁਰਾਣੀ ਵਾਲਟ ਪ੍ਰਾਈਵੇਟ ਕੁੰਜੀ" -msgid "Write certificate (chain if --chain used) to file" +#, python-format +msgid "Enabled Sudo Rule \"%s\"" msgstr "" -msgid "Unrevoked" +#, python-format +msgid "Disabled Sudo Rule \"%s\"" msgstr "" -msgid "Error" +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" msgstr "" -msgid "Input filename" -msgstr "" - -msgid "File to load the certificate from." -msgstr "" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -msgid "User ID" -msgstr "" - -msgid "Password" -msgstr "" - -msgid "First Code" -msgstr "" - -msgid "Second Code" -msgstr "" - -msgid "Token ID" +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" msgstr "" msgid "" @@ -1442,6 +1432,243 @@ msgstr "" msgid "Location of the ACI" msgstr "" +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Description" +msgstr "" + +msgid "A description of this auto member rule" +msgstr "" + +msgid "Default (fallback) Group" +msgstr "" + +msgid "Default group for entries to land" +msgstr "" + +msgid "Add an automember rule." +msgstr "" + +msgid "Automember Rule" +msgstr "" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +msgid "Grouping Type" +msgstr "" + +msgid "Grouping to which the rule applies" +msgstr "" + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +msgid "Exclusive Regex" +msgstr "" + +msgid "Attribute Key" +msgstr "" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +msgid "Number of conditions added" +msgstr "" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +msgid "Display information about the default (fallback) automember groups." +msgstr "" + +msgid "Delete an automember rule." +msgstr "" + +msgid "List of deletions that failed" +msgstr "" + +msgid "Search for automember rules." +msgstr "" + +msgid "Modify an automember rule." +msgstr "" + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +msgid "Rights" +msgstr "" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Users" +msgstr "" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Hosts" +msgstr "" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +msgid "Conditions that could not be removed" +msgstr "" + +msgid "Number of conditions removed" +msgstr "" + +msgid "Display information about an automember rule." +msgstr "" + msgid "" "\n" "Automount\n" @@ -1573,31 +1800,15 @@ msgstr "" msgid "Automount map name." msgstr "" -msgid "Description" -msgstr "" - msgid "Create a new automount key." msgstr "" -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - msgid "Delete an automount key." msgstr "" msgid "Continuous mode: Don't stop on errors." msgstr "" -msgid "List of deletions that failed" -msgstr "" - msgid "Search for an automount key." msgstr "" @@ -1616,19 +1827,6 @@ msgstr "" msgid "Modify an automount key." msgstr "" -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "Rights" -msgstr "" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - msgid "New mount information" msgstr "" @@ -1723,6 +1921,184 @@ msgstr "" msgid "Nested Methods to execute" msgstr "" +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +msgid "Search for existing certificates." +msgstr "" + +msgid "Match cn attribute in subject" +msgstr "" + +msgid "Reason" +msgstr "" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "" + +msgid "minimum serial number" +msgstr "" + +msgid "maximum serial number" +msgstr "" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Maximum number of certs returned" +msgstr "" + +msgid "Take a revoked certificate off hold." +msgstr "" + +msgid "Serial number" +msgstr "" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +msgid "Submit a certificate signing request." +msgstr "" + +msgid "CSR" +msgstr "" + +msgid "Principal" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +msgid "Dictionary mapping variable name to value" +msgstr "" + +msgid "Revoke a certificate." +msgstr "" + +msgid "Retrieve an existing certificate." +msgstr "" + +msgid "Output filename" +msgstr "" + +msgid "File to store the certificate in." +msgstr "" + +msgid "Check the status of a certificate signing request." +msgstr "" + +msgid "Request id" +msgstr "" + msgid "" "\n" "Server configuration\n" @@ -2981,6 +3357,306 @@ msgstr "" msgid "Display information about a DNS zone (SOA record)." msgstr "" +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "Group name" +msgstr "" + +msgid "Group description" +msgstr "" + +msgid "GID" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "" + +msgid "Member users" +msgstr "" + +msgid "Member groups" +msgstr "" + +msgid "Member of groups" +msgstr "" + +msgid "Roles" +msgstr "" + +msgid "Member of netgroups" +msgstr "" + +msgid "Member of Sudo rule" +msgstr "" + +msgid "Member of HBAC rule" +msgstr "" + +msgid "Indirect Member users" +msgstr "" + +msgid "Indirect Member groups" +msgstr "" + +msgid "Indirect Member of group" +msgstr "" + +msgid "Indirect Member of netgroup" +msgstr "" + +msgid "Indirect Member of role" +msgstr "" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +msgid "Create a new group." +msgstr "" + +msgid "Create as a non-POSIX group" +msgstr "" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +msgid "Add members to a group." +msgstr "" + +msgid "External member" +msgstr "" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +msgid "member user" +msgstr "" + +msgid "users to add" +msgstr "" + +msgid "member group" +msgstr "" + +msgid "groups to add" +msgstr "" + +msgid "Members that could not be added" +msgstr "" + +msgid "Number of members added" +msgstr "" + +msgid "Delete group." +msgstr "" + +msgid "Detach a managed group from a user." +msgstr "" + +msgid "Search for groups." +msgstr "" + +msgid "search for private groups" +msgstr "" + +msgid "search for POSIX groups" +msgstr "" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +msgid "search for non-POSIX groups" +msgstr "" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "user" +msgstr "" + +msgid "Search for groups with these member users." +msgstr "" + +msgid "Search for groups without these member users." +msgstr "" + +msgid "group" +msgstr "" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +msgid "netgroup" +msgstr "" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +msgid "HBAC rule" +msgstr "" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +msgid "Modify a group." +msgstr "" + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +msgid "Remove members from a group." +msgstr "" + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "" + +msgid "Number of members removed" +msgstr "" + +msgid "Display information about a named group." +msgstr "" + msgid "" "\n" "Host-based access control\n" @@ -3061,15 +3737,9 @@ msgstr "" msgid "Enabled" msgstr "" -msgid "Users" -msgstr "" - msgid "User Groups" msgstr "" -msgid "Hosts" -msgstr "" - msgid "Host Groups" msgstr "" @@ -3085,9 +3755,6 @@ msgstr "" msgid "Create a new HBAC rule." msgstr "" -msgid "Suppress processing of membership attributes." -msgstr "" - msgid "Add target hosts and hostgroups to an HBAC rule." msgstr "" @@ -3103,12 +3770,6 @@ msgstr "" msgid "host groups to add" msgstr "" -msgid "Members that could not be added" -msgstr "" - -msgid "Number of members added" -msgstr "" - msgid "Add services to an HBAC rule." msgstr "" @@ -3127,18 +3788,6 @@ msgstr "" msgid "Add users and groups to an HBAC rule." msgstr "" -msgid "member user" -msgstr "" - -msgid "users to add" -msgstr "" - -msgid "member group" -msgstr "" - -msgid "groups to add" -msgstr "" - msgid "Delete an HBAC rule." msgstr "" @@ -3163,12 +3812,6 @@ msgstr "" msgid "host groups to remove" msgstr "" -msgid "Members that could not be removed" -msgstr "" - -msgid "Number of members removed" -msgstr "" - msgid "Remove service and service groups from an HBAC rule." msgstr "" @@ -3181,12 +3824,6 @@ msgstr "" msgid "Remove users and groups from an HBAC rule." msgstr "" -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - msgid "Display the properties of an HBAC rule." msgstr "" @@ -3295,6 +3932,242 @@ msgstr "" msgid "Display information about an HBAC service group." msgstr "" +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +msgid "User name" +msgstr "" + +msgid "Target host" +msgstr "" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +msgid "Warning" +msgstr "" + +msgid "Matched rules" +msgstr "" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + msgid "" "\n" "Hosts/Machines\n" @@ -3444,33 +4317,9 @@ msgstr "" msgid "Member of host-groups" msgstr "" -msgid "Roles" -msgstr "" - -msgid "Member of netgroups" -msgstr "" - -msgid "Member of Sudo rule" -msgstr "" - -msgid "Member of HBAC rule" -msgstr "" - -msgid "Indirect Member of netgroup" -msgstr "" - msgid "Indirect Member of host-group" msgstr "" -msgid "Indirect Member of role" -msgstr "" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - msgid "Keytab" msgstr "" @@ -3564,45 +4413,30 @@ msgstr "" msgid "Search for hosts without these member of host groups." msgstr "" -msgid "netgroup" -msgstr "" - msgid "Search for hosts with these member of netgroups." msgstr "" msgid "Search for hosts without these member of netgroups." msgstr "" -msgid "role" -msgstr "" - msgid "Search for hosts with these member of roles." msgstr "" msgid "Search for hosts without these member of roles." msgstr "" -msgid "HBAC rule" -msgstr "" - msgid "Search for hosts with these member of HBAC rules." msgstr "" msgid "Search for hosts without these member of HBAC rules." msgstr "" -msgid "sudo rule" -msgstr "" - msgid "Search for hosts with these member of sudo rules." msgstr "" msgid "Search for hosts without these member of sudo rules." msgstr "" -msgid "user" -msgstr "" - msgid "Search for hosts with these enrolled by users." msgstr "" @@ -3754,6 +4588,231 @@ msgstr "" msgid "Display information about a hostgroup." msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "Range name" +msgstr "" + +msgid "First Posix ID of the range" +msgstr "" + +msgid "Number of IDs in the range" +msgstr "" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +msgid "Range type" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "Delete an ID range." +msgstr "" + +msgid "Search for ranges." +msgstr "" + +msgid "Modify ID range." +msgstr "" + +msgid "Display information about a range." +msgstr "" + msgid "" "\n" "ID Views\n" @@ -3770,12 +4829,6 @@ msgstr "" msgid "Anchor to override" msgstr "" -msgid "Group name" -msgstr "" - -msgid "GID" -msgstr "" - msgid "Group ID Number" msgstr "" @@ -4000,9 +5053,6 @@ msgid "" " ipa krbtpolicy-mod admin --maxlife=3600\n" msgstr "" -msgid "User name" -msgstr "" - msgid "Manage ticket policy for specific user" msgstr "" @@ -4258,9 +5308,6 @@ msgid "" "retrieve and print all attributes from the server. Affects command output." msgstr "" -msgid "Dictionary mapping variable name to value" -msgstr "" - msgid "Total number of variables env (>= count)" msgstr "" @@ -4364,9 +5411,6 @@ msgstr "" msgid "Search for netgroups without these member users." msgstr "" -msgid "group" -msgstr "" - msgid "Search for netgroups with these member groups." msgstr "" @@ -4460,6 +5504,148 @@ msgstr "" msgid "Show the current OTP configuration." msgstr "" +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Manager" +msgstr "" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +msgid "Disabled" +msgstr "" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +msgid "Validity start" +msgstr "" + +msgid "First date/time the token can be used" +msgstr "" + +msgid "Validity end" +msgstr "" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "" + +msgid "Token model (informational only)" +msgstr "" + +msgid "Serial" +msgstr "" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +msgid "Add a new OTP token." +msgstr "" + +msgid "(deprecated)" +msgstr "" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +msgid "Delete an OTP token." +msgstr "" + +msgid "Search for OTP token." +msgstr "" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +msgid "Modify a OTP token." +msgstr "" + +msgid "Rename the OTP token object" +msgstr "" + +msgid "Display information about an OTP token." +msgstr "" + msgid "" "\n" "YubiKey Tokens\n" @@ -5143,12 +6329,6 @@ msgstr "" msgid "A description of this role-group" msgstr "" -msgid "Member users" -msgstr "" - -msgid "Member groups" -msgstr "" - msgid "Privileges" msgstr "" @@ -5415,9 +6595,6 @@ msgid "" "httpd.keytab\n" msgstr "" -msgid "Principal" -msgstr "" - msgid "Service principal" msgstr "" @@ -6152,9 +7329,6 @@ msgstr "" msgid "Sudo Command Group" msgstr "" -msgid "Group description" -msgstr "" - msgid "Commands" msgstr "" @@ -6195,1683 +7369,6 @@ msgstr "" msgid "Display Sudo Command Group." msgstr "" -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -msgid "First name" -msgstr "" - -msgid "Last name" -msgstr "" - -msgid "Full name" -msgstr "" - -msgid "Display name" -msgstr "" - -msgid "Initials" -msgstr "" - -msgid "Kerberos principal" -msgstr "" - -msgid "Kerberos principal expiration" -msgstr "" - -msgid "Email address" -msgstr "" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -msgid "Street address" -msgstr "" - -msgid "City" -msgstr "" - -msgid "State/Province" -msgstr "" - -msgid "ZIP" -msgstr "" - -msgid "Telephone Number" -msgstr "" - -msgid "Mobile Telephone Number" -msgstr "" - -msgid "Pager Number" -msgstr "" - -msgid "Fax Number" -msgstr "" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "" - -msgid "Manager" -msgstr "" - -msgid "Car License" -msgstr "" - -msgid "Account disabled" -msgstr "" - -msgid "User authentication types" -msgstr "" - -msgid "Types of supported user authentication" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "RADIUS proxy configuration" -msgstr "" - -msgid "RADIUS proxy username" -msgstr "" - -msgid "Department Number" -msgstr "" - -msgid "Employee Number" -msgstr "" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -msgid "Member of groups" -msgstr "" - -msgid "Indirect Member of group" -msgstr "" - -msgid "Kerberos keys available" -msgstr "" - -msgid "Add a new user." -msgstr "" - -msgid "Don't create user private group" -msgstr "" - -msgid "Delete a user." -msgstr "" - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -msgid "Search for users." -msgstr "" - -msgid "Self" -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -msgid "Modify a user." -msgstr "" - -msgid "Rename the user object" -msgstr "" - -msgid "Display information about a user." -msgstr "" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "A description of this auto member rule" -msgstr "" - -msgid "Default (fallback) Group" -msgstr "" - -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -msgid "Automember Rule" -msgstr "" - -msgid "Grouping Type" -msgstr "" - -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -msgid "Attribute Key" -msgstr "" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -msgid "Delete an automember rule." -msgstr "" - -msgid "Search for automember rules." -msgstr "" - -msgid "Modify an automember rule." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -msgid "Number of conditions removed" -msgstr "" - -msgid "Display information about an automember rule." -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -msgid "Search for existing certificates." -msgstr "" - -msgid "Match cn attribute in subject" -msgstr "" - -msgid "Reason" -msgstr "" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -msgid "minimum serial number" -msgstr "" - -msgid "maximum serial number" -msgstr "" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -msgid "Serial number" -msgstr "" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -msgid "Submit a certificate signing request." -msgstr "" - -msgid "CSR" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -msgid "Revoke a certificate." -msgstr "" - -msgid "Retrieve an existing certificate." -msgstr "" - -msgid "Output filename" -msgstr "" - -msgid "File to store the certificate in." -msgstr "" - -msgid "Check the status of a certificate signing request." -msgstr "" - -msgid "Request id" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "GID (use this option to set it manually)" -msgstr "" - -msgid "Indirect Member users" -msgstr "" - -msgid "Indirect Member groups" -msgstr "" - -msgid "Create a new group." -msgstr "" - -msgid "Create as a non-POSIX group" -msgstr "" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Add members to a group." -msgstr "" - -msgid "External member" -msgstr "" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -msgid "Delete group." -msgstr "" - -msgid "Detach a managed group from a user." -msgstr "" - -msgid "Search for groups." -msgstr "" - -msgid "search for private groups" -msgstr "" - -msgid "search for POSIX groups" -msgstr "" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -msgid "search for non-POSIX groups" -msgstr "" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "Modify a group." -msgstr "" - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -msgid "Remove members from a group." -msgstr "" - -msgid "Display information about a named group." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -msgid "Target host" -msgstr "" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Warning" -msgstr "" - -msgid "Matched rules" -msgstr "" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -msgid "NetBIOS name" -msgstr "" - -msgid "Domain GUID" -msgstr "" - -msgid "Fallback primary group" -msgstr "" - -msgid "Domain name" -msgstr "" - -#, fuzzy -msgid "Trusted domain partner" -msgstr "ਕੋਈ ਟਰੱਸਟਡ ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਕੀਤੀ ਹੈ" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -msgid "Active Directory domain administrator" -msgstr "" - -msgid "Active Directory domain administrator's password" -msgstr "" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "Range type" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -msgid "Delete a trust." -msgstr "" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -msgid "Search for trusts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -msgid "Display information about a trust." -msgstr "" - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "Range name" -msgstr "" - -msgid "First Posix ID of the range" -msgstr "" - -msgid "Number of IDs in the range" -msgstr "" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "Delete an ID range." -msgstr "" - -msgid "Search for ranges." -msgstr "" - -msgid "Modify ID range." -msgstr "" - -msgid "Display information about a range." -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -msgid "Disabled" -msgstr "" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -msgid "Validity start" -msgstr "" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Validity end" -msgstr "" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -msgid "Serial" -msgstr "" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -msgid "Add a new OTP token." -msgstr "" - -msgid "(deprecated)" -msgstr "" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -msgid "Delete an OTP token." -msgstr "" - -msgid "Search for OTP token." -msgstr "" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -msgid "Modify a OTP token." -msgstr "" - -msgid "Rename the OTP token object" -msgstr "" - -msgid "Display information about an OTP token." -msgstr "" - msgid "" "\n" "Sudo Rules\n" @@ -8082,6 +7579,499 @@ msgstr "" msgid "Display Sudo Rule." msgstr "" +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +msgid "NetBIOS name" +msgstr "" + +msgid "Domain GUID" +msgstr "" + +msgid "Fallback primary group" +msgstr "" + +msgid "Domain name" +msgstr "" + +#, fuzzy +msgid "Trusted domain partner" +msgstr "ਕੋਈ ਟਰੱਸਟਡ ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਕੀਤੀ ਹੈ" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +msgid "Active Directory domain administrator" +msgstr "" + +msgid "Active Directory domain administrator's password" +msgstr "" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +msgid "Delete a trust." +msgstr "" + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +msgid "Search for trusts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +msgid "Display information about a trust." +msgstr "" + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "" + +msgid "Last name" +msgstr "" + +msgid "Full name" +msgstr "" + +msgid "Display name" +msgstr "" + +msgid "Initials" +msgstr "" + +msgid "Kerberos principal" +msgstr "" + +msgid "Kerberos principal expiration" +msgstr "" + +msgid "Email address" +msgstr "" + +msgid "Prompt to set the user password" +msgstr "" + +msgid "Generate a random user password" +msgstr "" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" + +msgid "Street address" +msgstr "" + +msgid "City" +msgstr "" + +msgid "State/Province" +msgstr "" + +msgid "ZIP" +msgstr "" + +msgid "Telephone Number" +msgstr "" + +msgid "Mobile Telephone Number" +msgstr "" + +msgid "Pager Number" +msgstr "" + +msgid "Fax Number" +msgstr "" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "" + +msgid "Car License" +msgstr "" + +msgid "Account disabled" +msgstr "" + +msgid "User authentication types" +msgstr "" + +msgid "Types of supported user authentication" +msgstr "" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "RADIUS proxy configuration" +msgstr "" + +msgid "RADIUS proxy username" +msgstr "" + +msgid "Department Number" +msgstr "" + +msgid "Employee Number" +msgstr "" + +msgid "Employee Type" +msgstr "" + +msgid "Preferred Language" +msgstr "" + +msgid "Kerberos keys available" +msgstr "" + +msgid "Add a new user." +msgstr "" + +msgid "Don't create user private group" +msgstr "" + +msgid "Delete a user." +msgstr "" + +msgid "Disable a user account." +msgstr "" + +msgid "Enable a user account." +msgstr "" + +msgid "Search for users." +msgstr "" + +msgid "Self" +msgstr "" + +msgid "Display user record for current Kerberos principal" +msgstr "" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +msgid "Search for users with these member of HBAC rules." +msgstr "" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +msgid "Modify a user." +msgstr "" + +msgid "Rename the user object" +msgstr "" + +msgid "Display information about a user." +msgstr "" + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + msgid "Time limit of search in seconds (0 is unlimited)" msgstr "" @@ -8198,6 +8188,110 @@ msgstr "" msgid "Display the properties of a CA ACL." msgstr "" +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "Profile ID" +msgstr "" + +msgid "Certificate Profile to use" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +msgid "Profile description" +msgstr "" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +msgid "Search for Certificate Profiles." +msgstr "" + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" msgstr "" @@ -8227,6 +8321,218 @@ msgstr "" msgid "Remove certificates from host entry" msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + msgid "Fallback to AD DC LDAP" msgstr "" @@ -8254,6 +8560,9 @@ msgid "" "to onelevel" msgstr "" +msgid "Remove users that can manage this token." +msgstr "" + msgid "Target DN subtree" msgstr "" @@ -8684,6 +8993,13 @@ msgid "" " " msgstr "" +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + msgid "Preserved user" msgstr "" @@ -8975,332 +9291,6 @@ msgstr "" msgid "Display information about a vault container." msgstr "" -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "Profile ID" -msgstr "" - -msgid "Certificate Profile to use" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -msgid "Profile description" -msgstr "" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -msgid "Search for Certificate Profiles." -msgstr "" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - msgid "Resolve a host name in DNS. (Deprecated)" msgstr "" @@ -10980,6 +10970,192 @@ msgid "" " ipa hostgroup-del baltimore\n" msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + msgid "" "Comma-separated list of objectclasses used to search for user entries in DS" msgstr "" @@ -11286,198 +11462,6 @@ msgstr "" msgid "comma-separated list of sudo commands to remove" msgstr "" -msgid "Active directory domain administrator's password" -msgstr "" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - msgid "" "\n" "Sudo Rules\n" @@ -11519,13 +11503,10 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" -msgid "A dictionary representing an LDAP entry" +msgid "Active directory domain administrator's password" msgstr "" -msgid "A list of LDAP entries" -msgstr "" - -msgid "All commands should at least have a result" +msgid "GECOS field" msgstr "" #, python-format @@ -11569,277 +11550,6 @@ msgstr "" msgid "No file to read" msgstr "" -#, python-format -msgid "%(filename)s: file not found" -msgstr "" - -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -msgid "Filename is empty" -msgstr "" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "" - -msgid "empty DNS label" -msgstr "" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "" - -msgid "cannot be longer that {} characters" -msgstr "" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "" - -msgid "invalid SSH public key" -msgstr "" - -msgid "options are not allowed" -msgstr "" - -msgid "invalid hostmask" -msgstr "" - -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" - -msgid "invalid escape code in domain name" -msgstr "" - -msgid "domain name cannot be longer than 255 characters" -msgstr "" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "" - -msgid "invalid domain name" -msgstr "" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -msgid "invalid IP address format" -msgstr "" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" - -msgid "Additional instructions:" -msgstr "" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "" - -#, fuzzy -msgid "any of the configured servers" -msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" - -msgid "Exceeded number of tries to forward a request." -msgstr "" - #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" @@ -12196,6 +11906,192 @@ msgid "" "prevents a trust to '%(conflict)s'" msgstr "" +msgid "Results are truncated, try a more specific search" +msgstr "" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "ਅਣਪਛਾਤੀ ਚੋਣ: %(option)s" + +msgid "Client version. Used to determine if server will accept request." +msgstr "" + +msgid "Additional instructions:" +msgstr "" + +#, python-format +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" + +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "%(line)s" +msgstr "" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "" + +#, python-format +msgid "%(count)d variables" +msgstr "" + +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "" +msgstr[1] "" + +msgid "A dictionary representing an LDAP entry" +msgstr "" + +msgid "A list of LDAP entries" +msgstr "" + +msgid "All commands should at least have a result" +msgstr "" + msgid "incorrect type" msgstr "" @@ -12327,23 +12223,117 @@ msgid "Service principal is required" msgstr "" #, python-format -msgid "%(count)d variables" +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +#, fuzzy +msgid "any of the configured servers" +msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" + +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" msgstr "" #, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "" -msgstr[1] "" - -msgid "Results are truncated, try a more specific search" +msgid "Permission denied: %(file)s" msgstr "" -msgid "Client version. Used to determine if server will accept request." +msgid "empty DNS label" +msgstr "" + +msgid "DNS label cannot be longer that 63 characters" msgstr "" #, python-format -msgid "objectclass %s not found" +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" + +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "" + +msgid "cannot be longer that {} characters" +msgstr "" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "" + +msgid "invalid SSH public key" +msgstr "" + +msgid "options are not allowed" +msgstr "" + +msgid "invalid hostmask" +msgstr "" + +#, python-format +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +msgid "invalid escape code in domain name" +msgstr "" + +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +msgid "invalid domain name" +msgstr "" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +msgid "invalid IP address format" +msgstr "" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" #, python-format @@ -12362,940 +12352,1246 @@ msgstr "" msgid "Retrieving CA status failed with status %d" msgstr "" +#, python-format +msgid "objectclass %s not found" +msgstr "" + +#, fuzzy +msgid "Trusting forest" +msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" + +#, fuzzy +msgid "Trusted forest" +msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +msgid "Unknown" +msgstr "" + +msgid "Non-Active Directory domain" +msgstr "" + +msgid "Active Directory domain" +msgstr "" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "" +msgid "Failed to authenticate to CA REST API" +msgstr "" + #, python-format msgid "Replication agreement for %(hostname)s not found" msgstr "" -msgid "Failed to authenticate to CA REST API" +msgid "A list of ACI values" msgstr "" -msgid "One time password commands" +msgid "type, filter, subtree and targetgroup are mutually exclusive" msgstr "" -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" +msgid "ACI prefix is required" msgstr "" msgid "" -"\n" -"IPA server roles\n" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" msgstr "" -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgid "filter and memberof are mutually exclusive" msgstr "" -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" +msgid "group, permission and self are mutually exclusive" msgstr "" -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" - -msgid "server roles" -msgstr "" - -msgid "IPA Server Roles" -msgstr "" - -msgid "IPA Server Role" -msgstr "" - -msgid "IPA server role name" -msgstr "" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" +msgid "One of group, permission or self is required" msgstr "" #, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" +msgid "Group '%s' does not exist" +msgstr "" + +msgid "empty filter" +msgstr "" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "" + +msgid "ACI" +msgstr "" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" msgstr[0] "" msgstr[1] "" -msgid "Include IPA master entries" +#, python-format +msgid "Renamed ACI to \"%(value)s\"" msgstr "" -msgid "roles" +msgid "" +"\n" +"Auto Membership Rule.\n" msgstr "" -msgid "IPA role name" +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" msgstr "" -msgid "Class of Service object used for linking policies with groups" +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" msgstr "" #, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgid "%(otype)s \"%(oname)s\" not found" msgstr "" -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -msgid "password policy" -msgstr "" - -msgid "password policies" -msgstr "" - -msgid "Password Policies" -msgstr "" - -msgid "Password Policy" -msgstr "" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" +#, python-format +msgid "%s is not a valid attribute." msgstr "" msgid "" "\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" +" Add an automember rule.\n" " " msgstr "" #, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "Auto Membership is not configured" +msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" + msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" +"\n" +" Add conditions to an automember rule.\n" +" " msgstr "" #, python-format -msgid "The following domains do not belong to this realm: %(domains)s" +msgid "Added condition(s) to \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "automount location" +msgstr "" + +msgid "automount locations" +msgstr "" + +msgid "Automount Locations" +msgstr "" + +msgid "Automount Location" +msgstr "" + +#, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "automount map" +msgstr "" + +msgid "automount maps" +msgstr "" + +msgid "Automount Maps" +msgstr "" + +msgid "Automount Map" +msgstr "" + +#, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Automount key object." +msgstr "" + +msgid "automount key" +msgstr "" + +msgid "automount keys" +msgstr "" + +msgid "Automount Keys" +msgstr "" + +msgid "Automount Key" msgstr "" #, python-format msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" msgstr "" #, python-format -msgid "Results should contain primary key attribute only (\"%s\")" +msgid "key named %(key)s already exists" msgstr "" -msgid "Help topic" +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" msgstr "" -msgid "Version" +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." msgstr "" -msgid "Parameters" +#, python-format +msgid "Added automount key \"%(value)s\"" msgstr "" -msgid "Method of" +#, python-format +msgid "Added automount indirect map \"%(value)s\"" msgstr "" -msgid "Method name" +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Member service groups" +msgstr "" + +msgid "Member HBAC service groups" +msgstr "" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" +msgstr "" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "" + +#, python-format +msgid "%(parent)s: %(oname)s not found" msgstr "" #, python-format msgid "%(pkey)s: %(oname)s not found" msgstr "" -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -msgid "Search for classes." -msgstr "" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -msgid "CLI name" -msgstr "" - -msgid "Confirm (password)" -msgstr "" - -msgid "Default" -msgstr "" - -msgid "Default from" -msgstr "" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" msgstr "" #, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." +msgid "attribute \"%(attribute)s\" not allowed" msgstr "" #, python-format -msgid "%(command_name)s: %(oname)s not found" +msgid "these attributes are not allowed: %(attrs)s" msgstr "" -msgid "Display information about a command output." -msgstr "" +#, fuzzy +msgid "attribute is not configurable" +msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" +msgid "No such attribute on this entry" msgstr "" #, python-format -msgid "Malformed principal: %(error)s" +msgid "Rename the %(ldap_obj_name)s object" msgstr "" -msgid "Add target to a named service delegation." +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" msgstr "" #, python-format msgid "member %s" msgstr "" -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" +#, python-format +msgid "%s to add" msgstr "" #, python-format -msgid "Added service delegation rule \"%(value)s\"" +msgid "%s to remove" msgstr "" #, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation rule" +msgid "Results should contain primary key attribute only (\"%s\")" msgstr "" #, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" msgstr "" msgid "" "\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" msgstr "" msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -msgid "Malformed principal" -msgstr "" - -msgid "{} is required by the IPA master" -msgstr "" - -msgid "service" -msgstr "" - -msgid "services" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." msgstr "" msgid "Principal alias" msgstr "" -msgid "Service principal alias" +msgid "User password expiration" msgstr "" -msgid "Base-64 encoded service certificate" +msgid "SSH public key fingerprint" msgstr "" -msgid "Subject" +msgid "Base-64 encoded user certificate" msgstr "" -msgid "Serial Number" +msgid "Certificate mapping data" msgstr "" -msgid "Serial Number (hex)" +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +#, python-format +msgid "can be at most %(len)d characters" msgstr "" msgid "Issuer" msgstr "" -msgid "Not Before" +msgid "Issuer of the certificate" msgstr "" -msgid "Not After" +msgid "Subject" msgstr "" -msgid "Fingerprint (SHA1)" +msgid "Subject of the certificate" msgstr "" -msgid "Fingerprint (SHA256)" +msgid "cannot have an empty subject" msgstr "" -msgid "Revocation reason" +msgid "cannot specify both subject/issuer and certificate" msgstr "" -msgid "Authentication Indicators" +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" msgstr "" msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" msgstr "" -msgid "NONE value cannot be combined with other PAC types" +msgid "Make multiple ipa calls via one remote procedure call" msgstr "" -msgid "Add a new IPA service." -msgstr "" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "" - -msgid "force principal name even if host not in DNS" -msgstr "" - -msgid "Skip host check" +msgid "must contain a tuple (list, dict)" msgstr "" msgid "" -"force service to be created even when host object does not exist to manage it" +"\n" +"Manage Certificate Authorities\n" +msgstr "" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +msgid "Certificate Authority" +msgstr "" + +msgid "Certificate Authorities" +msgstr "" + +msgid "Name" +msgstr "" + +msgid "Name for referencing the CA" +msgstr "" + +msgid "Description of the purpose of the CA" +msgstr "" + +msgid "Authority ID" +msgstr "" + +msgid "Dogtag Authority ID" +msgstr "" + +msgid "Subject DN" +msgstr "" + +msgid "Subject Distinguished Name" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Issuer Distinguished Name" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +msgid "Certificate chain" +msgstr "" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Search for CAs." msgstr "" #, python-format -msgid "The host '%s' does not exist to add a service to." +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include certificate chain in output" msgstr "" -msgid "Add a new SMB service." +msgid "Display the properties of a CA." msgstr "" -msgid "SMB service NetBIOS name" +msgid "Create a CA." msgstr "" #, python-format -msgid "Deleted service \"%(value)s\"" +msgid "Created CA \"%(value)s\"" msgstr "" #, python-format -msgid "Modified service \"%(value)s\"" +msgid "Insufficient 'add' privilege for entry '%s'." msgstr "" #, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" +msgid "Unrecognized attributes: %(attrs)s" +msgstr "" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "" + +msgid "Delete a CA (must be disabled first)." +msgstr "" + +#, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "" + +msgid "Insufficient privilege to delete a CA." +msgstr "" + +msgid "CA" +msgstr "" + +msgid "IPA CA cannot be deleted" +msgstr "" + +msgid "Must be disabled first" +msgstr "" + +msgid "Modify CA configuration." +msgstr "" + +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "" + +msgid "Insufficient privilege to modify a CA." +msgstr "" + +msgid "Disable a CA." +msgstr "" + +#, python-format +msgid "Disabled CA \"%(value)s\"" +msgstr "" + +msgid "IPA CA cannot be disabled" +msgstr "" + +msgid "Enable a CA." +msgstr "" + +#, python-format +msgid "Enabled CA \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "" + +msgid "CA ACLs" +msgstr "" + +msgid "CA category" +msgstr "" + +msgid "CA category the ACL applies to" +msgstr "" + +msgid "CAs" +msgstr "" + +#, python-format +msgid "Added CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "" + +msgid "default CA ACL can be only disabled" +msgstr "" + +#, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" + +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" msgstr[0] "" msgstr[1] "" #, python-format -msgid "Disabled service \"%(value)s\"" +msgid "Enabled CA ACL \"%(value)s\"" msgstr "" #, python-format -msgid "Added certificates to service principal \"%(value)s\"" +msgid "Disabled CA ACL \"%(value)s\"" msgstr "" #, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to a service" +msgid "%i user or group added." msgstr "" #, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a service" -msgstr "" - -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" -msgstr "" - -msgid "command" -msgstr "" - -msgid "commands" -msgstr "" - -msgid "runAs user" -msgstr "" - -msgid "runAs users" -msgstr "" - -msgid "group runAs" -msgstr "" - -msgid "runAs groups" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "commands cannot be added when command category='all'" +msgid "%i users or groups added." msgstr "" msgid "users cannot be added when user category='all'" msgstr "" +#, python-format +msgid "%i user or group removed." +msgstr "" + +#, python-format +msgid "%i users or groups removed." +msgstr "" + +#, python-format +msgid "%i host or hostgroup added." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "" + msgid "hosts cannot be added when host category='all'" msgstr "" -msgid "users cannot be added when runAs user or runAs group category='all'" +#, python-format +msgid "%i host or hostgroup removed." msgstr "" #, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" +msgid "%i hosts or hostgroups removed." msgstr "" #, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" +msgid "%i service added." msgstr "" #, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgid "%i services added." +msgstr "" + +msgid "services cannot be added when service category='all'" +msgstr "" + +#, python-format +msgid "%i service removed." +msgstr "" + +#, python-format +msgid "%i services removed." +msgstr "" + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, python-format +msgid "%i profiles removed." +msgstr "" + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." msgstr "" msgid "pyhbac is not installed." @@ -13512,15 +13808,6 @@ msgstr "" msgid "Name of issuing CA" msgstr "" -msgid "Base-64 encoded certificate." -msgstr "" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - msgid "Subject email address" msgstr "" @@ -13554,7 +13841,16 @@ msgstr "" msgid "Subject Other Name" msgstr "" -msgid "Issuer DN" +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" msgstr "" msgid "Serial number (hex)" @@ -13563,9 +13859,6 @@ msgstr "" msgid "Request status" msgstr "" -msgid "Include certificate chain in output" -msgstr "" - msgid "" "automatically add the principal if it doesn't exist (service principals only)" msgstr "" @@ -13659,6 +13952,9 @@ msgstr "" msgid "Revoked" msgstr "" +msgid "Revocation reason" +msgstr "" + msgid "" "Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " "revocation reason details. " @@ -13676,6 +13972,9 @@ msgstr "" msgid "7 is not a valid revocation reason" msgstr "" +msgid "Status of the certificate" +msgstr "" + msgid "Results should contain primary key attribute only (\"certificate\")" msgstr "" @@ -13906,7 +14205,110 @@ msgid_plural "%(count)s users matched" msgstr[0] "" msgstr[1] "" -msgid "Base-64 encoded user certificate" +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +msgid "Certificate Profile" +msgstr "" + +msgid "Certificate Profiles" +msgstr "" + +msgid "Profile configuration" +msgstr "" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." msgstr "" msgid "" @@ -13979,6 +14381,9 @@ msgstr "" msgid "Maximum hostname length" msgstr "" +msgid "Enable adding subids to new users" +msgstr "" + msgid "IPA masters" msgstr "" @@ -14051,6 +14456,21 @@ msgstr "" msgid "DNSec key master" msgstr "" +msgid "Setup SID configuration" +msgstr "" + +msgid "New users and groups automatically get a SID assigned" +msgstr "" + +msgid "Add SIDs" +msgstr "" + +msgid "Add SIDs for existing users and groups" +msgstr "" + +msgid "NetBIOS name of the IPA domain" +msgstr "" + #, fuzzy msgid "Empty domain is not allowed" msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" @@ -14067,6 +14487,22 @@ msgstr "" msgid "Disabled domain '%(domain)s' is not allowed" msgstr "" +#, fuzzy +msgid "not allowed to enable SID generation" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +msgid "" +"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " +"allowed. Empty string is not allowed." +msgstr "" + +#, fuzzy +msgid "Failed to call DBus" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +msgid "Configuration of SID failed. See details in the error log" +msgstr "" + msgid "The group doesn't exist" msgstr "" @@ -14091,55 +14527,1611 @@ msgstr "" msgid "SELinux user map default user not in order list" msgstr "" +#, python-format +msgid "You cannot specify %s without the --enable-sid option" +msgstr "" + +msgid "delegation" +msgstr "" + +msgid "delegations" +msgstr "" + +msgid "Delegations" +msgstr "" + +msgid "Delegation" +msgstr "" + +#, python-format +msgid "Added delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "" +msgstr[1] "" + msgid "" "\n" -"Groups of Sudo Commands\n" +"Domain Name System (DNS)\n" +msgstr "" + +msgid "" "\n" -"Manage groups of Sudo Commands.\n" +"Manage DNS zone and resource records.\n" +msgstr "" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" + +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "invalid IP network format" +msgstr "" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "" + +msgid "invalid address format" +msgstr "" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" + +msgid "algorithm value: allowed interval 0-255" +msgstr "" + +msgid "flags value: allowed interval 0-255" +msgstr "" + +msgid "iterations value: allowed interval 0-65535" +msgstr "" + +#, python-format +msgid "salt value: %(err)s" +msgstr "" + +msgid "invalid domain-name: not fully qualified" +msgstr "" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" + +#, python-format +msgid "" +"No answers could be found in the specified lifetime for DNS reverse zone " +"%(revdns)s" +msgstr "" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" + +#, python-format +msgid "%s record" +msgstr "" + +#, python-format +msgid "Raw %s records" +msgstr "" + +#, python-format +msgid "%s Record" +msgstr "" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "" + +msgid "Invalid number of parts!" +msgstr "" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "" + +msgid "Create reverse" +msgstr "" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "" + +msgid "Exchanger" +msgstr "" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" + +msgid "Priority (order)" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Relative weight for entries with the same priority." +msgstr "" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Target Uniform Resource Identifier" +msgstr "" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "" + +msgid "Managedby permission" +msgstr "" + +#, fuzzy +msgid "DNS is not configured" +msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" + +msgid "cannot be used when a zone is specified" +msgstr "" + +msgid "Only one zone type is allowed per zone name" +msgstr "" + +#, python-format +msgid "Added system permission \"%(value)s\"" +msgstr "" + +#, python-format +msgid "permission \"%(value)s\" already exists" +msgstr "" + +#, python-format +msgid "Removed system permission \"%(value)s\"" +msgstr "" + +msgid "DNS zone" +msgstr "" + +msgid "DNS zones" +msgstr "" + +msgid "DNS Zones" +msgstr "" + +msgid "DNS Zone" +msgstr "" + +msgid "Default time to live" +msgstr "" + +msgid "Time to live for records without explicit TTL definition" +msgstr "" + +msgid "setting Authoritative nameserver" +msgstr "" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "" + +msgid "" +msgstr "" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" + +#, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "" + +msgid "is required" +msgstr "" + +#, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "" + +msgid "DNS resource record" +msgstr "" + +msgid "DNS resource records" +msgstr "" + +msgid "DNS Resource Records" +msgstr "" + +msgid "DNS Resource Record" +msgstr "" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" + +msgid "only master zones can contain records" +msgstr "" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" + +msgid "DNS zone root record cannot be renamed" +msgstr "" + +msgid "DNS records can be only updated one at a time" +msgstr "" + +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Found '%(value)s'" +msgstr "" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "" + +msgid "DNS configuration options" +msgstr "" + +msgid "DNS Global Configuration" +msgstr "" + +msgid "IPA DNS version" +msgstr "" + +msgid "List of IPA masters configured as DNS servers" +msgstr "" + +msgid "IPA server configured as DNSSec key master" +msgstr "" + +msgid "Global DNS configuration is empty" +msgstr "" + +msgid "DNS forward zone" +msgstr "" + +msgid "DNS forward zones" +msgstr "" + +msgid "DNS Forward Zones" +msgstr "" + +msgid "DNS Forward Zone" +msgstr "" + +msgid "Please specify forwarders." +msgstr "" + +#, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "" + +msgid "IPA DNS records" +msgstr "" + +msgid "IPA location records" +msgstr "" + +msgid "Update location and IPA server DNS records" +msgstr "" + +msgid "Result of the command" +msgstr "" + +msgid "Dry run" +msgstr "" + +msgid "Do not update records only return expected records" +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +msgid "DNS Servers" +msgstr "" + +msgid "DNS Server" +msgstr "" + +msgid "DNS Server name" +msgstr "" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +msgid "Search for DNS servers." +msgstr "" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "" + +msgid "Delete a DNS server" +msgstr "" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" "\n" "EXAMPLES:\n" "\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" "\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" "\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" "\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" "\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" msgstr "" -msgid "sudo command group" +msgid "groups" msgstr "" -msgid "sudo command groups" +msgid "User Group" msgstr "" #, python-format -msgid "Added Sudo Command Group \"%(value)s\"" +msgid "Added group \"%(value)s\"" +msgstr "" + +msgid "gid cannot be set for external group" +msgstr "" + +msgid "attribute \"gidNumber\" not allowed with --nonposix" msgstr "" #, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" +msgid "Deleted group \"%(value)s\"" +msgstr "" + +msgid "privileged group" msgstr "" #, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" +msgid "Modified group \"%(value)s\"" msgstr "" #, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" msgstr[0] "" msgstr[1] "" +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" +msgstr "" + +msgid "HBAC Services" +msgstr "" + +msgid "HBAC Service Groups" +msgstr "" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "" + +msgid "Access time" +msgstr "" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "" + +msgid "HBAC Service" +msgstr "" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC service group" +msgstr "" + +msgid "HBAC service groups" +msgstr "" + +msgid "HBAC Service Group" +msgstr "" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Access granted: %s" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host" +msgstr "" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Serial Number" +msgstr "" + +msgid "Serial Number (hex)" +msgstr "" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + msgid "" "\n" "Groups of hosts.\n" @@ -14219,294 +16211,502 @@ msgstr "" msgid "Remove users that can manage members of this hostgroup." msgstr "" -#, python-format msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" msgstr "" msgid "" "\n" -"Set a user's password\n" +"ID ranges\n" "\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" "\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" +"There are two type of ID ranges which are both handled by this utility:\n" "\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" "\n" -"EXAMPLES:\n" +"Both types have the following attributes in common:\n" "\n" -" To reset your own password:\n" -" ipa passwd\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" "\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"and an ID range of a trusted domain may set\n" +" - auto-private-groups: [true|false|hybrid] automatic creation of private " +"groups\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" "\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" msgstr "" -msgid "The OTP if the user has a token configured" +msgid "ID Ranges" msgstr "" -#, python-format -msgid "Changed password for \"%(value)s\"" +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +#, fuzzy +msgid "Auto private groups" +msgstr "ਪੁਰਾਣੀ ਵਾਲਟ ਪ੍ਰਾਈਵੇਟ ਕੁੰਜੀ" + +msgid "Auto creation of private groups, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" msgstr "" msgid "" "\n" -"Permissions\n" -msgstr "" - -msgid "" +" Add new ID range.\n" "\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -msgid "" +" To add a new ID range you always have to specify\n" "\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" +" --base-id\n" +" --range-size\n" "\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" +" Additionally\n" "\n" -"A permission is made up of a number of different parts:\n" +" --rid-base\n" +" --secondary-rid-base\n" "\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" +" may be given for a new ID range for the local domain while\n" "\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" +" --auto-private-groups\n" "\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" +" may be given for a new ID range for a trusted AD domain and\n" "\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" +" --rid-base\n" +" --dom-sid\n" "\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -msgid "" +" must be given to add a new range for a trusted AD domain.\n" "\n" -"Managed permissions\n" +msgstr "" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" msgstr "" msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" msgstr "" msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" msgstr "" msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." msgstr "" msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" +"private-groups is specified" msgstr "" -msgid "must be enclosed in parentheses" +msgid "Options secondary-rid-base and rid-base must be used together" msgstr "" -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -#, python-format -msgid "Deprecated; use %s" -msgstr "" - -msgid "ACI" -msgstr "" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, python-format -msgid "Entry %s not found" -msgstr "" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgid "Primary RID range and secondary RID range cannot overlap" msgstr "" msgid "" -"cannot specify full target filter and extra target filter simultaneously" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." msgstr "" #, python-format -msgid "option was renamed; use %s" +msgid "Deleted ID range \"%(value)s\"" msgstr "" #, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, python-format -msgid "%s: group not found" -msgstr "" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" -msgstr "" - -msgid "Bad search filter" -msgstr "" - -#, python-format -msgid "Entry %s does not exist" -msgstr "" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, python-format -msgid "Added permission \"%(value)s\"" -msgstr "" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "" - -msgid "cannot delete managed permissions" -msgstr "" - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "" - -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" msgstr[0] "" msgstr[1] "" -#, python-brace-format -msgid "{role}: role not found" +msgid "" +"Modify ID range.\n" +"\n" msgstr "" -#, python-brace-format -msgid "{attr}: no such attribute" +#, python-format +msgid "Modified ID range \"%(value)s\"" msgstr "" msgid "" -"\n" -"Session Support for IPA\n" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" msgstr "" +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +msgid "ID View" +msgstr "" + +msgid "system ID View" +msgstr "" + +msgid "ID Views" +msgstr "" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +msgid "Hosts the view applies to" +msgstr "" + +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "" + +msgid "Delete an ID override." +msgstr "" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "" + +msgid "Modify an ID override." +msgstr "" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + msgid "Internationalization messages" msgstr "" @@ -14522,9 +16722,6 @@ msgstr "" msgid "Are you sure you want to rebuild auto membership?" msgstr "" -msgid "Automember rebuild membership task completed" -msgstr "" - msgid "Are you sure you want to proceed with the action?" msgstr "" @@ -15417,9 +17614,6 @@ msgstr "" msgid "Affiliation Changed" msgstr "" -msgid "CA" -msgstr "" - msgid "CA Compromise" msgstr "" @@ -15629,9 +17823,6 @@ msgstr "" msgid "Add certificate mapping data" msgstr "" -msgid "Certificate mapping data" -msgstr "" - msgid "Configuration string" msgstr "" @@ -15648,6 +17839,9 @@ msgstr "" msgid "Remove certificate identity mapping rules" msgstr "" +msgid "Version" +msgstr "" + msgid "Group Options" msgstr "" @@ -16357,9 +18551,6 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "" -msgid "Host" -msgstr "" - msgid "Netgroup Settings" msgstr "" @@ -16478,6 +18669,9 @@ msgstr "" msgid "Add password policy" msgstr "" +msgid "Password Policy" +msgstr "" + msgid "Remove password policies" msgstr "" @@ -16505,9 +18699,6 @@ msgstr "" msgid "Remove ID ranges" msgstr "" -msgid "Active Directory domain" -msgstr "" - msgid "Active Directory domain with POSIX attributes" msgstr "" @@ -16532,6 +18723,9 @@ msgstr "" msgid "Remove RADIUS servers" msgstr "" +msgid "Realm Domains" +msgstr "" + msgid "Check DNS" msgstr "" @@ -16704,6 +18898,33 @@ msgstr "" msgid "User categories" msgstr "" +msgid "Add subid" +msgstr "" + +msgid "Assigned subids" +msgstr "" + +msgid "DNA remaining" +msgstr "" + +msgid "SubGID range size" +msgstr "" + +msgid "SubGID range start" +msgstr "" + +msgid "SubUID range size" +msgstr "" + +msgid "SubUID range start" +msgstr "" + +msgid "Remaining subids" +msgstr "" + +msgid "Subordinate ID Statistics" +msgstr "" + msgid "Add sudo command" msgstr "" @@ -16992,6 +19213,14 @@ msgstr "" msgid "Add user '${primary_key}' into sudo rules" msgstr "" +msgid "Auto assign subordinate ids" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to auto-assign a subordinate id to user ${object}?" +msgstr "" + msgid "Contact Settings" msgstr "" @@ -17446,9 +19675,6 @@ msgstr "" msgid "Authentication" msgstr "" -msgid "Automember" -msgstr "" - msgid "Automount" msgstr "" @@ -17473,6 +19699,9 @@ msgstr "" msgid "Role-Based Access Control" msgstr "" +msgid "Subordinate IDs" +msgstr "" + msgid "Sudo" msgstr "" @@ -17585,319 +19814,10 @@ msgstr "" msgid "Unsupported value" msgstr "" -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -#, fuzzy -msgid "invalid attribute name" -msgstr "ਗ਼ਲਤ ਵਾਲਟ ਕਿਸਮ" - -msgid "invalid port number" -msgstr "" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" -msgstr "" - #, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -#, python-brace-format msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Access granted: %s" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." msgstr "" msgid "kerberos ticket policy settings" @@ -18064,6 +19984,1762 @@ msgstr "" msgid "Servers in location" msgstr "" +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +msgid "netgroups" +msgstr "" + +msgid "Netgroup" +msgstr "" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +msgid "URI" +msgstr "" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "" + +msgid "cannot be empty" +msgstr "" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"If the user authentication method is set to password+OTP, the user should\n" +"pass the --otp option when resetting the password.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To reset your own password when password+OTP is set as authentication " +"method:\n" +" ipa passwd --otp\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +msgid "The OTP if the user has a token configured" +msgstr "" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Permissions\n" +msgstr "" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +msgid "" +"\n" +"Managed permissions\n" +msgstr "" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "must be enclosed in parentheses" +msgstr "" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "" + +#, python-format +msgid "Deprecated; use %s" +msgstr "" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, python-format +msgid "Entry %s not found" +msgstr "" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, python-format +msgid "option was renamed; use %s" +msgstr "" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, python-format +msgid "%s: group not found" +msgstr "" + +msgid "target and targetgroup are mutually exclusive" +msgstr "" + +msgid "subtree and type are mutually exclusive" +msgstr "" + +msgid "Bad search filter" +msgstr "" + +#, python-format +msgid "Entry %s does not exist" +msgstr "" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, python-format +msgid "Added permission \"%(value)s\"" +msgstr "" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "" + +msgid "cannot delete managed permissions" +msgstr "" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "" + +#, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +#, fuzzy +msgid "invalid attribute name" +msgstr "ਗ਼ਲਤ ਵਾਲਟ ਕਿਸਮ" + +msgid "invalid port number" +msgstr "" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "Role" +msgstr "" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"API Schema\n" +msgstr "" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +msgid "Documentation" +msgstr "" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +msgid "Help topic" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +msgid "Method name" +msgstr "" + +msgid "Display information about a command." +msgstr "" + +msgid "Search for commands." +msgstr "" + +msgid "Return command defaults" +msgstr "" + +#, python-brace-format +msgid "{oname}: {command_name} not found" +msgstr "" + +msgid "Display information about a class." +msgstr "" + +msgid "Search for classes." +msgstr "" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +msgid "CLI name" +msgstr "" + +msgid "Confirm (password)" +msgstr "" + +msgid "Default" +msgstr "" + +msgid "Default from" +msgstr "" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" +msgstr "" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command output." +msgstr "" + +msgid "Search for command outputs." +msgstr "" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "self service permission" +msgstr "" + +msgid "self service permissions" +msgstr "" + +msgid "Self Service Permissions" +msgstr "" + +msgid "Self Service Permission" +msgstr "" + +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +msgid "SELinux User Map rule" +msgstr "" + +msgid "SELinux User Map rules" +msgstr "" + +msgid "SELinux User Maps" +msgstr "" + +msgid "SELinux User Map" +msgstr "" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "" + +#, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +msgid "server roles" +msgstr "" + +msgid "IPA Server Roles" +msgstr "" + +msgid "IPA Server Role" +msgstr "" + +msgid "IPA server role name" +msgstr "" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "IPA role name" +msgstr "" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +#, python-format +msgid "authentication indicators not allowed in service \"%s\"" +msgstr "" + +msgid "Malformed principal" +msgstr "" + +msgid "{} is required by the IPA master" +msgstr "" + +msgid "service" +msgstr "" + +msgid "services" +msgstr "" + +msgid "Service principal alias" +msgstr "" + +msgid "Base-64 encoded service certificate" +msgstr "" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +msgid "Add a new IPA service." +msgstr "" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "" + +msgid "force principal name even if host not in DNS" +msgstr "" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +msgid "Add a new SMB service." +msgstr "" + +msgid "SMB service NetBIOS name" +msgstr "" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to a service" +msgstr "" + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a service" +msgstr "" + +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Subordinate ids\n" +"\n" +"Manage subordinate user and group ids for users\n" +"\n" +"EXAMPLES:\n" +"\n" +" Auto-assign a subordinate id range to current user\n" +" ipa subid-generate\n" +"\n" +" Auto-assign a subordinate id range to user alice:\n" +" ipa subid-generate --owner=alice\n" +"\n" +" Find subordinate ids for user alice:\n" +" ipa subid-find --owner=alice\n" +"\n" +" Match entry by any subordinate uid in range:\n" +" ipa subid-match --subuid=2147483649\n" +msgstr "" + +msgid "Subordinate id" +msgstr "" + +msgid "Subordinate ids" +msgstr "" + +msgid "Subordinate id description" +msgstr "" + +msgid "Owning user of subordinate id entry" +msgstr "" + +msgid "Start value for subordinate user ID (subuid) range" +msgstr "" + +msgid "Subordinate user ID count" +msgstr "" + +msgid "Start value for subordinate group ID (subgid) range" +msgstr "" + +msgid "Subordinate group ID count" +msgstr "" + +#, python-format +msgid "" +"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." +msgstr "" + +#, python-format +msgid "'%(dn)s is not a valid user" +msgstr "" + +msgid "subgidnumber must be equal to subuidnumber" +msgstr "" + +msgid "Add a new subordinate id." +msgstr "" + +#, python-format +msgid "Added subordinate id \"%(value)s\"" +msgstr "" + +msgid "Delete a subordinate id." +msgstr "" + +#, python-format +msgid "Deleted subordinate id \"%(value)s\"" +msgstr "" + +msgid "Modify a subordinate id." +msgstr "" + +#, python-format +msgid "Modified subordinate id \"%(value)s\"" +msgstr "" + +msgid "Search for subordinate id." +msgstr "" + +#, python-format +msgid "%(count)d subordinate id matched" +msgid_plural "%(count)d subordinate ids matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about a subordinate id." +msgstr "" + +msgid "Generate and auto-assign subuid and subgid range to user entry" +msgstr "" + +msgid "Match users by any subordinate uid in their range" +msgstr "" + +msgid "SubUID match" +msgstr "" + +msgid "Match value for subordinate user ID" +msgstr "" + +msgid "Subordinate id statistics" +msgstr "" + +#, python-format +msgid "%(remaining)i remaining subordinate id ranges" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +msgid "sudo command" +msgstr "" + +msgid "sudo commands" +msgstr "" + +msgid "Sudo Commands" +msgstr "" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + msgid "" "\n" "Topology\n" @@ -18280,1002 +21956,6 @@ msgid "" " replication agreements\n" msgstr "" -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -msgid "sudo command" -msgstr "" - -msgid "sudo commands" -msgstr "" - -msgid "Sudo Commands" -msgstr "" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -msgid "Self Service Permissions" -msgstr "" - -msgid "Self Service Permission" -msgstr "" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - -msgid "A list of ACI values" -msgstr "" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -msgid "ACI prefix is required" -msgstr "" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "groups" -msgstr "" - -msgid "User Group" -msgstr "" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "" - -msgid "privileged group" -msgstr "" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -msgid "Not a managed group" -msgstr "" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -msgid "automount location" -msgstr "" - -msgid "automount locations" -msgstr "" - -msgid "Automount Locations" -msgstr "" - -msgid "Automount Location" -msgstr "" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "automount map" -msgstr "" - -msgid "automount maps" -msgstr "" - -msgid "Automount Maps" -msgstr "" - -msgid "Automount Map" -msgstr "" - -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Automount key object." -msgstr "" - -msgid "automount key" -msgstr "" - -msgid "automount keys" -msgstr "" - -msgid "Automount Keys" -msgstr "" - -msgid "Automount Key" -msgstr "" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, python-format -msgid "key named %(key)s already exists" -msgstr "" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" -msgstr[1] "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -msgid "Delete an ID override." -msgstr "" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -msgid "Modify an ID override." -msgstr "" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -msgid "CA category" -msgstr "" - -msgid "CA category the ACL applies to" -msgstr "" - -msgid "CAs" -msgstr "" - -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, python-format -msgid "%i users or groups added." -msgstr "" - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, python-format -msgid "%i service added." -msgstr "" - -#, python-format -msgid "%i services added." -msgstr "" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - msgid "" "\n" "Cross-realm trusts\n" @@ -19443,12 +22123,6 @@ msgid "" " " msgstr "" -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - msgid "Type of trusted domain ID range, one of allowed values" msgstr "" @@ -19688,737 +22362,9 @@ msgid "" "itself" msgstr "" -msgid "" -"\n" -"DNS server configuration\n" +msgid "users" msgstr "" -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "" - -msgid "DNS servers" -msgstr "" - -msgid "DNS Servers" -msgstr "" - -msgid "DNS Server" -msgstr "" - -msgid "DNS Server name" -msgstr "" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -#, fuzzy -msgid "DNS is not configured" -msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" - -msgid "Modify DNS server configuration" -msgstr "" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "" - -msgid "Search for DNS servers." -msgstr "" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "" - -msgid "Delete a DNS server" -msgstr "" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "" - -msgid "HBAC Services" -msgstr "" - -msgid "HBAC Service" -msgstr "" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -msgid "HBAC service group" -msgstr "" - -msgid "HBAC service groups" -msgstr "" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" -msgstr "" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -msgid "Delegations" -msgstr "" - -msgid "Delegation" -msgstr "" - -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Role" -msgstr "" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -msgid "netgroups" -msgstr "" - -msgid "Netgroup" -msgstr "" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - #, python-format msgid "Added user \"%(value)s\"" msgstr "" @@ -20438,12 +22384,6 @@ msgstr "" msgid "Modified user \"%(value)s\"" msgstr "" -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" -msgstr[1] "" - #, python-format msgid "Undeleted user account \"%(value)s\"" msgstr "" @@ -20539,12 +22479,6 @@ msgstr "" msgid "Removed certificates from user \"%(value)s\"" msgstr "" -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - msgid "Add new principal alias to the user entry" msgstr "" @@ -20559,533 +22493,6 @@ msgstr "" msgid "Removed aliases from user \"%(value)s\"" msgstr "" -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Auto Membership is not configured" -msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" -msgstr "" - -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -msgid "SELinux User Maps" -msgstr "" - -msgid "SELinux User Map" -msgstr "" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "" - -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "" - msgid "" "\n" "Vaults\n" @@ -21428,108 +22835,156 @@ msgstr "" msgid "Checks if any of the servers has the KRA service enabled" msgstr "" -msgid "Member service groups" -msgstr "" - -msgid "Member HBAC service groups" -msgstr "" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" +msgid "operation not defined" msgstr "" #, python-format -msgid "container entry (%(container)s) not found" +msgid "not allowed to perform operation: %s" msgstr "" -#, python-format -msgid "%(parent)s: %(oname)s not found" +msgid "No such virtual command" msgstr "" -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -#, fuzzy -msgid "attribute is not configurable" -msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "Class of Service object used for linking policies with groups" msgstr "" #, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +msgid "password policy" +msgstr "" + +msgid "password policies" +msgstr "" + +msgid "Password Policies" +msgstr "" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +msgid "User check" +msgstr "" + +msgid "Check if the password contains the username" +msgstr "" + msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" msgstr "" -#, python-format -msgid "added attribute value to entry %(value)s" +msgid "Maximum password life must be equal to or greater than the minimum." msgstr "" -#, python-format -msgid "removed attribute values from entry %(value)s" +msgid "cannot delete global password policy" msgstr "" -msgid "one or more values to remove" +msgid "priority cannot be set on global policy" msgstr "" msgid "" @@ -21676,6 +23131,10 @@ msgstr "" msgid "Ignoring topology connectivity errors." msgstr "" +#, python-format +msgid "Failed to remove server from security domain: %s" +msgstr "" + msgid "Server has already been deleted" msgstr "" @@ -21713,1389 +23172,186 @@ msgstr "" msgid "" "\n" -"Manage Certificate Authorities\n" +"Sudo Rules\n" msgstr "" msgid "" "\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" msgstr "" msgid "" "\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" msgstr "" msgid "" "\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" +"Each option needs to be added separately and no validation is done whether\n" +"the option is known by sudo or is in a valid format. Environment variables\n" +"also need to be set individually. For example env_keep=\"FOO BAR\" in " +"sudoers\n" +"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" +"+=BAR.\n" msgstr "" msgid "" "\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" msgstr "" msgid "" "\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" msgstr "" msgid "" "\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" msgstr "" msgid "" "\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" msgstr "" msgid "" "\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" "\n" -" ipa ca-del puppet\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" msgstr "" -msgid "Certificate Authority" +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" msgstr "" -msgid "Certificate Authorities" +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" msgstr "" -msgid "Name for referencing the CA" +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" msgstr "" -msgid "Description of the purpose of the CA" +msgid "" +"\n" +" Set multiple default Sudo options:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate' --" +"sudooption mail_badpass\n" msgstr "" -msgid "Authority ID" +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" msgstr "" -msgid "Dogtag Authority ID" +msgid "this option has been deprecated." msgstr "" -msgid "Subject DN" +msgid "sudo rules" msgstr "" -msgid "Subject Distinguished Name" +msgid "Sudo Rules" msgstr "" -msgid "Issuer Distinguished Name" -msgstr "" - -msgid "Search for CAs." +msgid "Sudo Rule" msgstr "" #, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +msgid "command" +msgstr "" + +msgid "commands" +msgstr "" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +msgid "group runAs" +msgstr "" + +msgid "runAs groups" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" msgstr[0] "" msgstr[1] "" -msgid "Display the properties of a CA." +msgid "commands cannot be added when command category='all'" msgstr "" -msgid "Create a CA." +msgid "users cannot be added when runAs user or runAs group category='all'" msgstr "" #, python-format -msgid "Created CA \"%(value)s\"" +msgid "RunAsUser does not accept '%(name)s' as a user name" msgstr "" #, python-format -msgid "Insufficient 'add' privilege for entry '%s'." +msgid "RunAsUser does not accept '%(name)s' as a group name" msgstr "" #, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -msgid "IPA CA cannot be deleted" -msgstr "" - -msgid "Must be disabled first" -msgstr "" - -msgid "Modify CA configuration." -msgstr "" - -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -msgid "Disable a CA." -msgstr "" - -#, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "" - -msgid "IPA CA cannot be disabled" -msgstr "" - -msgid "Enable a CA." -msgstr "" - -#, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -msgid "URI" -msgstr "" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "" - -msgid "cannot be empty" -msgstr "" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "invalid IP network format" -msgstr "" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -msgid "invalid address format" -msgstr "" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -msgid "flags value: allowed interval 0-255" -msgstr "" - -msgid "iterations value: allowed interval 0-65535" -msgstr "" - -#, python-format -msgid "salt value: %(err)s" -msgstr "" - -msgid "invalid domain-name: not fully qualified" -msgstr "" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" - -#, python-format -msgid "%s record" -msgstr "" - -#, python-format -msgid "Raw %s records" -msgstr "" - -#, python-format -msgid "%s Record" -msgstr "" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -msgid "Invalid number of parts!" -msgstr "" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -msgid "Create reverse" -msgstr "" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" - -msgid "Exchanger" -msgstr "" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -msgid "Priority (order)" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Relative weight for entries with the same priority." -msgstr "" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Target Uniform Resource Identifier" -msgstr "" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" - -msgid "Managedby permission" -msgstr "" - -msgid "cannot be used when a zone is specified" -msgstr "" - -msgid "Only one zone type is allowed per zone name" -msgstr "" - -#, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "" - -#, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "" - -#, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "" - -msgid "DNS zone" -msgstr "" - -msgid "DNS zones" -msgstr "" - -msgid "DNS Zones" -msgstr "" - -msgid "DNS Zone" -msgstr "" - -msgid "Default time to live" -msgstr "" - -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -msgid "setting Authoritative nameserver" -msgstr "" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -msgid "" -msgstr "" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "" - -msgid "is required" -msgstr "" - -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "" - -msgid "DNS resource record" -msgstr "" - -msgid "DNS resource records" -msgstr "" - -msgid "DNS Resource Records" -msgstr "" - -msgid "DNS Resource Record" -msgstr "" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -msgid "only master zones can contain records" -msgstr "" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -msgid "DNS zone root record cannot be renamed" -msgstr "" - -msgid "DNS records can be only updated one at a time" -msgstr "" - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Found '%(value)s'" -msgstr "" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "" - -msgid "DNS configuration options" -msgstr "" - -msgid "DNS Global Configuration" -msgstr "" - -msgid "IPA DNS version" -msgstr "" - -msgid "List of IPA masters configured as DNS servers" -msgstr "" - -msgid "IPA server configured as DNSSec key master" -msgstr "" - -msgid "Global DNS configuration is empty" -msgstr "" - -msgid "DNS forward zone" -msgstr "" - -msgid "DNS forward zones" -msgstr "" - -msgid "DNS Forward Zones" -msgstr "" - -msgid "DNS Forward Zone" -msgstr "" - -msgid "Please specify forwarders." -msgstr "" - -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "" - -msgid "IPA DNS records" -msgstr "" - -msgid "IPA location records" -msgstr "" - -msgid "Update location and IPA server DNS records" -msgstr "" - -msgid "Result of the command" -msgstr "" - -msgid "Dry run" -msgstr "" - -msgid "Do not update records only return expected records" -msgstr "" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -msgid "Certificate Profile" -msgstr "" - -msgid "Certificate Profiles" -msgstr "" - -msgid "Profile configuration" -msgstr "" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -msgid "must be enabled only on a single master" +msgid "RunAsGroup does not accept '%(name)s' as a group name" msgstr "" msgid "Request must be a dict" @@ -23119,6 +23375,17 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + #, python-format msgid "" "\n" @@ -23138,36 +23405,6 @@ msgstr "" msgid "Topology does not allow server %(server)s to replicate with servers:" msgstr "" -#, fuzzy -msgid "Trusting forest" -msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" - -#, fuzzy -msgid "Trusted forest" -msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Unknown" -msgstr "" - -msgid "Non-Active Directory domain" -msgstr "" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - msgid "" "\n" "Classes to manage trust joins using DCE-RPC calls\n" @@ -23176,9 +23413,15 @@ msgid "" "and Samba4 python bindings.\n" msgstr "" +msgid "CIFS server denied your credentials" +msgstr "CIFS ਨੇ ਤੁਹਾਡੀ ਸਨਦ ਤੋਂ ਇਨਕਾਰ ਕੀਤਾ" + msgid "communication with CIFS server was unsuccessful" msgstr "" +msgid "AD domain controller" +msgstr "AD ਡੋਮੇਨ ਕੰਟਰੋਲਰ" + msgid "unsupported functional level" msgstr "" @@ -23204,6 +23447,12 @@ msgid "" "\" (both may be \"None\")" msgstr "" +msgid "no trusted domain is configured" +msgstr "ਕੋਈ ਟਰੱਸਟਡ ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਕੀਤੀ ਹੈ" + +msgid "domain is not configured" +msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" + msgid "SID is not valid" msgstr "" @@ -23213,6 +23462,12 @@ msgstr "" msgid "SID does not match any trusted domain" msgstr "" +msgid "Trust setup" +msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" + +msgid "Our domain is not configured" +msgstr "ਸਾਡੀ ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" + #, fuzzy msgid "No trusted domain is not configured" msgstr "ਕੋਈ ਟਰੱਸਟਡ ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਕੀਤੀ ਹੈ" @@ -23300,6 +23555,9 @@ msgstr "" msgid "must equal %r" msgstr "" +msgid "Hello world" +msgstr "ਹੈਲੋ ਵਰਲਡ" + #, python-format msgid "%s: RADIUS proxy server not found" msgstr "" @@ -23311,6 +23569,36 @@ msgstr "" msgid "must be at least 1" msgstr "" +msgid "Out of memory\n" +msgstr "ਮੈਮੋਰੀ ਖ਼ਤਮ ਹੋਈ\n" + +msgid "Warning unrecognized encryption type.\n" +msgstr "ਚੇਤਾਵਨੀ ਅਣਪਛਾਤੀ ਇੰਕ੍ਰਿਪਸ਼ਨ ਕਿਸਮ।\n" + +msgid "Warning unrecognized salt type.\n" +msgstr "ਚੇਤਾਵਨੀ ਅਣਪਛਾਤੀ salt ਕਿਸਮ ਹੈ।\n" + +#, fuzzy +msgid "Out of memory!?\n" +msgstr "ਮੈਮੋਰੀ ਖ਼ਤਮ ਹੋਈ!\n" + +msgid "Enctype comparison failed!\n" +msgstr "" + +msgid "Password is too long!\n" +msgstr "" + +#, fuzzy +msgid "Failed to create random key!\n" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +msgid "Failed to create key!\n" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, fuzzy +msgid "Bad or unsupported salt type.\n" +msgstr "ਚੇਤਾਵਨੀ ਅਣਪਛਾਤੀ salt ਕਿਸਮ ਹੈ।\n" + #, c-format msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" msgstr "" @@ -23337,21 +23625,3 @@ msgstr "" msgid "Unable to initialize STARTTLS session\n" msgstr "" - -#, fuzzy -msgid "Out of memory!?\n" -msgstr "ਮੈਮੋਰੀ ਖ਼ਤਮ ਹੋਈ!\n" - -msgid "Enctype comparison failed!\n" -msgstr "" - -msgid "Password is too long!\n" -msgstr "" - -#, fuzzy -msgid "Failed to create random key!\n" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, fuzzy -msgid "Bad or unsupported salt type.\n" -msgstr "ਚੇਤਾਵਨੀ ਅਣਪਛਾਤੀ salt ਕਿਸਮ ਹੈ।\n" diff --git a/po/pl.po b/po/pl.po index b54d9f1b6..0b5942d8a 100644 --- a/po/pl.po +++ b/po/pl.po @@ -17,600 +17,401 @@ msgstr "" "|| n%100>=20) ? 1 : 2;\n" "X-Generator: Weblate 4.6\n" -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "%(attr)s nie zawiera „%(value)s”" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "Pasuje %(count)d ACI" -msgstr[1] "Pasują %(count)d ACI" -msgstr[2] "Pasuje %(count)d ACI" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "Pasuje %(count)d grupa" -msgstr[1] "Pasują %(count)d grupy" -msgstr[2] "Pasuje %(count)d grup" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "Pasuje %(count)d komputer" -msgstr[1] "Pasuje %(count)d komputery" -msgstr[2] "Pasuje %(count)d komputerów" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "Pasuje %(count)d grupa komputerów" -msgstr[1] "Pasują %(count)d grupy komputerów" -msgstr[2] "Pasuje %(count)d grup komputerów" - -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "Wczytano %(count)d wtyczkę" -msgstr[1] "Wczytano %(count)d wtyczki" -msgstr[2] "Wczytano %(count)d wtyczek" - -#, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "Pasuje %(count)d użytkownik" -msgstr[1] "Pasuje %(count)d użytkowników" -msgstr[2] "Pasuje %(count)d użytkowników" - -#, python-format -msgid "%(count)d variables" -msgstr "%(count)d zmiennych" - -#, python-format -msgid "%(info)s" -msgstr "%(info)s" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "%(parent)s: nie odnaleziono %(oname)s" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "%(pkey)s: nie odnaleziono %(oname)s" - -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" - -msgid "A description of this command" -msgstr "Opis tego polecenia" - -msgid "A description of this host" -msgstr "Opis tego komputera" - -msgid "A description of this host-group" -msgstr "Opis tej grupy komputerów" - -msgid "A description of this role-group" -msgstr "Opis tej grupy rol" - -msgid "A dictionary representing an LDAP entry" -msgstr "Słownik reprezentujący wpis LDAP" - -msgid "A group may not be a member of itself" -msgstr "Grupa nie może być własnym elementem" - -msgid "A group may not be added as a member of itself" -msgstr "Nie można dodać grupy jako elementu jej samej" - -msgid "A list of ACI values" -msgstr "Lista wartości ACI" - -msgid "A list of LDAP entries" -msgstr "Lista wpisów LDAP" - -msgid "ACI name" -msgstr "Nazwa ACI" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "Nie odnaleziono ACI o nazwie „%s”" - -msgid "ACIs" -msgstr "ACI" - -msgid "Access time" -msgstr "Czas dostępu" - -msgid "Account Settings" -msgstr "Ustawienia konta" - -msgid "Active zone" -msgstr "Aktywna strefa" - -msgid "Add" -msgstr "Dodaj" - -msgid "Add and Close" -msgstr "Dodaj i zamknij" - -msgid "Add and Edit" -msgstr "Dodaj i edytuj" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "Dodano grupę „%(value)s”" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "Dodano grupę komputerów „%(value)s”" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -msgid "Administrator e-mail address" -msgstr "Adres e-mail administratora" - -msgid "All commands should at least have a result" -msgstr "Wszystkie polecenia powinny powiadać przynajmniej wynik" - -msgid "Apply ACI to your own entry (self)" -msgstr "Zastosowanie ACI do własnego wpisu („self”)" - -msgid "Asks for a non-random password to use for the principal" -msgstr "Pyta o nielosowe hasło do użycia z naczelnikiem" - -msgid "Attribute" -msgstr "Atrybut" - -msgid "Attributes" -msgstr "Atrybuty" - -msgid "Automount" -msgstr "Automatyczne montowanie" - -msgid "Automount Keys" -msgstr "Automatyczne montowanie kluczy" - -msgid "Automount Maps" -msgstr "Automatyczne montowanie map" - -msgid "BIND update policy" -msgstr "Polityka aktualizacji BIND" - -msgid "Back to Top" -msgstr "Wróć na górę" - -msgid "Bad format in credentials cache" -msgstr "Błędny format w pamięci podręcznej danych uwierzytelniających" - -msgid "Base-64 encoded server certificate" -msgstr "Certyfikat serwera zakodowany za pomocą Base-64" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "Dekodowanie base64 się nie powiodło: %(reason)s" - -msgid "Bind DN" -msgstr "DN dowiązania" - -msgid "Cancel" -msgstr "Anuluj" - -msgid "Cannot resolve KDC for requested realm" -msgstr "Nie można rozwiązać KDC dla żądanego obszaru" - -msgid "Certificate" -msgstr "Certyfikat" - -msgid "Certificate Revoked" -msgstr "Odrzucono certyfikat" - -msgid "Certificate Subject base" -msgstr "Podstawa tematu certyfikatu" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "Błąd formatu certyfikatu: %(error)s" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "Nie można ukończyć działania na certyfikacie: %(error)s" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "Zmieniono hasło dla „%(value)s”" - -msgid "Character classes" -msgstr "Klasy znaków" - -msgid "City" -msgstr "Miasto" - -msgid "Class" -msgstr "Klasa" - -msgid "Close" -msgstr "Zamknij" +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "nie można otworzyć pliku konfiguracji %s\n" #, c-format -msgid "Closing keytab failed\n" -msgstr "Zamknięcie tablicy kluczy się nie powiodło\n" +msgid "cannot stat() configuration file %s\n" +msgstr "nie można wykonać stat() na pliku konfiguracji %s\n" -msgid "Comma separated encryption types list" -msgstr "Lista typów szyfrowania oddzielonych przecinkami" +#, fuzzy, c-format +msgid "out of memory\n" +msgstr "Brak pamięci\n" -msgid "Command not implemented" -msgstr "Polecenie nie jest zaimplementowane" +#, c-format +msgid "read error\n" +msgstr "błąd odczytu\n" -msgid "Commands" -msgstr "Polecenia" +#, c-format +msgid "Unable to parse principal name\n" +msgstr "Nie można przetworzyć nazwy naczelnika\n" -msgid "Configuration" -msgstr "Konfiguracja" - -msgid "Contact this specific KDC Server" -msgstr "Kontaktuje się z konkretnym serwerem KDC" - -msgid "Continuous mode: Don't stop on errors." -msgstr "Tryb ciągły: bez zatrzymywania po błędach." - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "Utworzono ACI „%(value)s”" - -msgid "Credentials cache permissions incorrect" +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" msgstr "" -"Uprawnienia pamięci podręcznej danych uwierzytelniających są niepoprawne" - -msgid "DN to bind as if not using kerberos" -msgstr "DN do dowiązania, jeśli nie jest używany Kerberos" - -msgid "DNS" -msgstr "DNS" - -msgid "DNS Zone Settings" -msgstr "Ustawienia strefy DNS" - -msgid "DNS is not configured" -msgstr "DNS nie jest skonfigurowany" - -msgid "Data" -msgstr "Dane" - -msgid "Debugging output" -msgstr "Wyjście debugowania" - -msgid "Default group for new users" -msgstr "Domyślna grupa dla nowych użytkowników" - -msgid "Default shell" -msgstr "Domyślna powłoka" - -msgid "Default shell for new users" -msgstr "Domyślna powłoka dla nowych użytkowników" - -msgid "Default users group" -msgstr "Domyślna grupa użytkowników" - -msgid "Delete" -msgstr "Usuń" - -msgid "Delete all associated records" -msgstr "Usuń wszystkie powiązane wpisy" - -msgid "Delete all?" -msgstr "Usunąć wszystko?" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "Usunięto ACI „%(value)s”" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "Usunięto grupę „%(value)s”" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "Usunięto komputer „%(value)s”" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "Usunięto grupę komputerów „%(value)s”" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "Usunięto użytkownika „%(value)s”" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" -"Usuwanie zarządzanej grupy nie jest dozwolone. Musi zostać najpierw " -"odłączona." - -msgid "Description" -msgstr "Opis" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "Odłączono grupę „%(value)s” od użytkownika „%(value)s”" - -msgid "Dict of I18N messages" -msgstr "Słownik komunikatów umiędzynaradawiania" - -msgid "Dict of JSON encoded IPA Objects" -msgstr "Słownik obiektów IPA zakodowanych w formacie JSON" - -msgid "Dictionary mapping variable name to value" -msgstr "Nazwa zmiennej mapowania słownika do ustawienia jako wartość" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "Wyłączono konto użytkownika „%(value)s”" - -msgid "Display effective policy for a specific user" -msgstr "Wyświetlanie aktywnej polityki dla podanego użytkownika" - -msgid "Display user record for current Kerberos principal" -msgstr "Wyświetlenie wpisu użytkownika dla bieżącego naczelnika Kerberosa" - -msgid "Email address" -msgstr "Adres e-mail" - -msgid "Enabled" -msgstr "Włączone" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "Włączono konto użytkownika „%(value)s”" - -msgid "Encryption types to request" -msgstr "Typy szyfrowania do zażądania" - -msgid "Enctype comparison failed!\n" -msgstr "Porównanie typów szyfrowania się nie powiodło.\n" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "Proszę podać %(label)s ponownie, aby sprawdzić: " - -msgid "Error" -msgstr "Błąd" #, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "" -"Błąd podczas uzyskiwania początkowych danych uwierzytelniających: %s.\n" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "Błąd podczas rozwiązywania tablicy kluczy: %s.\n" - -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "" -"Błąd podczas przechowywania danych uwierzytelniających w pamięci podręcznej: " -"%s.\n" - -msgid "External host" -msgstr "Zewnętrzny komputer" - -msgid "Failed members" -msgstr "Elementy, które się nie powiodły" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "Dodanie klucza do tablicy kluczy się nie powiodło\n" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" -"Dodanie użytkownika do domyślnej grupy się nie powiodło. Należy użyć " -"polecenia „ipa group-add-member”, aby dodać go ręcznie." - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "Zamknięcie tablicy kluczy się nie powiodło\n" - -#, c-format -msgid "Failed to create control!\n" -msgstr "Utworzenie kontroli się nie powiodło.\n" - -#, c-format -msgid "Failed to create key material\n" -msgstr "Utworzenie materiału klucza się nie powiodło\n" - -msgid "Failed to create key!\n" -msgstr "Utworzenie klucza się nie powiodło.\n" - -msgid "Failed to create random key!\n" -msgstr "Utworzenie losowego klucza się nie powiodło.\n" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "Otwarcie tablicy kluczy się nie powiodło\n" +msgid "Removing principal %s\n" +msgstr "Usuwanie naczelnika %s\n" #, c-format msgid "Failed to open keytab\n" msgstr "Otwarcie tablicy kluczy się nie powiodło\n" -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "Dekodowanie żądania podpisywania certyfikatu się nie powiodło: %s" - -msgid "False if migration mode was disabled." -msgstr "Fałsz, jeśli wyłączono tryb migracji." - -msgid "Fax Number" -msgstr "Numer faksu" - -#, python-format -msgid "File %(file)s not found" -msgstr "Nie odnaleziono pliku %(file)s" - -msgid "Filter" -msgstr "Filtr" - -msgid "Find" -msgstr "Znajdź" - -msgid "Fingerprint (SHA1)" -msgstr "Odcisk (SHA1)" - -msgid "First name" -msgstr "Imię" - -msgid "Forward to server instead of running locally" -msgstr "Przekazanie do serwera zamiast uruchamiania lokalnie" - -#, python-format -msgid "Found '%(value)s'" -msgstr "Odnaleziono „%(value)s”" - -msgid "Full name" -msgstr "Pełna nazwa" - -msgid "GID" -msgstr "GID" - -msgid "GID (use this option to set it manually)" -msgstr "GID (ta opcja umożliwia jego ręczne ustawienie)" - -msgid "Group" -msgstr "Grupa" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "Grupa „%s” nie istnieje" - -msgid "Group container" -msgstr "Kontener grupy" - -msgid "Group description" -msgstr "Opis grupy" - -msgid "Group name" -msgstr "Nazwa grupy" - -msgid "Group to apply ACI to" -msgstr "Grupa, do której zastosować ACI" - -msgid "Groups" -msgstr "Grupy" - -msgid "HBAC service group description" -msgstr "Opis grupy usługi HBAC" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "Platforma sprzętowa komputera (np. Lenovo T61)" - -msgid "History size" -msgstr "Rozmiar historii" - -msgid "Home directory" -msgstr "Katalog domowy" - -msgid "Home directory base" -msgstr "Podstawa katalogu domowego" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "Nie odnaleziono komputera „%(host)s”" - -msgid "Host Groups" -msgstr "Grupy komputerów" - -msgid "Host Name" -msgstr "Nazwa komputera" - -msgid "Host category" -msgstr "Kategoria komputerów" - -msgid "Host category the rule applies to" -msgstr "Kategoria komputerów, do których zastosowywana jest reguła" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "Platforma sprzętowa komputera (np. „Lenovo T61”)" +#, c-format +msgid "principal not found\n" +msgstr "nie odnaleziono naczelnika\n" #, c-format -msgid "Host is already joined.\n" -msgstr "Komputer jest już dołączony.\n" +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "Lokalizacja komputera (np. „Baltimore, MD”)" +#, c-format +msgid "Unable to remove entry\n" +msgstr "Nie można usunąć wpisu\n" -msgid "Host location (e.g. \"Lab 2\")" -msgstr "Położenie komputera (np. „Laboratorium nr 2”)" +#, c-format +msgid "kvno %d\n" +msgstr "kvno %d\n" -msgid "Host name" -msgstr "Nazwa komputera" +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "System operacyjny komputera i jego wersja (np. „Fedora 9”)" +#, fuzzy, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "Utworzenie kontroli się nie powiodło.\n" -msgid "Host-group" -msgstr "Grupa komputerów" +#, c-format +msgid "Unable to parse principal\n" +msgstr "Nie można przetworzyć naczelnika\n" -msgid "Hostname" -msgstr "Nazwa komputera" +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" -msgid "Hosts" -msgstr "Komputery" +#, fuzzy, c-format +msgid "realm not found\n" +msgstr "nie odnaleziono naczelnika\n" -msgid "IPA Server to use" -msgstr "Serwer IPA do użycia" +msgid "Print debugging information" +msgstr "Wyświetlanie informacji o debugowaniu" -msgid "IPA unique ID" -msgstr "Unikalny identyfikator IPA" +msgid "Debugging output" +msgstr "Wyjście debugowania" -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "Niewystarczający dostęp: %(info)s" +#, fuzzy +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" +"Naczelnik, dla którego uzyskać tablicę kluczy (np.: ftp/ftp.example." +"com@EXAMPLE.COM)" -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "Nieprawidłowe żądanie JSON-RPC: %(error)s" +msgid "Kerberos Service Principal Name" +msgstr "Nazwa naczelnika usługi Kerberos" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "Nazwa pliku tablicy kluczy" + +msgid "Remove all principals in this realm" +msgstr "Usuwa wszystkich naczelników w tym obszarze" + +msgid "Realm name" +msgstr "Nazwa obszaru" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "Zainicjowanie kontekstu Kerberosa się nie powiodło\n" + +#, fuzzy, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "Otwarcie tablicy kluczy się nie powiodło\n" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "Zamknięcie tablicy kluczy się nie powiodło\n" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + +#, fuzzy, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "Zainicjowanie kontekstu Kerberosa się nie powiodło\n" + +#, fuzzy, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "Nie można przetworzyć naczelnika\n" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "Żadne klucze nie zostały zaakceptowane przez KDC\n" + +#, c-format +msgid "Out of memory \n" +msgstr "Brak pamięci \n" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "Nie można zainicjować biblioteki LDAP.\n" + +msgid "Simple bind failed\n" +msgstr "Proste dowiązanie się nie powiodło\n" + +#, fuzzy +msgid "SASL Bind failed\n" +msgstr "Proste dowiązanie się nie powiodło\n" + +#, fuzzy, c-format +msgid "Operation failed: %s\n" +msgstr "nie można otworzyć pliku konfiguracji %s\n" + +#, fuzzy, c-format +msgid "Failed to get result: %s\n" +msgstr "Utworzenie klucza się nie powiodło.\n" + +#, c-format +msgid "Timeout exceeded." +msgstr "" + +#, fuzzy, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "Zamknięcie tablicy kluczy się nie powiodło\n" + +#, fuzzy, c-format +msgid "Failed to parse result: %s\n" +msgstr "Otwarcie tablicy kluczy się nie powiodło\n" + +#, fuzzy, c-format +msgid "Missing reply control list!\n" +msgstr "Brak kontroli odpowiedzi.\n" + +#, c-format +msgid "Missing reply control!\n" +msgstr "Brak kontroli odpowiedzi.\n" + +#, c-format +msgid "Out of Memory!\n" +msgstr "Brak pamięci.\n" + +#, c-format +msgid "Failed to create control!\n" +msgstr "Utworzenie kontroli się nie powiodło.\n" + +#, fuzzy, c-format +msgid "Failed to bind to server!\n" +msgstr "Utworzenie klucza się nie powiodło.\n" + +#, fuzzy, c-format +msgid "Failed to get keytab!\n" +msgstr "Otwarcie tablicy kluczy się nie powiodło\n" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "ber_init() się nie powiodło, nieprawidłowa kontrola?\n" + +#, fuzzy, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "ber_init() się nie powiodło, nieprawidłowa kontrola?\n" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "" + +#, fuzzy, c-format +msgid "Failed to retrieve any keys" +msgstr "Utworzenie losowego klucza się nie powiodło.\n" + +#, fuzzy +msgid "Failed to decode control reply!\n" +msgstr "Utworzenie kontroli się nie powiodło.\n" + +#, fuzzy, c-format +msgid "Passwords do not match!\n" +msgstr "Hasła się nie zgadzają." + +#, fuzzy, c-format +msgid "Failed to open config file %s\n" +msgstr "nie można otworzyć pliku konfiguracji %s\n" + +#, fuzzy, c-format +msgid "Failed to parse config file %s\n" +msgstr "nie można otworzyć pliku konfiguracji %s\n" + +#, fuzzy +msgid "Failed to resolve symlink to keytab.\n" +msgstr "Otwarcie tablicy kluczy się nie powiodło\n" + +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" + +msgid "Print as little as possible" +msgstr "Wyświetla tak mało, jak to możliwe" + +msgid "Output only on errors" +msgstr "Wyświetla tylko błędy" + +msgid "Output debug info" +msgstr "" + +msgid "Contact this specific KDC Server" +msgstr "Kontaktuje się z konkretnym serwerem KDC" + +msgid "Server Name" +msgstr "Nazwa serwera" + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" +"Naczelnik, dla którego uzyskać tablicę kluczy (np.: ftp/ftp.example." +"com@EXAMPLE.COM)" + +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" + +msgid "Encryption types to request" +msgstr "Typy szyfrowania do zażądania" + +msgid "Comma separated encryption types list" +msgstr "Lista typów szyfrowania oddzielonych przecinkami" + +msgid "Show the list of permitted encryption types and exit" +msgstr "Wyświetla listę dozwolonych typów szyfrowania i kończy działanie" + +msgid "Permitted Encryption Types" +msgstr "Dozwolone typy szyfrowania" + +msgid "Asks for a non-random password to use for the principal" +msgstr "Pyta o nielosowe hasło do użycia z naczelnikiem" + +msgid "LDAP DN" +msgstr "DN LDAP" + +msgid "DN to bind as if not using kerberos" +msgstr "DN do dowiązania, jeśli nie jest używany Kerberos" + +msgid "LDAP password" +msgstr "Hasło LDAP" + +msgid "password to use if not using kerberos" +msgstr "hasło do użycia, jeśli nie jest używany Kerberos" + +#, fuzzy +msgid "Prompt for LDAP password" +msgstr "Hasło LDAP" + +msgid "Path to the IPA CA certificate" +msgstr "" + +#, fuzzy +msgid "IPA CA certificate" +msgstr "Certyfikat" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" + +msgid "url" +msgstr "" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" + +msgid "GSSAPI|EXTERNAL" +msgstr "" + +msgid "Retrieve current keys without changing them" +msgstr "" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "Brak typów szyfrowania preferowanych przez system?\n" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "Obsługiwane typy szyfrowania:\n" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "Ostrzeżenie: przekonwertowanie typu (#%d) się nie powiodło\n" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +#, fuzzy +msgid "Enter LDAP password" +msgstr "Hasło LDAP" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "" + +#, c-format +msgid "DNS discovery for domain %s\n" +msgstr "" + +#, c-format +msgid "Discovered server %s\n" +msgstr "" + +#, c-format +msgid "Using discovered server %s\n" +msgstr "" + +#, c-format +msgid "DNS Discovery failed\n" +msgstr "" + +#, c-format +msgid "Using server from config %s\n" +msgstr "" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "" + +#, c-format +msgid "Using provided server %s\n" +msgstr "" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "" + +msgid "New Principal Password" +msgstr "Nowe hasło naczelnika" + +msgid "Verify Principal Password" +msgstr "Sprawdzenie hasła naczelnika" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" +"Ostrzeżenie: typy salt nie są uwzględniane z losowymi hasłami (proszę " +"zobaczyć opcję -P)\n" #, c-format msgid "Invalid Service Principal Name\n" msgstr "Nieprawidłowa nazwa naczelnika usługi\n" -msgid "Issuer" -msgstr "Wydawca" - #, c-format msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" msgstr "" "Nie odnaleziono pamięci podręcznej danych uwierzytelniających. Istnieje " "zgłoszenie Kerberosa?\n" -msgid "Kerberos Service Principal Name" -msgstr "Nazwa naczelnika usługi Kerberos" - -msgid "Kerberos Ticket Policy" -msgstr "Polityka zgłoszeń Kerberosa" - #, c-format msgid "" "Kerberos User Principal not found. Do you have a valid Credential Cache?\n" @@ -619,972 +420,65 @@ msgstr "" "podręczna danych uwierzytelniających?\n" #, c-format -msgid "Kerberos context initialization failed\n" -msgstr "Zainicjowanie kontekstu Kerberosa się nie powiodło\n" +msgid "Failed to open Keytab\n" +msgstr "Otwarcie tablicy kluczy się nie powiodło\n" -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Błąd Kerberosa: %(major)s/%(minor)s" - -msgid "Kerberos principal" -msgstr "Naczelnik Kerberosa" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" msgstr "" -"Naczelnik Kerberosa %s już istnieje. Należy użyć polecenia „ipa user-mod”, " -"aby ustawić go ręcznie." -msgid "Kerberos principal name for this host" -msgstr "Nazwa naczelnika Kerberosa dla tego komputera" +#, c-format +msgid "Failed to create key material\n" +msgstr "Utworzenie materiału klucza się nie powiodło\n" -msgid "Key" -msgstr "Klucz" +#, fuzzy, c-format +msgid "Failed to get keytab\n" +msgstr "Otwarcie tablicy kluczy się nie powiodło\n" -msgid "Keytab" -msgstr "Tabela kluczy" +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "Dodanie klucza do tablicy kluczy się nie powiodło\n" -msgid "Keytab File Name" -msgstr "Nazwa pliku tablicy kluczy" +#, c-format +msgid "Failed to close the keytab\n" +msgstr "Zamknięcie tablicy kluczy się nie powiodło\n" #, c-format msgid "Keytab successfully retrieved and stored in: %s\n" msgstr "Pomyślnie pobrano tablicę kluczy i przechowano ją w: %s\n" -msgid "LDAP DN" -msgstr "DN LDAP" - -msgid "LDAP URI" -msgstr "Adres URI LDAP" - -msgid "LDAP URI of DS server to migrate from" -msgstr "Adres URI LDAP serwera DS, z którego migrować" - -msgid "LDAP password" -msgstr "Hasło LDAP" - -msgid "LDAP schema" -msgstr "Schemat LDAP" - -msgid "Last name" -msgstr "Nazwisko" - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "Dozwolony filtr LDAP (np. ou=Inżynieria)" - -msgid "Lists of objects migrated; categorized by type." -msgstr "Lista migrowanych obiektów, ułożonych w kategorie według typu." - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "" -"Lista obiektów, które nie mogły zostać migrowane, ułożonych w kategorie " -"według typu." - -msgid "Locality" -msgstr "Lokalizacja" - -msgid "Location" -msgstr "Położenie" - -msgid "Logged In As" -msgstr "Zalogowano jako" - -msgid "Login shell" -msgstr "Powłoka logowania" - -msgid "Mailing Address" -msgstr "Adres pocztowy" - -msgid "Manage password policy for specific group" -msgstr "Zarządzanie polityką haseł dla podanej grupy" - -msgid "Manage ticket policy for specific user" -msgstr "Zarządzanie polityką zgłoszeń dla podanego użytkownika" - -msgid "Map" -msgstr "Mapa" - -msgid "Max life" -msgstr "Maksymalny czas życia" - -msgid "Max lifetime (days)" -msgstr "Maksymalny czas życia (w dniach)" - -msgid "Max renew" -msgstr "Maksymalne odnowienie" - -msgid "Maximum number of entries returned" -msgstr "Maksymalna liczba zwróconych wpisów" - -msgid "Maximum password lifetime (in days)" -msgstr "Maksymalny czas życia hasła (w dniach)" - -msgid "Maximum renewable age (seconds)" -msgstr "Maksymalny czas, w którym możliwe jest odnowienie (sekundy)" - -msgid "Maximum ticket life (seconds)" -msgstr "Minimalny czas życia zgłoszenia (sekundy)" - -msgid "Member Host" -msgstr "Komputer elementu" - -msgid "Member groups" -msgstr "Elementy grupy" - -msgid "Member host-groups" -msgstr "Element grupy komputerów" - -msgid "Member hosts" -msgstr "Element komputerów" - -msgid "Member of" -msgstr "Element" - -msgid "Member of a group" -msgstr "Element grupy" - -msgid "Member of group" -msgstr "Członek grupy" - -msgid "Member of groups" -msgstr "Członek grup" - -msgid "Member of host-groups" -msgstr "Element grupy komputerów" - -msgid "Member service groups" -msgstr "Grupy usługi elementów" - -msgid "Member services" -msgstr "Usługi elementów" - -msgid "Member users" -msgstr "Elementy użytkowników" - -msgid "Members that could not be added" -msgstr "Elementy, które nie mogły zostać dodane" - -msgid "Members that could not be removed" -msgstr "Liczba elementów, które nie mogły zostać usunięte" - -msgid "Min length" -msgstr "Minimalna długość" - -msgid "Min lifetime (hours)" -msgstr "Minimalny czas życia (w godzinach)" - -msgid "Minimum length of password" -msgstr "Minimalna długość hasła" - -msgid "Minimum number of character classes" -msgstr "Minimalna liczba klas znaków" - -msgid "Minimum password lifetime (in hours)" -msgstr "Minimalny czas życia hasła (w godzinach)" - -msgid "Misc. Information" -msgstr "Różne informacje" - #, c-format -msgid "Missing reply control!\n" -msgstr "Brak kontroli odpowiedzi.\n" - -msgid "Mobile Telephone Number" -msgstr "Numer telefonu komórkowego" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "Zmodyfikowano ACI „%(value)s”" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "Zmodyfikowano grupę „%(value)s”" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "Zmodyfikowano komputer „%(value)s”" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "Zmodyfikowano grupę komputerów „%(value)s”" - -#, python-format -msgid "Modified service \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "Zmodyfikowano użytkownika „%(value)s”" - -msgid "Mount information" -msgstr "Informacje o montowaniu" - -msgid "Mount point" -msgstr "Punkt montowania" - -msgid "NIS domain name" -msgstr "Nazwa domeny NIS" - -msgid "Name of host-group" -msgstr "Nazwa grupy komputerów" - -msgid "Name of object to export" -msgstr "Nazwa obiektu do wyeksportowania" - -msgid "Netgroup description" -msgstr "Opis grupy sieciowej" - -msgid "Netgroup name" -msgstr "Nazwa grupy sieciowej" - -msgid "Netgroups" -msgstr "Grupy sieciowe" - -msgid "New Certificate" -msgstr "Nowy certyfikat" - -msgid "New Password" -msgstr "Nowe hasło" - -msgid "New Principal Password" -msgstr "Nowe hasło naczelnika" - -msgid "No credentials cache found" -msgstr "Nie odnaleziono pamięci podręcznej danych uwierzytelniających" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "Żadne klucze nie zostały zaakceptowane przez KDC\n" +msgid "Out of memory!\n" +msgstr "Brak pamięci.\n" #, c-format msgid "No permission to join this host to the IPA domain.\n" msgstr "Brak uprawnienia do dołączenia do tego komputera w domenie IPA.\n" -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "Brak typów szyfrowania preferowanych przez system?\n" - -#, c-format -msgid "No values for %s" -msgstr "Brak wartości dla %s" - #, c-format msgid "No write permissions on keytab file '%s'\n" msgstr "Brak uprawnień do zapisu pliku tablicy kluczy „%s”\n" -msgid "Not After" -msgstr "Nie po" - -msgid "Not Before" -msgstr "Nie wcześniej" - -msgid "Not a managed group" -msgstr "Nie jest zarządzaną grupą" - -msgid "Number of members added" -msgstr "Liczba dodanych elementów" - -msgid "Number of members removed" -msgstr "Liczba usuniętych elementów" - -msgid "Number of plugins loaded" -msgstr "Liczba wczytanych wtyczek" - -msgid "Number of variables returned (<= total)" -msgstr "Liczba zwróconych zmiennych (<= razem)" - -msgid "Only one value is allowed" -msgstr "Dozwolona jest tylko jedna wartość" - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "System operacyjny komputera i jego wersja (np. Fedora 9)" - -msgid "Operating system" -msgstr "System operacyjny" - #, c-format -msgid "Out of Memory!\n" -msgstr "Brak pamięci.\n" - -msgid "Out of memory\n" -msgstr "Brak pamięci\n" - -#, c-format -msgid "Out of memory \n" -msgstr "Brak pamięci \n" +msgid "access() on %1$s failed: errno = %2$d\n" +msgstr "" #, c-format msgid "Out of memory!" msgstr "Brak pamięci." -#, c-format -msgid "Out of memory!\n" -msgstr "Brak pamięci.\n" - -msgid "Out of memory!?\n" -msgstr "Brak pamięci?\n" - -msgid "Output only on errors" -msgstr "Wyświetla tylko błędy" - -msgid "Pager Number" -msgstr "Numer pagera" - -msgid "Parent map" -msgstr "Mapa nadrzędna" - -msgid "Password" -msgstr "Hasło" - -msgid "Password Policy" -msgstr "Polityka haseł" - -msgid "Password change complete" -msgstr "Ukończono zmianę hasła" - -msgid "Password history size" -msgstr "Rozmiar historii haseł" - -msgid "Password used in bulk enrollment" -msgstr "Hasło używane w zapisywaniu większej części" - -msgid "Passwords do not match" -msgstr "Hasła się nie zgadzają" - -msgid "Passwords do not match!" -msgstr "Hasła się nie zgadzają." - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" -"Hasła zostały migrowane w formacie sprzed mieszania.\n" -"Program IPA nie może utworzyć kluczy Kerberosa, chyba\n" -"że zostały podane z hasłami w zwykłym tekście. Wszyscy\n" -"migrowani użytkownicy muszą zalogować się na stronie\n" -"https://twoja.domena/ipa/migration/, zanim będą mogli\n" -"używać swoich kont Kerberosa." - -msgid "Passwords must match" -msgstr "Hasła muszą się zgadzać" - -msgid "Permissions" -msgstr "Uprawnienia" - -msgid "Permitted Encryption Types" -msgstr "Dozwolone typy szyfrowania" - -msgid "Platform" -msgstr "Platforma" - -msgid "Principal" -msgstr "Naczelnik" - -msgid "Principal name" -msgstr "Nazwa naczelnika" - -msgid "Print as little as possible" -msgstr "Wyświetla tak mało, jak to możliwe" - -msgid "Print debugging information" -msgstr "Wyświetlanie informacji o debugowaniu" - -msgid "Priority" -msgstr "Priorytet" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "Priorytet polityki (wyższy numer równa się niższemu priorytetowi" - -msgid "Quick Links" -msgstr "Szybkie odnośniki" - -msgid "Realm name" -msgstr "Nazwa obszaru" - -msgid "Reason" -msgstr "Przyczyna" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "Przyczyna unieważnienia certyfikatu (0-10)" - -msgid "Remove all principals in this realm" -msgstr "Usuwa wszystkich naczelników w tym obszarze" - -#, c-format -msgid "Removing principal %s\n" -msgstr "Usuwanie naczelnika %s\n" - -msgid "Request id" -msgstr "Identyfikator żądania" - -msgid "Request status" -msgstr "Stan żądania" - -msgid "Reset" -msgstr "Przywróć" - -msgid "Restore" -msgstr "Przywróć" - -msgid "Results are truncated, try a more specific search" -msgstr "" -"Wyniki zostały obcięte, proszę spróbować bardziej konkretnego wyszukiwania" - -msgid "Retry" -msgstr "Ponów" - -msgid "Revocation reason" -msgstr "Przyczyna unieważnienia" - -msgid "Revoke a certificate." -msgstr "Odrzuć certyfikat." - -msgid "Revoked" -msgstr "Unieważniono" - -msgid "Rights" -msgstr "Uprawnienia" - -msgid "Roles" -msgstr "Role" - -msgid "Rule name" -msgstr "Nazwa reguły" - -msgid "Rule type" -msgstr "Typ reguły" - -msgid "SOA class" -msgstr "Klasa SOA" - -msgid "SOA expire" -msgstr "Wygaszenie SOA" - -msgid "SOA minimum" -msgstr "Minimalne SOA" - -msgid "SOA refresh" -msgstr "Odświeżenie SOA" - -msgid "SOA retry" -msgstr "Ponowienie SOA" - -msgid "SOA serial" -msgstr "Numer seryjny SOA" - -msgid "Search" -msgstr "Wyszukaj" - -msgid "Search size limit" -msgstr "Ograniczenie rozmiaru wyszukiwania" - -msgid "Search time limit" -msgstr "Ograniczenie czasu wyszukiwania" - -msgid "Select All" -msgstr "Zaznacz wszystko" - -msgid "Self" -msgstr "Własny" - -msgid "Serial number" -msgstr "Numer seryjny" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" -"Numer seryjny w formie dziesiętnej lub szesnastkowej, jeśli poprzedzone 0x" - -msgid "Server Name" -msgstr "Nazwa serwera" - -msgid "Service Groups" -msgstr "Grupy usług" - -msgid "Service category" -msgstr "Kategoria usług" - -msgid "Service category the rule applies to" -msgstr "Kategoria usług, do których zastosowywana jest reguła" - -msgid "Service group name" -msgstr "Nazwa grupy usługi" - -msgid "Service name" -msgstr "Nazwa usługi" - -msgid "Service principal" -msgstr "Naczelnik usługi" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "Naczelnik usługi dla tego certyfikatu (np. HTTP/test.przykład.pl)" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" -"Naczelnik usługi nie jest w formacie: usługa/w pełni kwalifikowana nazwa " -"komputera: %(reason)s" - -msgid "Services" -msgstr "Usługi" - -msgid "Set OTP" -msgstr "Ustaw OTP" - -msgid "Settings" -msgstr "Ustawienia" - -msgid "Show the list of permitted encryption types and exit" -msgstr "Wyświetla listę dozwolonych typów szyfrowania i kończy działanie" - -msgid "Simple bind failed\n" -msgstr "Proste dowiązanie się nie powiodło\n" - -msgid "Size Limit" -msgstr "Ograniczenie rozmiaru" - -msgid "Status" -msgstr "Stan" - -msgid "Street address" -msgstr "Adres zamieszkania" - -msgid "Subject" -msgstr "Temat" - -msgid "Subtree" -msgstr "Poddrzewo" - -msgid "Subtree to apply ACI to" -msgstr "Poddrzewo, do którego zastosować ACI" - -msgid "Sudo Allow Commands" -msgstr "Polecenia zezwolone sudo" - -msgid "Sudo Command" -msgstr "Polecenie sudo" - -msgid "Sudo Command Groups" -msgstr "Grupy polecenia sudo" - -msgid "Sudo Deny Commands" -msgstr "Polecenia zabronione sudo" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "Obsługiwane typy szyfrowania:\n" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "Błąd składni: %(error)s" - -msgid "Target" -msgstr "Cel" - -msgid "Target group" -msgstr "Grupa docelowa" - -msgid "Target your own entry (self)" -msgstr "Cel własnego wpisu („self”)" - -msgid "Telephone Number" -msgstr "Numer telefonu" - -msgid "The IPA realm" -msgstr "Obszar IPA" - -msgid "The default users group cannot be removed" -msgstr "Nie można usunąć domyślnej grupy użytkowników" - -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "Nazwa komputera musi być w pełni kwalifikowana: %s\n" - -msgid "The hostname to register as" -msgstr "Nazwa komputera, pod jaką zarejestrować" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" -"Naczelnik, dla którego uzyskać tablicę kluczy (np.: ftp/ftp.example." -"com@EXAMPLE.COM)" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "Obszar naczelnika nie zgadza się z obszarem dla tego serwera IPA" - -msgid "This command requires root access" -msgstr "To polecenie wymaga dostępu roota" - -msgid "This entry already exists" -msgstr "Ten wpis już istnieje" - -msgid "This is already a posix group" -msgstr "To jest już grupa POSIX" - -msgid "Ticket expired" -msgstr "Zgłoszenie wygasło" - -msgid "Time Limit" -msgstr "Ograniczenie czasu" - -msgid "Time limit of search in seconds" -msgstr "Ograniczenie czasu wyszukiwania w sekundach" - -msgid "Time to live" -msgstr "Czas życia" - -msgid "Total number of variables env (>= count)" -msgstr "Całkowita liczba zmiennych środowiskowych (>= licznik)" - -msgid "Type" -msgstr "Typ" - -msgid "UID" -msgstr "UID" - -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "Nie można ustalić serwera IPA z %s\n" - -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "Nie można ustalić głównego DN %s\n" - #, c-format msgid "Unable to enable SSL in LDAP\n" msgstr "Nie można włączyć SSL w LDAP\n" -#, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "" -"Nie można utworzyć pamięci podręcznej danych uwierzytelniających Kerberosa\n" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "Nie można zainicjować biblioteki LDAP.\n" - -#, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "" -"Nie można dołączyć do komputera: nie odnaleziono pamięci podręcznej danych " -"uwierzytelniających Kerberosa\n" - -#, c-format -msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" -msgstr "" -"Nie można dołączyć do komputera: nie odnaleziono naczelnika użytkownika " -"Kerberosa oraz nie podano hasła komputera.\n" - -#, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "" -"Nie można dołączyć do komputera: zainicjowanie kontekstu Kerberosa się nie " -"powiodło\n" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "Nie można przetworzyć naczelnika\n" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "Nie można przetworzyć nazwy naczelnika\n" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "Nie można usunąć wpisu\n" - -msgid "Unenroll this host from IPA server" -msgstr "Wypisuje ten komputer z serwera IPA" - -#, c-format -msgid "Unenrollment failed.\n" -msgstr "Wypisanie się nie powiodło.\n" - -#, c-format -msgid "Unenrollment successful.\n" -msgstr "Pomyślnie wypisano.\n" - -msgid "Unrevoked" -msgstr "Cofnięto unieważnienie" - -msgid "Unselect All" -msgstr "Odznacz wszystko" - -msgid "Update" -msgstr "Zaktualizuj" - -msgid "User" -msgstr "Użytkownik" - -msgid "User Groups" -msgstr "Grupy użytkowników" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" -"Numer identyfikacyjny użytkownika (system go przydzieli, jeśli nie zostanie " -"podany)" - -msgid "User category" -msgstr "Kategoria użytkowników" - -msgid "User category the rule applies to" -msgstr "Kategoria użytkowników, do których zastosowywana jest reguła" - -msgid "User container" -msgstr "Kontener użytkownika" - -msgid "User group" -msgstr "Grupa użytkowników" - -msgid "User group ACI grants access to" -msgstr "Grupa użytkowników, do której ACI zapewnia dostęp" - -msgid "User login" -msgstr "Login użytkownika" - -msgid "User name" -msgstr "Nazwa użytkownika" - -msgid "User password" -msgstr "Hasło użytkownika" - -msgid "User search fields" -msgstr "Pola wyszukiwania użytkowników" - -msgid "Users" -msgstr "Użytkownicy" - -msgid "Verify Principal Password" -msgstr "Sprawdzenie hasła naczelnika" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "Ostrzeżenie: przekonwertowanie typu (#%d) się nie powiodło\n" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" -"Ostrzeżenie: typy salt nie są uwzględniane z losowymi hasłami (proszę " -"zobaczyć opcję -P)\n" - -msgid "You must enroll a host in order to create a host service" -msgstr "Należy zapisać się do komputera, aby utworzyć jego usługę" - -msgid "Zone name" -msgstr "Nazwa strefy" - -msgid "Zone name (FQDN)" -msgstr "Nazwa strefy (FQDN)" - -msgid "an internal error has occurred" -msgstr "wystąpił wewnętrzny błąd" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" -"co najmniej jedna z wartości: „type”, „filter”, „subtree”, „targetgroup”, " -"„attrs” lub „memberof” jest wymagana" - -msgid "automatically add the principal if it doesn't exist" -msgstr "automatycznie dodaj naczelnika, jeśli nie istnieje" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "ber_init() się nie powiodło, nieprawidłowa kontrola?\n" - -msgid "bind password" -msgstr "hasło Bind" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "może wynosić co najwyżej %(maxlength)d bajtów" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "może wynosić co najwyżej %(maxlength)d znaków" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "może wynosić co najwyżej %(maxvalue)d" - -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "nie można otworzyć pliku konfiguracji %s\n" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "nie można wykonać stat() na pliku konfiguracji %s\n" - -msgid "change collided with another change" -msgstr "zmiana koliduje z inną zmianą" - -msgid "change to a POSIX group" -msgstr "zmiana na grupę POSIX" - -#, c-format -msgid "child exited with %d\n" -msgstr "potomek został zakończony z %d\n" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "nie odnaleziono wpisu kontenera (%(container)s)" - -msgid "description" -msgstr "opis" - -msgid "did not receive Kerberos credentials" -msgstr "nie otrzymano danych uwierzytelniających Kerberosa" - -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "wykonanie ipa-getkeytab się nie powiodło, errno %d\n" - -msgid "force host name even if not in DNS" -msgstr "wymuszenie nazwy komputera, nawet jeśli nie w DNS" - -msgid "force principal name even if not in DNS" -msgstr "wymuszenie nazwy naczelnika, nawet jeśli nie w DNS" - -#, c-format -msgid "fork() failed\n" -msgstr "fork() się nie powiodło\n" - -msgid "incorrect type" -msgstr "niepoprawny typ" - -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "ipa-getkeytab ma błędne uprawnienia?\n" - -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "nie odnaleziono ipa-getkeytab\n" - -#, c-format -msgid "kvno %d\n" -msgstr "kvno %d\n" - -msgid "limits exceeded for this query" -msgstr "przekroczono ograniczenia dla tego zapytania" - -#, python-format -msgid "member %s" -msgstr "członek %s" - -msgid "must be True or False" -msgstr "musi być prawdą lub fałszem" - -msgid "must be Unicode text" -msgstr "musi być tekstem w unikodzie" - -msgid "must be a decimal number" -msgstr "musi być liczbą dziesiętną" - -msgid "must be an integer" -msgstr "musi być liczba całkowitą" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "musi wynosić co najmniej %(minlength)d bajtów" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "musi wynosić co najmniej %(minlength)d znaków" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "musi wynosić co najmniej %(minvalue)d" - -msgid "must be binary data" -msgstr "musi być danymi binarnymi" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "musi wynosić dokładnie %(length)d bajtów" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "musi wynosić dokładnie %(length)d znaków" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "musi pasować do wzorca „%(pattern)s”" - -msgid "no modifications to be performed" -msgstr "żadne modyfikacje nie zostaną wykonane" - -msgid "not allowed to modify group entries" -msgstr "modyfikowanie wpisów grup nie jest dozwolone" - -msgid "not allowed to modify user entries" -msgstr "modyfikowanie wpisów użytkowników nie jest dozwolone" - -msgid "password" -msgstr "hasło" - -msgid "password to use if not using kerberos" -msgstr "hasło do użycia, jeśli nie jest używany Kerberos" - -#, c-format -msgid "principal not found\n" -msgstr "nie odnaleziono naczelnika\n" - -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "nie odnaleziono naczelnika w odpowiedzi XML-RPC\n" - -msgid "priority cannot be set on global policy" -msgstr "nie można ustawiać priorytetu dla globalnej polityki" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" -"priorytet musi być unikalną wartością (%(prio)d jest już używane przez " -"%(gname)s)" - -#, c-format -msgid "read error\n" -msgstr "błąd odczytu\n" - -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "nie odnaleziono wyniku w odpowiedzi XML-RPC\n" - -msgid "the entry was deleted while being modified" -msgstr "wpis został usunięty podczas modyfikowania" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" -"wartości „type”, „filter”, „subtree” i „targetgroup” są wzajemnie wyłączne" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "nieznany błąd %(code)d z %(server)s: %(error)s" - -msgid "Maximum password life must be greater than minimum." -msgstr "Maksymalny czas życia hasła musi być wyższy niż minimalny." - -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "" - -#, fuzzy -msgid "SASL Bind failed\n" -msgstr "Proste dowiązanie się nie powiodło\n" - #, c-format msgid "Search for %1$s on rootdse failed with error %2$d\n" msgstr "" +#, c-format +msgid "No values for %s" +msgstr "Brak wartości dla %s" + #, c-format msgid "Search for IPA namingContext failed with error %d\n" msgstr "" @@ -1593,10 +487,22 @@ msgstr "" msgid "IPA namingContext not found\n" msgstr "nie odnaleziono ipa-getkeytab\n" +#, c-format +msgid "Unable to determine root DN of %s\n" +msgstr "Nie można ustalić głównego DN %s\n" + #, fuzzy, c-format msgid "Enrollment failed. %s\n" msgstr "Wypisanie się nie powiodło.\n" +#, c-format +msgid "principal not found in XML-RPC response\n" +msgstr "nie odnaleziono naczelnika w odpowiedzi XML-RPC\n" + +#, c-format +msgid "Host is already joined.\n" +msgstr "Komputer jest już dołączony.\n" + #, c-format msgid "curl_slist_append() failed for value: '%s'\n" msgstr "" @@ -1665,6 +571,66 @@ msgstr "" msgid "json_pack_ex() failed: %s\n" msgstr "fork() się nie powiodło\n" +#, c-format +msgid "Unenrollment successful.\n" +msgstr "Pomyślnie wypisano.\n" + +#, c-format +msgid "Unenrollment failed.\n" +msgstr "Wypisanie się nie powiodło.\n" + +#, c-format +msgid "result not found in XML-RPC response\n" +msgstr "nie odnaleziono wyniku w odpowiedzi XML-RPC\n" + +#, c-format +msgid "Unable to determine IPA server from %s\n" +msgstr "Nie można ustalić serwera IPA z %s\n" + +#, c-format +msgid "Unable to join host: Kerberos context initialization failed\n" +msgstr "" +"Nie można dołączyć do komputera: zainicjowanie kontekstu Kerberosa się nie " +"powiodło\n" + +#, c-format +msgid "Unable to join host: Kerberos Credential Cache not found\n" +msgstr "" +"Nie można dołączyć do komputera: nie odnaleziono pamięci podręcznej danych " +"uwierzytelniających Kerberosa\n" + +#, c-format +msgid "" +"Unable to join host: Kerberos User Principal not found and host password not " +"provided.\n" +msgstr "" +"Nie można dołączyć do komputera: nie odnaleziono naczelnika użytkownika " +"Kerberosa oraz nie podano hasła komputera.\n" + +#, c-format +msgid "fork() failed\n" +msgstr "fork() się nie powiodło\n" + +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "nie odnaleziono ipa-getkeytab\n" + +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "ipa-getkeytab ma błędne uprawnienia?\n" + +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "wykonanie ipa-getkeytab się nie powiodło, errno %d\n" + +#, c-format +msgid "child exited with %d\n" +msgstr "potomek został zakończony z %d\n" + +#, c-format +msgid "Error resolving keytab: %s.\n" +msgstr "Błąd podczas rozwiązywania tablicy kluczy: %s.\n" + #, fuzzy, c-format msgid "Error getting default Kerberos realm: %s.\n" msgstr "" @@ -1674,12 +640,31 @@ msgstr "" msgid "Error parsing \"%1$s\": %2$s.\n" msgstr "Błąd podczas rozwiązywania tablicy kluczy: %s.\n" +#, c-format +msgid "Error obtaining initial credentials: %s.\n" +msgstr "" +"Błąd podczas uzyskiwania początkowych danych uwierzytelniających: %s.\n" + +#, c-format +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "" +"Nie można utworzyć pamięci podręcznej danych uwierzytelniających Kerberosa\n" + +#, c-format +msgid "Error storing creds in credential cache: %s.\n" +msgstr "" +"Błąd podczas przechowywania danych uwierzytelniających w pamięci podręcznej: " +"%s.\n" + msgid "Print the raw XML-RPC output in GSSAPI mode" msgstr "" msgid "Quiet mode. Only errors are displayed." msgstr "" +msgid "Unenroll this host from IPA server" +msgstr "Wypisuje ten komputer z serwera IPA" + msgid "Hostname of this server" msgstr "" @@ -1687,6 +672,9 @@ msgstr "" msgid "hostname" msgstr "Nazwa komputera" +msgid "IPA Server to use" +msgstr "Serwer IPA do użycia" + msgid "Specifies where to store keytab information." msgstr "" @@ -1701,6 +689,9 @@ msgstr "" msgid "LDAP password (if not using Kerberos)" msgstr "hasło do użycia, jeśli nie jest używany Kerberos" +msgid "password" +msgstr "hasło" + #, fuzzy msgid "LDAP basedn" msgstr "Hasło LDAP" @@ -1712,205 +703,16 @@ msgstr "" msgid "Cannot get host's FQDN!\n" msgstr "" +#, c-format +msgid "The hostname must be fully-qualified: %s\n" +msgstr "Nazwa komputera musi być w pełni kwalifikowana: %s\n" + #, fuzzy, c-format msgid "The hostname must not be: %s\n" msgstr "Nazwa komputera musi być w pełni kwalifikowana: %s\n" -#, fuzzy, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "Zainicjowanie kontekstu Kerberosa się nie powiodło\n" - -#, fuzzy, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "Nie można przetworzyć naczelnika\n" - -#, fuzzy, c-format -msgid "Operation failed: %s\n" -msgstr "nie można otworzyć pliku konfiguracji %s\n" - -#, fuzzy, c-format -msgid "Failed to get result: %s\n" -msgstr "Utworzenie klucza się nie powiodło.\n" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, fuzzy, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "Zamknięcie tablicy kluczy się nie powiodło\n" - -#, fuzzy, c-format -msgid "Failed to parse result: %s\n" -msgstr "Otwarcie tablicy kluczy się nie powiodło\n" - -#, fuzzy, c-format -msgid "Missing reply control list!\n" -msgstr "Brak kontroli odpowiedzi.\n" - -#, fuzzy, c-format -msgid "Failed to bind to server!\n" -msgstr "Utworzenie klucza się nie powiodło.\n" - -#, fuzzy, c-format -msgid "Failed to get keytab!\n" -msgstr "Otwarcie tablicy kluczy się nie powiodło\n" - -#, fuzzy, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "ber_init() się nie powiodło, nieprawidłowa kontrola?\n" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to retrieve any keys" -msgstr "Utworzenie losowego klucza się nie powiodło.\n" - -#, fuzzy -msgid "Failed to decode control reply!\n" -msgstr "Utworzenie kontroli się nie powiodło.\n" - -#, fuzzy, c-format -msgid "Passwords do not match!\n" -msgstr "Hasła się nie zgadzają." - -#, fuzzy, c-format -msgid "Failed to open config file %s\n" -msgstr "nie można otworzyć pliku konfiguracji %s\n" - -#, fuzzy, c-format -msgid "Failed to parse config file %s\n" -msgstr "nie można otworzyć pliku konfiguracji %s\n" - -#, fuzzy -msgid "Failed to resolve symlink to keytab.\n" -msgstr "Otwarcie tablicy kluczy się nie powiodło\n" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -#, fuzzy -msgid "Prompt for LDAP password" -msgstr "Hasło LDAP" - -msgid "Path to the IPA CA certificate" -msgstr "" - -#, fuzzy -msgid "IPA CA certificate" -msgstr "Certyfikat" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -#, fuzzy -msgid "Enter LDAP password" -msgstr "Hasło LDAP" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to get keytab\n" -msgstr "Otwarcie tablicy kluczy się nie powiodło\n" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "Utworzenie kontroli się nie powiodło.\n" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, fuzzy, c-format -msgid "realm not found\n" -msgstr "nie odnaleziono naczelnika\n" - -#, fuzzy -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" -"Naczelnik, dla którego uzyskać tablicę kluczy (np.: ftp/ftp.example." -"com@EXAMPLE.COM)" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "Otwarcie tablicy kluczy się nie powiodło\n" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, fuzzy, c-format -msgid "out of memory\n" -msgstr "Brak pamięci\n" +msgid "Failed members" +msgstr "Elementy, które się nie powiodły" msgid "Failed source hosts/hostgroups" msgstr "" @@ -1991,6 +793,10 @@ msgid "" "Continuous operation mode. Errors are reported but the process continues." msgstr "" +#, python-format +msgid "File %(file)s not found" +msgstr "Nie odnaleziono pliku %(file)s" + #, fuzzy, python-format msgid "key %(key)s already exists" msgstr "Ten wpis już istnieje" @@ -2034,6 +840,26 @@ msgstr "" msgid "Skipped %(key)s" msgstr "" +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +msgid "Unrevoked" +msgstr "Cofnięto unieważnienie" + +msgid "Error" +msgstr "Błąd" + +#, fuzzy +msgid "Input filename" +msgstr "Nazwa reguły" + +#, fuzzy +msgid "File to load the certificate from." +msgstr "Odrzuć certyfikat." + +msgid "cannot specify both raw certificate and file" +msgstr "" + msgid "Input file" msgstr "" @@ -2041,120 +867,10 @@ msgstr "" msgid "File to load the certificate from" msgstr "Zamknięcie tablicy kluczy się nie powiodło\n" -msgid "cannot specify both raw certificate and file" -msgstr "" - #, python-format msgid "Profile configuration stored in file '%(file)s'" msgstr "" -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -msgid "Servers details:" -msgstr "" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "Add a new YubiKey OTP token." -msgstr "" - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "Wyłączono konto użytkownika „%(value)s”" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -#, fuzzy -msgid "Maximum number of agreements per replica" -msgstr "Maksymalna liczba zwróconych wpisów" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -#, fuzzy -msgid "Delete a user" -msgstr "Usunąć wszystko?" - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - msgid "Split DNS record to parts" msgstr "" @@ -2201,6 +917,9 @@ msgstr "" msgid "No option to delete specific record provided." msgstr "" +msgid "Delete all?" +msgstr "Usunąć wszystko?" + #, fuzzy, python-format msgid "Delete %(name)s '%(value)s'?" msgstr "Usunięto komputer „%(value)s”" @@ -2217,6 +936,141 @@ msgstr "" msgid "file to store DNS records in nsupdate format" msgstr "" +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "" + +msgid "Servers details:" +msgstr "" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" +"Hasła zostały migrowane w formacie sprzed mieszania.\n" +"Program IPA nie może utworzyć kluczy Kerberosa, chyba\n" +"że zostały podane z hasłami w zwykłym tekście. Wszyscy\n" +"migrowani użytkownicy muszą zalogować się na stronie\n" +"https://twoja.domena/ipa/migration/, zanim będą mogli\n" +"używać swoich kont Kerberosa." + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "" + +#, fuzzy +msgid "User ID" +msgstr "Użytkownik" + +msgid "Password" +msgstr "Hasło" + +#, fuzzy +msgid "First Code" +msgstr "Imię" + +msgid "Second Code" +msgstr "" + +msgid "Token ID" +msgstr "" + +msgid "python-yubico is not installed." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" + +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "Add a new YubiKey OTP token." +msgstr "" + +msgid "YubiKey slot" +msgstr "" + +msgid "No free YubiKey slot!" +msgstr "" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "" + +msgid "Topology is disconnected" +msgstr "" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "" + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "" + +#, fuzzy +msgid "Maximum number of agreements per replica" +msgstr "Maksymalna liczba zwróconych wpisów" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "" + +#, fuzzy +msgid "Delete a user" +msgstr "Usunąć wszystko?" + +msgid "preserve and no-preserve cannot be both set" +msgstr "" + #, python-format msgid "Cannot read file '%(filename)s': %(exc)s" msgstr "" @@ -2334,48 +1188,29 @@ msgstr "Utworzenie klucza się nie powiodło.\n" msgid "File containing the vault private key" msgstr "" +msgid "Data" +msgstr "Dane" + msgid "Private key specified multiple times" msgstr "" msgid "Missing vault private key" msgstr "" -msgid "Write certificate (chain if --chain used) to file" +#, python-format +msgid "Enabled Sudo Rule \"%s\"" msgstr "" -#, fuzzy -msgid "Input filename" -msgstr "Nazwa reguły" +#, fuzzy, python-format +msgid "Disabled Sudo Rule \"%s\"" +msgstr "Wyłączono konto użytkownika „%(value)s”" -#, fuzzy -msgid "File to load the certificate from." -msgstr "Odrzuć certyfikat." - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" msgstr "" -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -#, fuzzy -msgid "User ID" -msgstr "Użytkownik" - -#, fuzzy -msgid "First Code" -msgstr "Imię" - -msgid "Second Code" -msgstr "" - -msgid "Token ID" +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" msgstr "" msgid "" @@ -2499,6 +1334,9 @@ msgid "" "targetattr REPLACES the current attributes, it does not add to them.\n" msgstr "" +msgid "ACI name" +msgstr "Nazwa ACI" + #, fuzzy msgid "Permission" msgstr "Uprawnienia" @@ -2507,15 +1345,60 @@ msgstr "Uprawnienia" msgid "Permission ACI grants access to" msgstr "Grupa użytkowników, do której ACI zapewnia dostęp" +msgid "User group" +msgstr "Grupa użytkowników" + +msgid "User group ACI grants access to" +msgstr "Grupa użytkowników, do której ACI zapewnia dostęp" + +msgid "Permissions" +msgstr "Uprawnienia" + msgid "Permissions to grant(read, write, add, delete, all)" msgstr "" msgid "Attributes to which the permission applies" msgstr "" +msgid "Attributes" +msgstr "Atrybuty" + +msgid "Type" +msgstr "Typ" + msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" msgstr "" +msgid "Member of" +msgstr "Element" + +msgid "Member of a group" +msgstr "Element grupy" + +msgid "Filter" +msgstr "Filtr" + +msgid "Legal LDAP filter (e.g. ou=Engineering)" +msgstr "Dozwolony filtr LDAP (np. ou=Inżynieria)" + +msgid "Subtree" +msgstr "Poddrzewo" + +msgid "Subtree to apply ACI to" +msgstr "Poddrzewo, do którego zastosować ACI" + +msgid "Target group" +msgstr "Grupa docelowa" + +msgid "Group to apply ACI to" +msgstr "Grupa, do której zastosować ACI" + +msgid "Target your own entry (self)" +msgstr "Cel własnego wpisu („self”)" + +msgid "Apply ACI to your own entry (self)" +msgstr "Zastosowanie ACI do własnego wpisu („self”)" + msgid "Create new ACI." msgstr "" @@ -2604,6 +1487,253 @@ msgstr "" msgid "Location of the ACI" msgstr "" +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Description" +msgstr "Opis" + +#, fuzzy +msgid "A description of this auto member rule" +msgstr "Opis tego polecenia" + +#, fuzzy +msgid "Default (fallback) Group" +msgstr "Domyślna grupa użytkowników" + +#, fuzzy +msgid "Default group for entries to land" +msgstr "Domyślna grupa dla nowych użytkowników" + +msgid "Add an automember rule." +msgstr "" + +msgid "Automember Rule" +msgstr "" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +#, fuzzy +msgid "Grouping Type" +msgstr "Nazwa grupy" + +#, fuzzy +msgid "Grouping to which the rule applies" +msgstr "Kategoria usług, do których zastosowywana jest reguła" + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +msgid "Exclusive Regex" +msgstr "" + +#, fuzzy +msgid "Attribute Key" +msgstr "Atrybut" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +#, fuzzy +msgid "Conditions that could not be added" +msgstr "Elementy, które nie mogły zostać dodane" + +#, fuzzy +msgid "Number of conditions added" +msgstr "Liczba wczytanych wtyczek" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +msgid "Display information about the default (fallback) automember groups." +msgstr "" + +msgid "Delete an automember rule." +msgstr "" + +msgid "List of deletions that failed" +msgstr "" + +msgid "Search for automember rules." +msgstr "" + +msgid "Modify an automember rule." +msgstr "" + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +msgid "Rights" +msgstr "Uprawnienia" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Users" +msgstr "Użytkownicy" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Hosts" +msgstr "Komputery" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +#, fuzzy +msgid "Conditions that could not be removed" +msgstr "Liczba elementów, które nie mogły zostać usunięte" + +#, fuzzy +msgid "Number of conditions removed" +msgstr "Liczba usuniętych elementów" + +msgid "Display information about an automember rule." +msgstr "" + msgid "" "\n" "Automount\n" @@ -2711,13 +1841,28 @@ msgid "" " ipa automountkey-del baltimore auto.share --key=man\n" msgstr "" +msgid "Key" +msgstr "Klucz" + #, fuzzy msgid "Automount key name." msgstr "Automatyczne montowanie kluczy" +msgid "Mount information" +msgstr "Informacje o montowaniu" + +msgid "description" +msgstr "opis" + +msgid "Location" +msgstr "Położenie" + msgid "Automount location name." msgstr "" +msgid "Map" +msgstr "Mapa" + #, fuzzy msgid "Automount map name." msgstr "Automatyczne montowanie map" @@ -2725,38 +1870,30 @@ msgstr "Automatyczne montowanie map" msgid "Create a new automount key." msgstr "" -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - msgid "Delete an automount key." msgstr "" -msgid "List of deletions that failed" -msgstr "" +msgid "Continuous mode: Don't stop on errors." +msgstr "Tryb ciągły: bez zatrzymywania po błędach." msgid "Search for an automount key." msgstr "" +msgid "Time Limit" +msgstr "Ograniczenie czasu" + +msgid "Time limit of search in seconds" +msgstr "Ograniczenie czasu wyszukiwania w sekundach" + +msgid "Size Limit" +msgstr "Ograniczenie rozmiaru" + +msgid "Maximum number of entries returned" +msgstr "Maksymalna liczba zwróconych wpisów" + msgid "Modify an automount key." msgstr "" -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - #, fuzzy msgid "New mount information" msgstr "Informacje o montowaniu" @@ -2795,6 +1932,12 @@ msgstr "" msgid "Create a new indirect mount point." msgstr "" +msgid "Mount point" +msgstr "Punkt montowania" + +msgid "Parent map" +msgstr "Mapa nadrzędna" + msgid "Name of parent automount map (default: auto.master)." msgstr "" @@ -2847,6 +1990,193 @@ msgstr "" msgid "Nested Methods to execute" msgstr "" +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +#, fuzzy +msgid "Search for existing certificates." +msgstr "Przyczyna unieważnienia certyfikatu (0-10)" + +msgid "Match cn attribute in subject" +msgstr "" + +msgid "Reason" +msgstr "Przyczyna" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "Przyczyna unieważnienia certyfikatu (0-10)" + +#, fuzzy +msgid "minimum serial number" +msgstr "Numer seryjny" + +#, fuzzy +msgid "maximum serial number" +msgstr "Numer seryjny" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +#, fuzzy +msgid "Maximum number of certs returned" +msgstr "Maksymalna liczba zwróconych wpisów" + +#, fuzzy +msgid "Take a revoked certificate off hold." +msgstr "Odrzuć certyfikat." + +msgid "Serial number" +msgstr "Numer seryjny" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" +"Numer seryjny w formie dziesiętnej lub szesnastkowej, jeśli poprzedzone 0x" + +#, fuzzy +msgid "Submit a certificate signing request." +msgstr "Dekodowanie żądania podpisywania certyfikatu się nie powiodło: %s" + +msgid "CSR" +msgstr "" + +msgid "Principal" +msgstr "Naczelnik" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "Naczelnik usługi dla tego certyfikatu (np. HTTP/test.przykład.pl)" + +msgid "automatically add the principal if it doesn't exist" +msgstr "automatycznie dodaj naczelnika, jeśli nie istnieje" + +msgid "Dictionary mapping variable name to value" +msgstr "Nazwa zmiennej mapowania słownika do ustawienia jako wartość" + +msgid "Revoke a certificate." +msgstr "Odrzuć certyfikat." + +#, fuzzy +msgid "Retrieve an existing certificate." +msgstr "Odrzuć certyfikat." + +msgid "Output filename" +msgstr "" + +#, fuzzy +msgid "File to store the certificate in." +msgstr "Odrzuć certyfikat." + +msgid "Check the status of a certificate signing request." +msgstr "" + +msgid "Request id" +msgstr "Identyfikator żądania" + msgid "" "\n" "Server configuration\n" @@ -2900,20 +2230,44 @@ msgstr "" msgid "Maximum username length" msgstr "Minimalna długość" +msgid "Home directory base" +msgstr "Podstawa katalogu domowego" + msgid "Default location of home directories" msgstr "" +msgid "Default shell" +msgstr "Domyślna powłoka" + +msgid "Default shell for new users" +msgstr "Domyślna powłoka dla nowych użytkowników" + +msgid "Default users group" +msgstr "Domyślna grupa użytkowników" + +msgid "Default group for new users" +msgstr "Domyślna grupa dla nowych użytkowników" + msgid "Default e-mail domain" msgstr "" +msgid "Search time limit" +msgstr "Ograniczenie czasu wyszukiwania" + msgid "" "Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" msgstr "" +msgid "Search size limit" +msgstr "Ograniczenie rozmiaru wyszukiwania" + #, fuzzy msgid "Maximum number of records to search (-1 is unlimited)" msgstr "Maksymalna liczba zwróconych wpisów" +msgid "User search fields" +msgstr "Pola wyszukiwania użytkowników" + msgid "A comma-separated list of fields to search in when searching for users" msgstr "" @@ -2928,6 +2282,9 @@ msgstr "" msgid "Enable migration mode" msgstr "Fałsz, jeśli wyłączono tryb migracji." +msgid "Certificate Subject base" +msgstr "Podstawa tematu certyfikatu" + msgid "Base for certificate subjects (OU=Test,O=Example)" msgstr "" @@ -3328,12 +2685,21 @@ msgstr "" msgid "Zone refresh interval" msgstr "" +msgid "Zone name" +msgstr "Nazwa strefy" + +msgid "Zone name (FQDN)" +msgstr "Nazwa strefy (FQDN)" + msgid "Reverse zone IP network" msgstr "" msgid "IP network to create reverse zone name from" msgstr "" +msgid "Active zone" +msgstr "Aktywna strefa" + msgid "Is zone active?" msgstr "" @@ -3355,6 +2721,9 @@ msgstr "" msgid "Record name" msgstr "Nazwa reguły" +msgid "Time to live" +msgstr "Czas życia" + msgid "Records" msgstr "" @@ -3422,6 +2791,9 @@ msgstr "Poddrzewo" msgid "AFSDB Hostname" msgstr "Nazwa komputera" +msgid "Hostname" +msgstr "Nazwa komputera" + msgid "APL record" msgstr "" @@ -3515,6 +2887,9 @@ msgstr "" msgid "DNAME Target" msgstr "Cel" +msgid "Target" +msgstr "Cel" + msgid "DNSKEY record" msgstr "" @@ -3782,6 +3157,9 @@ msgstr "" msgid "SRV Priority" msgstr "Priorytet" +msgid "Priority" +msgstr "Priorytet" + #, fuzzy msgid "SRV Weight" msgstr "Uprawnienia" @@ -3902,28 +3280,49 @@ msgstr "" msgid "Authoritative nameserver domain name" msgstr "" +msgid "Administrator e-mail address" +msgstr "Adres e-mail administratora" + +msgid "SOA serial" +msgstr "Numer seryjny SOA" + #, fuzzy msgid "SOA record serial number" msgstr "Numer seryjny" +msgid "SOA refresh" +msgstr "Odświeżenie SOA" + #, fuzzy msgid "SOA record refresh time" msgstr "Odświeżenie SOA" +msgid "SOA retry" +msgstr "Ponowienie SOA" + #, fuzzy msgid "SOA record retry time" msgstr "Ponowienie SOA" +msgid "SOA expire" +msgstr "Wygaszenie SOA" + #, fuzzy msgid "SOA record expire time" msgstr "Wygaszenie SOA" +msgid "SOA minimum" +msgstr "Minimalne SOA" + msgid "How long should negative responses be cached" msgstr "" msgid "Time to live for records at zone apex" msgstr "" +msgid "BIND update policy" +msgstr "Polityka aktualizacji BIND" + msgid "Dynamic update" msgstr "" @@ -4028,6 +3427,9 @@ msgstr "" msgid "Delete DNS resource record." msgstr "Usuń wszystkie powiązane wpisy" +msgid "Delete all associated records" +msgstr "Usuń wszystkie powiązane wpisy" + msgid "Delete DNS record entry." msgstr "" @@ -4083,6 +3485,330 @@ msgstr "" msgid "Display information about a DNS zone (SOA record)." msgstr "" +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "Group name" +msgstr "Nazwa grupy" + +msgid "Group description" +msgstr "Opis grupy" + +msgid "GID" +msgstr "GID" + +msgid "GID (use this option to set it manually)" +msgstr "GID (ta opcja umożliwia jego ręczne ustawienie)" + +msgid "Member users" +msgstr "Elementy użytkowników" + +msgid "Member groups" +msgstr "Elementy grupy" + +msgid "Member of groups" +msgstr "Członek grup" + +msgid "Roles" +msgstr "Role" + +#, fuzzy +msgid "Member of netgroups" +msgstr "Członek grup" + +#, fuzzy +msgid "Member of Sudo rule" +msgstr "Element grupy" + +#, fuzzy +msgid "Member of HBAC rule" +msgstr "Element grupy" + +#, fuzzy +msgid "Indirect Member users" +msgstr "Elementy użytkowników" + +#, fuzzy +msgid "Indirect Member groups" +msgstr "Elementy grupy" + +#, fuzzy +msgid "Indirect Member of group" +msgstr "Członek grupy" + +#, fuzzy +msgid "Indirect Member of netgroup" +msgstr "Członek grupy" + +#, fuzzy +msgid "Indirect Member of role" +msgstr "Członek grupy" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +#, fuzzy +msgid "Create a new group." +msgstr "Nie jest zarządzaną grupą" + +#, fuzzy +msgid "Create as a non-POSIX group" +msgstr "zmiana na grupę POSIX" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +#, fuzzy +msgid "Add members to a group." +msgstr "Element grupy" + +#, fuzzy +msgid "External member" +msgstr "Zewnętrzny komputer" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +#, fuzzy +msgid "member user" +msgstr "Elementy użytkowników" + +msgid "users to add" +msgstr "" + +#, fuzzy +msgid "member group" +msgstr "Elementy grupy" + +msgid "groups to add" +msgstr "" + +msgid "Members that could not be added" +msgstr "Elementy, które nie mogły zostać dodane" + +msgid "Number of members added" +msgstr "Liczba dodanych elementów" + +#, fuzzy +msgid "Delete group." +msgstr "Domyślna grupa użytkowników" + +#, fuzzy +msgid "Detach a managed group from a user." +msgstr "Nie jest zarządzaną grupą" + +#, fuzzy +msgid "Search for groups." +msgstr "Członek grup" + +msgid "search for private groups" +msgstr "" + +#, fuzzy +msgid "search for POSIX groups" +msgstr "zmiana na grupę POSIX" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +#, fuzzy +msgid "search for non-POSIX groups" +msgstr "zmiana na grupę POSIX" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "user" +msgstr "" + +msgid "Search for groups with these member users." +msgstr "" + +msgid "Search for groups without these member users." +msgstr "" + +#, fuzzy +msgid "group" +msgstr "Grupa" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +#, fuzzy +msgid "netgroup" +msgstr "Grupy sieciowe" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +msgid "HBAC rule" +msgstr "" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +#, fuzzy +msgid "Modify a group." +msgstr "Element grupy" + +msgid "change to a POSIX group" +msgstr "zmiana na grupę POSIX" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +#, fuzzy +msgid "Remove members from a group." +msgstr "Element grupy" + +#, fuzzy +msgid "users to remove" +msgstr "Liczba usuniętych elementów" + +msgid "groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "Liczba elementów, które nie mogły zostać usunięte" + +msgid "Number of members removed" +msgstr "Liczba usuniętych elementów" + +msgid "Display information about a named group." +msgstr "" + msgid "" "\n" "Host-based access control\n" @@ -4133,14 +3859,53 @@ msgid "" " ipa hbacrule-del allow_server\n" msgstr "" +msgid "Rule name" +msgstr "Nazwa reguły" + +msgid "Rule type" +msgstr "Typ reguły" + #, fuzzy msgid "Rule type (allow)" msgstr "Typ reguły" -msgid "Create a new HBAC rule." -msgstr "" +msgid "User category" +msgstr "Kategoria użytkowników" -msgid "Suppress processing of membership attributes." +msgid "User category the rule applies to" +msgstr "Kategoria użytkowników, do których zastosowywana jest reguła" + +msgid "Host category" +msgstr "Kategoria komputerów" + +msgid "Host category the rule applies to" +msgstr "Kategoria komputerów, do których zastosowywana jest reguła" + +msgid "Service category" +msgstr "Kategoria usług" + +msgid "Service category the rule applies to" +msgstr "Kategoria usług, do których zastosowywana jest reguła" + +msgid "Enabled" +msgstr "Włączone" + +msgid "User Groups" +msgstr "Grupy użytkowników" + +msgid "Host Groups" +msgstr "Grupy komputerów" + +msgid "Services" +msgstr "Usługi" + +msgid "Service Groups" +msgstr "Grupy usług" + +msgid "External host" +msgstr "Zewnętrzny komputer" + +msgid "Create a new HBAC rule." msgstr "" msgid "Add target hosts and hostgroups to an HBAC rule." @@ -4183,20 +3948,6 @@ msgstr "Opis grupy usługi HBAC" msgid "Add users and groups to an HBAC rule." msgstr "" -#, fuzzy -msgid "member user" -msgstr "Elementy użytkowników" - -msgid "users to add" -msgstr "" - -#, fuzzy -msgid "member group" -msgstr "Elementy grupy" - -msgid "groups to add" -msgstr "" - msgid "Delete an HBAC rule." msgstr "" @@ -4235,13 +3986,6 @@ msgstr "Opis grupy usługi HBAC" msgid "Remove users and groups from an HBAC rule." msgstr "" -#, fuzzy -msgid "users to remove" -msgstr "Liczba usuniętych elementów" - -msgid "groups to remove" -msgstr "" - msgid "Display the properties of an HBAC rule." msgstr "" @@ -4268,6 +4012,9 @@ msgid "" " ipa hbacsvc-del tftp\n" msgstr "" +msgid "Service name" +msgstr "Nazwa usługi" + #, fuzzy msgid "HBAC service" msgstr "Usługi" @@ -4320,6 +4067,12 @@ msgid "" " ipa hbacsvcgroup-del login\n" msgstr "" +msgid "Service group name" +msgstr "Nazwa grupy usługi" + +msgid "HBAC service group description" +msgstr "Opis grupy usługi HBAC" + #, fuzzy msgid "Member HBAC service" msgstr "Usługi elementów" @@ -4350,6 +4103,244 @@ msgstr "Grupy usługi elementów" msgid "Display information about an HBAC service group." msgstr "" +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +msgid "User name" +msgstr "Nazwa użytkownika" + +#, fuzzy +msgid "Target host" +msgstr "Cel" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +msgid "Warning" +msgstr "" + +msgid "Matched rules" +msgstr "" + +#, fuzzy +msgid "Not matched rules" +msgstr "Nie jest zarządzaną grupą" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + msgid "" "\n" "Hosts/Machines\n" @@ -4414,6 +4405,39 @@ msgid "" " ipa host-allow-create-keytab test2 --users=tuser1\n" msgstr "" +msgid "Host name" +msgstr "Nazwa komputera" + +msgid "A description of this host" +msgstr "Opis tego komputera" + +msgid "Locality" +msgstr "Lokalizacja" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "Lokalizacja komputera (np. „Baltimore, MD”)" + +msgid "Host location (e.g. \"Lab 2\")" +msgstr "Położenie komputera (np. „Laboratorium nr 2”)" + +msgid "Platform" +msgstr "Platforma" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "Platforma sprzętowa komputera (np. „Lenovo T61”)" + +msgid "Operating system" +msgstr "System operacyjny" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "System operacyjny komputera i jego wersja (np. „Fedora 9”)" + +msgid "User password" +msgstr "Hasło użytkownika" + +msgid "Password used in bulk enrollment" +msgstr "Hasło używane w zapisywaniu większej części" + #, fuzzy msgid "Generate a random password to be used in bulk enrollment" msgstr "Hasło używane w zapisywaniu większej części" @@ -4422,6 +4446,15 @@ msgstr "Hasło używane w zapisywaniu większej części" msgid "Random password" msgstr "hasło Bind" +msgid "Certificate" +msgstr "Certyfikat" + +msgid "Base-64 encoded server certificate" +msgstr "Certyfikat serwera zakodowany za pomocą Base-64" + +msgid "Principal name" +msgstr "Nazwa naczelnika" + #, fuzzy msgid "MAC address" msgstr "Adres e-mail" @@ -4432,6 +4465,9 @@ msgstr "" msgid "SSH public key" msgstr "" +msgid "Class" +msgstr "Klasa" + msgid "" "Host category (semantics placed on this attribute are for local " "interpretation)" @@ -4452,35 +4488,15 @@ msgstr "" msgid "Client credentials may be delegated to the service" msgstr "" -#, fuzzy -msgid "Member of netgroups" -msgstr "Członek grup" - -#, fuzzy -msgid "Member of Sudo rule" -msgstr "Element grupy" - -#, fuzzy -msgid "Member of HBAC rule" -msgstr "Element grupy" - -#, fuzzy -msgid "Indirect Member of netgroup" -msgstr "Członek grupy" +msgid "Member of host-groups" +msgstr "Element grupy komputerów" #, fuzzy msgid "Indirect Member of host-group" msgstr "Element grupy komputerów" -#, fuzzy -msgid "Indirect Member of role" -msgstr "Członek grupy" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" +msgid "Keytab" +msgstr "Tabela kluczy" msgid "Managed by" msgstr "" @@ -4523,6 +4539,9 @@ msgstr "Utworzenie klucza się nie powiodło.\n" msgid "Add a new host." msgstr "Dodaj i zamknij" +msgid "force host name even if not in DNS" +msgstr "wymuszenie nazwy komputera, nawet jeśli nie w DNS" + msgid "skip reverse DNS detection" msgstr "" @@ -4575,46 +4594,30 @@ msgstr "" msgid "Search for hosts without these member of host groups." msgstr "" -#, fuzzy -msgid "netgroup" -msgstr "Grupy sieciowe" - msgid "Search for hosts with these member of netgroups." msgstr "" msgid "Search for hosts without these member of netgroups." msgstr "" -msgid "role" -msgstr "" - msgid "Search for hosts with these member of roles." msgstr "" msgid "Search for hosts without these member of roles." msgstr "" -msgid "HBAC rule" -msgstr "" - msgid "Search for hosts with these member of HBAC rules." msgstr "" msgid "Search for hosts without these member of HBAC rules." msgstr "" -msgid "sudo rule" -msgstr "" - msgid "Search for hosts with these member of sudo rules." msgstr "" msgid "Search for hosts without these member of sudo rules." msgstr "" -msgid "user" -msgstr "" - msgid "Search for hosts with these enrolled by users." msgstr "" @@ -4639,6 +4642,9 @@ msgstr "" msgid "Modify information about a host." msgstr "" +msgid "Kerberos principal name for this host" +msgstr "Nazwa naczelnika Kerberosa dla tego komputera" + msgid "Update DNS entries" msgstr "" @@ -4683,6 +4689,21 @@ msgid "" " ipa hostgroup-del baltimore\n" msgstr "" +msgid "Host-group" +msgstr "Grupa komputerów" + +msgid "Name of host-group" +msgstr "Nazwa grupy komputerów" + +msgid "A description of this host-group" +msgstr "Opis tej grupy komputerów" + +msgid "Member hosts" +msgstr "Element komputerów" + +msgid "Member host-groups" +msgstr "Element grupy komputerów" + #, fuzzy msgid "Indirect Member hosts" msgstr "Element komputerów" @@ -4757,6 +4778,234 @@ msgstr "Element grupy komputerów" msgid "Display information about a hostgroup." msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +#, fuzzy +msgid "Range name" +msgstr "Nazwa reguły" + +msgid "First Posix ID of the range" +msgstr "" + +#, fuzzy +msgid "Number of IDs in the range" +msgstr "Liczba wczytanych wtyczek" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +#, fuzzy +msgid "Range type" +msgstr "Typ reguły" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "Delete an ID range." +msgstr "" + +msgid "Search for ranges." +msgstr "" + +msgid "Modify ID range." +msgstr "" + +msgid "Display information about a range." +msgstr "" + msgid "" "\n" "ID Views\n" @@ -4777,6 +5026,12 @@ msgstr "" msgid "Group ID Number" msgstr "Nazwa grupy" +msgid "User login" +msgstr "Login użytkownika" + +msgid "UID" +msgstr "UID" + #, fuzzy msgid "User ID Number" msgstr "Numer pagera" @@ -4784,6 +5039,12 @@ msgstr "Numer pagera" msgid "GECOS" msgstr "" +msgid "Home directory" +msgstr "Katalog domowy" + +msgid "Login shell" +msgstr "Powłoka logowania" + msgid "ID View Name" msgstr "" @@ -4909,9 +5170,15 @@ msgid "" "Plugins not accessible directly through the CLI, commands used internally\n" msgstr "" +msgid "Dict of I18N messages" +msgstr "Słownik komunikatów umiędzynaradawiania" + msgid "Export plugin meta-data for the webUI." msgstr "" +msgid "Name of object to export" +msgstr "Nazwa obiektu do wyeksportowania" + #, fuzzy msgid "Name of method to export" msgstr "Nazwa obiektu do wyeksportowania" @@ -4920,6 +5187,9 @@ msgstr "Nazwa obiektu do wyeksportowania" msgid "Name of command to export" msgstr "Nazwa obiektu do wyeksportowania" +msgid "Dict of JSON encoded IPA Objects" +msgstr "Słownik obiektów IPA zakodowanych w formacie JSON" + #, fuzzy msgid "Dict of JSON encoded IPA Methods" msgstr "Słownik obiektów IPA zakodowanych w formacie JSON" @@ -4936,6 +5206,18 @@ msgstr "" msgid "Join an IPA domain" msgstr "" +msgid "The hostname to register as" +msgstr "Nazwa komputera, pod jaką zarejestrować" + +msgid "The IPA realm" +msgstr "Obszar IPA" + +msgid "Hardware platform of the host (e.g. Lenovo T61)" +msgstr "Platforma sprzętowa komputera (np. Lenovo T61)" + +msgid "Operating System and version of the host (e.g. Fedora 9)" +msgstr "System operacyjny komputera i jego wersja (np. Fedora 9)" + msgid "" "\n" "Kerberos ticket policy\n" @@ -4975,6 +5257,21 @@ msgid "" " ipa krbtpolicy-mod admin --maxlife=3600\n" msgstr "" +msgid "Manage ticket policy for specific user" +msgstr "Zarządzanie polityką zgłoszeń dla podanego użytkownika" + +msgid "Max life" +msgstr "Maksymalny czas życia" + +msgid "Maximum ticket life (seconds)" +msgstr "Minimalny czas życia zgłoszenia (sekundy)" + +msgid "Max renew" +msgstr "Maksymalne odnowienie" + +msgid "Maximum renewable age (seconds)" +msgstr "Maksymalny czas, w którym możliwe jest odnowienie (sekundy)" + #, fuzzy msgid "Modify Kerberos ticket policy." msgstr "Polityka zgłoszeń Kerberosa" @@ -5083,9 +5380,27 @@ msgstr "" msgid "Migrate users and groups from DS to IPA." msgstr "" +msgid "LDAP URI" +msgstr "Adres URI LDAP" + +msgid "LDAP URI of DS server to migrate from" +msgstr "Adres URI LDAP serwera DS, z którego migrować" + +msgid "bind password" +msgstr "hasło Bind" + +msgid "Bind DN" +msgstr "DN dowiązania" + +msgid "User container" +msgstr "Kontener użytkownika" + msgid "DN of container for users in DS relative to base DN" msgstr "" +msgid "Group container" +msgstr "Kontener grupy" + msgid "DN of container for groups in DS relative to base DN" msgstr "" @@ -5133,6 +5448,9 @@ msgid "" "GID and report as success" msgstr "" +msgid "LDAP schema" +msgstr "Schemat LDAP" + msgid "" "The schema used on the LDAP server. Supported values are RFC2307 and " "RFC2307bis. The default is RFC2307bis" @@ -5170,6 +5488,17 @@ msgstr "" msgid "users to exclude from migration" msgstr "" +msgid "Lists of objects migrated; categorized by type." +msgstr "Lista migrowanych obiektów, ułożonych w kategorie według typu." + +msgid "Lists of objects that could not be migrated; categorized by type." +msgstr "" +"Lista obiektów, które nie mogły zostać migrowane, ułożonych w kategorie " +"według typu." + +msgid "False if migration mode was disabled." +msgstr "Fałsz, jeśli wyłączono tryb migracji." + msgid "False if migration fails because the compatibility plug-in is enabled." msgstr "" @@ -5181,10 +5510,19 @@ msgstr "" msgid "Show environment variables." msgstr "" +msgid "Forward to server instead of running locally" +msgstr "Przekazanie do serwera zamiast uruchamiania lokalnie" + msgid "" "retrieve and print all attributes from the server. Affects command output." msgstr "" +msgid "Total number of variables env (>= count)" +msgstr "Całkowita liczba zmiennych środowiskowych (>= licznik)" + +msgid "Number of variables returned (<= total)" +msgstr "Liczba zwróconych zmiennych (<= razem)" + msgid "Show all loaded plugins." msgstr "" @@ -5192,6 +5530,9 @@ msgstr "" msgid "Dictionary mapping plugin names to bases" msgstr "Nazwa zmiennej mapowania słownika do ustawienia jako wartość" +msgid "Number of plugins loaded" +msgstr "Liczba wczytanych wtyczek" + msgid "" "\n" "Netgroups\n" @@ -5217,6 +5558,18 @@ msgid "" " ipa netgroup-del admins\n" msgstr "" +msgid "Netgroup name" +msgstr "Nazwa grupy sieciowej" + +msgid "Netgroup description" +msgstr "Opis grupy sieciowej" + +msgid "NIS domain name" +msgstr "Nazwa domeny NIS" + +msgid "IPA unique ID" +msgstr "Unikalny identyfikator IPA" + #, fuzzy msgid "Member netgroups" msgstr "Elementy grupy" @@ -5233,6 +5586,9 @@ msgstr "Elementy użytkowników" msgid "Member Group" msgstr "Elementy grupy" +msgid "Member Host" +msgstr "Komputer elementu" + #, fuzzy msgid "Member Hostgroup" msgstr "Element grupy komputerów" @@ -5275,10 +5631,6 @@ msgstr "" msgid "Search for netgroups without these member users." msgstr "" -#, fuzzy -msgid "group" -msgstr "Grupa" - msgid "Search for netgroups with these member groups." msgstr "" @@ -5375,6 +5727,151 @@ msgstr "" msgid "Show the current OTP configuration." msgstr "" +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +#, fuzzy +msgid "Unique ID" +msgstr "Unikalny identyfikator IPA" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Manager" +msgstr "" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +#, fuzzy +msgid "Disabled" +msgstr "Włączone" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +msgid "Validity start" +msgstr "" + +msgid "First date/time the token can be used" +msgstr "" + +msgid "Validity end" +msgstr "" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "" + +msgid "Token model (informational only)" +msgstr "" + +#, fuzzy +msgid "Serial" +msgstr "Numer seryjny SOA" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +msgid "Add a new OTP token." +msgstr "" + +msgid "(deprecated)" +msgstr "" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +msgid "Delete an OTP token." +msgstr "" + +msgid "Search for OTP token." +msgstr "" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +msgid "Modify a OTP token." +msgstr "" + +msgid "Rename the OTP token object" +msgstr "" + +msgid "Display information about an OTP token." +msgstr "" + msgid "" "\n" "YubiKey Tokens\n" @@ -5414,6 +5911,9 @@ msgstr "" msgid "Set a user's password." msgstr "Hasło użytkownika" +msgid "New Password" +msgstr "Nowe hasło" + #, fuzzy msgid "Current Password" msgstr "Nowe hasło" @@ -5562,6 +6062,9 @@ msgid "" "yet exist)" msgstr "" +msgid "Member of group" +msgstr "Członek grupy" + msgid "Target members of a group (sets memberOf targetfilter)" msgstr "" @@ -5825,6 +6328,45 @@ msgid "" " ipa pwpolicy-mod --minclasses=2 localadmins\n" msgstr "" +msgid "Group" +msgstr "Grupa" + +msgid "Manage password policy for specific group" +msgstr "Zarządzanie polityką haseł dla podanej grupy" + +msgid "Max lifetime (days)" +msgstr "Maksymalny czas życia (w dniach)" + +msgid "Maximum password lifetime (in days)" +msgstr "Maksymalny czas życia hasła (w dniach)" + +msgid "Min lifetime (hours)" +msgstr "Minimalny czas życia (w godzinach)" + +msgid "Minimum password lifetime (in hours)" +msgstr "Minimalny czas życia hasła (w godzinach)" + +msgid "History size" +msgstr "Rozmiar historii" + +msgid "Password history size" +msgstr "Rozmiar historii haseł" + +msgid "Character classes" +msgstr "Klasy znaków" + +msgid "Minimum number of character classes" +msgstr "Minimalna liczba klas znaków" + +msgid "Min length" +msgstr "Minimalna długość" + +msgid "Minimum length of password" +msgstr "Minimalna długość hasła" + +msgid "Priority of the policy (higher number means lower priority" +msgstr "Priorytet polityki (wyższy numer równa się niższemu priorytetowi" + #, fuzzy msgid "Max failures" msgstr "Maksymalny czas życia" @@ -5866,6 +6408,12 @@ msgstr "" msgid "Display information about password policy." msgstr "" +msgid "User" +msgstr "Użytkownik" + +msgid "Display effective policy for a specific user" +msgstr "Wyświetlanie aktywnej polityki dla podanego użytkownika" + msgid "" "\n" "RADIUS Proxy Servers\n" @@ -6036,9 +6584,15 @@ msgstr "" msgid "Role name" msgstr "Nazwa reguły" +msgid "A description of this role-group" +msgstr "Opis tej grupy rol" + msgid "Privileges" msgstr "" +msgid "Member services" +msgstr "Usługi elementów" + #, fuzzy msgid "Add a new role." msgstr "Dodaj i zamknij" @@ -6308,6 +6862,9 @@ msgid "" "httpd.keytab\n" msgstr "" +msgid "Service principal" +msgstr "Naczelnik usługi" + msgid "PAC type" msgstr "" @@ -6319,6 +6876,9 @@ msgstr "" msgid "Add a new IPA new service." msgstr "" +msgid "force principal name even if not in DNS" +msgstr "wymuszenie nazwy naczelnika, nawet jeśli nie w DNS" + msgid "Add hosts that can manage this service." msgstr "" @@ -6981,6 +7541,15 @@ msgid "" " ipa sudocmd-del /usr/bin/less\n" msgstr "" +msgid "Sudo Command" +msgstr "Polecenie sudo" + +msgid "A description of this command" +msgstr "Opis tego polecenia" + +msgid "Sudo Command Groups" +msgstr "Grupy polecenia sudo" + #, fuzzy msgid "Create new Sudo Command." msgstr "Polecenie sudo" @@ -7033,6 +7602,9 @@ msgstr "" msgid "Sudo Command Group" msgstr "Grupy polecenia sudo" +msgid "Commands" +msgstr "Polecenia" + #, fuzzy msgid "Member Sudo commands" msgstr "Polecenie sudo" @@ -7083,1045 +7655,231 @@ msgstr "Grupy polecenia sudo" msgid "" "\n" -"Users\n" +"Sudo Rules\n" "\n" -"Manage user entries. All users are POSIX users.\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" "\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" "\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" "\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" "\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" "\n" "EXAMPLES:\n" "\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" "\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" "\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" "\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" "\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" "\n" -" Delete a user:\n" -" ipa user-del tuser1\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" msgstr "" #, fuzzy -msgid "Display name" -msgstr "Imię" +msgid "Command category" +msgstr "Kategoria komputerów" -msgid "Initials" +#, fuzzy +msgid "Command category the rule applies to" +msgstr "Kategoria komputerów, do których zastosowywana jest reguła" + +#, fuzzy +msgid "RunAs User category" +msgstr "Kategoria użytkowników" + +#, fuzzy +msgid "RunAs User category the rule applies to" +msgstr "Kategoria użytkowników, do których zastosowywana jest reguła" + +#, fuzzy +msgid "RunAs Group category" +msgstr "Kategoria użytkowników" + +#, fuzzy +msgid "RunAs Group category the rule applies to" +msgstr "Kategoria użytkowników, do których zastosowywana jest reguła" + +#, fuzzy +msgid "Sudo order" +msgstr "Polecenie sudo" + +msgid "integer to order the Sudo rules" msgstr "" #, fuzzy -msgid "Kerberos principal expiration" -msgstr "Naczelnik Kerberosa" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "State/Province" -msgstr "" - -msgid "ZIP" -msgstr "" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "" - -msgid "Manager" -msgstr "" - -msgid "Car License" -msgstr "" - -#, fuzzy -msgid "Account disabled" -msgstr "%(count)d zmiennych" - -msgid "User authentication types" -msgstr "" - -msgid "Types of supported user authentication" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -#, fuzzy -msgid "RADIUS proxy configuration" -msgstr "Konfiguracja" - -msgid "RADIUS proxy username" -msgstr "" - -#, fuzzy -msgid "Department Number" -msgstr "Numer pagera" - -#, fuzzy -msgid "Employee Number" -msgstr "Numer telefonu" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -#, fuzzy -msgid "Indirect Member of group" -msgstr "Członek grupy" - -msgid "Kerberos keys available" -msgstr "" - -#, fuzzy -msgid "Add a new user." -msgstr "Dodaj i zamknij" - -#, fuzzy -msgid "Don't create user private group" -msgstr "Domyślna grupa użytkowników" - -#, fuzzy -msgid "Delete a user." -msgstr "Usunąć wszystko?" - -#, fuzzy -msgid "Disable a user account." -msgstr "Wyłączono konto użytkownika „%(value)s”" - -#, fuzzy -msgid "Enable a user account." -msgstr "Włączono konto użytkownika „%(value)s”" - -msgid "Search for users." -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -msgid "Modify a user." -msgstr "" - -msgid "Rename the user object" -msgstr "" - -msgid "Display information about a user." -msgstr "" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -#, fuzzy -msgid "A description of this auto member rule" -msgstr "Opis tego polecenia" - -#, fuzzy -msgid "Default (fallback) Group" -msgstr "Domyślna grupa użytkowników" - -#, fuzzy -msgid "Default group for entries to land" -msgstr "Domyślna grupa dla nowych użytkowników" - -msgid "Add an automember rule." -msgstr "" - -msgid "Automember Rule" -msgstr "" - -#, fuzzy -msgid "Grouping Type" -msgstr "Nazwa grupy" - -#, fuzzy -msgid "Grouping to which the rule applies" -msgstr "Kategoria usług, do których zastosowywana jest reguła" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -#, fuzzy -msgid "Attribute Key" -msgstr "Atrybut" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -#, fuzzy -msgid "Conditions that could not be added" -msgstr "Elementy, które nie mogły zostać dodane" - -#, fuzzy -msgid "Number of conditions added" -msgstr "Liczba wczytanych wtyczek" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -msgid "Delete an automember rule." -msgstr "" - -msgid "Search for automember rules." -msgstr "" - -msgid "Modify an automember rule." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -#, fuzzy -msgid "Conditions that could not be removed" -msgstr "Liczba elementów, które nie mogły zostać usunięte" - -#, fuzzy -msgid "Number of conditions removed" -msgstr "Liczba usuniętych elementów" - -msgid "Display information about an automember rule." -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -#, fuzzy -msgid "Search for existing certificates." -msgstr "Przyczyna unieważnienia certyfikatu (0-10)" - -msgid "Match cn attribute in subject" -msgstr "" - -#, fuzzy -msgid "minimum serial number" -msgstr "Numer seryjny" - -#, fuzzy -msgid "maximum serial number" -msgstr "Numer seryjny" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -#, fuzzy -msgid "Maximum number of certs returned" -msgstr "Maksymalna liczba zwróconych wpisów" - -#, fuzzy -msgid "Take a revoked certificate off hold." -msgstr "Odrzuć certyfikat." - -#, fuzzy -msgid "Submit a certificate signing request." -msgstr "Dekodowanie żądania podpisywania certyfikatu się nie powiodło: %s" - -msgid "CSR" -msgstr "" - -#, fuzzy -msgid "Retrieve an existing certificate." -msgstr "Odrzuć certyfikat." - -msgid "Output filename" -msgstr "" - -#, fuzzy -msgid "File to store the certificate in." -msgstr "Odrzuć certyfikat." - -msgid "Check the status of a certificate signing request." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -#, fuzzy -msgid "Indirect Member users" -msgstr "Elementy użytkowników" - -#, fuzzy -msgid "Indirect Member groups" -msgstr "Elementy grupy" - -#, fuzzy -msgid "Create a new group." -msgstr "Nie jest zarządzaną grupą" - -#, fuzzy -msgid "Create as a non-POSIX group" -msgstr "zmiana na grupę POSIX" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -#, fuzzy -msgid "Add members to a group." -msgstr "Element grupy" - -#, fuzzy -msgid "External member" +msgid "External User" msgstr "Zewnętrzny komputer" -msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgid "External User the rule applies to (sudorule-find only)" msgstr "" #, fuzzy -msgid "Delete group." -msgstr "Domyślna grupa użytkowników" +msgid "Host Masks" +msgstr "Komputery" + +msgid "Sudo Allow Commands" +msgstr "Polecenia zezwolone sudo" + +msgid "Sudo Deny Commands" +msgstr "Polecenia zabronione sudo" #, fuzzy -msgid "Detach a managed group from a user." -msgstr "Nie jest zarządzaną grupą" +msgid "Sudo Allow Command Groups" +msgstr "Polecenia zezwolone sudo" #, fuzzy -msgid "Search for groups." -msgstr "Członek grup" +msgid "Sudo Deny Command Groups" +msgstr "Grupy polecenia sudo" -msgid "search for private groups" +#, fuzzy +msgid "RunAs Users" +msgstr "Użytkownicy" + +msgid "Run as a user" +msgstr "" + +msgid "Groups of RunAs Users" +msgstr "" + +msgid "Run as any user within a specified group" msgstr "" #, fuzzy -msgid "search for POSIX groups" -msgstr "zmiana na grupę POSIX" +msgid "RunAs External User" +msgstr "Zewnętrzny komputer" -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" +msgid "External User the commands can run as (sudorule-find only)" +msgstr "" + +msgid "External Groups of RunAs Users" +msgstr "" + +msgid "External Groups of users that the command can run as" msgstr "" #, fuzzy -msgid "search for non-POSIX groups" -msgstr "zmiana na grupę POSIX" +msgid "RunAs Groups" +msgstr "Grupy komputerów" -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." +msgid "Run with the gid of a specified POSIX group" msgstr "" #, fuzzy -msgid "Modify a group." +msgid "RunAs External Group" +msgstr "Zewnętrzny komputer" + +msgid "External Group the commands can run as (sudorule-find only)" +msgstr "" + +#, fuzzy +msgid "Sudo Option" +msgstr "Polecenie sudo" + +msgid "Create new Sudo Rule." +msgstr "" + +msgid "Add commands and sudo command groups affected by Sudo Rule." +msgstr "" + +#, fuzzy +msgid "member sudo command group" msgstr "Element grupy" -msgid "change to support external non-IPA members from trusted domains" +#, fuzzy +msgid "sudo command groups to add" +msgstr "Grupy polecenia sudo" + +msgid "Add hosts and hostgroups affected by Sudo Rule." msgstr "" -msgid "Rename the group object" +msgid "host masks of allowed hosts" +msgstr "" + +msgid "Add an option to the Sudo Rule." +msgstr "" + +msgid "Add group for Sudo to execute as." +msgstr "" + +msgid "Add users and groups for Sudo to execute as." +msgstr "" + +msgid "Add users and groups affected by Sudo Rule." +msgstr "" + +msgid "Delete Sudo Rule." +msgstr "" + +msgid "Disable a Sudo Rule." +msgstr "" + +msgid "Enable a Sudo Rule." +msgstr "" + +msgid "Search for Sudo Rule." +msgstr "" + +msgid "Results should contain primary key attribute only (\"sudorule-name\")" +msgstr "" + +msgid "Modify Sudo Rule." +msgstr "" + +msgid "Remove commands and sudo command groups affected by Sudo Rule." msgstr "" #, fuzzy -msgid "Remove members from a group." -msgstr "Element grupy" +msgid "sudo command groups to remove" +msgstr "Grupy polecenia sudo" -msgid "Display information about a named group." +msgid "Remove hosts and hostgroups affected by Sudo Rule." msgstr "" -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" +msgid "Remove an option from Sudo Rule." msgstr "" -msgid "Simulate use of Host-based access controls" +msgid "Remove group for Sudo to execute as." msgstr "" -#, fuzzy -msgid "Target host" -msgstr "Cel" - -msgid "Rules to test. If not specified, --enabled is assumed" +msgid "Remove users and groups for Sudo to execute as." msgstr "" -msgid "Hide details which rules are matched, not matched, or invalid" +msgid "Remove users and groups affected by Sudo Rule." msgstr "" -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Warning" -msgstr "" - -msgid "Matched rules" -msgstr "" - -#, fuzzy -msgid "Not matched rules" -msgstr "Nie jest zarządzaną grupą" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" +msgid "Display Sudo Rule." msgstr "" msgid "" @@ -8304,10 +8062,6 @@ msgstr "" msgid "Size of the ID range reserved for the trusted domain" msgstr "" -#, fuzzy -msgid "Range type" -msgstr "Typ reguły" - msgid "" "Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" msgstr "" @@ -8370,6 +8124,541 @@ msgstr "" msgid "Modify trustdomain of the trust" msgstr "" +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "Imię" + +msgid "Last name" +msgstr "Nazwisko" + +msgid "Full name" +msgstr "Pełna nazwa" + +#, fuzzy +msgid "Display name" +msgstr "Imię" + +msgid "Initials" +msgstr "" + +msgid "Kerberos principal" +msgstr "Naczelnik Kerberosa" + +#, fuzzy +msgid "Kerberos principal expiration" +msgstr "Naczelnik Kerberosa" + +msgid "Email address" +msgstr "Adres e-mail" + +msgid "Prompt to set the user password" +msgstr "" + +msgid "Generate a random user password" +msgstr "" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" +"Numer identyfikacyjny użytkownika (system go przydzieli, jeśli nie zostanie " +"podany)" + +msgid "Street address" +msgstr "Adres zamieszkania" + +msgid "City" +msgstr "Miasto" + +msgid "State/Province" +msgstr "" + +msgid "ZIP" +msgstr "" + +msgid "Telephone Number" +msgstr "Numer telefonu" + +msgid "Mobile Telephone Number" +msgstr "Numer telefonu komórkowego" + +msgid "Pager Number" +msgstr "Numer pagera" + +msgid "Fax Number" +msgstr "Numer faksu" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "" + +msgid "Car License" +msgstr "" + +#, fuzzy +msgid "Account disabled" +msgstr "%(count)d zmiennych" + +msgid "User authentication types" +msgstr "" + +msgid "Types of supported user authentication" +msgstr "" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +#, fuzzy +msgid "RADIUS proxy configuration" +msgstr "Konfiguracja" + +msgid "RADIUS proxy username" +msgstr "" + +#, fuzzy +msgid "Department Number" +msgstr "Numer pagera" + +#, fuzzy +msgid "Employee Number" +msgstr "Numer telefonu" + +msgid "Employee Type" +msgstr "" + +msgid "Preferred Language" +msgstr "" + +msgid "Kerberos keys available" +msgstr "" + +#, fuzzy +msgid "Add a new user." +msgstr "Dodaj i zamknij" + +#, fuzzy +msgid "Don't create user private group" +msgstr "Domyślna grupa użytkowników" + +#, fuzzy +msgid "Delete a user." +msgstr "Usunąć wszystko?" + +#, fuzzy +msgid "Disable a user account." +msgstr "Wyłączono konto użytkownika „%(value)s”" + +#, fuzzy +msgid "Enable a user account." +msgstr "Włączono konto użytkownika „%(value)s”" + +msgid "Search for users." +msgstr "" + +msgid "Self" +msgstr "Własny" + +msgid "Display user record for current Kerberos principal" +msgstr "Wyświetlenie wpisu użytkownika dla bieżącego naczelnika Kerberosa" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +msgid "Search for users with these member of HBAC rules." +msgstr "" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +msgid "Modify a user." +msgstr "" + +msgid "Rename the user object" +msgstr "" + +msgid "Display information about a user." +msgstr "" + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + +#, fuzzy +msgid "Time limit of search in seconds (0 is unlimited)" +msgstr "Ograniczenie czasu wyszukiwania w sekundach" + +#, fuzzy +msgid "Maximum number of entries returned (0 is unlimited)" +msgstr "Maksymalna liczba zwróconych wpisów" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which principals are\n" +"permitted to have certificates issued using a given certificate\n" +"profile.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile:\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +#, fuzzy +msgid "ACL name" +msgstr "Nazwa ACI" + +#, fuzzy +msgid "Profile category" +msgstr "Kategoria usług" + +#, fuzzy +msgid "Profile category the ACL applies to" +msgstr "Kategoria usług, do których zastosowywana jest reguła" + +#, fuzzy +msgid "User category the ACL applies to" +msgstr "Kategoria użytkowników, do których zastosowywana jest reguła" + +#, fuzzy +msgid "Host category the ACL applies to" +msgstr "Kategoria komputerów, do których zastosowywana jest reguła" + +#, fuzzy +msgid "Service category the ACL applies to" +msgstr "Kategoria usług, do których zastosowywana jest reguła" + +msgid "Profiles" +msgstr "" + +msgid "Create a new CA ACL." +msgstr "" + +msgid "Add target hosts and hostgroups to a CA ACL." +msgstr "" + +msgid "Add profiles to a CA ACL." +msgstr "" + +#, fuzzy +msgid "member Certificate Profile" +msgstr "Nowy certyfikat" + +#, fuzzy +msgid "Certificate Profiles to add" +msgstr "Odrzucono certyfikat" + +msgid "Add services to a CA ACL." +msgstr "" + +msgid "Add users and groups to a CA ACL." +msgstr "" + +msgid "Delete a CA ACL." +msgstr "" + +msgid "Disable a CA ACL." +msgstr "" + +msgid "Enable a CA ACL." +msgstr "" + +msgid "Search for CA ACLs." +msgstr "" + +msgid "Modify a CA ACL." +msgstr "" + +msgid "Remove target hosts and hostgroups from a CA ACL." +msgstr "" + +msgid "Remove profiles from a CA ACL." +msgstr "" + +#, fuzzy +msgid "Certificate Profiles to remove" +msgstr "Odrzucono certyfikat" + +msgid "Remove services from a CA ACL." +msgstr "" + +msgid "Remove users and groups from a CA ACL." +msgstr "" + +msgid "Display the properties of a CA ACL." +msgstr "" + +#, fuzzy +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "Naczelnik usługi dla tego certyfikatu (np. HTTP/test.przykład.pl)" + +msgid "Profile ID" +msgstr "" + +#, fuzzy +msgid "Certificate Profile to use" +msgstr "Podstawa tematu certyfikatu" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +#, fuzzy +msgid "Profile description" +msgstr "Opis grupy" + +#, fuzzy +msgid "Brief description of this profile" +msgstr "Opis tej grupy rol" + +#, fuzzy +msgid "Store issued certificates" +msgstr "Odrzuć certyfikat." + +msgid "Whether to store certs issued using this profile" +msgstr "" + +#, fuzzy +msgid "Delete a Certificate Profile." +msgstr "Odrzuć certyfikat." + +msgid "Search for Certificate Profiles." +msgstr "" + +#, fuzzy +msgid "Import a Certificate Profile." +msgstr "Odrzuć certyfikat." + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +#, fuzzy +msgid "Write profile configuration to file" +msgstr "nie można otworzyć pliku konfiguracji %s\n" + +msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" +msgstr "" + +#, fuzzy +msgid "Maximum number of records to search (-1 or 0 is unlimited)" +msgstr "Maksymalna liczba zwróconych wpisów" + +msgid "" +"\n" +"Raise the IPA Domain Level.\n" +msgstr "" + +msgid "Query current Domain Level." +msgstr "" + +msgid "Current domain level:" +msgstr "" + +msgid "Change current Domain Level." +msgstr "" + +msgid "Domain Level" +msgstr "" + +msgid "Add certificates to host entry" +msgstr "" + +msgid "Remove certificates from host entry" +msgstr "" + msgid "" "\n" "ID ranges\n" @@ -8501,6 +8790,7 @@ msgid "" "user. RIDs are unique in a domain, 32bit values and are used for users and\n" "groups.\n" "\n" +"=======\n" "WARNING:\n" "\n" "DNA plugin in 389-ds will allocate IDs based on the ranges configured for " @@ -8515,32 +8805,7 @@ msgid "" "IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " "be\n" "modified to match the new range.\n" -msgstr "" - -#, fuzzy -msgid "Range name" -msgstr "Nazwa reguły" - -msgid "First Posix ID of the range" -msgstr "" - -#, fuzzy -msgid "Number of IDs in the range" -msgstr "Liczba wczytanych wtyczek" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +"=======\n" msgstr "" msgid "" @@ -8564,556 +8829,46 @@ msgid "" "\n" " must be given to add a new range for a trusted AD domain.\n" "\n" -" WARNING:\n" +"=======\n" +"WARNING:\n" "\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " "based\n" -" on the local ranges set via this family of commands.\n" +"on the local ranges set via this family of commands.\n" "\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" " " msgstr "" -msgid "Delete an ID range." -msgstr "" - -msgid "Search for ranges." -msgstr "" - -msgid "Modify ID range." -msgstr "" - -msgid "Display information about a range." -msgstr "" - msgid "" "\n" -"OTP Tokens\n" +"Modify ID range.\n" "\n" -"Manage OTP tokens.\n" +"=======\n" +"WARNING:\n" "\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" "\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -#, fuzzy -msgid "Unique ID" -msgstr "Unikalny identyfikator IPA" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -#, fuzzy -msgid "Disabled" -msgstr "Włączone" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -msgid "Validity start" -msgstr "" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Validity end" -msgstr "" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -#, fuzzy -msgid "Serial" -msgstr "Numer seryjny SOA" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -msgid "Add a new OTP token." -msgstr "" - -msgid "(deprecated)" -msgstr "" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -msgid "Delete an OTP token." -msgstr "" - -msgid "Search for OTP token." -msgstr "" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -msgid "Modify a OTP token." -msgstr "" - -msgid "Rename the OTP token object" -msgstr "" - -msgid "Display information about an OTP token." -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -#, fuzzy -msgid "Command category" -msgstr "Kategoria komputerów" - -#, fuzzy -msgid "Command category the rule applies to" -msgstr "Kategoria komputerów, do których zastosowywana jest reguła" - -#, fuzzy -msgid "RunAs User category" -msgstr "Kategoria użytkowników" - -#, fuzzy -msgid "RunAs User category the rule applies to" -msgstr "Kategoria użytkowników, do których zastosowywana jest reguła" - -#, fuzzy -msgid "RunAs Group category" -msgstr "Kategoria użytkowników" - -#, fuzzy -msgid "RunAs Group category the rule applies to" -msgstr "Kategoria użytkowników, do których zastosowywana jest reguła" - -#, fuzzy -msgid "Sudo order" -msgstr "Polecenie sudo" - -msgid "integer to order the Sudo rules" -msgstr "" - -#, fuzzy -msgid "External User" -msgstr "Zewnętrzny komputer" - -msgid "External User the rule applies to (sudorule-find only)" -msgstr "" - -#, fuzzy -msgid "Host Masks" -msgstr "Komputery" - -#, fuzzy -msgid "Sudo Allow Command Groups" -msgstr "Polecenia zezwolone sudo" - -#, fuzzy -msgid "Sudo Deny Command Groups" -msgstr "Grupy polecenia sudo" - -#, fuzzy -msgid "RunAs Users" -msgstr "Użytkownicy" - -msgid "Run as a user" -msgstr "" - -msgid "Groups of RunAs Users" -msgstr "" - -msgid "Run as any user within a specified group" -msgstr "" - -#, fuzzy -msgid "RunAs External User" -msgstr "Zewnętrzny komputer" - -msgid "External User the commands can run as (sudorule-find only)" -msgstr "" - -msgid "External Groups of RunAs Users" -msgstr "" - -msgid "External Groups of users that the command can run as" -msgstr "" - -#, fuzzy -msgid "RunAs Groups" -msgstr "Grupy komputerów" - -msgid "Run with the gid of a specified POSIX group" -msgstr "" - -#, fuzzy -msgid "RunAs External Group" -msgstr "Zewnętrzny komputer" - -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "" - -#, fuzzy -msgid "Sudo Option" -msgstr "Polecenie sudo" - -msgid "Create new Sudo Rule." -msgstr "" - -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "" - -#, fuzzy -msgid "member sudo command group" -msgstr "Element grupy" - -#, fuzzy -msgid "sudo command groups to add" -msgstr "Grupy polecenia sudo" - -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "host masks of allowed hosts" -msgstr "" - -msgid "Add an option to the Sudo Rule." -msgstr "" - -msgid "Add group for Sudo to execute as." -msgstr "" - -msgid "Add users and groups for Sudo to execute as." -msgstr "" - -msgid "Add users and groups affected by Sudo Rule." -msgstr "" - -msgid "Delete Sudo Rule." -msgstr "" - -msgid "Disable a Sudo Rule." -msgstr "" - -msgid "Enable a Sudo Rule." -msgstr "" - -msgid "Search for Sudo Rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "" - -msgid "Modify Sudo Rule." -msgstr "" - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "" - -#, fuzzy -msgid "sudo command groups to remove" -msgstr "Grupy polecenia sudo" - -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "Remove an option from Sudo Rule." -msgstr "" - -msgid "Remove group for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups affected by Sudo Rule." -msgstr "" - -msgid "Display Sudo Rule." -msgstr "" - -#, fuzzy -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "Ograniczenie czasu wyszukiwania w sekundach" - -#, fuzzy -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "Maksymalna liczba zwróconych wpisów" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which principals are\n" -"permitted to have certificates issued using a given certificate\n" -"profile.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -#, fuzzy -msgid "ACL name" -msgstr "Nazwa ACI" - -#, fuzzy -msgid "Profile category" -msgstr "Kategoria usług" - -#, fuzzy -msgid "Profile category the ACL applies to" -msgstr "Kategoria usług, do których zastosowywana jest reguła" - -#, fuzzy -msgid "User category the ACL applies to" -msgstr "Kategoria użytkowników, do których zastosowywana jest reguła" - -#, fuzzy -msgid "Host category the ACL applies to" -msgstr "Kategoria komputerów, do których zastosowywana jest reguła" - -#, fuzzy -msgid "Service category the ACL applies to" -msgstr "Kategoria usług, do których zastosowywana jest reguła" - -msgid "Profiles" -msgstr "" - -msgid "Create a new CA ACL." -msgstr "" - -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "" - -msgid "Add profiles to a CA ACL." -msgstr "" - -#, fuzzy -msgid "member Certificate Profile" -msgstr "Nowy certyfikat" - -#, fuzzy -msgid "Certificate Profiles to add" -msgstr "Odrzucono certyfikat" - -msgid "Add services to a CA ACL." -msgstr "" - -msgid "Add users and groups to a CA ACL." -msgstr "" - -msgid "Delete a CA ACL." -msgstr "" - -msgid "Disable a CA ACL." -msgstr "" - -msgid "Enable a CA ACL." -msgstr "" - -msgid "Search for CA ACLs." -msgstr "" - -msgid "Modify a CA ACL." -msgstr "" - -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "" - -msgid "Remove profiles from a CA ACL." -msgstr "" - -#, fuzzy -msgid "Certificate Profiles to remove" -msgstr "Odrzucono certyfikat" - -msgid "Remove services from a CA ACL." -msgstr "" - -msgid "Remove users and groups from a CA ACL." -msgstr "" - -msgid "Display the properties of a CA ACL." -msgstr "" - -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "" - -#, fuzzy -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "Maksymalna liczba zwróconych wpisów" - -msgid "" -"\n" -"Raise the IPA Domain Level.\n" -msgstr "" - -msgid "Query current Domain Level." -msgstr "" - -msgid "Current domain level:" -msgstr "" - -msgid "Change current Domain Level." -msgstr "" - -msgid "Domain Level" -msgstr "" - -msgid "Add certificates to host entry" -msgstr "" - -msgid "Remove certificates from host entry" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " msgstr "" msgid "Fallback to AD DC LDAP" @@ -9145,6 +8900,9 @@ msgid "" "to onelevel" msgstr "" +msgid "Remove users that can manage this token." +msgstr "" + msgid "Target DN subtree" msgstr "" @@ -9591,6 +9349,13 @@ msgid "" " " msgstr "" +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + #, fuzzy msgid "Preserved user" msgstr "Elementy użytkowników" @@ -9902,340 +9667,6 @@ msgstr "" msgid "Display information about a vault container." msgstr "" -#, fuzzy -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "Naczelnik usługi dla tego certyfikatu (np. HTTP/test.przykład.pl)" - -msgid "Profile ID" -msgstr "" - -#, fuzzy -msgid "Certificate Profile to use" -msgstr "Podstawa tematu certyfikatu" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -#, fuzzy -msgid "Profile description" -msgstr "Opis grupy" - -#, fuzzy -msgid "Brief description of this profile" -msgstr "Opis tej grupy rol" - -#, fuzzy -msgid "Store issued certificates" -msgstr "Odrzuć certyfikat." - -msgid "Whether to store certs issued using this profile" -msgstr "" - -#, fuzzy -msgid "Delete a Certificate Profile." -msgstr "Odrzuć certyfikat." - -msgid "Search for Certificate Profiles." -msgstr "" - -#, fuzzy -msgid "Import a Certificate Profile." -msgstr "Odrzuć certyfikat." - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -#, fuzzy -msgid "Write profile configuration to file" -msgstr "nie można otworzyć pliku konfiguracji %s\n" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - msgid "Resolve a host name in DNS. (Deprecated)" msgstr "" @@ -11400,6 +10831,9 @@ msgstr "Czas życia" msgid "SOA record time to live" msgstr "Czas życia" +msgid "SOA class" +msgstr "Klasa SOA" + #, fuzzy msgid "SOA record class" msgstr "Klasa SOA" @@ -11929,6 +11363,192 @@ msgid "" " ipa hostgroup-del baltimore\n" msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + msgid "" "Comma-separated list of objectclasses used to search for user entries in DS" msgstr "" @@ -12239,198 +11859,6 @@ msgstr "" msgid "comma-separated list of sudo commands to remove" msgstr "" -msgid "Active directory domain administrator's password" -msgstr "" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - msgid "" "\n" "Sudo Rules\n" @@ -12472,6 +11900,19 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" +msgid "Active directory domain administrator's password" +msgstr "" + +msgid "GECOS field" +msgstr "" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "Proszę podać %(label)s ponownie, aby sprawdzić: " + +msgid "Passwords do not match!" +msgstr "Hasła się nie zgadzają." + msgid "No matching entries found" msgstr "" @@ -12509,113 +11950,381 @@ msgstr "" msgid "No file to read" msgstr "" -#, fuzzy, python-format -msgid "%(filename)s: file not found" -msgstr "Nie odnaleziono pliku %(file)s" - -#, fuzzy, python-brace-format -msgid "Unable to parse option {item}" -msgstr "Nie można przetworzyć naczelnika\n" - -msgid "Filename is empty" +#, python-format +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" #, python-format -msgid "Permission denied: %(file)s" -msgstr "" +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "nieznany błąd %(code)d z %(server)s: %(error)s" -msgid "empty DNS label" -msgstr "" +msgid "an internal error has occurred" +msgstr "wystąpił wewnętrzny błąd" -msgid "DNS label cannot be longer that 63 characters" -msgstr "" +#, fuzzy, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "wystąpił wewnętrzny błąd" #, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "" - -#, fuzzy -msgid "cannot be longer that {} characters" -msgstr "może wynosić co najwyżej %(maxlength)d znaków" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "" - -msgid "invalid SSH public key" -msgstr "" - -msgid "options are not allowed" -msgstr "" - -msgid "invalid hostmask" +msgid "unknown command '%(name)s'" msgstr "" #, fuzzy, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" +msgid "error on server '%(server)s': %(error)s" msgstr "nieznany błąd %(code)d z %(server)s: %(error)s" #, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "Nieprawidłowe żądanie JSON-RPC: %(error)s" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" msgstr "" #, python-format msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." msgstr "" #, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Błąd Kerberosa: %(major)s/%(minor)s" + +msgid "did not receive Kerberos credentials" +msgstr "nie otrzymano danych uwierzytelniających Kerberosa" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" msgstr "" -msgid "invalid escape code in domain name" +msgid "No credentials cache found" +msgstr "Nie odnaleziono pamięci podręcznej danych uwierzytelniających" + +msgid "Ticket expired" +msgstr "Zgłoszenie wygasło" + +msgid "Credentials cache permissions incorrect" +msgstr "" +"Uprawnienia pamięci podręcznej danych uwierzytelniających są niepoprawne" + +msgid "Bad format in credentials cache" +msgstr "Błędny format w pamięci podręcznej danych uwierzytelniających" + +msgid "Cannot resolve KDC for requested realm" +msgstr "Nie można rozwiązać KDC dla żądanego obszaru" + +msgid "Session error" msgstr "" -msgid "domain name cannot be longer than 255 characters" +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" msgstr "" -msgid "DNS label cannot be longer than 63 characters" +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "Niewystarczający dostęp: %(info)s" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "" + +#, python-format +msgid "'%(name)s' is required" +msgstr "" + +#, fuzzy, python-format +msgid "invalid '%(name)s': %(error)s" +msgstr "Nieprawidłowe żądanie JSON-RPC: %(error)s" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "" + +msgid "Passwords do not match" +msgstr "Hasła się nie zgadzają" + +msgid "Command not implemented" +msgstr "Polecenie nie jest zaimplementowane" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "" + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "" + +#, python-format +msgid "%(reason)s" +msgstr "%(reason)s" + +msgid "This entry already exists" +msgstr "Ten wpis już istnieje" + +msgid "You must enroll a host in order to create a host service" +msgstr "Należy zapisać się do komputera, aby utworzyć jego usługę" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" +"Naczelnik usługi nie jest w formacie: usługa/w pełni kwalifikowana nazwa " +"komputera: %(reason)s" + +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "Obszar naczelnika nie zgadza się z obszarem dla tego serwera IPA" + +msgid "This command requires root access" +msgstr "To polecenie wymaga dostępu roota" + +msgid "This is already a posix group" +msgstr "To jest już grupa POSIX" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" msgstr "" #, fuzzy -msgid "invalid domain name" -msgstr "Nazwa domeny NIS" +msgid "This entry is already enabled" +msgstr "Ten wpis już istnieje" + +#, fuzzy +msgid "This entry is already disabled" +msgstr "Ten wpis już istnieje" + +msgid "This entry cannot be enabled or disabled" +msgstr "" + +msgid "This entry is not a member" +msgstr "" + +msgid "A group may not be a member of itself" +msgstr "Grupa nie może być własnym elementem" + +#, fuzzy +msgid "This entry is already a member" +msgstr "Ten wpis już istnieje" #, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgid "Base64 decoding failed: %(reason)s" +msgstr "Dekodowanie base64 się nie powiodło: %(reason)s" + +msgid "A group may not be added as a member of itself" +msgstr "Nie można dodać grupy jako elementu jej samej" + +msgid "The default users group cannot be removed" +msgstr "Nie można usunąć domyślnej grupy użytkowników" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" +"Usuwanie zarządzanej grupy nie jest dozwolone. Musi zostać najpierw " +"odłączona." + +msgid "A managed group cannot have a password policy." +msgstr "" + +#, fuzzy, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "Odrzuć certyfikat." + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." msgstr "" #, python-format -msgid "invalid domain-name: %s" -msgstr "" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -msgid "invalid IP address format" -msgstr "" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "" - msgid "" -"at least one value equal to the canonical principal name must be present" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" msgstr "" -msgid "realm or UPN suffix overlaps with trusted domain namespace" +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "%(attr)s nie zawiera „%(value)s”" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" + +msgid "This group already allows external members" +msgstr "" + +msgid "This group cannot be posix because it is external" +msgstr "" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "" + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" + +#, fuzzy, python-format +msgid "'%(attr)s' already contains one or more values" +msgstr "%(attr)s nie zawiera „%(value)s”" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "" + +msgid "change collided with another change" +msgstr "zmiana koliduje z inną zmianą" + +msgid "no modifications to be performed" +msgstr "żadne modyfikacje nie zostaną wykonane" + +#, fuzzy, python-format +msgid "%(desc)s: %(info)s" +msgstr "%(info)s" + +msgid "limits exceeded for this query" +msgstr "przekroczono ograniczenia dla tego zapytania" + +#, python-format +msgid "%(info)s" +msgstr "%(info)s" + +msgid "modifying primary key is not allowed" +msgstr "" + +#, fuzzy, python-format +msgid "%(attr)s: Only one value allowed." +msgstr "Dozwolona jest tylko jedna wartość" + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "" + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "" + +#, fuzzy +msgid "Not allowed on non-leaf entry" +msgstr "modyfikowanie wpisów użytkowników nie jest dozwolone" + +msgid "LDAP timeout" +msgstr "" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "" + +msgid "Configured time limit exceeded" +msgstr "" + +msgid "Configured size limit exceeded" +msgstr "" + +msgid "Configured administrative server limit exceeded" +msgstr "" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "Nie można ukończyć działania na certyfikacie: %(error)s" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "Błąd formatu certyfikatu: %(error)s" + +msgid "Already registered" +msgstr "" + +msgid "Not registered yet" +msgstr "" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "" + +#, fuzzy, python-format +msgid "%(exception)s" +msgstr "%(reason)s" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" + +msgid "Results are truncated, try a more specific search" +msgstr "" +"Wyniki zostały obcięte, proszę spróbować bardziej konkretnego wyszukiwania" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "" + +msgid "Client version. Used to determine if server will accept request." msgstr "" msgid "Additional instructions:" @@ -12775,266 +12484,52 @@ msgstr "" msgid "The certificate for %(ca)s is not available on this server." msgstr "" -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." -msgstr "" +#, python-format +msgid "%(count)d variables" +msgstr "%(count)d zmiennych" #, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "" +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "Wczytano %(count)d wtyczkę" +msgstr[1] "Wczytano %(count)d wtyczki" +msgstr[2] "Wczytano %(count)d wtyczek" -#, fuzzy, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "wystąpił wewnętrzny błąd" +msgid "A dictionary representing an LDAP entry" +msgstr "Słownik reprezentujący wpis LDAP" -#, python-format -msgid "unknown command '%(name)s'" -msgstr "" +msgid "A list of LDAP entries" +msgstr "Lista wpisów LDAP" -#, fuzzy, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "nieznany błąd %(code)d z %(server)s: %(error)s" +msgid "All commands should at least have a result" +msgstr "Wszystkie polecenia powinny powiadać przynajmniej wynik" -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "" +msgid "incorrect type" +msgstr "niepoprawny typ" -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "" - -msgid "Session error" -msgstr "" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "" - -#, python-format -msgid "'%(name)s' is required" -msgstr "" - -#, fuzzy, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "Nieprawidłowe żądanie JSON-RPC: %(error)s" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "" - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "" - -#, fuzzy -msgid "This entry is already enabled" -msgstr "Ten wpis już istnieje" - -#, fuzzy -msgid "This entry is already disabled" -msgstr "Ten wpis już istnieje" - -msgid "This entry cannot be enabled or disabled" -msgstr "" - -msgid "This entry is not a member" -msgstr "" - -#, fuzzy -msgid "This entry is already a member" -msgstr "Ten wpis już istnieje" - -msgid "A managed group cannot have a password policy." -msgstr "" - -#, fuzzy, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "Odrzuć certyfikat." - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" - -msgid "This group already allows external members" -msgstr "" - -msgid "This group cannot be posix because it is external" -msgstr "" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" - -#, fuzzy, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "%(attr)s nie zawiera „%(value)s”" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "" - -#, fuzzy, python-format -msgid "%(desc)s: %(info)s" -msgstr "%(info)s" - -msgid "modifying primary key is not allowed" -msgstr "" - -#, fuzzy, python-format -msgid "%(attr)s: Only one value allowed." +msgid "Only one value is allowed" msgstr "Dozwolona jest tylko jedna wartość" -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "" - -#, fuzzy -msgid "Not allowed on non-leaf entry" -msgstr "modyfikowanie wpisów użytkowników nie jest dozwolone" - -msgid "LDAP timeout" -msgstr "" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" - -msgid "Configured time limit exceeded" -msgstr "" - -msgid "Configured size limit exceeded" -msgstr "" - -msgid "Configured administrative server limit exceeded" -msgstr "" - -msgid "Already registered" -msgstr "" - -msgid "Not registered yet" -msgstr "" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" - -#, fuzzy, python-format -msgid "%(exception)s" -msgstr "%(reason)s" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" - msgid "this option is deprecated" msgstr "" +msgid "must be True or False" +msgstr "musi być prawdą lub fałszem" + +msgid "must be an integer" +msgstr "musi być liczba całkowitą" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "musi wynosić co najmniej %(minvalue)d" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "może wynosić co najwyżej %(maxvalue)d" + +msgid "must be a decimal number" +msgstr "musi być liczbą dziesiętną" + #, fuzzy, python-format msgid "must be at least %(minvalue)s" msgstr "musi wynosić co najmniej %(minvalue)d" @@ -13049,6 +12544,25 @@ msgid "" "%(allowed)s" msgstr "" +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "musi pasować do wzorca „%(pattern)s”" + +msgid "must be binary data" +msgstr "musi być danymi binarnymi" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "musi wynosić co najmniej %(minlength)d bajtów" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "może wynosić co najwyżej %(maxlength)d bajtów" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "musi wynosić dokładnie %(length)d bajtów" + #, fuzzy msgid "must be a certificate" msgstr "Odrzuć certyfikat." @@ -13057,9 +12571,28 @@ msgstr "Odrzuć certyfikat." msgid "must be a certificate signing request" msgstr "Dekodowanie żądania podpisywania certyfikatu się nie powiodło: %s" +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "Dekodowanie żądania podpisywania certyfikatu się nie powiodło: %s" + +msgid "must be Unicode text" +msgstr "musi być tekstem w unikodzie" + msgid "Leading and trailing spaces are not allowed" msgstr "" +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "musi wynosić co najmniej %(minlength)d znaków" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "może wynosić co najwyżej %(maxlength)d znaków" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "musi wynosić dokładnie %(length)d znaków" + #, python-format msgid "The character %(char)r is not allowed." msgstr "" @@ -13110,16 +12643,120 @@ msgstr "Zmodyfikowano usługę „%(value)s”" msgid "Service principal is required" msgstr "Naczelnik usługi" -#, python-format -msgid "Unknown option: %(option)s" +#, fuzzy, python-format +msgid "%(filename)s: file not found" +msgstr "Nie odnaleziono pliku %(file)s" + +#, fuzzy, python-brace-format +msgid "Unable to parse option {item}" +msgstr "Nie można przetworzyć naczelnika\n" + +msgid "any of the configured servers" msgstr "" -msgid "Client version. Used to determine if server will accept request." +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" +msgstr "" + +#, python-format +msgid "Permission denied: %(file)s" +msgstr "" + +msgid "empty DNS label" +msgstr "" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "" + +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" + +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "" + +#, fuzzy +msgid "cannot be longer that {} characters" +msgstr "może wynosić co najwyżej %(maxlength)d znaków" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "" + +msgid "invalid SSH public key" +msgstr "" + +msgid "options are not allowed" +msgstr "" + +msgid "invalid hostmask" msgstr "" #, fuzzy, python-format -msgid "objectclass %s not found" -msgstr "Nie odnaleziono komputera „%(host)s”" +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "nieznany błąd %(code)d z %(server)s: %(error)s" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +msgid "invalid escape code in domain name" +msgstr "" + +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +#, fuzzy +msgid "invalid domain name" +msgstr "Nazwa domeny NIS" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +msgid "invalid IP address format" +msgstr "" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgstr "" #, python-format msgid "Retrieving CA cert chain failed: %s" @@ -13137,6148 +12774,69 @@ msgstr "" msgid "Retrieving CA status failed with status %d" msgstr "" +#, fuzzy, python-format +msgid "objectclass %s not found" +msgstr "Nie odnaleziono komputera „%(host)s”" + +msgid "Trusting forest" +msgstr "" + +msgid "Trusted forest" +msgstr "" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +msgid "Unknown" +msgstr "" + +msgid "Non-Active Directory domain" +msgstr "" + +msgid "Active Directory domain" +msgstr "" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "" +msgid "Failed to authenticate to CA REST API" +msgstr "" + #, fuzzy, python-format msgid "Replication agreement for %(hostname)s not found" msgstr "%(parent)s: nie odnaleziono %(oname)s" -msgid "Failed to authenticate to CA REST API" -msgstr "" +msgid "A list of ACI values" +msgstr "Lista wartości ACI" -msgid "One time password commands" -msgstr "" - -#, fuzzy -msgid "OTP configuration options" -msgstr "Konfiguracja" - -#, fuzzy -msgid "OTP Configuration" -msgstr "Konfiguracja" - -#, fuzzy -msgid "" -"\n" -"IPA server roles\n" -msgstr "Serwer IPA do użycia" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -#, fuzzy -msgid "server role" -msgstr "Nazwa serwera" - -#, fuzzy -msgid "server roles" -msgstr "Nazwa serwera" - -#, fuzzy -msgid "IPA Server Roles" -msgstr "Serwer IPA do użycia" - -#, fuzzy -msgid "IPA Server Role" -msgstr "Serwer IPA do użycia" - -#, fuzzy -msgid "IPA server role name" -msgstr "Serwer IPA do użycia" - -#, fuzzy -msgid "Role status" -msgstr "Stan żądania" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -msgid "Include IPA master entries" -msgstr "" - -#, fuzzy -msgid "roles" -msgstr "Role" - -#, fuzzy -msgid "IPA role name" -msgstr "Nazwa reguły" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -#, fuzzy -msgid "password policy" -msgstr "Polityka haseł" - -#, fuzzy -msgid "password policies" -msgstr "Polityka haseł" - -#, fuzzy -msgid "Password Policies" -msgstr "Polityka haseł" - -#, fuzzy -msgid "Max repeat" -msgstr "Maksymalne odnowienie" - -#, fuzzy -msgid "Maximum number of same consecutive characters" -msgstr "Maksymalna liczba zwróconych wpisów" - -#, fuzzy -msgid "Max sequence" -msgstr "Maksymalne odnowienie" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -#, fuzzy -msgid "User check" -msgstr "Nazwa użytkownika" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -#, fuzzy -msgid "cannot delete global password policy" -msgstr "nie można ustawiać priorytetu dla globalnej polityki" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -#, fuzzy -msgid "Realm domains" -msgstr "Nazwa obszaru" - -#, fuzzy -msgid "Realm Domains" -msgstr "Nazwa obszaru" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"API Schema\n" -msgstr "Schemat LDAP" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -#, fuzzy -msgid "Name" -msgstr "Nazwa komputera" - -#, fuzzy -msgid "Documentation" -msgstr "Położenie" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -msgid "Help topic" -msgstr "" - -#, fuzzy -msgid "Version" -msgstr "Uprawnienia" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -msgid "Method name" -msgstr "Nazwa grupy sieciowej" - -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -#, fuzzy -msgid "Search for classes." -msgstr "Klasy znaków" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -#, fuzzy -msgid "Required" -msgstr "Identyfikator żądania" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -msgid "CLI name" -msgstr "Nazwa ACI" - -#, fuzzy -msgid "Confirm (password)" -msgstr "Hasło użytkownika" - -#, fuzzy -msgid "Default" -msgstr "Domyślna powłoka" - -#, fuzzy -msgid "Default from" -msgstr "Domyślna grupa użytkowników" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "" - -#, fuzzy, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "%(parent)s: nie odnaleziono %(oname)s" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, fuzzy, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "%(parent)s: nie odnaleziono %(oname)s" - -msgid "Display information about a command output." -msgstr "" - -#, fuzzy -msgid "Search for command outputs." -msgstr "Grupy polecenia sudo" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -#, fuzzy -msgid "Member principals" -msgstr "Naczelnik Kerberosa" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -#, fuzzy -msgid "Service delegation rules" -msgstr "Kategoria usług" - -#, fuzzy -msgid "Service delegation rule" -msgstr "Kategoria usług" - -#, fuzzy, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -msgid "privileged service delegation rule" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -#, fuzzy -msgid "Service delegation target" -msgstr "Nazwa grupy usługi" - -#, fuzzy, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -msgid "privileged service delegation target" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" - -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -#, fuzzy -msgid "Malformed principal" -msgstr "Naczelnik usługi" - -msgid "{} is required by the IPA master" -msgstr "" - -#, fuzzy -msgid "service" -msgstr "Usługi" - -#, fuzzy -msgid "services" -msgstr "Usługi" - -#, fuzzy -msgid "Principal alias" -msgstr "Nazwa naczelnika" - -#, fuzzy -msgid "Service principal alias" -msgstr "Naczelnik usługi" - -#, fuzzy -msgid "Base-64 encoded service certificate" -msgstr "Certyfikat serwera zakodowany za pomocą Base-64" - -#, fuzzy -msgid "Serial Number" -msgstr "Numer seryjny" - -#, fuzzy -msgid "Serial Number (hex)" -msgstr "Numer seryjny" - -#, fuzzy -msgid "Fingerprint (SHA256)" -msgstr "Odcisk (SHA1)" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "" - -msgid "Add a new IPA service." -msgstr "" - -#, fuzzy -msgid "force principal name even if host not in DNS" -msgstr "wymuszenie nazwy naczelnika, nawet jeśli nie w DNS" - -msgid "Skip host check" -msgstr "" - -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "" - -msgid "Add a new SMB service." -msgstr "" - -#, fuzzy -msgid "SMB service NetBIOS name" -msgstr "Nazwa usługi" - -#, fuzzy, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -#, fuzzy, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -#, fuzzy, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -msgid "Add new principal alias to a service" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -#, fuzzy -msgid "Remove principal alias from a service" -msgstr "Usuwa wszystkich naczelników w tym obszarze" - -#, fuzzy, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" -msgstr "" - -#, fuzzy, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" -"priorytet musi być unikalną wartością (%(prio)d jest już używane przez " -"%(gname)s)" - -#, fuzzy, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "Usunięto użytkownika „%(value)s”" - -#, fuzzy, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "Zmodyfikowano użytkownika „%(value)s”" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -#, fuzzy -msgid "users" -msgstr "Użytkownicy" - -#, fuzzy -msgid "command" -msgstr "Polecenia" - -#, fuzzy -msgid "commands" -msgstr "Polecenia" - -msgid "runAs user" -msgstr "" - -#, fuzzy -msgid "runAs users" -msgstr "Elementy użytkowników" - -#, fuzzy -msgid "group runAs" -msgstr "Grupy sieciowe" - -#, fuzzy -msgid "runAs groups" -msgstr "Elementy grupy" - -#, fuzzy, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "Pasuje %(count)d użytkownik" -msgstr[1] "Pasuje %(count)d użytkowników" -msgstr[2] "Pasuje %(count)d użytkowników" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when user category='all'" -msgstr "" - -msgid "hosts cannot be added when host category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -msgid "pyhbac is not installed." -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, fuzzy -msgid "CA is not configured" -msgstr "DNS nie jest skonfigurowany" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, fuzzy, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "Nie odnaleziono komputera „%(host)s”" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -#, fuzzy -msgid "Base-64 encoded certificate." -msgstr "Certyfikat serwera zakodowany za pomocą Base-64" - -#, fuzzy -msgid "Certificate chain" -msgstr "Certyfikat" - -msgid "X.509 certificate chain" -msgstr "" - -#, fuzzy -msgid "Subject email address" -msgstr "Adres e-mail" - -#, fuzzy -msgid "Subject DNS name" -msgstr "Temat" - -#, fuzzy -msgid "Subject X.400 address" -msgstr "Adres zamieszkania" - -#, fuzzy -msgid "Subject directory name" -msgstr "Podstawa katalogu domowego" - -msgid "Subject EDI Party name" -msgstr "" - -#, fuzzy -msgid "Subject URI" -msgstr "Temat" - -#, fuzzy -msgid "Subject IP Address" -msgstr "Adres zamieszkania" - -#, fuzzy -msgid "Subject OID" -msgstr "Temat" - -#, fuzzy -msgid "Subject UPN" -msgstr "Temat" - -#, fuzzy -msgid "Subject Kerberos principal name" -msgstr "Naczelnik Kerberosa" - -#, fuzzy -msgid "Subject Other Name" -msgstr "Nazwa serwera" - -#, fuzzy -msgid "Issuer DN" -msgstr "Wydawca" - -#, fuzzy -msgid "Serial number (hex)" -msgstr "Numer seryjny" - -msgid "Include certificate chain in output" -msgstr "" - -#, fuzzy -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "automatycznie dodaj naczelnika, jeśli nie istnieje" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -msgid "'add' option" -msgstr "" - -#, fuzzy -msgid "The principal for this request doesn't exist." -msgstr "automatycznie dodaj naczelnika, jeśli nie istnieje" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -#, fuzzy -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "Przyczyna unieważnienia certyfikatu (0-10)" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -#, fuzzy -msgid "7 is not a valid revocation reason" -msgstr "Przyczyna unieważnienia" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -msgid "domain" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -#, fuzzy -msgid "Priority of the rule (higher number means lower priority" -msgstr "Priorytet polityki (wyższy numer równa się niższemu priorytetowi" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -#, fuzzy -msgid "User logins" -msgstr "Login użytkownika" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "Pasuje %(count)d użytkownik" -msgstr[1] "Pasuje %(count)d użytkowników" -msgstr[2] "Pasuje %(count)d użytkowników" - -#, fuzzy -msgid "Base-64 encoded user certificate" -msgstr "Certyfikat serwera zakodowany za pomocą Base-64" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -#, fuzzy -msgid "must be at least 10" -msgstr "musi wynosić co najmniej %(minvalue)d" - -#, fuzzy -msgid "configuration options" -msgstr "Konfiguracja" - -#, fuzzy -msgid "Maximum hostname length" -msgstr "Minimalna długość" - -msgid "IPA masters" -msgstr "" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -#, fuzzy -msgid "IPA CA servers" -msgstr "Serwer IPA do użycia" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -#, fuzzy -msgid "IPA KRA servers" -msgstr "Serwer IPA do użycia" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" - -msgid "Domain resolution order" -msgstr "" - -msgid "colon-separated list of domains used for short name qualification" -msgstr "" - -#, fuzzy -msgid "IPA DNS servers" -msgstr "Serwer IPA do użycia" - -msgid "IPA servers configured as domain name server" -msgstr "" - -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "IPA DNSSec key master" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -msgid "Empty domain is not allowed" -msgstr "" - -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -#, fuzzy -msgid "The group doesn't exist" -msgstr "Grupa „%s” nie istnieje" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" - -msgid "SELinux user map default user not in order list" -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -#, fuzzy -msgid "sudo command group" -msgstr "Grupy polecenia sudo" - -#, fuzzy -msgid "sudo command groups" -msgstr "Grupy polecenia sudo" - -#, fuzzy, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "Dodano grupę „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "Usunięto grupę „%(value)s”" - -#, fuzzy, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "Zmodyfikowano grupę „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "Pasuje %(count)d grupa" -msgstr[1] "Pasują %(count)d grupy" -msgstr[2] "Pasuje %(count)d grup" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -#, fuzzy -msgid "host groups" -msgstr "Grupy komputerów" - -#, fuzzy -msgid "Host Group" -msgstr "Grupy komputerów" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy -msgid "hostgroup" -msgstr "Grupa komputerów" - -#, fuzzy -msgid "privileged hostgroup" -msgstr "Element grupy komputerów" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "The OTP if the user has a token configured" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Permissions\n" -msgstr "Uprawnienia" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Managed permissions\n" -msgstr "Uprawnienia" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -#, fuzzy -msgid "must be enclosed in parentheses" -msgstr "musi być liczba całkowitą" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -#, fuzzy, python-format -msgid "Deprecated; use %s" -msgstr "Usunięto użytkownika „%(value)s”" - -#, fuzzy -msgid "ACI" -msgstr "ACI" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, fuzzy, python-format -msgid "Entry %s not found" -msgstr "Nie odnaleziono komputera „%(host)s”" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, fuzzy, python-format -msgid "%s: group not found" -msgstr "%(pkey)s: nie odnaleziono %(oname)s" - -#, fuzzy -msgid "target and targetgroup are mutually exclusive" +msgid "type, filter, subtree and targetgroup are mutually exclusive" msgstr "" "wartości „type”, „filter”, „subtree” i „targetgroup” są wzajemnie wyłączne" -#, fuzzy -msgid "subtree and type are mutually exclusive" -msgstr "" -"wartości „type”, „filter”, „subtree” i „targetgroup” są wzajemnie wyłączne" - -#, fuzzy -msgid "Bad search filter" -msgstr "Pola wyszukiwania użytkowników" - -#, fuzzy, python-format -msgid "Entry %s does not exist" -msgstr "Grupa „%s” nie istnieje" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, fuzzy, python-format -msgid "Added permission \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -#, fuzzy -msgid "attrs and included attributes are mutually exclusive" -msgstr "" -"wartości „type”, „filter”, „subtree” i „targetgroup” są wzajemnie wyłączne" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "Usunięto użytkownika „%(value)s”" - -msgid "cannot delete managed permissions" -msgstr "" - -#, fuzzy, python-format -msgid "ACI of permission %s was not found" -msgstr "Nie odnaleziono ACI o nazwie „%s”" - -#, fuzzy, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "Zmodyfikowano użytkownika „%(value)s”" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "Pasuje %(count)d użytkownik" -msgstr[1] "Pasuje %(count)d użytkowników" -msgstr[2] "Pasuje %(count)d użytkowników" - -#, fuzzy, python-brace-format -msgid "{role}: role not found" -msgstr "Nie odnaleziono pliku %(file)s" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -msgid "Internationalization messages" -msgstr "" - -msgid "Your session has expired. Please log in again." -msgstr "" - -msgid "Apply" -msgstr "" - -msgid "Rebuild auto membership" -msgstr "" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -msgid "Are you sure you want to proceed with the action?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "" - -#, fuzzy -msgid "Actions" -msgstr "Aktywna strefa" - -#, python-brace-format -msgid "${count} item(s) added" -msgstr "" - -msgid "Direct Membership" -msgstr "" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "" - -msgid "Indirect Membership" -msgstr "" - -msgid "No entries." -msgstr "" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "" - -msgid "Remove" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "" - -msgid "Show Results" -msgstr "" - -msgid "Authentication indicators" -msgstr "" - -msgid "Authentication indicator" -msgstr "" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "Add Custom Authentication Indicator" -msgstr "" - -msgid "Two factor authentication (password + OTP)" -msgstr "" - -msgid "RADIUS" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -msgid "Disable per-user override" -msgstr "" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "About" -msgstr "" - -#, fuzzy -msgid "Activate" -msgstr "Aktywna strefa" - -#, fuzzy -msgid "Add and Add Another" -msgstr "Dodaj i edytuj" - -#, fuzzy -msgid "Add Many" -msgstr "Dodaj i edytuj" - -msgid "Back" -msgstr "" - -msgid "Clear" -msgstr "" - -msgid "Clear all fields on the page." -msgstr "" - -msgid "Disable" -msgstr "" - -msgid "Download" -msgstr "" - -msgid "Download certificate as PEM formatted file." -msgstr "" - -msgid "Edit" -msgstr "" - -#, fuzzy -msgid "Enable" -msgstr "Włączone" - -msgid "Get" -msgstr "" - -msgid "Hide" -msgstr "" - -#, fuzzy -msgid "Issue" -msgstr "Wydawca" - -msgid "Match" -msgstr "" - -msgid "Match users according to certificate." -msgstr "" - -msgid "Migrate" -msgstr "" - -msgid "OK" -msgstr "" - -#, fuzzy -msgid "Refresh" -msgstr "Odświeżenie SOA" - -msgid "Reload current settings from the server." -msgstr "" - -msgid "Remove hold" -msgstr "" - -#, fuzzy -msgid "Reset Password" -msgstr "Nowe hasło" - -msgid "Reset Password and Log in" -msgstr "" - -msgid "Revert" -msgstr "" - -#, fuzzy -msgid "Revoke" -msgstr "Unieważniono" - -msgid "Save" -msgstr "" - -#, fuzzy -msgid "Set" -msgstr "Ustaw OTP" - -msgid "Show" -msgstr "" - -msgid "Stage" -msgstr "" - -msgid "View" -msgstr "" - -#, fuzzy -msgid "Customization" -msgstr "Konfiguracja" - -msgid "Pagination Size" -msgstr "" - -msgid "Collapse All" -msgstr "" - -msgid "Expand All" -msgstr "" - -msgid "General" -msgstr "" - -#, fuzzy -msgid "Identity Settings" -msgstr "Ustawienia konta" - -#, fuzzy -msgid "Record Settings" -msgstr "Ustawienia konta" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "" - -#, fuzzy -msgid "Add custom value" -msgstr "Dodano komputer „%(value)s”" - -msgid "Available" -msgstr "" - -#, fuzzy -msgid "Some operations failed." -msgstr "Proste dowiązanie się nie powiodło\n" - -msgid "Operations Error" -msgstr "" - -#, fuzzy -msgid "Confirmation" -msgstr "Konfiguracja" - -msgid "Custom value" -msgstr "" - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" - -msgid "Unsaved Changes" -msgstr "" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "" - -msgid "Hide details" -msgstr "" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "" - -msgid "Prospective" -msgstr "" - -#, fuzzy -msgid "Redirection" -msgstr "Katalog domowy" - -msgid "Select entries to be removed." -msgstr "" - -msgid "Result" -msgstr "" - -msgid "Show details" -msgstr "" - -msgid "Success" -msgstr "" - -msgid "Validation error" -msgstr "" - -msgid "Input form contains invalid or missing values." -msgstr "" - -msgid "Please try the following options:" -msgstr "" - -msgid "If the problem persists please contact the system administrator." -msgstr "" - -msgid "Refresh the page." -msgstr "" - -msgid "Reload the browser." -msgstr "" - -msgid "Return to the main page and retry the operation" -msgstr "" - -#, fuzzy, python-brace-format -msgid "An error has occurred (${error})" -msgstr "wystąpił wewnętrzny błąd" - -#, fuzzy -msgid "HTTP Error" -msgstr "Błąd" - -msgid "Internal Error" -msgstr "" - -#, fuzzy -msgid "IPA Error" -msgstr "Błąd" - -msgid "No response" -msgstr "" - -msgid "Unknown Error" -msgstr "" - -msgid "URL" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} member managers:" -msgstr "" - -msgid "False" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Allowed to create keytab" -msgstr "Utworzenie klucza się nie powiodło.\n" - -#, fuzzy -msgid "Allowed to retrieve keytab" -msgstr "Zamknięcie tablicy kluczy się nie powiodło\n" - -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Add Kerberos Principal Alias" -msgstr "Naczelnik Kerberosa" - -#, fuzzy -msgid "New kerberos principal alias" -msgstr "Naczelnik Kerberosa" - -msgid "Remove Kerberos Alias" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "" - -msgid "Inherited from server configuration" -msgstr "" - -msgid "MS-PAC" -msgstr "" - -msgid "Override inherited settings" -msgstr "" - -msgid "PAD" -msgstr "" - -#, fuzzy -msgid "Authenticating" -msgstr "Ustawienia konta" - -msgid "Authentication with personal certificate failed" -msgstr "" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" - -msgid "Continue to next page" -msgstr "" - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" - -msgid "Login failed due to an unknown reason" -msgstr "" - -msgid "Authentication with Kerberos failed" -msgstr "" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -msgid "Loading" -msgstr "" - -#, fuzzy -msgid "Kerberos Principal you entered is expired" -msgstr "Nazwa naczelnika Kerberosa dla tego komputera" - -msgid "Loading data" -msgstr "" - -msgid "Log in" -msgstr "" - -#, fuzzy -msgid "Log In Using Certificate" -msgstr "Certyfikat" - -msgid "Log in using personal certificate" -msgstr "" - -msgid "Log out" -msgstr "" - -msgid "Log out error" -msgstr "" - -msgid "Password or Password+One-Time Password" -msgstr "" - -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "" - -msgid "Sync OTP Token" -msgstr "" - -msgid "Synchronizing" -msgstr "" - -msgid "The user account you entered is locked" -msgstr "" - -#, fuzzy -msgid "number of passwords" -msgstr "Minimalna długość hasła" - -msgid "seconds" -msgstr "" - -#, fuzzy -msgid "Migrating" -msgstr "Konfiguracja" - -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -msgid "Password migration was not successful" -msgstr "" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -msgid "The password or username you entered is incorrect" -msgstr "" - -msgid "Password migration was successful" -msgstr "" - -msgid "Add delegation" -msgstr "" - -msgid "Remove delegations" -msgstr "" - -#, fuzzy -msgid "Add permission" -msgstr "Uprawnienia" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove permissions" -msgstr "Uprawnienia" - -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "" - -msgid "Add privilege" -msgstr "" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove privileges" -msgstr "Usuwanie naczelnika %s\n" - -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "" - -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Role Settings" -msgstr "Ustawienia" - -msgid "Add role" -msgstr "" - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "" - -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -msgid "Remove roles" -msgstr "" - -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "" - -msgid "Add self service permission" -msgstr "" - -msgid "Remove self service permissions" -msgstr "" - -msgid "Add rule" -msgstr "" - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to change default group?" -msgstr "" - -#, fuzzy -msgid "Default host group" -msgstr "Domyślna grupa użytkowników" - -#, fuzzy -msgid "Default user group" -msgstr "Domyślna grupa użytkowników" - -msgid "Exclusive" -msgstr "" - -msgid "Expression" -msgstr "" - -#, fuzzy -msgid "Host group rule" -msgstr "Grupa komputerów" - -#, fuzzy -msgid "Host group rules" -msgstr "Grupy komputerów" - -msgid "Inclusive" -msgstr "" - -msgid "Remove auto membership rules" -msgstr "" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "User group rule" -msgstr "Grupa użytkowników" - -#, fuzzy -msgid "User group rules" -msgstr "Grupa użytkowników" - -#, fuzzy -msgid "Add automount key" -msgstr "Automatyczne montowanie kluczy" - -#, fuzzy -msgid "Remove automount keys" -msgstr "Automatyczne montowanie kluczy" - -#, fuzzy -msgid "Add automount location" -msgstr "Automatyczne montowanie map" - -#, fuzzy -msgid "Automount Location Settings" -msgstr "Ustawienia konta" - -msgid "Remove automount locations" -msgstr "" - -#, fuzzy -msgid "Add automount map" -msgstr "Automatyczne montowanie map" - -#, fuzzy -msgid "Map Type" -msgstr "Typ" - -msgid "Direct" -msgstr "" - -msgid "Indirect" -msgstr "" - -#, fuzzy -msgid "Remove automount maps" -msgstr "Automatyczne montowanie map" - -msgid "Add certificate authority" -msgstr "" - -#, fuzzy -msgid "Remove certificate authorities" -msgstr "Odrzuć certyfikat." - -msgid "Add CA ACL" -msgstr "" - -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -msgid "All" -msgstr "" - -msgid "Any CA" -msgstr "" - -#, fuzzy -msgid "Any Host" -msgstr "Komputery" - -#, fuzzy -msgid "Any Service" -msgstr "Usługi" - -msgid "Any Profile" -msgstr "" - -msgid "Anyone" -msgstr "" - -#, fuzzy -msgid "Rule status" -msgstr "Stan żądania" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" - -msgid "Remove CA ACLs" -msgstr "" - -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "" - -msgid "Specified CAs" -msgstr "" - -#, fuzzy -msgid "Specified Hosts and Groups" -msgstr "Grupy polecenia sudo" - -msgid "Specified Profiles" -msgstr "" - -#, fuzzy -msgid "Specified Services and Groups" -msgstr "Grupy usług" - -msgid "Specified Users and Groups" -msgstr "" - -msgid "Permitted to have certificates issued" -msgstr "" - -#, fuzzy -msgid "Remove certificate profiles" -msgstr "Odrzuć certyfikat." - -msgid "AA Compromise" -msgstr "" - -#, fuzzy -msgid "Add principal" -msgstr "Naczelnik" - -msgid "Affiliation Changed" -msgstr "" - -msgid "CA" -msgstr "" - -msgid "CA Compromise" -msgstr "" - -#, fuzzy -msgid "Certificates" -msgstr "Certyfikat" - -#, fuzzy -msgid "Certificate Hold" -msgstr "Certyfikat" - -msgid "Cessation of Operation" -msgstr "" - -#, fuzzy -msgid "Common Name" -msgstr "Nazwa komputera" - -msgid "the certificate with serial number " -msgstr "" - -msgid "Expires On" -msgstr "" - -#, fuzzy -msgid "Issued on from" -msgstr "Wydawca" - -msgid "Issued on to" -msgstr "" - -#, fuzzy -msgid "Maximum serial number" -msgstr "Numer seryjny" - -#, fuzzy -msgid "Minimum serial number" -msgstr "Numer seryjny" - -#, fuzzy -msgid "Revoked on from" -msgstr "Unieważniono" - -#, fuzzy -msgid "Revoked on to" -msgstr "Unieważniono" - -msgid "Valid not after from" -msgstr "" - -msgid "Valid not after to" -msgstr "" - -msgid "Valid not before from" -msgstr "" - -msgid "Valid not before to" -msgstr "" - -#, fuzzy -msgid "Fingerprints" -msgstr "Odcisk (SHA1)" - -#, fuzzy -msgid "Get Certificate" -msgstr "Nowy certyfikat" - -#, fuzzy -msgid "Certificate Hold Removed" -msgstr "Odrzucono certyfikat" - -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Issue new certificate" -msgstr "Nowy certyfikat" - -#, fuzzy -msgid "Issued By" -msgstr "Wydawca" - -#, fuzzy -msgid "Issued On" -msgstr "Wydawca" - -#, fuzzy -msgid "Issued To" -msgstr "Wydawca" - -msgid "Key Compromise" -msgstr "" - -#, fuzzy -msgid "No Valid Certificate" -msgstr "Nowy certyfikat" - -msgid "Certificate in base64 or PEM format" -msgstr "" - -msgid "Note" -msgstr "" - -msgid "Organization" -msgstr "" - -msgid "Organizational Unit" -msgstr "" - -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "" - -msgid "Privilege Withdrawn" -msgstr "" - -msgid "Reason for Revocation" -msgstr "" - -#, fuzzy -msgid "Remove certificate hold" -msgstr "Odrzuć certyfikat." - -msgid "Do you want to remove the certificate hold?" -msgstr "" - -msgid "Remove from CRL" -msgstr "" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" - -#, fuzzy -msgid "Certificate requested" -msgstr "Odrzucono certyfikat" - -#, fuzzy -msgid "Revoke certificate" -msgstr "Odrzuć certyfikat." - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" - -msgid "REVOKED" -msgstr "" - -#, fuzzy -msgid "SHA1 Fingerprint" -msgstr "Odcisk (SHA1)" - -#, fuzzy -msgid "SHA256 Fingerprint" -msgstr "Odcisk (SHA1)" - -msgid "Superseded" -msgstr "" - -msgid "Unspecified" -msgstr "" - -#, fuzzy -msgid "Valid Certificate Present" -msgstr "Odrzucono certyfikat" - -msgid "Valid from" -msgstr "" - -msgid "Valid to" -msgstr "" - -msgid "Validity" -msgstr "" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "" - -#, fuzzy -msgid "View Certificate" -msgstr "Nowy certyfikat" - -#, fuzzy -msgid "Certificate Data" -msgstr "Certyfikat" - -#, fuzzy -msgid "Certificate For Match" -msgstr "Certyfikat" - -#, fuzzy -msgid "Certificate Mapping Match" -msgstr "Certyfikat" - -msgid "Matched Users" -msgstr "" - -#, fuzzy -msgid "User Login" -msgstr "Login użytkownika" - -msgid "Add certificate identity mapping rule" -msgstr "" - -msgid "Add certificate mapping data" -msgstr "" - -#, fuzzy -msgid "Certificate mapping data" -msgstr "Certyfikat" - -#, fuzzy -msgid "Configuration string" -msgstr "Konfiguracja" - -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "" - -#, fuzzy -msgid "Remove certificate mapping data" -msgstr "Odrzuć certyfikat." - -msgid "Issuer and subject" -msgstr "" - -msgid "Remove certificate identity mapping rules" -msgstr "" - -#, fuzzy -msgid "Group Options" -msgstr "Opis grupy" - -#, fuzzy -msgid "Search Options" -msgstr "Wyszukaj" - -msgid "SELinux Options" -msgstr "" - -#, fuzzy -msgid "Server Options" -msgstr "Serwer IPA do użycia" - -#, fuzzy -msgid "Service Options" -msgstr "Usługi" - -#, fuzzy -msgid "User Options" -msgstr "Login użytkownika" - -msgid "Forward first" -msgstr "" - -msgid "Forwarding disabled" -msgstr "" - -msgid "Forward only" -msgstr "" - -msgid "Options" -msgstr "" - -msgid "Update System DNS Records" -msgstr "" - -msgid "Do you want to update system DNS records?" -msgstr "" - -msgid "System DNS records updated" -msgstr "" - -msgid "Add DNS forward zone" -msgstr "" - -msgid "Remove DNS forward zones" -msgstr "" - -msgid "Add DNS resource record" -msgstr "" - -msgid "DNS record was deleted because it contained no data." -msgstr "" - -msgid "Other Record Types" -msgstr "" - -msgid "Address not valid, can't redirect" -msgstr "" - -msgid "Create dns record" -msgstr "" - -msgid "Creating record." -msgstr "" - -msgid "Record creation failed." -msgstr "" - -msgid "Checking if record exists." -msgstr "" - -msgid "Record not found." -msgstr "" - -msgid "Redirection to PTR record" -msgstr "" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "" - -#, fuzzy -msgid "Target reverse zone not found." -msgstr "%(parent)s: nie odnaleziono %(oname)s" - -msgid "Fetching DNS zones." -msgstr "" - -msgid "An error occurred while fetching dns zones." -msgstr "" - -msgid "You will be redirected to DNS Zone." -msgstr "" - -msgid "Remove DNS resource records" -msgstr "" - -msgid "Standard Record Types" -msgstr "" - -msgid "Records for DNS Zone" -msgstr "" - -msgid "Record Type" -msgstr "" - -msgid "Add DNS zone" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "" - -msgid "Remove DNS zones" -msgstr "" - -#, fuzzy -msgid "Remove Permission" -msgstr "Uprawnienia" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "" - -msgid "Skip DNS check" -msgstr "" - -msgid "Skip overlap check" -msgstr "" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" - -msgid "Authoritative nameserver change" -msgstr "" - -msgid "Level" -msgstr "" - -msgid "Set Domain Level" -msgstr "" - -#, fuzzy -msgid "Add user group" -msgstr "Grupa użytkowników" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Group Settings" -msgstr "Ustawienia konta" - -#, fuzzy -msgid "External" -msgstr "Zewnętrzny komputer" - -#, fuzzy -msgid "Group categories" -msgstr "Kontener grupy" - -#, fuzzy -msgid "Change to external group" -msgstr "zmiana na grupę POSIX" - -#, fuzzy -msgid "Change to POSIX group" -msgstr "zmiana na grupę POSIX" - -msgid "Non-POSIX" -msgstr "" - -msgid "POSIX" -msgstr "" - -#, fuzzy -msgid "Remove user groups" -msgstr "Grupy usługi elementów" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Group Type" -msgstr "Nazwa grupy" - -msgid "Add HBAC rule" -msgstr "" - -#, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Accessing" -msgstr "Czas dostępu" - -msgid "Remove HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Via Service" -msgstr "Usługi" - -msgid "Who" -msgstr "" - -msgid "Add HBAC service" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "" - -#, fuzzy -msgid "Remove HBAC services" -msgstr "Usługi elementów" - -#, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "" - -#, fuzzy -msgid "Add HBAC service group" -msgstr "Opis grupy usługi HBAC" - -#, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove HBAC service groups" -msgstr "Grupy usługi elementów" - -#, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Access Denied" -msgstr "Czas dostępu" - -#, fuzzy -msgid "Access Granted" -msgstr "Czas dostępu" - -msgid "Include Disabled" -msgstr "" - -#, fuzzy -msgid "Include Enabled" -msgstr "Włączone" - -msgid "HBAC Test" -msgstr "" - -msgid "Matched" -msgstr "" - -msgid "Missing values: " -msgstr "" - -msgid "New Test" -msgstr "" - -msgid "Rules" -msgstr "" - -msgid "Run Test" -msgstr "" - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "" - -msgid "Unmatched" -msgstr "" - -msgid "Add host" -msgstr "" - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -#, fuzzy -msgid "Host Certificate" -msgstr "Certyfikat" - -msgid "Delete Key, Unprovision" -msgstr "" - -#, fuzzy -msgid "Host Settings" -msgstr "Ustawienia" - -msgid "Enrolled" -msgstr "" - -msgid "Enrollment" -msgstr "" - -msgid "Fully Qualified Host Name" -msgstr "" - -#, fuzzy -msgid "Generate OTP" -msgstr "Ustaw OTP" - -#, fuzzy -msgid "Generated OTP" -msgstr "Ustaw OTP" - -#, fuzzy -msgid "Kerberos Key" -msgstr "Polityka zgłoszeń Kerberosa" - -msgid "Kerberos Key Not Present" -msgstr "" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "" - -#, fuzzy -msgid "One-Time Password" -msgstr "Nowe hasło" - -msgid "One-Time Password Not Present" -msgstr "" - -msgid "One-Time Password Present" -msgstr "" - -#, fuzzy -msgid "Reset OTP" -msgstr "Ustaw OTP" - -msgid "Reset One-Time Password" -msgstr "" - -msgid "OTP set" -msgstr "" - -#, fuzzy -msgid "Set One-Time Password" -msgstr "Nowe hasło" - -#, fuzzy -msgid "Remove hosts" -msgstr "Element komputerów" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "" - -msgid "Unprovision" -msgstr "" - -msgid "Are you sure you want to unprovision this host?" -msgstr "" - -msgid "Unprovisioning host" -msgstr "" - -msgid "Host unprovisioned" -msgstr "" - -#, fuzzy -msgid "Add host group" -msgstr "Grupa komputerów" - -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Host Group Settings" -msgstr "Grupy komputerów" - -#, fuzzy -msgid "Remove host groups" -msgstr "Element grupy komputerów" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -msgid "User to override" -msgstr "" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" - -msgid "Enter trusted user login." -msgstr "" - -msgid "Profile" -msgstr "" - -msgid "Group to override" -msgstr "" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" - -#, fuzzy -msgid "Enter trusted group name." -msgstr "Nazwa grupy usługi" - -msgid "Add ID view" -msgstr "" - -msgid "Add group ID override" -msgstr "" - -msgid "Add user ID override" -msgstr "" - -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "" - -msgid "Applied to hosts" -msgstr "" - -#, fuzzy -msgid "Apply to host groups" -msgstr "Element grupy komputerów" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" - -msgid "Apply to hosts" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "" - -msgid "Remove ID views" -msgstr "" - -msgid "Remove user ID overrides" -msgstr "" - -msgid "Remove group ID overrides" -msgstr "" - -#, fuzzy -msgid "Un-apply from host groups" -msgstr "Nazwa grupy komputerów" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" - -msgid "Un-apply" -msgstr "" - -msgid "Un-apply from hosts" -msgstr "" - -msgid "Un-apply ID Views from hosts" -msgstr "" - -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" - -#, fuzzy -msgid "Add netgroup" -msgstr "Grupy sieciowe" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Host" -msgstr "Komputery" - -#, fuzzy -msgid "Netgroup Settings" -msgstr "Opis grupy sieciowej" - -#, fuzzy -msgid "Remove netgroups" -msgstr "Elementy grupy" - -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "" - -msgid "Add OTP token" -msgstr "" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" - -#, fuzzy -msgid "Configure your token" -msgstr "Konfiguracja" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" - -#, fuzzy -msgid "OTP Token Settings" -msgstr "Ustawienia strefy DNS" - -msgid "Disable token" -msgstr "" - -#, fuzzy -msgid "Enable token" -msgstr "Włączone" - -msgid "Remove OTP tokens" -msgstr "" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" - -msgid "Show QR code" -msgstr "" - -#, fuzzy -msgid "Show configuration uri" -msgstr "Konfiguracja" - -msgid "Counter-based (HOTP)" -msgstr "" - -msgid "Time-based (TOTP)" -msgstr "" - -#, fuzzy -msgid "Add Custom Attribute" -msgstr "Atrybut" - -#, fuzzy -msgid "Permission settings" -msgstr "Uprawnienia" - -#, fuzzy -msgid "Attribute breakdown" -msgstr "Atrybut" - -#, fuzzy -msgid "Privilege Settings" -msgstr "Ustawienia" - -msgid "Public key:" -msgstr "" - -msgid "Set public key" -msgstr "" - -msgid "Show/Set key" -msgstr "" - -msgid "Modified: key not set" -msgstr "" - -msgid "Modified" -msgstr "" - -msgid "New: key not set" -msgstr "" - -msgid "New: key set" -msgstr "" - -#, fuzzy -msgid "Add password policy" -msgstr "Polityka haseł" - -#, fuzzy -msgid "Remove password policies" -msgstr "Polityka haseł" - -msgid "Add ID range" -msgstr "" - -#, fuzzy -msgid "Range Settings" -msgstr "Ustawienia" - -msgid "Base ID" -msgstr "" - -msgid "Primary RID base" -msgstr "" - -msgid "Range size" -msgstr "" - -msgid "Domain SID" -msgstr "" - -msgid "Secondary RID base" -msgstr "" - -msgid "Remove ID ranges" -msgstr "" - -msgid "Active Directory domain" -msgstr "" - -msgid "Active Directory domain with POSIX attributes" -msgstr "" - -msgid "Detect" -msgstr "" - -#, fuzzy -msgid "Local domain" -msgstr "Lokalizacja" - -msgid "IPA trust" -msgstr "" - -msgid "Active Directory winsync" -msgstr "" - -msgid "Add RADIUS server" -msgstr "" - -#, fuzzy -msgid "RADIUS Proxy Server Settings" -msgstr "Ustawienia strefy DNS" - -msgid "Remove RADIUS servers" -msgstr "" - -msgid "Check DNS" -msgstr "" - -msgid "Do you also want to perform DNS check?" -msgstr "" - -#, fuzzy -msgid "Force Update" -msgstr "Zaktualizuj" - -msgid "Add SELinux user map" -msgstr "" - -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "" - -msgid "Remove selinux user maps" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Server Roles" -msgstr "Nazwa serwera" - -#, fuzzy -msgid "Server Role" -msgstr "Nazwa serwera" - -msgid "Warning: Consider service replication" -msgstr "" - -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" - -#, fuzzy -msgid "Delete Server" -msgstr "Usuń" - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" - -#, fuzzy -msgid "Add service" -msgstr "Usługi" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -#, fuzzy -msgid "Service Certificate" -msgstr "Nowy certyfikat" - -#, fuzzy -msgid "Service Settings" -msgstr "Ustawienia strefy DNS" - -#, fuzzy -msgid "Provisioning" -msgstr "Uprawnienia" - -#, fuzzy -msgid "Remove services" -msgstr "Usługi elementów" - -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to unprovision this service?" -msgstr "" - -msgid "Unprovisioning service" -msgstr "" - -#, fuzzy -msgid "Service unprovisioned" -msgstr "Naczelnik usługi" - -#, fuzzy -msgid "Kerberos Key Present, Service Provisioned" -msgstr "Nazwa naczelnika usługi Kerberos" - -msgid "SSH public keys" -msgstr "" - -msgid "SSH public key:" -msgstr "" - -msgid "Set SSH key" -msgstr "" - -msgid "Are you sure you want to activate selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "" - -#, fuzzy, python-brace-format -msgid "${count} user(s) activated" -msgstr "Pasuje %(count)d użytkownik" - -msgid "Add stage user" -msgstr "" - -#, fuzzy -msgid "Stage users" -msgstr "Elementy użytkowników" - -#, fuzzy -msgid "Preserved users" -msgstr "Elementy użytkowników" - -msgid "Remove preserved users" -msgstr "" - -#, fuzzy -msgid "Remove stage users" -msgstr "Elementy użytkowników" - -msgid "Are you sure you want to stage selected users?" -msgstr "" - -#, fuzzy, python-brace-format -msgid "${count} users(s) staged" -msgstr "Pasuje %(count)d użytkownik" - -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "" - -msgid "Are you sure you want to restore selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "" - -#, fuzzy -msgid "User categories" -msgstr "Kategoria użytkowników" - -#, fuzzy -msgid "Add sudo command" -msgstr "Polecenie sudo" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "" - -#, fuzzy -msgid "Remove sudo commands" -msgstr "Polecenie sudo" - -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "" - -#, fuzzy -msgid "Add sudo command group" -msgstr "Grupy polecenia sudo" - -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove sudo command groups" -msgstr "Grupy polecenia sudo" - -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Add sudo rule" -msgstr "Dodaj i zamknij" - -msgid "Add sudo option" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -msgid "Allow" -msgstr "" - -#, fuzzy -msgid "Any Command" -msgstr "Polecenia" - -#, fuzzy -msgid "Any Group" -msgstr "Grupa" - -#, fuzzy -msgid "Run Commands" -msgstr "Polecenia" - -msgid "Deny" -msgstr "" - -#, fuzzy -msgid "Access this host" -msgstr "Czas dostępu" - -msgid "Option added" -msgstr "" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "" - -msgid "Remove sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -msgid "As Whom" -msgstr "" - -#, fuzzy -msgid "Specified Commands and Groups" -msgstr "Grupy polecenia sudo" - -#, fuzzy -msgid "Specified Groups" -msgstr "Grupy usług" - -msgid "Remove sudo options" -msgstr "" - -msgid "Autogenerated" -msgstr "" - -msgid "Segment details" -msgstr "" - -#, fuzzy -msgid "Replication configuration" -msgstr "nie można otworzyć pliku konfiguracji %s\n" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" - -msgid "Add IPA location" -msgstr "" - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -msgid "Remove IPA locations" -msgstr "" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -msgid "Add topology segment" -msgstr "" - -msgid "Remove topology segments" -msgstr "" - -#, fuzzy -msgid "Account" -msgstr "Automatyczne montowanie" - -msgid "Add trust" -msgstr "" - -msgid "Administrative account" -msgstr "" - -msgid "SID blocklists" -msgstr "" - -#, fuzzy -msgid "Trust Settings" -msgstr "Ustawienia konta" - -msgid "Establish using" -msgstr "" - -msgid "Fetch domains" -msgstr "" - -#, fuzzy -msgid "Pre-shared password" -msgstr "Hasło użytkownika" - -msgid "Remove trusts" -msgstr "" - -msgid "Remove domains" -msgstr "" - -#, fuzzy -msgid "Trust direction" -msgstr "Opis grupy" - -#, fuzzy -msgid "Trust status" -msgstr "Stan żądania" - -#, fuzzy -msgid "Trust type" -msgstr "Typ reguły" - -msgid "Alternative UPN suffixes" -msgstr "" - -msgid "User attributes for SMB services" -msgstr "" - -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -msgid "Path to a user home directory, in UNC format" -msgstr "" - -msgid "Drive to mount a home directory" -msgstr "" - -#, fuzzy -msgid "Account Status" -msgstr "Ustawienia konta" - -#, fuzzy -msgid "Active users" -msgstr "Aktywna strefa" - -msgid "Add user" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -#, fuzzy -msgid "Contact Settings" -msgstr "Ustawienia konta" - -#, fuzzy -msgid "Delete mode" -msgstr "Usuń" - -#, fuzzy -msgid "Employee Information" -msgstr "Różne informacje" - -msgid "Error changing account status" -msgstr "" - -#, fuzzy -msgid "Password expiration" -msgstr "Rozmiar historii haseł" - -#, fuzzy -msgid "delete" -msgstr "Usuń" - -msgid "preserve" -msgstr "" - -#, fuzzy -msgid "No private group" -msgstr "Nie jest zarządzaną grupą" - -#, fuzzy -msgid "Remove users" -msgstr "Elementy użytkowników" - -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" - -#, python-brace-format -msgid "Click to ${action}" -msgstr "" - -msgid "Unlock" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "" - -msgid "Add vault" -msgstr "" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -msgid "Asymmetric" -msgstr "" - -msgid "Vaults Config" -msgstr "" - -#, fuzzy -msgid "Members" -msgstr "Komputer elementu" - -msgid "My User Vaults" -msgstr "" - -msgid "Owners" -msgstr "" - -msgid "Remove vaults" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Service Vaults" -msgstr "Usługi" - -msgid "Shared" -msgstr "" - -msgid "Shared Vaults" -msgstr "" - -msgid "Standard" -msgstr "" - -msgid "Symmetric" -msgstr "" - -msgid "Vault Type" -msgstr "" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -#, fuzzy -msgid "User Vaults" -msgstr "Grupy użytkowników" - -msgid "Current password is required" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "Maksymalny czas życia hasła (w dniach)" - -#, fuzzy -msgid "First OTP" -msgstr "Imię" - -#, fuzzy -msgid "New password is required" -msgstr "Nowe hasło" - -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" - -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" - -msgid "Token synchronization failed" -msgstr "" - -msgid "The username, password or token codes are not correct" -msgstr "" - -msgid "Token was synchronized" -msgstr "" - -msgid "Your password has expired. Please enter a new password." -msgstr "" - -msgid "Password reset was not successful." -msgstr "" - -#, fuzzy -msgid "Reset your password." -msgstr "Hasło użytkownika" - -#, fuzzy -msgid "Second OTP" -msgstr "Ustaw OTP" - -#, fuzzy -msgid "Verify Password" -msgstr "Sprawdzenie hasła naczelnika" - -msgid "Are you sure you want to delete selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "" - -msgid "Are you sure you want to disable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "" - -msgid "Are you sure you want to enable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "" - -msgid "Some entries were not deleted" -msgstr "" - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" - -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" - -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" - -msgid "Working" -msgstr "" - -msgid "Audit" -msgstr "" - -msgid "Authentication" -msgstr "" - -#, fuzzy -msgid "Automember" -msgstr "członek %s" - -msgid "Host-Based Access Control" -msgstr "" - -msgid "Identity" -msgstr "" - -#, fuzzy -msgid "IPA Server" -msgstr "Serwer IPA do użycia" - -#, fuzzy -msgid "Network Services" -msgstr "Usługi" - -msgid "Policy" -msgstr "" - -msgid "Role-Based Access Control" -msgstr "" - -msgid "Sudo" -msgstr "" - -msgid "Topology" -msgstr "" - -msgid "Trusts" -msgstr "" - -msgid "True" -msgstr "" - -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" - -msgid "API Browser" -msgstr "" - -#, fuzzy -msgid "First" -msgstr "Imię" - -#, fuzzy -msgid "Last" -msgstr "Nazwisko" - -msgid "Next" -msgstr "" - -msgid "Page" -msgstr "" - -msgid "Prev" -msgstr "" - -msgid "Undo" -msgstr "" - -msgid "Undo this change." -msgstr "" - -#, fuzzy -msgid "Undo All" -msgstr "Odznacz wszystko" - -#, fuzzy -msgid "Undo all changes in this field." -msgstr "Usuwa wszystkich naczelników w tym obszarze" - -msgid "Text does not match field pattern" -msgstr "" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" - -#, fuzzy -msgid "Must be a decimal number" -msgstr "musi być liczbą dziesiętną" - -#, fuzzy -msgid "Format error" -msgstr "błąd odczytu\n" - -#, fuzzy -msgid "Must be an integer" -msgstr "musi być liczba całkowitą" - -msgid "Not a valid IP address" -msgstr "" - -msgid "Not a valid IPv4 address" -msgstr "" - -msgid "Not a valid IPv6 address" -msgstr "" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "" - -#, fuzzy -msgid "Parse error" -msgstr "błąd odczytu\n" - -#, fuzzy -msgid "Must be a positive number" -msgstr "musi być liczbą dziesiętną" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "" - -#, fuzzy -msgid "Required field" -msgstr "Identyfikator żądania" - -msgid "Unsupported value" -msgstr "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -#, fuzzy -msgid "invalid port number" -msgstr "Numer seryjny" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" -msgstr "" - -#, fuzzy, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -#, fuzzy, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, fuzzy, python-format -msgid "Access granted: %s" -msgstr "Czas dostępu" - -#, fuzzy -msgid "kerberos ticket policy settings" -msgstr "Polityka zgłoszeń Kerberosa" - -#, fuzzy -msgid "OTP max life" -msgstr "Maksymalny czas życia" - -#, fuzzy -msgid "OTP token maximum ticket life (seconds)" -msgstr "Minimalny czas życia zgłoszenia (sekundy)" - -#, fuzzy -msgid "OTP max renew" -msgstr "Maksymalne odnowienie" - -#, fuzzy -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "Maksymalny czas, w którym możliwe jest odnowienie (sekundy)" - -#, fuzzy -msgid "RADIUS max life" -msgstr "Maksymalny czas życia" - -#, fuzzy -msgid "RADIUS maximum ticket life (seconds)" -msgstr "Minimalny czas życia zgłoszenia (sekundy)" - -#, fuzzy -msgid "RADIUS max renew" -msgstr "Maksymalne odnowienie" - -#, fuzzy -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "Maksymalny czas, w którym możliwe jest odnowienie (sekundy)" - -#, fuzzy -msgid "PKINIT max life" -msgstr "Maksymalny czas życia" - -#, fuzzy -msgid "PKINIT maximum ticket life (seconds)" -msgstr "Minimalny czas życia zgłoszenia (sekundy)" - -#, fuzzy -msgid "PKINIT max renew" -msgstr "Maksymalne odnowienie" - -#, fuzzy -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "Maksymalny czas, w którym możliwe jest odnowienie (sekundy)" - -msgid "Hardened max life" -msgstr "" - -#, fuzzy -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "Minimalny czas życia zgłoszenia (sekundy)" - -msgid "Hardened max renew" -msgstr "" - -#, fuzzy -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "Maksymalny czas, w którym możliwe jest odnowienie (sekundy)" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -#, fuzzy -msgid "" -"\n" -"IPA locations\n" -msgstr "Położenie" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -#, fuzzy -msgid "location" -msgstr "Położenie" - -#, fuzzy -msgid "locations" -msgstr "Położenie" - -#, fuzzy -msgid "IPA Locations" -msgstr "Położenie" - -#, fuzzy -msgid "IPA Location" -msgstr "Położenie" - -#, fuzzy -msgid "Location name" -msgstr "Położenie" - -#, fuzzy -msgid "IPA location name" -msgstr "Nazwa domeny NIS" - -#, fuzzy -msgid "IPA Location description" -msgstr "Opis grupy sieciowej" - -#, fuzzy -msgid "Servers" -msgstr "Usługi" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, fuzzy, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -msgid "Delete an IPA location." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "Usunięto komputer „%(value)s”" - -msgid "Modify information about an IPA location." -msgstr "" - -#, fuzzy, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "Zmodyfikowano komputer „%(value)s”" - -msgid "Search for IPA locations." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "Pasuje %(count)d komputer" -msgstr[1] "Pasuje %(count)d komputery" -msgstr[2] "Pasuje %(count)d komputerów" - -msgid "Display information about an IPA location." -msgstr "" - -msgid "Servers in location" -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "Pasuje %(count)d komputer" -msgstr[1] "Pasuje %(count)d komputery" -msgstr[2] "Pasuje %(count)d komputerów" - -#, fuzzy, python-format -msgid "Added segment \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "Usunięto komputer „%(value)s”" - -#, fuzzy, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "Zmodyfikowano komputer „%(value)s”" - -#, fuzzy, python-format -msgid "%(value)s" -msgstr "Odnaleziono „%(value)s”" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "Pasuje %(count)d komputer" -msgstr[1] "Pasuje %(count)d komputery" -msgstr[2] "Pasuje %(count)d komputerów" - -#, fuzzy, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "Usunięto komputer „%(value)s”" - -#, fuzzy, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -#, fuzzy, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "Zmodyfikowano komputer „%(value)s”" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -#, fuzzy -msgid "sudo command" -msgstr "Polecenie sudo" - -#, fuzzy -msgid "sudo commands" -msgstr "Polecenie sudo" - -#, fuzzy -msgid "Sudo Commands" -msgstr "Polecenie sudo" - -#, fuzzy, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "Usunięto ACI „%(value)s”" - -#, fuzzy, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "Zmodyfikowano ACI „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "Pasuje %(count)d ACI" -msgstr[1] "Pasują %(count)d ACI" -msgstr[2] "Pasuje %(count)d ACI" - -#, fuzzy -msgid "self service permission" -msgstr "Opis grupy usługi HBAC" - -msgid "self service permissions" -msgstr "" - -#, fuzzy -msgid "Self Service Permissions" -msgstr "Uprawnienia" - -msgid "Self Service Permission" -msgstr "" - -#, fuzzy, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -#, fuzzy, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - msgid "ACI prefix is required" msgstr "" +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" +"co najmniej jedna z wartości: „type”, „filter”, „subtree”, „targetgroup”, " +"„attrs” lub „memberof” jest wymagana" + #, fuzzy msgid "filter and memberof are mutually exclusive" msgstr "" @@ -19292,2238 +12850,58 @@ msgstr "" msgid "One of group, permission or self is required" msgstr "" +#, python-format +msgid "Group '%s' does not exist" +msgstr "Grupa „%s” nie istnieje" + msgid "empty filter" msgstr "" +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "Błąd składni: %(error)s" + #, python-format msgid "invalid DN (%s)" msgstr "" +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "Nie odnaleziono ACI o nazwie „%s”" + msgid "ACI object." msgstr "" +msgid "ACIs" +msgstr "ACI" + +#, fuzzy +msgid "ACI" +msgstr "ACI" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "Utworzono ACI „%(value)s”" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "Usunięto ACI „%(value)s”" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "Zmodyfikowano ACI „%(value)s”" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "Pasuje %(count)d ACI" +msgstr[1] "Pasują %(count)d ACI" +msgstr[2] "Pasuje %(count)d ACI" + #, fuzzy, python-format msgid "Renamed ACI to \"%(value)s\"" msgstr "Utworzono ACI „%(value)s”" -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -#, fuzzy -msgid "groups" -msgstr "Grupy" - -#, fuzzy -msgid "User Group" -msgstr "Grupy użytkowników" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, fuzzy -msgid "privileged group" -msgstr "Grupa docelowa" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -#, fuzzy -msgid "automount location" -msgstr "Informacje o montowaniu" - -#, fuzzy -msgid "automount locations" -msgstr "Automatyczne montowanie map" - -#, fuzzy -msgid "Automount Locations" -msgstr "Automatyczne montowanie map" - -#, fuzzy -msgid "Automount Location" -msgstr "Automatyczne montowanie map" - -#, fuzzy, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "Usunięto komputer „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "Pasuje %(count)d komputer" -msgstr[1] "Pasuje %(count)d komputery" -msgstr[2] "Pasuje %(count)d komputerów" - -#, fuzzy -msgid "automount map" -msgstr "Automatyczne montowanie map" - -#, fuzzy -msgid "automount maps" -msgstr "Automatyczne montowanie map" - -#, fuzzy -msgid "Automount Map" -msgstr "Automatyczne montowanie map" - -#, fuzzy, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "Dodano grupę „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "Usunięto grupę „%(value)s”" - -#, fuzzy, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "Zmodyfikowano grupę „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "Pasuje %(count)d grupa" -msgstr[1] "Pasują %(count)d grupy" -msgstr[2] "Pasuje %(count)d grup" - -#, fuzzy -msgid "Automount key object." -msgstr "Automatyczne montowanie kluczy" - -#, fuzzy -msgid "automount key" -msgstr "Automatyczne montowanie kluczy" - -#, fuzzy -msgid "automount keys" -msgstr "Automatyczne montowanie kluczy" - -#, fuzzy -msgid "Automount Key" -msgstr "Automatyczne montowanie kluczy" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, fuzzy, python-format -msgid "key named %(key)s already exists" -msgstr "Ten wpis już istnieje" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, fuzzy, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -#, fuzzy, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "Dodano grupę „%(value)s”" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "Usunięto komputer „%(value)s”" - -#, fuzzy, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "Zmodyfikowano komputer „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "Pasuje %(count)d komputer" -msgstr[1] "Pasuje %(count)d komputery" -msgstr[2] "Pasuje %(count)d komputerów" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -#, fuzzy -msgid "Hosts the view applies to" -msgstr "Kategoria komputerów, do których zastosowywana jest reguła" - -#, fuzzy, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "Usunięto ACI „%(value)s”" - -#, fuzzy, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "Zmodyfikowano ACI „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "Pasuje %(count)d ACI" -msgstr[1] "Pasują %(count)d ACI" -msgstr[2] "Pasuje %(count)d ACI" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -#, fuzzy -msgid "not found" -msgstr "nie odnaleziono naczelnika\n" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, fuzzy, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "Liczba elementów, które nie mogły zostać usunięte" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -msgid "Delete an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -msgid "Modify an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "Odłączono grupę „%(value)s” od użytkownika „%(value)s”" - -#, fuzzy, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -#, fuzzy, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -#, fuzzy, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "Dodano grupę „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "Usunięto grupę „%(value)s”" - -#, fuzzy, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "Zmodyfikowano grupę „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "Pasuje %(count)d grupa" -msgstr[1] "Pasują %(count)d grupy" -msgstr[2] "Pasuje %(count)d grup" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, fuzzy, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" -"Naczelnik Kerberosa %s już istnieje. Należy użyć polecenia „ipa user-mod”, " -"aby ustawić go ręcznie." - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -#, fuzzy -msgid "Invalid LDAP URI." -msgstr "Adres URI LDAP" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -#, fuzzy -msgid "Default group for new users not found" -msgstr "Domyślna grupa dla nowych użytkowników" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -#, fuzzy -msgid "CA category" -msgstr "Kategoria komputerów" - -#, fuzzy -msgid "CA category the ACL applies to" -msgstr "Kategoria komputerów, do których zastosowywana jest reguła" - -msgid "CAs" -msgstr "" - -#, fuzzy, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "Usunięto ACI „%(value)s”" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, fuzzy, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "Zmodyfikowano ACI „%(value)s”" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "Pasuje %(count)d ACI" -msgstr[1] "Pasują %(count)d ACI" -msgstr[2] "Pasuje %(count)d ACI" - -#, fuzzy, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "Utworzono ACI „%(value)s”" - -#, fuzzy, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "Usunięto ACI „%(value)s”" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, python-format -msgid "%i users or groups added." -msgstr "" - -#, fuzzy, python-format -msgid "%i user or group removed." -msgstr "Liczba usuniętych elementów" - -#, fuzzy, python-format -msgid "%i users or groups removed." -msgstr "Liczba usuniętych elementów" - -#, fuzzy, python-format -msgid "%i host or hostgroup added." -msgstr "Pasuje %(count)d grupa komputerów" - -#, fuzzy, python-format -msgid "%i hosts or hostgroups added." -msgstr "Pasuje %(count)d grupa komputerów" - -#, fuzzy, python-format -msgid "%i host or hostgroup removed." -msgstr "Pasuje %(count)d grupa komputerów" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, fuzzy, python-format -msgid "%i service added." -msgstr "Nazwa usługi" - -#, fuzzy, python-format -msgid "%i services added." -msgstr "Pasuje %(count)d usługa" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, fuzzy, python-format -msgid "not allowed to perform operation: %s" -msgstr "modyfikowanie wpisów grup nie jest dozwolone" - -msgid "No such virtual command" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -#, fuzzy -msgid "External trust" -msgstr "Zewnętrzny komputer" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "Wyłączono konto użytkownika „%(value)s”" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -#, fuzzy -msgid "trust type" -msgstr "Typ reguły" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "Usunięto komputer „%(value)s”" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "Pasuje %(count)d komputer" -msgstr[1] "Pasuje %(count)d komputery" -msgstr[2] "Pasuje %(count)d komputerów" - -#, fuzzy -msgid "trust configuration" -msgstr "Konfiguracja" - -#, fuzzy -msgid "Global Trust Configuration" -msgstr "Konfiguracja" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -#, fuzzy -msgid "unsupported trust type" -msgstr "Obsługiwane typy szyfrowania:\n" - -#, fuzzy, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "Zmodyfikowano ACI „%(value)s”" - -#, fuzzy -msgid "SID" -msgstr "GID" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -#, fuzzy -msgid "Domain enabled" -msgstr "Nazwa domeny NIS" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -#, fuzzy -msgid "not allowed to remotely add agent" -msgstr "modyfikowanie wpisów użytkowników nie jest dozwolone" - -#, fuzzy, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "Włączono konto użytkownika „%(value)s”" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, fuzzy, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "Wyłączono konto użytkownika „%(value)s”" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"DNS server configuration\n" -msgstr "Konfiguracja" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "" - -msgid "DNS servers" -msgstr "" - -#, fuzzy -msgid "DNS Servers" -msgstr "Usługi" - -msgid "DNS Server" -msgstr "" - -#, fuzzy -msgid "DNS Server name" -msgstr "Nazwa serwera" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, fuzzy, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -msgid "Search for DNS servers." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -#, fuzzy -msgid "IPA DNS Server is not installed" -msgstr "Serwer IPA do użycia" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, fuzzy, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -msgid "Delete a DNS server" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -#, fuzzy -msgid "Base-64 encoded host certificate" -msgstr "Certyfikat serwera zakodowany za pomocą Base-64" - -msgid "SSH public key fingerprint" -msgstr "" - -#, fuzzy, python-format -msgid "can be at most %(len)d characters" -msgstr "może wynosić co najwyżej %(maxlength)d znaków" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, fuzzy -msgid "Password cannot be set on enrolled host." -msgstr "Hasło używane w zapisywaniu większej części" - -msgid "cn is immutable" -msgstr "" - -#, fuzzy, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "Usunięto komputer „%(value)s”" - -#, fuzzy, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -#, fuzzy, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "Zmodyfikowano komputer „%(value)s”" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -#, fuzzy -msgid "Remove principal alias from a host entry" -msgstr "Usuwa wszystkich naczelników w tym obszarze" - -#, fuzzy, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "Zmodyfikowano komputer „%(value)s”" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -#, fuzzy -msgid "HBAC services" -msgstr "Usługi" - -#, fuzzy -msgid "HBAC Services" -msgstr "Usługi" - -#, fuzzy -msgid "HBAC Service" -msgstr "Usługi" - -#, fuzzy, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -#, fuzzy, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -#, fuzzy -msgid "HBAC service group" -msgstr "Opis grupy usługi HBAC" - -#, fuzzy -msgid "HBAC service groups" -msgstr "Opis grupy usługi HBAC" - -#, fuzzy -msgid "HBAC Service Groups" -msgstr "Grupy usług" - -#, fuzzy -msgid "HBAC Service Group" -msgstr "Grupy usług" - -#, fuzzy, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -#, fuzzy, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -msgid "Delegations" -msgstr "" - -#, fuzzy -msgid "Delegation" -msgstr "Usuń" - -#, fuzzy, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "Dodano grupę „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "Usunięto grupę „%(value)s”" - -#, fuzzy, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "Zmodyfikowano grupę „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "Pasuje %(count)d grupa" -msgstr[1] "Pasują %(count)d grupy" -msgstr[2] "Pasuje %(count)d grup" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, fuzzy, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -#, fuzzy, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -#, fuzzy -msgid "Role" -msgstr "Role" - -#, fuzzy, python-format -msgid "Added role \"%(value)s\"" -msgstr "Dodano grupę „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "Usunięto grupę „%(value)s”" - -#, fuzzy, python-format -msgid "Modified role \"%(value)s\"" -msgstr "Zmodyfikowano grupę „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "Pasuje %(count)d grupa" -msgstr[1] "Pasują %(count)d grupy" -msgstr[2] "Pasuje %(count)d grup" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -#, fuzzy -msgid "local domain range" -msgstr "Nazwa domeny NIS" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "Usunięto ACI „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "Pasuje %(count)d użytkownik" -msgstr[1] "Pasuje %(count)d użytkowników" -msgstr[2] "Pasuje %(count)d użytkowników" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "Zmodyfikowano ACI „%(value)s”" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, fuzzy -msgid "netgroups" -msgstr "Grupy sieciowe" - -#, fuzzy -msgid "Netgroup" -msgstr "Grupy sieciowe" - -#, fuzzy, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "Dodano grupę „%(value)s”" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "Usunięto grupę „%(value)s”" - -#, fuzzy, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "Zmodyfikowano grupę „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "Pasuje %(count)d grupa" -msgstr[1] "Pasują %(count)d grupy" -msgstr[2] "Pasuje %(count)d grup" - -#, fuzzy -msgid "Default group for new users is not POSIX" -msgstr "Domyślna grupa dla nowych użytkowników" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, fuzzy, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "Włączono konto użytkownika „%(value)s”" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, fuzzy, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "Włączono konto użytkownika „%(value)s”" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, fuzzy, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "Włączono konto użytkownika „%(value)s”" - -#, fuzzy -msgid "Failed logins" -msgstr "Login użytkownika" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -#, fuzzy -msgid "Time now" -msgstr "Czas życia" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, fuzzy, python-format -msgid "%(host)s failed" -msgstr "fork() się nie powiodło\n" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -#, fuzzy, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "Zmodyfikowano użytkownika „%(value)s”" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -#, fuzzy -msgid "Remove principal alias from the user entry" -msgstr "Usuwa wszystkich naczelników w tym obszarze" - -#, fuzzy, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "Odłączono grupę „%(value)s” od użytkownika „%(value)s”" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - msgid "" "\n" "Auto Membership Rule.\n" @@ -21860,10 +13238,17 @@ msgstr "" msgid "Automember rebuild membership task started" msgstr "" +msgid "Automember rebuild membership task completed" +msgstr "" + #, python-format msgid "Task DN = '%s'" msgstr "" +#, fuzzy +msgid "Automember" +msgstr "członek %s" + msgid "" "\n" " Search for orphan automember rules. The command might need to be run as\n" @@ -21874,418 +13259,139 @@ msgstr "" msgid "Remove orphan automember rules" msgstr "" -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -msgid "SELinux User Maps" -msgstr "" - -msgid "SELinux User Map" -msgstr "" - -#, fuzzy, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "Nie odnaleziono pliku %(file)s" - -#, fuzzy, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "Usunięto użytkownika „%(value)s”" - -#, fuzzy, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "Zmodyfikowano użytkownika „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "Pasuje %(count)d użytkownik" -msgstr[1] "Pasuje %(count)d użytkowników" -msgstr[2] "Pasuje %(count)d użytkowników" - -#, fuzzy, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "Włączono konto użytkownika „%(value)s”" - -#, fuzzy, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "Wyłączono konto użytkownika „%(value)s”" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" +#, fuzzy +msgid "automount location" +msgstr "Informacje o montowaniu" #, fuzzy -msgid "vaultcontainer" -msgstr "Kontener grupy" +msgid "automount locations" +msgstr "Automatyczne montowanie map" #, fuzzy -msgid "vaultcontainers" -msgstr "Kontener grupy" +msgid "Automount Locations" +msgstr "Automatyczne montowanie map" #, fuzzy -msgid "Vault Containers" -msgstr "Kontener grupy" - -#, fuzzy -msgid "Vault Container" -msgstr "Kontener grupy" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" +msgid "Automount Location" +msgstr "Automatyczne montowanie map" #, fuzzy, python-format -msgid "Added vault \"%(value)s\"" +msgid "Added automount location \"%(value)s\"" msgstr "Dodano komputer „%(value)s”" #, fuzzy, python-format -msgid "Deleted vault \"%(value)s\"" +msgid "Deleted automount location \"%(value)s\"" msgstr "Usunięto komputer „%(value)s”" #, fuzzy, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" msgstr[0] "Pasuje %(count)d komputer" msgstr[1] "Pasuje %(count)d komputery" msgstr[2] "Pasuje %(count)d komputerów" -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, fuzzy, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "Zmodyfikowano komputer „%(value)s”" +#, fuzzy +msgid "automount map" +msgstr "Automatyczne montowanie map" #, fuzzy -msgid "Vault configuration" -msgstr "Konfiguracja" +msgid "automount maps" +msgstr "Automatyczne montowanie map" -msgid "IPA servers configured as key recovery agents" -msgstr "" +msgid "Automount Maps" +msgstr "Automatyczne montowanie map" + +#, fuzzy +msgid "Automount Map" +msgstr "Automatyczne montowanie map" #, fuzzy, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -msgid "Retrieve data from a vault." -msgstr "" +msgid "Added automount map \"%(value)s\"" +msgstr "Dodano grupę „%(value)s”" #, fuzzy, python-format -msgid "Retrieved data from vault \"%(value)s\"" +msgid "Deleted automount map \"%(value)s\"" msgstr "Usunięto grupę „%(value)s”" -msgid "No archived data." +#, fuzzy, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "Zmodyfikowano grupę „%(value)s”" + +#, fuzzy, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "Pasuje %(count)d grupa" +msgstr[1] "Pasują %(count)d grupy" +msgstr[2] "Pasuje %(count)d grup" + +#, fuzzy +msgid "Automount key object." +msgstr "Automatyczne montowanie kluczy" + +#, fuzzy +msgid "automount key" +msgstr "Automatyczne montowanie kluczy" + +#, fuzzy +msgid "automount keys" +msgstr "Automatyczne montowanie kluczy" + +msgid "Automount Keys" +msgstr "Automatyczne montowanie kluczy" + +#, fuzzy +msgid "Automount Key" +msgstr "Automatyczne montowanie kluczy" + +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" msgstr "" -msgid "Checks if any of the servers has the KRA service enabled" +#, fuzzy, python-format +msgid "key named %(key)s already exists" +msgstr "Ten wpis już istnieje" + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" msgstr "" +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" + +#, fuzzy, python-format +msgid "Added automount key \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +#, fuzzy, python-format +msgid "Added automount indirect map \"%(value)s\"" +msgstr "Dodano grupę „%(value)s”" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "Usunięto komputer „%(value)s”" + +#, fuzzy, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "Zmodyfikowano komputer „%(value)s”" + +#, fuzzy, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "Pasuje %(count)d komputer" +msgstr[1] "Pasuje %(count)d komputery" +msgstr[2] "Pasuje %(count)d komputerów" + +msgid "Member service groups" +msgstr "Grupy usługi elementów" + #, fuzzy msgid "Member HBAC service groups" msgstr "Grupy usługi elementów" @@ -22323,6 +13429,18 @@ msgstr "" msgid "Entry" msgstr "" +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "nie odnaleziono wpisu kontenera (%(container)s)" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "%(parent)s: nie odnaleziono %(oname)s" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "%(pkey)s: nie odnaleziono %(oname)s" + #, python-format msgid "%(oname)s with name \"%(pkey)s\" already exists" msgstr "" @@ -22346,10 +13464,17 @@ msgstr "" msgid "Rename the %(ldap_obj_name)s object" msgstr "" +msgid "the entry was deleted while being modified" +msgstr "wpis został usunięty podczas modyfikowania" + #, python-format msgid "%s" msgstr "" +#, python-format +msgid "member %s" +msgstr "członek %s" + #, python-format msgid "%s to add" msgstr "" @@ -22358,6 +13483,10 @@ msgstr "" msgid "%s to remove" msgstr "" +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + #, python-format msgid "" "Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." @@ -22380,193 +13509,140 @@ msgstr "Odłączono grupę „%(value)s” od użytkownika „%(value)s”" msgid "one or more values to remove" msgstr "" -#, fuzzy msgid "" "\n" -"IPA servers\n" -msgstr "Serwer IPA do użycia" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +#, fuzzy +msgid "must be TRUE or FALSE" +msgstr "musi być prawdą lub fałszem" msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "server" -msgstr "" - -msgid "servers" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." msgstr "" #, fuzzy -msgid "IPA Servers" -msgstr "Serwer IPA do użycia" +msgid "Principal alias" +msgstr "Nazwa naczelnika" #, fuzzy -msgid "Server location" -msgstr "Kategoria usług" +msgid "User password expiration" +msgstr "Hasło użytkownika" -#, fuzzy -msgid "Service weight" -msgstr "Nazwa usługi" - -msgid "Weight for server services" +msgid "SSH public key fingerprint" msgstr "" #, fuzzy -msgid "Service relative weight" -msgstr "Kategoria usług" +msgid "Base-64 encoded user certificate" +msgstr "Certyfikat serwera zakodowany za pomocą Base-64" -msgid "Relative weight for server services (counts per location)" +#, fuzzy +msgid "Certificate mapping data" +msgstr "Certyfikat" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" msgstr "" #, fuzzy -msgid "Enabled server roles" -msgstr "Włączono konto użytkownika „%(value)s”" +msgid "SMB Home Directory" +msgstr "Katalog domowy" -msgid "List of enabled roles" -msgstr "" +#, fuzzy +msgid "SMB Home Directory Drive" +msgstr "Podstawa katalogu domowego" -msgid "Modify information about an IPA server." +#, python-format +msgid "invalid e-mail format: %(email)s" msgstr "" #, fuzzy, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" +msgid "manager %(manager)s not found" +msgstr "%(parent)s: nie odnaleziono %(oname)s" #, fuzzy, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" +msgid "can be at most %(len)d characters" +msgstr "może wynosić co najwyżej %(maxlength)d znaków" + +msgid "Issuer" +msgstr "Wydawca" + +#, fuzzy +msgid "Issuer of the certificate" +msgstr "Odrzuć certyfikat." + +msgid "Subject" +msgstr "Temat" + +#, fuzzy +msgid "Subject of the certificate" +msgstr "Odrzuć certyfikat." + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" #, fuzzy, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" -msgid "Ignore topology errors" +msgid "Remove one or more certificate mappings from the user entry." msgstr "" -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, fuzzy -msgid "not allowed to perform server connection check" -msgstr "modyfikowanie wpisów użytkowników nie jest dozwolone" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -#, fuzzy -msgid "State" -msgstr "Stan" - -#, fuzzy -msgid "Server state" -msgstr "Nazwa serwera" - #, fuzzy, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "Zmieniono hasło dla „%(value)s”" +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "Zmodyfikowano użytkownika „%(value)s”" -msgid "Cannot hide CA renewal master." +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" msgstr "" -msgid "Cannot hide DNSSec key master." +msgid "Make multiple ipa calls via one remote procedure call" msgstr "" -#, python-format -msgid "Cannot hide last enabled %(name)s server." +msgid "must contain a tuple (list, dict)" msgstr "" msgid "" @@ -22641,6 +13717,10 @@ msgstr "Certyfikat" msgid "Certificate Authorities" msgstr "Odrzucono certyfikat" +#, fuzzy +msgid "Name" +msgstr "Nazwa komputera" + msgid "Name for referencing the CA" msgstr "" @@ -22661,9 +13741,24 @@ msgstr "Temat" msgid "Subject Distinguished Name" msgstr "" +#, fuzzy +msgid "Issuer DN" +msgstr "Wydawca" + msgid "Issuer Distinguished Name" msgstr "" +#, fuzzy +msgid "Base-64 encoded certificate." +msgstr "Certyfikat serwera zakodowany za pomocą Base-64" + +#, fuzzy +msgid "Certificate chain" +msgstr "Certyfikat" + +msgid "X.509 certificate chain" +msgstr "" + msgid "Search for CAs." msgstr "" @@ -22674,6 +13769,9 @@ msgstr[0] "Pasuje %(count)d ACI" msgstr[1] "Pasują %(count)d ACI" msgstr[2] "Pasuje %(count)d ACI" +msgid "Include certificate chain in output" +msgstr "" + msgid "Display the properties of a CA." msgstr "" @@ -22706,6 +13804,9 @@ msgstr "Usunięto ACI „%(value)s”" msgid "Insufficient privilege to delete a CA." msgstr "" +msgid "CA" +msgstr "" + msgid "IPA CA cannot be deleted" msgstr "" @@ -22743,322 +13844,1231 @@ msgstr "Utworzono ACI „%(value)s”" msgid "" "\n" -"Stageusers\n" +"Manage CA ACL rules.\n" "\n" -"Manage stage user entries.\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" "\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" +"SUBJECT PRINCIPAL SCOPE:\n" "\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" "\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" "\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" +"CERTIFICATE AUTHORITY SCOPE:\n" "\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" "\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"PROFILE SCOPE:\n" "\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" "\n" "EXAMPLES:\n" "\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" "\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" "\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "" + +msgid "CA ACLs" msgstr "" #, fuzzy -msgid "Stage Users" -msgstr "Użytkownicy" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" +msgid "CA category" +msgstr "Kategoria komputerów" #, fuzzy -msgid "stage users" -msgstr "Elementy użytkowników" +msgid "CA category the ACL applies to" +msgstr "Kategoria komputerów, do których zastosowywana jest reguła" -#, fuzzy, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" +msgid "CAs" msgstr "" #, fuzzy, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "Usunięto użytkownika „%(value)s”" - -#, fuzzy, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "Zmodyfikowano użytkownika „%(value)s”" - -#, fuzzy, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "Usunięto użytkownika „%(value)s”" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "Zmodyfikowano użytkownika „%(value)s”" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "Odłączono grupę „%(value)s” od użytkownika „%(value)s”" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -#, fuzzy -msgid "must be TRUE or FALSE" -msgstr "musi być prawdą lub fałszem" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -#, fuzzy -msgid "User password expiration" -msgstr "Hasło użytkownika" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -#, fuzzy -msgid "SMB Home Directory" -msgstr "Katalog domowy" - -#, fuzzy -msgid "SMB Home Directory Drive" -msgstr "Podstawa katalogu domowego" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, fuzzy, python-format -msgid "manager %(manager)s not found" -msgstr "%(parent)s: nie odnaleziono %(oname)s" - -#, fuzzy -msgid "Issuer of the certificate" -msgstr "Odrzuć certyfikat." - -#, fuzzy -msgid "Subject of the certificate" -msgstr "Odrzuć certyfikat." - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -#, fuzzy, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "Zmodyfikowano użytkownika „%(value)s”" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -#, fuzzy -msgid "URI" -msgstr "UID" - -#, fuzzy, python-format -msgid "Added OTP token \"%(value)s\"" +msgid "Added CA ACL \"%(value)s\"" msgstr "Dodano komputer „%(value)s”" -msgid "cannot be empty" +#, fuzzy, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "Usunięto ACI „%(value)s”" + +msgid "default CA ACL can be only disabled" msgstr "" #, fuzzy, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "Usunięto komputer „%(value)s”" +msgid "Modified CA ACL \"%(value)s\"" +msgstr "Zmodyfikowano ACI „%(value)s”" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" #, fuzzy, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "Zmodyfikowano komputer „%(value)s”" +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "Pasuje %(count)d ACI" +msgstr[1] "Pasują %(count)d ACI" +msgstr[2] "Pasuje %(count)d ACI" #, fuzzy, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "Pasuje %(count)d komputer" -msgstr[1] "Pasuje %(count)d komputery" -msgstr[2] "Pasuje %(count)d komputerów" +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "Utworzono ACI „%(value)s”" + +#, fuzzy, python-format +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "Usunięto ACI „%(value)s”" + +#, python-format +msgid "%i user or group added." +msgstr "" + +#, python-format +msgid "%i users or groups added." +msgstr "" + +msgid "users cannot be added when user category='all'" +msgstr "" + +#, fuzzy, python-format +msgid "%i user or group removed." +msgstr "Liczba usuniętych elementów" + +#, fuzzy, python-format +msgid "%i users or groups removed." +msgstr "Liczba usuniętych elementów" + +#, fuzzy, python-format +msgid "%i host or hostgroup added." +msgstr "Pasuje %(count)d grupa komputerów" + +#, fuzzy, python-format +msgid "%i hosts or hostgroups added." +msgstr "Pasuje %(count)d grupa komputerów" + +msgid "hosts cannot be added when host category='all'" +msgstr "" + +#, fuzzy, python-format +msgid "%i host or hostgroup removed." +msgstr "Pasuje %(count)d grupa komputerów" + +#, python-format +msgid "%i hosts or hostgroups removed." +msgstr "" + +#, fuzzy, python-format +msgid "%i service added." +msgstr "Nazwa usługi" + +#, fuzzy, python-format +msgid "%i services added." +msgstr "Pasuje %(count)d usługa" + +msgid "services cannot be added when service category='all'" +msgstr "" + +#, python-format +msgid "%i service removed." +msgstr "" + +#, python-format +msgid "%i services removed." +msgstr "" + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, python-format +msgid "%i profiles removed." +msgstr "" + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" msgid "" "\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" +"IPA certificate operations\n" +msgstr "" + +msgid "" "\n" -"To run this code in the lite-server\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" "\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" "\n" -"where the contents of the file batch_request.json follow the below example\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" "\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" "\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" "\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" "\n" -"And then a nested response for each IPA command method sent in the request\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" "\n" msgstr "" -msgid "Make multiple ipa calls via one remote procedure call" +msgid " * 0 - unspecified\n" msgstr "" -msgid "must contain a tuple (list, dict)" +msgid " * 1 - keyCompromise\n" msgstr "" +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +#, fuzzy +msgid "CA is not configured" +msgstr "DNS nie jest skonfigurowany" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, fuzzy, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "Nie odnaleziono komputera „%(host)s”" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +#, fuzzy +msgid "Subject email address" +msgstr "Adres e-mail" + +#, fuzzy +msgid "Subject DNS name" +msgstr "Temat" + +#, fuzzy +msgid "Subject X.400 address" +msgstr "Adres zamieszkania" + +#, fuzzy +msgid "Subject directory name" +msgstr "Podstawa katalogu domowego" + +msgid "Subject EDI Party name" +msgstr "" + +#, fuzzy +msgid "Subject URI" +msgstr "Temat" + +#, fuzzy +msgid "Subject IP Address" +msgstr "Adres zamieszkania" + +#, fuzzy +msgid "Subject OID" +msgstr "Temat" + +#, fuzzy +msgid "Subject UPN" +msgstr "Temat" + +#, fuzzy +msgid "Subject Kerberos principal name" +msgstr "Naczelnik Kerberosa" + +#, fuzzy +msgid "Subject Other Name" +msgstr "Nazwa serwera" + +msgid "Not Before" +msgstr "Nie wcześniej" + +msgid "Not After" +msgstr "Nie po" + +msgid "Fingerprint (SHA1)" +msgstr "Odcisk (SHA1)" + +#, fuzzy +msgid "Fingerprint (SHA256)" +msgstr "Odcisk (SHA1)" + +#, fuzzy +msgid "Serial number (hex)" +msgstr "Numer seryjny" + +msgid "Request status" +msgstr "Stan żądania" + +#, fuzzy +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "automatycznie dodaj naczelnika, jeśli nie istnieje" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +msgid "'add' option" +msgstr "" + +#, fuzzy +msgid "The principal for this request doesn't exist." +msgstr "automatycznie dodaj naczelnika, jeśli nie istnieje" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "Stan" + +msgid "Revoked" +msgstr "Unieważniono" + +msgid "Revocation reason" +msgstr "Przyczyna unieważnienia" + +#, fuzzy +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "Przyczyna unieważnienia certyfikatu (0-10)" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +#, fuzzy +msgid "7 is not a valid revocation reason" +msgstr "Przyczyna unieważnienia" + +#, fuzzy +msgid "Status of the certificate" +msgstr "Odrzuć certyfikat." + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +msgid "domain" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +#, fuzzy +msgid "Priority of the rule (higher number means lower priority" +msgstr "Priorytet polityki (wyższy numer równa się niższemu priorytetowi" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +#, fuzzy +msgid "User logins" +msgstr "Login użytkownika" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, fuzzy, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "Pasuje %(count)d użytkownik" +msgstr[1] "Pasuje %(count)d użytkowników" +msgstr[2] "Pasuje %(count)d użytkowników" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +#, fuzzy +msgid "Certificate Profile" +msgstr "Odrzucono certyfikat" + +#, fuzzy +msgid "Certificate Profiles" +msgstr "Odrzucono certyfikat" + +#, fuzzy +msgid "Profile configuration" +msgstr "Konfiguracja" + +#, fuzzy, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +#, fuzzy, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, fuzzy, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +#, fuzzy +msgid "Certificate profiles cannot be renamed" +msgstr "Nie można ukończyć działania na certyfikacie: %(error)s" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +#, fuzzy +msgid "must be at least 10" +msgstr "musi wynosić co najmniej %(minvalue)d" + +#, fuzzy +msgid "configuration options" +msgstr "Konfiguracja" + +msgid "Configuration" +msgstr "Konfiguracja" + +#, fuzzy +msgid "Maximum hostname length" +msgstr "Minimalna długość" + +msgid "Enable adding subids to new users" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +#, fuzzy +msgid "IPA CA servers" +msgstr "Serwer IPA do użycia" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +#, fuzzy +msgid "IPA KRA servers" +msgstr "Serwer IPA do użycia" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "Domain resolution order" +msgstr "" + +msgid "colon-separated list of domains used for short name qualification" +msgstr "" + +#, fuzzy +msgid "IPA DNS servers" +msgstr "Serwer IPA do użycia" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "IPA DNSSec key master" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +#, fuzzy +msgid "Setup SID configuration" +msgstr "Konfiguracja" + +msgid "New users and groups automatically get a SID assigned" +msgstr "" + +msgid "Add SIDs" +msgstr "" + +msgid "Add SIDs for existing users and groups" +msgstr "" + +msgid "NetBIOS name of the IPA domain" +msgstr "" + +msgid "Empty domain is not allowed" +msgstr "" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +#, fuzzy +msgid "not allowed to enable SID generation" +msgstr "modyfikowanie wpisów grup nie jest dozwolone" + +msgid "" +"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " +"allowed. Empty string is not allowed." +msgstr "" + +#, fuzzy +msgid "Failed to call DBus" +msgstr "Utworzenie klucza się nie powiodło.\n" + +msgid "Configuration of SID failed. See details in the error log" +msgstr "" + +#, fuzzy +msgid "The group doesn't exist" +msgstr "Grupa „%s” nie istnieje" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" + +msgid "SELinux user map default user not in order list" +msgstr "" + +#, python-format +msgid "You cannot specify %s without the --enable-sid option" +msgstr "" + +msgid "delegation" +msgstr "" + +msgid "delegations" +msgstr "" + +msgid "Delegations" +msgstr "" + +#, fuzzy +msgid "Delegation" +msgstr "Usuń" + +#, fuzzy, python-format +msgid "Added delegation \"%(value)s\"" +msgstr "Dodano grupę „%(value)s”" + +#, fuzzy, python-format +msgid "Deleted delegation \"%(value)s\"" +msgstr "Usunięto grupę „%(value)s”" + +#, fuzzy, python-format +msgid "Modified delegation \"%(value)s\"" +msgstr "Zmodyfikowano grupę „%(value)s”" + +#, fuzzy, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "Pasuje %(count)d grupa" +msgstr[1] "Pasują %(count)d grupy" +msgstr[2] "Pasuje %(count)d grup" + msgid "" "\n" "Domain Name System (DNS)\n" @@ -23490,6 +15500,12 @@ msgid "" "All nameservers failed to answer the query for DNS reverse zone %(revdns)s" msgstr "" +#, python-format +msgid "" +"No answers could be found in the specified lifetime for DNS reverse zone " +"%(revdns)s" +msgstr "" + #, python-format msgid "" "DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " @@ -23604,6 +15620,9 @@ msgstr "" msgid "Managedby permission" msgstr "" +msgid "DNS is not configured" +msgstr "DNS nie jest skonfigurowany" + msgid "cannot be used when a zone is specified" msgstr "" @@ -23750,6 +15769,14 @@ msgstr "Usunięto użytkownika „%(value)s”" msgid "Zone record '%s' cannot be deleted" msgstr "" +#, python-format +msgid "Found '%(value)s'" +msgstr "Odnaleziono „%(value)s”" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "Nie odnaleziono komputera „%(host)s”" + #, fuzzy msgid "DNS configuration options" msgstr "Konfiguracja" @@ -23816,6 +15843,314 @@ msgstr "" msgid "Do not update records only return expected records" msgstr "" +#, fuzzy +msgid "" +"\n" +"DNS server configuration\n" +msgstr "Konfiguracja" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +#, fuzzy +msgid "DNS Servers" +msgstr "Usługi" + +msgid "DNS Server" +msgstr "" + +#, fuzzy +msgid "DNS Server name" +msgstr "Nazwa serwera" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, fuzzy, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +msgid "Search for DNS servers." +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +#, fuzzy +msgid "IPA DNS Server is not installed" +msgstr "Serwer IPA do użycia" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, fuzzy, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +msgid "Delete a DNS server" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +#, fuzzy +msgid "groups" +msgstr "Grupy" + +#, fuzzy +msgid "User Group" +msgstr "Grupy użytkowników" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "Dodano grupę „%(value)s”" + +msgid "gid cannot be set for external group" +msgstr "" + +msgid "attribute \"gidNumber\" not allowed with --nonposix" +msgstr "" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "Usunięto grupę „%(value)s”" + +#, fuzzy +msgid "privileged group" +msgstr "Grupa docelowa" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "Zmodyfikowano grupę „%(value)s”" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "Pasuje %(count)d grupa" +msgstr[1] "Pasują %(count)d grupy" +msgstr[2] "Pasuje %(count)d grup" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "Odłączono grupę „%(value)s” od użytkownika „%(value)s”" + +msgid "not allowed to modify user entries" +msgstr "modyfikowanie wpisów użytkowników nie jest dozwolone" + +msgid "not allowed to modify group entries" +msgstr "modyfikowanie wpisów grup nie jest dozwolone" + +msgid "Not a managed group" +msgstr "Nie jest zarządzaną grupą" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + msgid "The deny type has been deprecated." msgstr "" @@ -23825,6 +16160,14 @@ msgstr "" msgid "HBAC Rules" msgstr "" +#, fuzzy +msgid "HBAC Services" +msgstr "Usługi" + +#, fuzzy +msgid "HBAC Service Groups" +msgstr "Grupy usług" + #, fuzzy, python-format msgid "Added HBAC rule \"%(value)s\"" msgstr "Dodano użytkownika „%(value)s”" @@ -23852,129 +16195,8073 @@ msgstr "Włączono konto użytkownika „%(value)s”" msgid "Disabled HBAC rule \"%(value)s\"" msgstr "Wyłączono konto użytkownika „%(value)s”" +msgid "Access time" +msgstr "Czas dostępu" + msgid "Add source hosts and hostgroups to an HBAC rule." msgstr "" msgid "" "\n" -"Manage Certificate Profiles\n" +"HBAC Services\n" "\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" "\n" "EXAMPLES:\n" "\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" "\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" "\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" "\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" "\n" msgstr "" -msgid "invalid Profile ID" -msgstr "" +#, fuzzy +msgid "HBAC services" +msgstr "Usługi" #, fuzzy -msgid "Certificate Profile" -msgstr "Odrzucono certyfikat" - -#, fuzzy -msgid "Certificate Profiles" -msgstr "Odrzucono certyfikat" - -#, fuzzy -msgid "Profile configuration" -msgstr "Konfiguracja" +msgid "HBAC Service" +msgstr "Usługi" #, fuzzy, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" +msgid "Added HBAC service \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +#, fuzzy, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +#, fuzzy, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +#, fuzzy, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +#, fuzzy +msgid "HBAC service group" +msgstr "Opis grupy usługi HBAC" + +#, fuzzy +msgid "HBAC service groups" +msgstr "Opis grupy usługi HBAC" + +#, fuzzy +msgid "HBAC Service Group" +msgstr "Grupy usług" + +#, fuzzy, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +#, fuzzy, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +#, fuzzy, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +#, fuzzy, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, fuzzy, python-format +msgid "Access granted: %s" +msgstr "Czas dostępu" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +#, fuzzy +msgid "Host" +msgstr "Komputery" + +#, fuzzy +msgid "Base-64 encoded host certificate" +msgstr "Certyfikat serwera zakodowany za pomocą Base-64" + +#, fuzzy +msgid "Serial Number" +msgstr "Numer seryjny" + +#, fuzzy +msgid "Serial Number (hex)" +msgstr "Numer seryjny" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "Usunięto komputer „%(value)s”" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "Zmodyfikowano komputer „%(value)s”" + +#, fuzzy +msgid "Password cannot be set on enrolled host." +msgstr "Hasło używane w zapisywaniu większej części" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "Pasuje %(count)d komputer" +msgstr[1] "Pasuje %(count)d komputery" +msgstr[2] "Pasuje %(count)d komputerów" + +#, fuzzy, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "Usunięto komputer „%(value)s”" + +#, fuzzy, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +#, fuzzy, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "Zmodyfikowano komputer „%(value)s”" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, fuzzy, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +#, fuzzy +msgid "Remove principal alias from a host entry" +msgstr "Usuwa wszystkich naczelników w tym obszarze" + +#, fuzzy, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "Zmodyfikowano komputer „%(value)s”" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#, fuzzy +msgid "host groups" +msgstr "Grupy komputerów" + +#, fuzzy +msgid "Host Group" +msgstr "Grupy komputerów" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "Dodano grupę komputerów „%(value)s”" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "Usunięto grupę komputerów „%(value)s”" + +#, fuzzy +msgid "hostgroup" +msgstr "Grupa komputerów" + +#, fuzzy +msgid "privileged hostgroup" +msgstr "Element grupy komputerów" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "Zmodyfikowano grupę komputerów „%(value)s”" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "Pasuje %(count)d grupa komputerów" +msgstr[1] "Pasują %(count)d grupy komputerów" +msgstr[2] "Pasuje %(count)d grup komputerów" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"and an ID range of a trusted domain may set\n" +" - auto-private-groups: [true|false|hybrid] automatic creation of private " +"groups\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +#, fuzzy +msgid "local domain range" +msgstr "Nazwa domeny NIS" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +#, fuzzy +msgid "Auto private groups" +msgstr "Nie jest zarządzaną grupą" + +msgid "Auto creation of private groups, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --auto-private-groups\n" +"\n" +" may be given for a new ID range for a trusted AD domain and\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" +"private-groups is specified" +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, fuzzy, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "Usunięto ACI „%(value)s”" + +#, fuzzy, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "Pasuje %(count)d użytkownik" +msgstr[1] "Pasuje %(count)d użytkowników" +msgstr[2] "Pasuje %(count)d użytkowników" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "Zmodyfikowano ACI „%(value)s”" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +msgid "ID View" +msgstr "" + +msgid "system ID View" +msgstr "" + +msgid "ID Views" +msgstr "" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +#, fuzzy +msgid "Hosts the view applies to" +msgstr "Kategoria komputerów, do których zastosowywana jest reguła" + +#, fuzzy, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +#, fuzzy, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "Usunięto ACI „%(value)s”" + +#, fuzzy, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "Zmodyfikowano ACI „%(value)s”" + +#, fuzzy, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "Pasuje %(count)d ACI" +msgstr[1] "Pasują %(count)d ACI" +msgstr[2] "Pasuje %(count)d ACI" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +#, fuzzy +msgid "not found" +msgstr "nie odnaleziono naczelnika\n" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, fuzzy, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "Liczba elementów, które nie mogły zostać usunięte" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, fuzzy, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +msgid "Delete an ID override." +msgstr "" + +#, fuzzy, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +msgid "Modify an ID override." +msgstr "" + +#, fuzzy, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, fuzzy, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, fuzzy, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "Odłączono grupę „%(value)s” od użytkownika „%(value)s”" + +#, fuzzy, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +#, fuzzy, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +#, fuzzy, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +#, fuzzy, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" msgstr[0] "Pasuje %(count)d usługa" msgstr[1] "Pasuje %(count)d usługi" msgstr[2] "Pasuje %(count)d usług" #, fuzzy, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" +msgid "Added Group ID override \"%(value)s\"" +msgstr "Dodano grupę „%(value)s”" -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" +#, fuzzy, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "Usunięto grupę „%(value)s”" + +#, fuzzy, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "Zmodyfikowano grupę „%(value)s”" + +#, fuzzy, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "Pasuje %(count)d grupa" +msgstr[1] "Pasują %(count)d grupy" +msgstr[2] "Pasuje %(count)d grup" + +msgid "Internationalization messages" +msgstr "" + +msgid "Your session has expired. Please log in again." +msgstr "" + +msgid "Apply" +msgstr "" + +msgid "Rebuild auto membership" +msgstr "" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "" + +msgid "Are you sure you want to proceed with the action?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "" + +#, fuzzy +msgid "Actions" +msgstr "Aktywna strefa" + +msgid "Add" +msgstr "Dodaj" + +#, python-brace-format +msgid "${count} item(s) added" +msgstr "" + +msgid "Direct Membership" +msgstr "" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "" + +msgid "Indirect Membership" +msgstr "" + +msgid "No entries." +msgstr "" + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "" + +msgid "Remove" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "" + +msgid "Show Results" +msgstr "" + +msgid "Authentication indicators" +msgstr "" + +msgid "Authentication indicator" +msgstr "" + +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "Add Custom Authentication Indicator" +msgstr "" + +msgid "Two factor authentication (password + OTP)" +msgstr "" + +msgid "RADIUS" +msgstr "" + +msgid "PKINIT" +msgstr "" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "" + +msgid "Disable per-user override" +msgstr "" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "About" +msgstr "" + +#, fuzzy +msgid "Activate" +msgstr "Aktywna strefa" + +#, fuzzy +msgid "Add and Add Another" +msgstr "Dodaj i edytuj" + +msgid "Add and Close" +msgstr "Dodaj i zamknij" + +msgid "Add and Edit" +msgstr "Dodaj i edytuj" + +#, fuzzy +msgid "Add Many" +msgstr "Dodaj i edytuj" + +msgid "Back" +msgstr "" + +msgid "Cancel" +msgstr "Anuluj" + +msgid "Clear" +msgstr "" + +msgid "Clear all fields on the page." +msgstr "" + +msgid "Close" +msgstr "Zamknij" + +msgid "Disable" +msgstr "" + +msgid "Download" +msgstr "" + +msgid "Download certificate as PEM formatted file." +msgstr "" + +msgid "Edit" +msgstr "" + +#, fuzzy +msgid "Enable" +msgstr "Włączone" + +msgid "Find" +msgstr "Znajdź" + +msgid "Get" +msgstr "" + +msgid "Hide" +msgstr "" + +#, fuzzy +msgid "Issue" +msgstr "Wydawca" + +msgid "Match" +msgstr "" + +msgid "Match users according to certificate." +msgstr "" + +msgid "Migrate" +msgstr "" + +msgid "OK" +msgstr "" + +#, fuzzy +msgid "Refresh" +msgstr "Odświeżenie SOA" + +msgid "Reload current settings from the server." +msgstr "" + +msgid "Delete" +msgstr "Usuń" + +msgid "Remove hold" +msgstr "" + +msgid "Reset" +msgstr "Przywróć" + +#, fuzzy +msgid "Reset Password" +msgstr "Nowe hasło" + +msgid "Reset Password and Log in" +msgstr "" + +msgid "Restore" +msgstr "Przywróć" + +msgid "Retry" +msgstr "Ponów" + +msgid "Revert" +msgstr "" + +#, fuzzy +msgid "Revoke" +msgstr "Unieważniono" + +msgid "Save" +msgstr "" + +#, fuzzy +msgid "Set" +msgstr "Ustaw OTP" + +msgid "Show" +msgstr "" + +msgid "Stage" +msgstr "" + +msgid "Update" +msgstr "Zaktualizuj" + +msgid "View" +msgstr "" + +#, fuzzy +msgid "Customization" +msgstr "Konfiguracja" + +msgid "Pagination Size" +msgstr "" + +msgid "Collapse All" +msgstr "" + +msgid "Expand All" +msgstr "" + +msgid "General" +msgstr "" + +#, fuzzy +msgid "Identity Settings" +msgstr "Ustawienia konta" + +#, fuzzy +msgid "Record Settings" +msgstr "Ustawienia konta" + +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "" + +msgid "Back to Top" +msgstr "Wróć na górę" + +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "" + +#, fuzzy +msgid "Add custom value" +msgstr "Dodano komputer „%(value)s”" + +msgid "Available" +msgstr "" + +#, fuzzy +msgid "Some operations failed." +msgstr "Proste dowiązanie się nie powiodło\n" + +msgid "Operations Error" +msgstr "" + +#, fuzzy +msgid "Confirmation" +msgstr "Konfiguracja" + +msgid "Custom value" +msgstr "" + +msgid "This page has unsaved changes. Please save or revert." +msgstr "" + +msgid "Unsaved Changes" +msgstr "" + +#, python-brace-format +msgid "Edit ${entity}" +msgstr "" + +msgid "Hide details" +msgstr "" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "" + +msgid "Prospective" +msgstr "" + +#, fuzzy +msgid "Redirection" +msgstr "Katalog domowy" + +msgid "Select entries to be removed." +msgstr "" + +msgid "Result" +msgstr "" + +msgid "Show details" +msgstr "" + +msgid "Success" +msgstr "" + +msgid "Validation error" +msgstr "" + +msgid "Input form contains invalid or missing values." +msgstr "" + +msgid "Please try the following options:" +msgstr "" + +msgid "If the problem persists please contact the system administrator." +msgstr "" + +msgid "Refresh the page." +msgstr "" + +msgid "Reload the browser." +msgstr "" + +msgid "Return to the main page and retry the operation" +msgstr "" + +#, fuzzy, python-brace-format +msgid "An error has occurred (${error})" +msgstr "wystąpił wewnętrzny błąd" + +#, fuzzy +msgid "HTTP Error" +msgstr "Błąd" + +msgid "Internal Error" +msgstr "" + +#, fuzzy +msgid "IPA Error" +msgstr "Błąd" + +msgid "No response" +msgstr "" + +msgid "Unknown Error" +msgstr "" + +msgid "URL" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} members:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} member managers:" +msgstr "" + +msgid "Settings" +msgstr "Ustawienia" + +msgid "Search" +msgstr "Wyszukaj" + +msgid "False" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Allowed to create keytab" +msgstr "Utworzenie klucza się nie powiodło.\n" + +#, fuzzy +msgid "Allowed to retrieve keytab" +msgstr "Zamknięcie tablicy kluczy się nie powiodło\n" + +#, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Add Kerberos Principal Alias" +msgstr "Naczelnik Kerberosa" + +#, fuzzy +msgid "New kerberos principal alias" +msgstr "Naczelnik Kerberosa" + +msgid "Remove Kerberos Alias" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "" + +msgid "Inherited from server configuration" +msgstr "" + +msgid "MS-PAC" +msgstr "" + +msgid "Override inherited settings" +msgstr "" + +msgid "PAD" +msgstr "" + +#, fuzzy +msgid "Authenticating" +msgstr "Ustawienia konta" + +msgid "Authentication with personal certificate failed" +msgstr "" + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" + +msgid "Continue to next page" +msgstr "" + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" + +msgid "Login failed due to an unknown reason" +msgstr "" + +msgid "Logged In As" +msgstr "Zalogowano jako" + +msgid "Authentication with Kerberos failed" +msgstr "" + +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" + +msgid "Loading" +msgstr "" + +#, fuzzy +msgid "Kerberos Principal you entered is expired" +msgstr "Nazwa naczelnika Kerberosa dla tego komputera" + +msgid "Loading data" +msgstr "" + +msgid "Log in" +msgstr "" + +#, fuzzy +msgid "Log In Using Certificate" +msgstr "Certyfikat" + +msgid "Log in using personal certificate" +msgstr "" + +msgid "Log out" +msgstr "" + +msgid "Log out error" +msgstr "" + +msgid "Password or Password+One-Time Password" +msgstr "" + +#, python-brace-format +msgid "You will be redirected in ${count}s" +msgstr "" + +msgid "Sync OTP Token" +msgstr "" + +msgid "Synchronizing" +msgstr "" + +msgid "The user account you entered is locked" +msgstr "" + +#, fuzzy +msgid "number of passwords" +msgstr "Minimalna długość hasła" + +msgid "seconds" +msgstr "" + +#, fuzzy +msgid "Migrating" +msgstr "Konfiguracja" + +msgid "There was a problem with your request. Please, try again later." +msgstr "" + +msgid "Password migration was not successful" +msgstr "" + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" + +msgid "The password or username you entered is incorrect" +msgstr "" + +msgid "Password migration was successful" +msgstr "" + +msgid "Attribute" +msgstr "Atrybut" + +msgid "Add delegation" +msgstr "" + +msgid "Remove delegations" +msgstr "" + +#, fuzzy +msgid "Add permission" +msgstr "Uprawnienia" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Remove permissions" +msgstr "Uprawnienia" + +#, python-brace-format +msgid "Remove privileges from permission '${primary_key}'" +msgstr "" + +msgid "Add privilege" +msgstr "" + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "" + +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Remove privileges" +msgstr "Usuwanie naczelnika %s\n" + +#, python-brace-format +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "" + +#, python-brace-format +msgid "Remove roles from privilege '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Role Settings" +msgstr "Ustawienia" + +msgid "Add role" +msgstr "" + +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "" + +#, python-brace-format +msgid "Add services into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "" + +msgid "Remove roles" +msgstr "" + +#, python-brace-format +msgid "Remove role '${primary_key}' from privileges" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from role '${primary_key}'" +msgstr "" + +msgid "Add self service permission" +msgstr "" + +msgid "Remove self service permissions" +msgstr "" + +msgid "Add rule" +msgstr "" + +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to change default group?" +msgstr "" + +#, fuzzy +msgid "Default host group" +msgstr "Domyślna grupa użytkowników" + +#, fuzzy +msgid "Default user group" +msgstr "Domyślna grupa użytkowników" + +msgid "Exclusive" +msgstr "" + +msgid "Expression" +msgstr "" + +#, fuzzy +msgid "Host group rule" +msgstr "Grupa komputerów" + +#, fuzzy +msgid "Host group rules" +msgstr "Grupy komputerów" + +msgid "Inclusive" +msgstr "" + +msgid "Remove auto membership rules" +msgstr "" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "User group rule" +msgstr "Grupa użytkowników" + +#, fuzzy +msgid "User group rules" +msgstr "Grupa użytkowników" + +#, fuzzy +msgid "Add automount key" +msgstr "Automatyczne montowanie kluczy" + +#, fuzzy +msgid "Remove automount keys" +msgstr "Automatyczne montowanie kluczy" + +#, fuzzy +msgid "Add automount location" +msgstr "Automatyczne montowanie map" + +#, fuzzy +msgid "Automount Location Settings" +msgstr "Ustawienia konta" + +msgid "Remove automount locations" +msgstr "" + +#, fuzzy +msgid "Add automount map" +msgstr "Automatyczne montowanie map" + +#, fuzzy +msgid "Map Type" +msgstr "Typ" + +msgid "Direct" +msgstr "" + +msgid "Indirect" +msgstr "" + +#, fuzzy +msgid "Remove automount maps" +msgstr "Automatyczne montowanie map" + +msgid "Add certificate authority" +msgstr "" + +#, fuzzy +msgid "Remove certificate authorities" +msgstr "Odrzuć certyfikat." + +msgid "Add CA ACL" +msgstr "" + +#, python-brace-format +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "" + +msgid "All" +msgstr "" + +msgid "Any CA" +msgstr "" + +#, fuzzy +msgid "Any Host" +msgstr "Komputery" + +#, fuzzy +msgid "Any Service" +msgstr "Usługi" + +msgid "Any Profile" +msgstr "" + +msgid "Anyone" +msgstr "" + +#, fuzzy +msgid "Rule status" +msgstr "Stan żądania" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "" + +msgid "Remove CA ACLs" +msgstr "" + +#, python-brace-format +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "" + +msgid "Specified CAs" +msgstr "" + +#, fuzzy +msgid "Specified Hosts and Groups" +msgstr "Grupy polecenia sudo" + +msgid "Specified Profiles" +msgstr "" + +#, fuzzy +msgid "Specified Services and Groups" +msgstr "Grupy usług" + +msgid "Specified Users and Groups" +msgstr "" + +msgid "Permitted to have certificates issued" +msgstr "" + +#, fuzzy +msgid "Remove certificate profiles" +msgstr "Odrzuć certyfikat." + +msgid "AA Compromise" +msgstr "" + +#, fuzzy +msgid "Add principal" +msgstr "Naczelnik" + +msgid "Affiliation Changed" +msgstr "" + +msgid "CA Compromise" +msgstr "" + +#, fuzzy +msgid "Certificates" +msgstr "Certyfikat" + +#, fuzzy +msgid "Certificate Hold" +msgstr "Certyfikat" + +msgid "Cessation of Operation" +msgstr "" + +#, fuzzy +msgid "Common Name" +msgstr "Nazwa komputera" + +msgid "the certificate with serial number " +msgstr "" + +msgid "Expires On" +msgstr "" + +#, fuzzy +msgid "Issued on from" +msgstr "Wydawca" + +msgid "Issued on to" +msgstr "" + +#, fuzzy +msgid "Maximum serial number" +msgstr "Numer seryjny" + +#, fuzzy +msgid "Minimum serial number" +msgstr "Numer seryjny" + +#, fuzzy +msgid "Revoked on from" +msgstr "Unieważniono" + +#, fuzzy +msgid "Revoked on to" +msgstr "Unieważniono" + +msgid "Valid not after from" +msgstr "" + +msgid "Valid not after to" +msgstr "" + +msgid "Valid not before from" +msgstr "" + +msgid "Valid not before to" +msgstr "" + +#, fuzzy +msgid "Fingerprints" +msgstr "Odcisk (SHA1)" + +#, fuzzy +msgid "Get Certificate" +msgstr "Nowy certyfikat" + +#, fuzzy +msgid "Certificate Hold Removed" +msgstr "Odrzucono certyfikat" + +#, python-brace-format +msgid "Issue new certificate for host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for user '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Issue new certificate" +msgstr "Nowy certyfikat" + +#, fuzzy +msgid "Issued By" +msgstr "Wydawca" + +#, fuzzy +msgid "Issued On" +msgstr "Wydawca" + +#, fuzzy +msgid "Issued To" +msgstr "Wydawca" + +msgid "Key Compromise" +msgstr "" + +#, fuzzy +msgid "No Valid Certificate" +msgstr "Nowy certyfikat" + +msgid "New Certificate" +msgstr "Nowy certyfikat" + +msgid "Certificate in base64 or PEM format" +msgstr "" + +msgid "Note" +msgstr "" + +msgid "Organization" +msgstr "" + +msgid "Organizational Unit" +msgstr "" + +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "" + +msgid "Privilege Withdrawn" +msgstr "" + +msgid "Reason for Revocation" +msgstr "" + +#, fuzzy +msgid "Remove certificate hold" +msgstr "Odrzuć certyfikat." + +msgid "Do you want to remove the certificate hold?" +msgstr "" + +msgid "Remove from CRL" +msgstr "" + +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" + +#, python-brace-format +msgid " -8 '${cn}'" +msgstr "" + +#, fuzzy +msgid "Certificate requested" +msgstr "Odrzucono certyfikat" + +#, fuzzy +msgid "Revoke certificate" +msgstr "Odrzuć certyfikat." + +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "" + +msgid "Certificate Revoked" +msgstr "Odrzucono certyfikat" + +msgid "REVOKED" +msgstr "" + +#, fuzzy +msgid "SHA1 Fingerprint" +msgstr "Odcisk (SHA1)" + +#, fuzzy +msgid "SHA256 Fingerprint" +msgstr "Odcisk (SHA1)" + +msgid "Superseded" +msgstr "" + +msgid "Unspecified" +msgstr "" + +#, fuzzy +msgid "Valid Certificate Present" +msgstr "Odrzucono certyfikat" + +msgid "Valid from" +msgstr "" + +msgid "Valid to" +msgstr "" + +msgid "Validity" +msgstr "" + +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "" + +#, fuzzy +msgid "View Certificate" +msgstr "Nowy certyfikat" + +#, fuzzy +msgid "Certificate Data" +msgstr "Certyfikat" + +#, fuzzy +msgid "Certificate For Match" +msgstr "Certyfikat" + +#, fuzzy +msgid "Certificate Mapping Match" +msgstr "Certyfikat" + +msgid "Matched Users" +msgstr "" + +#, fuzzy +msgid "User Login" +msgstr "Login użytkownika" + +msgid "Add certificate identity mapping rule" +msgstr "" + +msgid "Add certificate mapping data" +msgstr "" + +#, fuzzy +msgid "Configuration string" +msgstr "Konfiguracja" + +#, python-brace-format +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "" + +#, fuzzy +msgid "Remove certificate mapping data" +msgstr "Odrzuć certyfikat." + +msgid "Issuer and subject" +msgstr "" + +msgid "Remove certificate identity mapping rules" +msgstr "" + +#, fuzzy +msgid "Version" +msgstr "Uprawnienia" + +#, fuzzy +msgid "Group Options" +msgstr "Opis grupy" + +#, fuzzy +msgid "Search Options" +msgstr "Wyszukaj" + +msgid "SELinux Options" +msgstr "" + +#, fuzzy +msgid "Server Options" +msgstr "Serwer IPA do użycia" + +#, fuzzy +msgid "Service Options" +msgstr "Usługi" + +#, fuzzy +msgid "User Options" +msgstr "Login użytkownika" + +msgid "Forward first" +msgstr "" + +msgid "Forwarding disabled" +msgstr "" + +msgid "Forward only" +msgstr "" + +msgid "Options" +msgstr "" + +msgid "Update System DNS Records" +msgstr "" + +msgid "Do you want to update system DNS records?" +msgstr "" + +msgid "System DNS records updated" +msgstr "" + +msgid "Add DNS forward zone" +msgstr "" + +msgid "Remove DNS forward zones" +msgstr "" + +msgid "Add DNS resource record" +msgstr "" + +msgid "DNS record was deleted because it contained no data." +msgstr "" + +msgid "Other Record Types" +msgstr "" + +msgid "Address not valid, can't redirect" +msgstr "" + +msgid "Create dns record" +msgstr "" + +msgid "Creating record." +msgstr "" + +msgid "Record creation failed." +msgstr "" + +msgid "Checking if record exists." +msgstr "" + +msgid "Record not found." +msgstr "" + +msgid "Redirection to PTR record" +msgstr "" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "" + +#, fuzzy +msgid "Target reverse zone not found." +msgstr "%(parent)s: nie odnaleziono %(oname)s" + +msgid "Fetching DNS zones." +msgstr "" + +msgid "An error occurred while fetching dns zones." +msgstr "" + +msgid "You will be redirected to DNS Zone." +msgstr "" + +msgid "Remove DNS resource records" +msgstr "" + +msgid "Standard Record Types" +msgstr "" + +msgid "Records for DNS Zone" +msgstr "" + +msgid "Record Type" +msgstr "" + +msgid "Add DNS zone" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "" + +msgid "DNS Zone Settings" +msgstr "Ustawienia strefy DNS" + +msgid "Remove DNS zones" +msgstr "" + +#, fuzzy +msgid "Remove Permission" +msgstr "Uprawnienia" + +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "" + +msgid "Skip DNS check" +msgstr "" + +msgid "Skip overlap check" +msgstr "" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" + +msgid "Authoritative nameserver change" +msgstr "" + +msgid "Level" +msgstr "" + +msgid "Set Domain Level" +msgstr "" + +#, fuzzy +msgid "Add user group" +msgstr "Grupa użytkowników" + +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user ID override into user group '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Group Settings" +msgstr "Ustawienia konta" + +#, fuzzy +msgid "External" +msgstr "Zewnętrzny komputer" + +msgid "Groups" +msgstr "Grupy" + +#, fuzzy +msgid "Group categories" +msgstr "Kontener grupy" + +#, fuzzy +msgid "Change to external group" +msgstr "zmiana na grupę POSIX" + +#, fuzzy +msgid "Change to POSIX group" +msgstr "zmiana na grupę POSIX" + +msgid "Non-POSIX" +msgstr "" + +msgid "POSIX" +msgstr "" + +#, fuzzy +msgid "Remove user groups" +msgstr "Grupy usługi elementów" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Group Type" +msgstr "Nazwa grupy" + +msgid "Add HBAC rule" +msgstr "" + +#, python-brace-format +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Accessing" +msgstr "Czas dostępu" + +msgid "Remove HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Via Service" +msgstr "Usługi" + +msgid "Who" +msgstr "" + +msgid "Add HBAC service" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "" + +#, fuzzy +msgid "Remove HBAC services" +msgstr "Usługi elementów" + +#, python-brace-format +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "" + +#, fuzzy +msgid "Add HBAC service group" +msgstr "Opis grupy usługi HBAC" + +#, python-brace-format +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Remove HBAC service groups" +msgstr "Grupy usługi elementów" + +#, python-brace-format +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Access Denied" +msgstr "Czas dostępu" + +#, fuzzy +msgid "Access Granted" +msgstr "Czas dostępu" + +msgid "Include Disabled" +msgstr "" + +#, fuzzy +msgid "Include Enabled" +msgstr "Włączone" + +msgid "HBAC Test" +msgstr "" + +msgid "Matched" +msgstr "" + +msgid "Missing values: " +msgstr "" + +msgid "New Test" +msgstr "" + +msgid "Rules" +msgstr "" + +msgid "Run Test" +msgstr "" + +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "" + +msgid "Unmatched" +msgstr "" + +msgid "Add host" +msgstr "" + +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "" + +#, fuzzy +msgid "Host Certificate" +msgstr "Certyfikat" + +msgid "Host Name" +msgstr "Nazwa komputera" + +msgid "Delete Key, Unprovision" +msgstr "" + +#, fuzzy +msgid "Host Settings" +msgstr "Ustawienia" + +msgid "Enrolled" +msgstr "" + +msgid "Enrollment" +msgstr "" + +msgid "Fully Qualified Host Name" +msgstr "" + +#, fuzzy +msgid "Generate OTP" +msgstr "Ustaw OTP" + +#, fuzzy +msgid "Generated OTP" +msgstr "Ustaw OTP" + +#, fuzzy +msgid "Kerberos Key" +msgstr "Polityka zgłoszeń Kerberosa" + +msgid "Kerberos Key Not Present" +msgstr "" + +msgid "Kerberos Key Present, Host Provisioned" +msgstr "" + +#, fuzzy +msgid "One-Time Password" +msgstr "Nowe hasło" + +msgid "One-Time Password Not Present" +msgstr "" + +msgid "One-Time Password Present" +msgstr "" + +#, fuzzy +msgid "Reset OTP" +msgstr "Ustaw OTP" + +msgid "Reset One-Time Password" +msgstr "" + +msgid "Set OTP" +msgstr "Ustaw OTP" + +msgid "OTP set" +msgstr "" + +#, fuzzy +msgid "Set One-Time Password" +msgstr "Nowe hasło" + +#, fuzzy +msgid "Remove hosts" +msgstr "Element komputerów" + +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "" + +msgid "Unprovision" +msgstr "" + +msgid "Are you sure you want to unprovision this host?" +msgstr "" + +msgid "Unprovisioning host" +msgstr "" + +msgid "Host unprovisioned" +msgstr "" + +#, fuzzy +msgid "Add host group" +msgstr "Grupa komputerów" + +#, python-brace-format +msgid "Add hosts into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Host Group Settings" +msgstr "Grupy komputerów" + +#, fuzzy +msgid "Remove host groups" +msgstr "Element grupy komputerów" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "" + +msgid "User to override" +msgstr "" + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" + +msgid "Enter trusted user login." +msgstr "" + +msgid "Profile" +msgstr "" + +msgid "Group to override" +msgstr "" + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" + +#, fuzzy +msgid "Enter trusted group name." +msgstr "Nazwa grupy usługi" + +msgid "Add ID view" +msgstr "" + +msgid "Add group ID override" +msgstr "" + +msgid "Add user ID override" +msgstr "" + +#, python-brace-format +msgid "${primary_key} applies to:" +msgstr "" + +msgid "Applied to hosts" +msgstr "" + +#, fuzzy +msgid "Apply to host groups" +msgstr "Element grupy komputerów" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "" + +msgid "Apply to hosts" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "" + +#, python-brace-format +msgid "${primary_key} overrides:" +msgstr "" + +msgid "Remove ID views" +msgstr "" + +msgid "Remove user ID overrides" +msgstr "" + +msgid "Remove group ID overrides" +msgstr "" + +#, fuzzy +msgid "Un-apply from host groups" +msgstr "Nazwa grupy komputerów" + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" + +msgid "Un-apply" +msgstr "" + +msgid "Un-apply from hosts" +msgstr "" + +msgid "Un-apply ID Views from hosts" +msgstr "" + +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "" + +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "Polityka zgłoszeń Kerberosa" + +#, fuzzy +msgid "Add netgroup" +msgstr "Grupy sieciowe" + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Netgroup Settings" +msgstr "Opis grupy sieciowej" + +msgid "Netgroups" +msgstr "Grupy sieciowe" + +#, fuzzy +msgid "Remove netgroups" +msgstr "Elementy grupy" + +#, python-brace-format +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from netgroup '${primary_key}'" +msgstr "" + +msgid "Add OTP token" +msgstr "" + +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" + +#, fuzzy +msgid "Configure your token" +msgstr "Konfiguracja" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" + +#, fuzzy +msgid "OTP Token Settings" +msgstr "Ustawienia strefy DNS" + +msgid "Disable token" +msgstr "" + +#, fuzzy +msgid "Enable token" +msgstr "Włączone" + +msgid "Remove OTP tokens" +msgstr "" + +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "" + +msgid "Show QR code" +msgstr "" + +#, fuzzy +msgid "Show configuration uri" +msgstr "Konfiguracja" + +msgid "Counter-based (HOTP)" +msgstr "" + +msgid "Time-based (TOTP)" +msgstr "" + +#, fuzzy +msgid "Add Custom Attribute" +msgstr "Atrybut" + +#, fuzzy +msgid "Permission settings" +msgstr "Uprawnienia" + +#, fuzzy +msgid "Attribute breakdown" +msgstr "Atrybut" + +#, fuzzy +msgid "Privilege Settings" +msgstr "Ustawienia" + +msgid "Public key:" +msgstr "" + +msgid "Set public key" +msgstr "" + +msgid "Show/Set key" +msgstr "" + +msgid "Modified: key not set" +msgstr "" + +msgid "Modified" +msgstr "" + +msgid "New: key not set" +msgstr "" + +msgid "New: key set" +msgstr "" + +#, fuzzy +msgid "Add password policy" +msgstr "Polityka haseł" + +msgid "Password Policy" +msgstr "Polityka haseł" + +#, fuzzy +msgid "Remove password policies" +msgstr "Polityka haseł" + +msgid "Add ID range" +msgstr "" + +#, fuzzy +msgid "Range Settings" +msgstr "Ustawienia" + +msgid "Base ID" +msgstr "" + +msgid "Primary RID base" +msgstr "" + +msgid "Range size" +msgstr "" + +msgid "Domain SID" +msgstr "" + +msgid "Secondary RID base" +msgstr "" + +msgid "Remove ID ranges" +msgstr "" + +msgid "Active Directory domain with POSIX attributes" +msgstr "" + +msgid "Detect" +msgstr "" + +#, fuzzy +msgid "Local domain" +msgstr "Lokalizacja" + +msgid "IPA trust" +msgstr "" + +msgid "Active Directory winsync" +msgstr "" + +msgid "Add RADIUS server" +msgstr "" + +#, fuzzy +msgid "RADIUS Proxy Server Settings" +msgstr "Ustawienia strefy DNS" + +msgid "Remove RADIUS servers" +msgstr "" + +#, fuzzy +msgid "Realm Domains" +msgstr "Nazwa obszaru" + +msgid "Check DNS" +msgstr "" + +msgid "Do you also want to perform DNS check?" +msgstr "" + +#, fuzzy +msgid "Force Update" +msgstr "Zaktualizuj" + +msgid "Add SELinux user map" +msgstr "" + +#, python-brace-format +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "" + +msgid "Remove selinux user maps" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Server Roles" +msgstr "Nazwa serwera" + +#, fuzzy +msgid "Server Role" +msgstr "Nazwa serwera" + +msgid "Warning: Consider service replication" +msgstr "" + +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" + +#, fuzzy +msgid "Delete Server" +msgstr "Usuń" + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" + +#, fuzzy +msgid "Add service" +msgstr "Usługi" + +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "" + +#, fuzzy +msgid "Service Certificate" +msgstr "Nowy certyfikat" + +#, fuzzy +msgid "Service Settings" +msgstr "Ustawienia strefy DNS" + +#, fuzzy +msgid "Provisioning" +msgstr "Uprawnienia" + +#, fuzzy +msgid "Remove services" +msgstr "Usługi elementów" + +#, python-brace-format +msgid "Remove service '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing service '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to unprovision this service?" +msgstr "" + +msgid "Unprovisioning service" +msgstr "" + +#, fuzzy +msgid "Service unprovisioned" +msgstr "Naczelnik usługi" + +#, fuzzy +msgid "Kerberos Key Present, Service Provisioned" +msgstr "Nazwa naczelnika usługi Kerberos" + +msgid "SSH public keys" +msgstr "" + +msgid "SSH public key:" +msgstr "" + +msgid "Set SSH key" +msgstr "" + +msgid "Are you sure you want to activate selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "" + +#, fuzzy, python-brace-format +msgid "${count} user(s) activated" +msgstr "Pasuje %(count)d użytkownik" + +msgid "Add stage user" +msgstr "" + +#, fuzzy +msgid "Stage users" +msgstr "Elementy użytkowników" + +#, fuzzy +msgid "Preserved users" +msgstr "Elementy użytkowników" + +msgid "Remove preserved users" +msgstr "" + +#, fuzzy +msgid "Remove stage users" +msgstr "Elementy użytkowników" + +msgid "Are you sure you want to stage selected users?" +msgstr "" + +#, fuzzy, python-brace-format +msgid "${count} users(s) staged" +msgstr "Pasuje %(count)d użytkownik" + +#, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "" + +msgid "Are you sure you want to restore selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "" + +#, fuzzy +msgid "User categories" +msgstr "Kategoria użytkowników" + +#, fuzzy +msgid "Add subid" +msgstr "Dodaj i zamknij" + +msgid "Assigned subids" +msgstr "" + +msgid "DNA remaining" +msgstr "" + +msgid "SubGID range size" +msgstr "" + +msgid "SubGID range start" +msgstr "" + +msgid "SubUID range size" +msgstr "" + +msgid "SubUID range start" +msgstr "" + +msgid "Remaining subids" +msgstr "" + +msgid "Subordinate ID Statistics" +msgstr "" + +#, fuzzy +msgid "Add sudo command" +msgstr "Polecenie sudo" + +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "" + +#, fuzzy +msgid "Remove sudo commands" +msgstr "Polecenie sudo" + +#, python-brace-format +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "" + +#, fuzzy +msgid "Add sudo command group" +msgstr "Grupy polecenia sudo" + +#, python-brace-format +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Remove sudo command groups" +msgstr "Grupy polecenia sudo" + +#, python-brace-format +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Add sudo rule" +msgstr "Dodaj i zamknij" + +msgid "Add sudo option" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "" + +msgid "Allow" +msgstr "" + +#, fuzzy +msgid "Any Command" +msgstr "Polecenia" + +#, fuzzy +msgid "Any Group" +msgstr "Grupa" + +#, fuzzy +msgid "Run Commands" +msgstr "Polecenia" + +msgid "Deny" +msgstr "" + +#, fuzzy +msgid "Access this host" +msgstr "Czas dostępu" + +msgid "Option added" +msgstr "" + +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "" + +msgid "Remove sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "" + +msgid "As Whom" +msgstr "" + +#, fuzzy +msgid "Specified Commands and Groups" +msgstr "Grupy polecenia sudo" + +#, fuzzy +msgid "Specified Groups" +msgstr "Grupy usług" + +msgid "Remove sudo options" +msgstr "" + +msgid "Autogenerated" +msgstr "" + +msgid "Segment details" +msgstr "" + +#, fuzzy +msgid "Replication configuration" +msgstr "nie można otworzyć pliku konfiguracji %s\n" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" + +msgid "Add IPA location" +msgstr "" + +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "" + +msgid "Remove IPA locations" +msgstr "" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "" + +msgid "Add topology segment" +msgstr "" + +msgid "Remove topology segments" +msgstr "" + +#, fuzzy +msgid "Account" +msgstr "Automatyczne montowanie" + +msgid "Add trust" +msgstr "" + +msgid "Administrative account" +msgstr "" + +msgid "SID blocklists" +msgstr "" + +#, fuzzy +msgid "Trust Settings" +msgstr "Ustawienia konta" + +msgid "Establish using" +msgstr "" + +msgid "Fetch domains" +msgstr "" + +#, fuzzy +msgid "Pre-shared password" +msgstr "Hasło użytkownika" + +msgid "Remove trusts" +msgstr "" + +msgid "Remove domains" +msgstr "" + +#, fuzzy +msgid "Trust direction" +msgstr "Opis grupy" + +#, fuzzy +msgid "Trust status" +msgstr "Stan żądania" + +#, fuzzy +msgid "Trust type" +msgstr "Typ reguły" + +msgid "Alternative UPN suffixes" +msgstr "" + +msgid "User attributes for SMB services" +msgstr "" + +msgid "Path to a script executed on a Windows system at logon" +msgstr "" + +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "" + +msgid "Path to a user home directory, in UNC format" +msgstr "" + +msgid "Drive to mount a home directory" +msgstr "" + +msgid "Account Settings" +msgstr "Ustawienia konta" + +#, fuzzy +msgid "Account Status" +msgstr "Ustawienia konta" + +#, fuzzy +msgid "Active users" +msgstr "Aktywna strefa" + +msgid "Add user" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "" + +msgid "Auto assign subordinate ids" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to auto-assign a subordinate id to user ${object}?" +msgstr "" + +#, fuzzy +msgid "Contact Settings" +msgstr "Ustawienia konta" + +#, fuzzy +msgid "Delete mode" +msgstr "Usuń" + +#, fuzzy +msgid "Employee Information" +msgstr "Różne informacje" + +msgid "Error changing account status" +msgstr "" + +#, fuzzy +msgid "Password expiration" +msgstr "Rozmiar historii haseł" + +msgid "Mailing Address" +msgstr "Adres pocztowy" + +msgid "Misc. Information" +msgstr "Różne informacje" + +#, fuzzy +msgid "delete" +msgstr "Usuń" + +msgid "preserve" +msgstr "" + +#, fuzzy +msgid "No private group" +msgstr "Nie jest zarządzaną grupą" + +#, fuzzy +msgid "Remove users" +msgstr "Elementy użytkowników" + +#, python-brace-format +msgid "Remove user '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" + +#, python-brace-format +msgid "Click to ${action}" +msgstr "" + +msgid "Unlock" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "" + +msgid "Add vault" +msgstr "" + +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "" + +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" + +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" + +msgid "Asymmetric" +msgstr "" + +msgid "Vaults Config" +msgstr "" + +#, fuzzy +msgid "Members" +msgstr "Komputer elementu" + +msgid "My User Vaults" +msgstr "" + +msgid "Owners" +msgstr "" + +msgid "Remove vaults" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Service Vaults" +msgstr "Usługi" + +msgid "Shared" +msgstr "" + +msgid "Shared Vaults" +msgstr "" + +msgid "Standard" +msgstr "" + +msgid "Symmetric" +msgstr "" + +msgid "Vault Type" +msgstr "" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" + +#, fuzzy +msgid "User Vaults" +msgstr "Grupy użytkowników" + +msgid "Current password is required" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "Maksymalny czas życia hasła (w dniach)" + +#, fuzzy +msgid "First OTP" +msgstr "Imię" + +#, fuzzy +msgid "New password is required" +msgstr "Nowe hasło" + +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" + +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" + +msgid "Token synchronization failed" +msgstr "" + +msgid "The username, password or token codes are not correct" +msgstr "" + +msgid "Token was synchronized" +msgstr "" + +msgid "Password change complete" +msgstr "Ukończono zmianę hasła" + +msgid "Your password has expired. Please enter a new password." +msgstr "" + +msgid "Passwords must match" +msgstr "Hasła muszą się zgadzać" + +msgid "Password reset was not successful." +msgstr "" + +#, fuzzy +msgid "Reset your password." +msgstr "Hasło użytkownika" + +#, fuzzy +msgid "Second OTP" +msgstr "Ustaw OTP" + +#, fuzzy +msgid "Verify Password" +msgstr "Sprawdzenie hasła naczelnika" + +msgid "Are you sure you want to delete selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "" + +msgid "Are you sure you want to disable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "" + +msgid "Are you sure you want to enable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "" + +msgid "Some entries were not deleted" +msgstr "" + +msgid "Quick Links" +msgstr "Szybkie odnośniki" + +msgid "Select All" +msgstr "Zaznacz wszystko" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" + +msgid "Unselect All" +msgstr "Odznacz wszystko" + +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" + +msgid "Working" +msgstr "" + +msgid "Audit" +msgstr "" + +msgid "Authentication" +msgstr "" + +msgid "Automount" +msgstr "Automatyczne montowanie" + +msgid "DNS" +msgstr "DNS" + +msgid "Host-Based Access Control" +msgstr "" + +msgid "Identity" +msgstr "" + +#, fuzzy +msgid "IPA Server" +msgstr "Serwer IPA do użycia" + +#, fuzzy +msgid "Network Services" +msgstr "Usługi" + +msgid "Policy" +msgstr "" + +msgid "Role-Based Access Control" +msgstr "" + +msgid "Subordinate IDs" +msgstr "" + +msgid "Sudo" +msgstr "" + +msgid "Topology" +msgstr "" + +msgid "Trusts" +msgstr "" + +msgid "True" +msgstr "" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" + +msgid "API Browser" +msgstr "" + +#, fuzzy +msgid "First" +msgstr "Imię" + +#, fuzzy +msgid "Last" +msgstr "Nazwisko" + +msgid "Next" +msgstr "" + +msgid "Page" +msgstr "" + +msgid "Prev" +msgstr "" + +msgid "Undo" +msgstr "" + +msgid "Undo this change." +msgstr "" + +#, fuzzy +msgid "Undo All" +msgstr "Odznacz wszystko" + +#, fuzzy +msgid "Undo all changes in this field." +msgstr "Usuwa wszystkich naczelników w tym obszarze" + +msgid "Text does not match field pattern" +msgstr "" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" + +#, fuzzy +msgid "Must be a decimal number" +msgstr "musi być liczbą dziesiętną" + +#, fuzzy +msgid "Format error" +msgstr "błąd odczytu\n" + +#, fuzzy +msgid "Must be an integer" +msgstr "musi być liczba całkowitą" + +msgid "Not a valid IP address" +msgstr "" + +msgid "Not a valid IPv4 address" +msgstr "" + +msgid "Not a valid IPv6 address" +msgstr "" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "" + +#, fuzzy +msgid "Parse error" +msgstr "błąd odczytu\n" + +#, fuzzy +msgid "Must be a positive number" +msgstr "musi być liczbą dziesiętną" + +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "" + +#, fuzzy +msgid "Required field" +msgstr "Identyfikator żądania" + +msgid "Unsupported value" msgstr "" #, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" + +#, fuzzy +msgid "kerberos ticket policy settings" +msgstr "Polityka zgłoszeń Kerberosa" + +#, fuzzy +msgid "OTP max life" +msgstr "Maksymalny czas życia" + +#, fuzzy +msgid "OTP token maximum ticket life (seconds)" +msgstr "Minimalny czas życia zgłoszenia (sekundy)" + +#, fuzzy +msgid "OTP max renew" +msgstr "Maksymalne odnowienie" + +#, fuzzy +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "Maksymalny czas, w którym możliwe jest odnowienie (sekundy)" + +#, fuzzy +msgid "RADIUS max life" +msgstr "Maksymalny czas życia" + +#, fuzzy +msgid "RADIUS maximum ticket life (seconds)" +msgstr "Minimalny czas życia zgłoszenia (sekundy)" + +#, fuzzy +msgid "RADIUS max renew" +msgstr "Maksymalne odnowienie" + +#, fuzzy +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "Maksymalny czas, w którym możliwe jest odnowienie (sekundy)" + +#, fuzzy +msgid "PKINIT max life" +msgstr "Maksymalny czas życia" + +#, fuzzy +msgid "PKINIT maximum ticket life (seconds)" +msgstr "Minimalny czas życia zgłoszenia (sekundy)" + +#, fuzzy +msgid "PKINIT max renew" +msgstr "Maksymalne odnowienie" + +#, fuzzy +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "Maksymalny czas, w którym możliwe jest odnowienie (sekundy)" + +msgid "Hardened max life" +msgstr "" + +#, fuzzy +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "Minimalny czas życia zgłoszenia (sekundy)" + +msgid "Hardened max renew" +msgstr "" + +#, fuzzy +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "Maksymalny czas, w którym możliwe jest odnowienie (sekundy)" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +#, fuzzy +msgid "" +"\n" +"IPA locations\n" +msgstr "Położenie" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +#, fuzzy +msgid "location" +msgstr "Położenie" + +#, fuzzy +msgid "locations" +msgstr "Położenie" + +#, fuzzy +msgid "IPA Locations" +msgstr "Położenie" + +#, fuzzy +msgid "IPA Location" +msgstr "Położenie" + +#, fuzzy +msgid "Location name" +msgstr "Położenie" + +#, fuzzy +msgid "IPA location name" +msgstr "Nazwa domeny NIS" + +#, fuzzy +msgid "IPA Location description" +msgstr "Opis grupy sieciowej" + +#, fuzzy +msgid "Servers" +msgstr "Usługi" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." msgstr "" #, fuzzy, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" +msgid "Added IPA location \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgid "Delete an IPA location." msgstr "" #, fuzzy, python-format -msgid "Modified Certificate Profile \"%(value)s\"" +msgid "Deleted IPA location \"%(value)s\"" +msgstr "Usunięto komputer „%(value)s”" + +msgid "Modify information about an IPA location." +msgstr "" + +#, fuzzy, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "Zmodyfikowano komputer „%(value)s”" + +msgid "Search for IPA locations." +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "Pasuje %(count)d komputer" +msgstr[1] "Pasuje %(count)d komputery" +msgstr[2] "Pasuje %(count)d komputerów" + +msgid "Display information about an IPA location." +msgstr "" + +msgid "Servers in location" +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" +"Naczelnik Kerberosa %s już istnieje. Należy użyć polecenia „ipa user-mod”, " +"aby ustawić go ręcznie." + +#, fuzzy, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" +"Naczelnik Kerberosa %s już istnieje. Należy użyć polecenia „ipa user-mod”, " +"aby ustawić go ręcznie." + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" +"Dodanie użytkownika do domyślnej grupy się nie powiodło. Należy użyć " +"polecenia „ipa group-add-member”, aby dodać go ręcznie." + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +#, fuzzy +msgid "Invalid LDAP URI." +msgstr "Adres URI LDAP" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +#, fuzzy +msgid "Default group for new users not found" +msgstr "Domyślna grupa dla nowych użytkowników" + +#, fuzzy +msgid "netgroups" +msgstr "Grupy sieciowe" + +#, fuzzy +msgid "Netgroup" +msgstr "Grupy sieciowe" + +#, fuzzy, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "Dodano grupę „%(value)s”" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "Usunięto grupę „%(value)s”" + +#, fuzzy, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "Zmodyfikowano grupę „%(value)s”" + +#, fuzzy, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "Pasuje %(count)d grupa" +msgstr[1] "Pasują %(count)d grupy" +msgstr[2] "Pasuje %(count)d grup" + +msgid "One time password commands" +msgstr "" + +#, fuzzy +msgid "OTP configuration options" +msgstr "Konfiguracja" + +#, fuzzy +msgid "OTP Configuration" +msgstr "Konfiguracja" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +#, fuzzy +msgid "URI" +msgstr "UID" + +#, fuzzy, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +msgid "cannot be empty" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "Usunięto komputer „%(value)s”" + +#, fuzzy, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "Zmodyfikowano komputer „%(value)s”" + +#, fuzzy, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "Pasuje %(count)d komputer" +msgstr[1] "Pasuje %(count)d komputery" +msgstr[2] "Pasuje %(count)d komputerów" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"If the user authentication method is set to password+OTP, the user should\n" +"pass the --otp option when resetting the password.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To reset your own password when password+OTP is set as authentication " +"method:\n" +" ipa passwd --otp\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +msgid "The OTP if the user has a token configured" +msgstr "" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "Zmieniono hasło dla „%(value)s”" + +#, fuzzy +msgid "" +"\n" +"Permissions\n" +msgstr "Uprawnienia" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +#, fuzzy +msgid "" +"\n" +"Managed permissions\n" +msgstr "Uprawnienia" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +#, fuzzy +msgid "must be enclosed in parentheses" +msgstr "musi być liczba całkowitą" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "" + +#, fuzzy, python-format +msgid "Deprecated; use %s" +msgstr "Usunięto użytkownika „%(value)s”" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, fuzzy, python-format +msgid "Entry %s not found" +msgstr "Nie odnaleziono komputera „%(host)s”" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, python-format +msgid "option was renamed; use %s" +msgstr "" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, fuzzy, python-format +msgid "%s: group not found" +msgstr "%(pkey)s: nie odnaleziono %(oname)s" + +#, fuzzy +msgid "target and targetgroup are mutually exclusive" +msgstr "" +"wartości „type”, „filter”, „subtree” i „targetgroup” są wzajemnie wyłączne" + +#, fuzzy +msgid "subtree and type are mutually exclusive" +msgstr "" +"wartości „type”, „filter”, „subtree” i „targetgroup” są wzajemnie wyłączne" + +#, fuzzy +msgid "Bad search filter" +msgstr "Pola wyszukiwania użytkowników" + +#, fuzzy, python-format +msgid "Entry %s does not exist" +msgstr "Grupa „%s” nie istnieje" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, fuzzy, python-format +msgid "Added permission \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +#, fuzzy +msgid "attrs and included attributes are mutually exclusive" +msgstr "" +"wartości „type”, „filter”, „subtree” i „targetgroup” są wzajemnie wyłączne" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "Usunięto użytkownika „%(value)s”" + +msgid "cannot delete managed permissions" +msgstr "" + +#, fuzzy, python-format +msgid "ACI of permission %s was not found" +msgstr "Nie odnaleziono ACI o nazwie „%s”" + +#, fuzzy, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "Zmodyfikowano użytkownika „%(value)s”" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "Pasuje %(count)d użytkownik" +msgstr[1] "Pasuje %(count)d użytkowników" +msgstr[2] "Pasuje %(count)d użytkowników" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, fuzzy, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +#, fuzzy, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +#, fuzzy, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +#, fuzzy, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +#, fuzzy +msgid "invalid port number" +msgstr "Numer seryjny" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, fuzzy, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +#, fuzzy, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +#, fuzzy, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +#, fuzzy, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +#, fuzzy +msgid "Realm domains" +msgstr "Nazwa obszaru" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +#, fuzzy +msgid "roles" +msgstr "Role" + +#, fuzzy +msgid "Role" +msgstr "Role" + +#, fuzzy, python-format +msgid "Added role \"%(value)s\"" +msgstr "Dodano grupę „%(value)s”" + +#, fuzzy, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "Usunięto grupę „%(value)s”" + +#, fuzzy, python-format +msgid "Modified role \"%(value)s\"" +msgstr "Zmodyfikowano grupę „%(value)s”" + +#, fuzzy, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "Pasuje %(count)d grupa" +msgstr[1] "Pasują %(count)d grupy" +msgstr[2] "Pasuje %(count)d grup" + +#, fuzzy +msgid "" +"\n" +"API Schema\n" +msgstr "Schemat LDAP" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +#, fuzzy +msgid "Documentation" +msgstr "Położenie" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +msgid "Help topic" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +#, fuzzy +msgid "Method name" +msgstr "Nazwa grupy sieciowej" + +msgid "Display information about a command." +msgstr "" + +msgid "Search for commands." +msgstr "" + +msgid "Return command defaults" +msgstr "" + +#, fuzzy, python-brace-format +msgid "{oname}: {command_name} not found" +msgstr "Nie odnaleziono pliku %(file)s" + +msgid "Display information about a class." +msgstr "" + +#, fuzzy +msgid "Search for classes." +msgstr "Klasy znaków" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +#, fuzzy +msgid "Required" +msgstr "Identyfikator żądania" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +msgid "CLI name" +msgstr "Nazwa ACI" + +#, fuzzy +msgid "Confirm (password)" +msgstr "Hasło użytkownika" + +#, fuzzy +msgid "Default" +msgstr "Domyślna powłoka" + +#, fuzzy +msgid "Default from" +msgstr "Domyślna grupa użytkowników" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" +msgstr "" + +#, fuzzy, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "%(parent)s: nie odnaleziono %(oname)s" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, fuzzy, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "%(parent)s: nie odnaleziono %(oname)s" + +msgid "Display information about a command output." +msgstr "" + +#, fuzzy +msgid "Search for command outputs." +msgstr "Grupy polecenia sudo" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +#, fuzzy +msgid "self service permission" +msgstr "Opis grupy usługi HBAC" + +msgid "self service permissions" +msgstr "" + +#, fuzzy +msgid "Self Service Permissions" +msgstr "Uprawnienia" + +msgid "Self Service Permission" +msgstr "" + +#, fuzzy, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +#, fuzzy, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +#, fuzzy, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +#, fuzzy, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +msgid "SELinux User Map rule" +msgstr "" + +msgid "SELinux User Map rules" +msgstr "" + +msgid "SELinux User Maps" +msgstr "" + +msgid "SELinux User Map" +msgstr "" + +#, fuzzy, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "Nie odnaleziono pliku %(file)s" + +#, fuzzy, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +#, fuzzy, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "Usunięto użytkownika „%(value)s”" + +#, fuzzy, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "Zmodyfikowano użytkownika „%(value)s”" + +#, fuzzy, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "Pasuje %(count)d użytkownik" +msgstr[1] "Pasuje %(count)d użytkowników" +msgstr[2] "Pasuje %(count)d użytkowników" + +#, fuzzy, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "Włączono konto użytkownika „%(value)s”" + +#, fuzzy, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "Wyłączono konto użytkownika „%(value)s”" + +#, fuzzy +msgid "" +"\n" +"IPA server roles\n" +msgstr "Serwer IPA do użycia" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +#, fuzzy +msgid "server role" +msgstr "Nazwa serwera" + +#, fuzzy +msgid "server roles" +msgstr "Nazwa serwera" + +#, fuzzy +msgid "IPA Server Roles" +msgstr "Serwer IPA do użycia" + +#, fuzzy +msgid "IPA Server Role" +msgstr "Serwer IPA do użycia" + +#, fuzzy +msgid "IPA server role name" +msgstr "Serwer IPA do użycia" + +#, fuzzy +msgid "Role status" +msgstr "Stan żądania" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +msgid "Include IPA master entries" +msgstr "" + +#, fuzzy +msgid "IPA role name" +msgstr "Nazwa reguły" + +#, fuzzy, python-brace-format +msgid "{role}: role not found" +msgstr "Nie odnaleziono pliku %(file)s" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +#, python-format +msgid "authentication indicators not allowed in service \"%s\"" +msgstr "" + +#, fuzzy +msgid "Malformed principal" +msgstr "Naczelnik usługi" + +msgid "{} is required by the IPA master" +msgstr "" + +#, fuzzy +msgid "service" +msgstr "Usługi" + +#, fuzzy +msgid "services" +msgstr "Usługi" + +#, fuzzy +msgid "Service principal alias" +msgstr "Naczelnik usługi" + +#, fuzzy +msgid "Base-64 encoded service certificate" +msgstr "Certyfikat serwera zakodowany za pomocą Base-64" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +msgid "Add a new IPA service." +msgstr "" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +#, fuzzy +msgid "force principal name even if host not in DNS" +msgstr "wymuszenie nazwy naczelnika, nawet jeśli nie w DNS" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +msgid "Add a new SMB service." +msgstr "" + +#, fuzzy +msgid "SMB service NetBIOS name" +msgstr "Nazwa usługi" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +#, fuzzy, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +#, fuzzy, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +#, fuzzy, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +msgid "Add new principal alias to a service" +msgstr "" + +#, fuzzy, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +#, fuzzy +msgid "Remove principal alias from a service" +msgstr "Usuwa wszystkich naczelników w tym obszarze" + +#, fuzzy, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +#, fuzzy +msgid "Member principals" +msgstr "Naczelnik Kerberosa" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +#, fuzzy +msgid "Service delegation rules" +msgstr "Kategoria usług" + +#, fuzzy +msgid "Service delegation rule" +msgstr "Kategoria usług" + +#, fuzzy, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +#, fuzzy, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +msgid "privileged service delegation rule" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +#, fuzzy +msgid "Service delegation target" +msgstr "Nazwa grupy usługi" + +#, fuzzy, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +#, fuzzy, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +msgid "privileged service delegation target" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +#, fuzzy +msgid "Stage Users" +msgstr "Użytkownicy" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +#, fuzzy +msgid "stage users" +msgstr "Elementy użytkowników" + +#, fuzzy, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "Usunięto użytkownika „%(value)s”" + +#, fuzzy, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "Zmodyfikowano użytkownika „%(value)s”" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "Pasuje %(count)d użytkownik" +msgstr[1] "Pasuje %(count)d użytkowników" +msgstr[2] "Pasuje %(count)d użytkowników" + +#, fuzzy, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "Usunięto użytkownika „%(value)s”" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "Zmodyfikowano użytkownika „%(value)s”" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, fuzzy, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "Odłączono grupę „%(value)s” od użytkownika „%(value)s”" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Subordinate ids\n" +"\n" +"Manage subordinate user and group ids for users\n" +"\n" +"EXAMPLES:\n" +"\n" +" Auto-assign a subordinate id range to current user\n" +" ipa subid-generate\n" +"\n" +" Auto-assign a subordinate id range to user alice:\n" +" ipa subid-generate --owner=alice\n" +"\n" +" Find subordinate ids for user alice:\n" +" ipa subid-find --owner=alice\n" +"\n" +" Match entry by any subordinate uid in range:\n" +" ipa subid-match --subuid=2147483649\n" +msgstr "" + +msgid "Subordinate id" +msgstr "" + +msgid "Subordinate ids" +msgstr "" + +#, fuzzy +msgid "Subordinate id description" +msgstr "Opis grupy" + +msgid "Owning user of subordinate id entry" +msgstr "" + +msgid "Start value for subordinate user ID (subuid) range" +msgstr "" + +msgid "Subordinate user ID count" +msgstr "" + +msgid "Start value for subordinate group ID (subgid) range" +msgstr "" + +msgid "Subordinate group ID count" +msgstr "" + +#, python-format +msgid "" +"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." +msgstr "" + +#, python-format +msgid "'%(dn)s is not a valid user" +msgstr "" + +msgid "subgidnumber must be equal to subuidnumber" +msgstr "" + +#, fuzzy +msgid "Add a new subordinate id." +msgstr "Dodaj i zamknij" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added subordinate id \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +#, fuzzy +msgid "Delete a subordinate id." +msgstr "Odrzuć certyfikat." + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted subordinate id \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +msgid "Modify a subordinate id." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Modified subordinate id \"%(value)s\"" msgstr "Zmodyfikowano usługę „%(value)s”" #, fuzzy -msgid "Certificate profiles cannot be renamed" -msgstr "Nie można ukończyć działania na certyfikacie: %(error)s" +msgid "Search for subordinate id." +msgstr "Domyślna grupa dla nowych użytkowników" -msgid "Insufficient privilege to modify a certificate profile." +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d subordinate id matched" +msgid_plural "%(count)d subordinate ids matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +msgid "Display information about a subordinate id." +msgstr "" + +msgid "Generate and auto-assign subuid and subgid range to user entry" +msgstr "" + +msgid "Match users by any subordinate uid in their range" +msgstr "" + +msgid "SubUID match" +msgstr "" + +msgid "Match value for subordinate user ID" +msgstr "" + +msgid "Subordinate id statistics" msgstr "" #, python-format -msgid "all masters must have %(role)s role enabled" +msgid "%(remaining)i remaining subordinate id ranges" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" msgstr "" #, python-format -msgid "must have %(role)s role enabled" +msgid "must not contain trailing dot: %s" msgstr "" -msgid "must be enabled only on a single master" +#, fuzzy +msgid "sudo command" +msgstr "Polecenie sudo" + +#, fuzzy +msgid "sudo commands" +msgstr "Polecenie sudo" + +#, fuzzy +msgid "Sudo Commands" +msgstr "Polecenie sudo" + +#, fuzzy, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +#, fuzzy, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "Usunięto ACI „%(value)s”" + +#, fuzzy, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "Zmodyfikowano ACI „%(value)s”" + +#, fuzzy, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "Pasuje %(count)d ACI" +msgstr[1] "Pasują %(count)d ACI" +msgstr[2] "Pasuje %(count)d ACI" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +#, fuzzy +msgid "sudo command group" +msgstr "Grupy polecenia sudo" + +#, fuzzy +msgid "sudo command groups" +msgstr "Grupy polecenia sudo" + +#, fuzzy, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "Dodano grupę „%(value)s”" + +#, fuzzy, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "Usunięto grupę „%(value)s”" + +#, fuzzy, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "Zmodyfikowano grupę „%(value)s”" + +#, fuzzy, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "Pasuje %(count)d grupa" +msgstr[1] "Pasują %(count)d grupy" +msgstr[2] "Pasuje %(count)d grup" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "Pasuje %(count)d komputer" +msgstr[1] "Pasuje %(count)d komputery" +msgstr[2] "Pasuje %(count)d komputerów" + +#, fuzzy, python-format +msgid "Added segment \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +#, fuzzy, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "Usunięto komputer „%(value)s”" + +#, fuzzy, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "Zmodyfikowano komputer „%(value)s”" + +#, fuzzy, python-format +msgid "%(value)s" +msgstr "Odnaleziono „%(value)s”" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "Pasuje %(count)d komputer" +msgstr[1] "Pasuje %(count)d komputery" +msgstr[2] "Pasuje %(count)d komputerów" + +#, fuzzy, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "Usunięto komputer „%(value)s”" + +#, fuzzy, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +#, fuzzy, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "Zmodyfikowano komputer „%(value)s”" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +#, fuzzy +msgid "External trust" +msgstr "Zewnętrzny komputer" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "Wyłączono konto użytkownika „%(value)s”" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +#, fuzzy +msgid "trust type" +msgstr "Typ reguły" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "Usunięto komputer „%(value)s”" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "Pasuje %(count)d komputer" +msgstr[1] "Pasuje %(count)d komputery" +msgstr[2] "Pasuje %(count)d komputerów" + +#, fuzzy +msgid "trust configuration" +msgstr "Konfiguracja" + +#, fuzzy +msgid "Global Trust Configuration" +msgstr "Konfiguracja" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +#, fuzzy +msgid "unsupported trust type" +msgstr "Obsługiwane typy szyfrowania:\n" + +#, fuzzy, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "Zmodyfikowano ACI „%(value)s”" + +#, fuzzy +msgid "SID" +msgstr "GID" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +#, fuzzy +msgid "Domain enabled" +msgstr "Nazwa domeny NIS" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +#, fuzzy +msgid "not allowed to remotely add agent" +msgstr "modyfikowanie wpisów użytkowników nie jest dozwolone" + +#, fuzzy, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "Włączono konto użytkownika „%(value)s”" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, fuzzy, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "Wyłączono konto użytkownika „%(value)s”" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +#, fuzzy +msgid "users" +msgstr "Użytkownicy" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +#, fuzzy +msgid "Default group for new users is not POSIX" +msgstr "Domyślna grupa dla nowych użytkowników" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "Usunięto użytkownika „%(value)s”" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "Zmodyfikowano użytkownika „%(value)s”" + +#, fuzzy, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "Włączono konto użytkownika „%(value)s”" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, fuzzy, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "Włączono konto użytkownika „%(value)s”" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "Wyłączono konto użytkownika „%(value)s”" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "Włączono konto użytkownika „%(value)s”" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, fuzzy, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "Włączono konto użytkownika „%(value)s”" + +#, fuzzy +msgid "Failed logins" +msgstr "Login użytkownika" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +#, fuzzy +msgid "Time now" +msgstr "Czas życia" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, fuzzy, python-format +msgid "%(host)s failed" +msgstr "fork() się nie powiodło\n" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#, fuzzy, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +#, fuzzy, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "Zmodyfikowano użytkownika „%(value)s”" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, fuzzy, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +#, fuzzy +msgid "Remove principal alias from the user entry" +msgstr "Usuwa wszystkich naczelników w tym obszarze" + +#, fuzzy, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "Odłączono grupę „%(value)s” od użytkownika „%(value)s”" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +#, fuzzy +msgid "vaultcontainer" +msgstr "Kontener grupy" + +#, fuzzy +msgid "vaultcontainers" +msgstr "Kontener grupy" + +#, fuzzy +msgid "Vault Containers" +msgstr "Kontener grupy" + +#, fuzzy +msgid "Vault Container" +msgstr "Kontener grupy" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, fuzzy, python-format +msgid "Added vault \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +#, fuzzy, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "Usunięto komputer „%(value)s”" + +#, fuzzy, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "Pasuje %(count)d komputer" +msgstr[1] "Pasuje %(count)d komputery" +msgstr[2] "Pasuje %(count)d komputerów" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, fuzzy, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "Zmodyfikowano komputer „%(value)s”" + +#, fuzzy +msgid "Vault configuration" +msgstr "Konfiguracja" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, fuzzy, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +msgid "Retrieve data from a vault." +msgstr "" + +#, fuzzy, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "Usunięto grupę „%(value)s”" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, fuzzy, python-format +msgid "not allowed to perform operation: %s" +msgstr "modyfikowanie wpisów grup nie jest dozwolone" + +msgid "No such virtual command" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" +"priorytet musi być unikalną wartością (%(prio)d jest już używane przez " +"%(gname)s)" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +#, fuzzy +msgid "password policy" +msgstr "Polityka haseł" + +#, fuzzy +msgid "password policies" +msgstr "Polityka haseł" + +#, fuzzy +msgid "Password Policies" +msgstr "Polityka haseł" + +#, fuzzy +msgid "Max repeat" +msgstr "Maksymalne odnowienie" + +#, fuzzy +msgid "Maximum number of same consecutive characters" +msgstr "Maksymalna liczba zwróconych wpisów" + +#, fuzzy +msgid "Max sequence" +msgstr "Maksymalne odnowienie" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +#, fuzzy +msgid "User check" +msgstr "Nazwa użytkownika" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +#, fuzzy +#| msgid "Maximum password life must be greater than minimum." +msgid "Maximum password life must be equal to or greater than the minimum." +msgstr "Maksymalny czas życia hasła musi być wyższy niż minimalny." + +#, fuzzy +msgid "cannot delete global password policy" +msgstr "nie można ustawiać priorytetu dla globalnej polityki" + +msgid "priority cannot be set on global policy" +msgstr "nie można ustawiać priorytetu dla globalnej polityki" + +#, fuzzy +msgid "" +"\n" +"IPA servers\n" +msgstr "Serwer IPA do użycia" + +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "" + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +msgid "server" +msgstr "" + +msgid "servers" +msgstr "" + +#, fuzzy +msgid "IPA Servers" +msgstr "Serwer IPA do użycia" + +#, fuzzy +msgid "Server location" +msgstr "Kategoria usług" + +#, fuzzy +msgid "Service weight" +msgstr "Nazwa usługi" + +msgid "Weight for server services" +msgstr "" + +#, fuzzy +msgid "Service relative weight" +msgstr "Kategoria usług" + +msgid "Relative weight for server services (counts per location)" +msgstr "" + +#, fuzzy +msgid "Enabled server roles" +msgstr "Włączono konto użytkownika „%(value)s”" + +msgid "List of enabled roles" +msgstr "" + +msgid "Modify information about an IPA server." +msgstr "" + +#, fuzzy, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +#, fuzzy, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +#, fuzzy, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +#, python-format +msgid "Failed to remove server from security domain: %s" +msgstr "" + +msgid "Server has already been deleted" +msgstr "" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +#, fuzzy +msgid "not allowed to perform server connection check" +msgstr "modyfikowanie wpisów użytkowników nie jest dozwolone" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +#, fuzzy +msgid "State" +msgstr "Stan" + +#, fuzzy +msgid "Server state" +msgstr "Nazwa serwera" + +#, fuzzy, python-format +msgid "Changed server state of \"%(value)s\"." +msgstr "Zmieniono hasło dla „%(value)s”" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." +msgstr "" + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"Each option needs to be added separately and no validation is done whether\n" +"the option is known by sudo or is in a valid format. Environment variables\n" +"also need to be set individually. For example env_keep=\"FOO BAR\" in " +"sudoers\n" +"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" +"+=BAR.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set multiple default Sudo options:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate' --" +"sudooption mail_badpass\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "" + +msgid "Sudo Rules" +msgstr "" + +msgid "Sudo Rule" +msgstr "" + +#, fuzzy, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" +"priorytet musi być unikalną wartością (%(prio)d jest już używane przez " +"%(gname)s)" + +#, fuzzy, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +#, fuzzy, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "Usunięto użytkownika „%(value)s”" + +#, fuzzy, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "Zmodyfikowano użytkownika „%(value)s”" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +#, fuzzy +msgid "command" +msgstr "Polecenia" + +#, fuzzy +msgid "commands" +msgstr "Polecenia" + +msgid "runAs user" +msgstr "" + +#, fuzzy +msgid "runAs users" +msgstr "Elementy użytkowników" + +#, fuzzy +msgid "group runAs" +msgstr "Grupy sieciowe" + +#, fuzzy +msgid "runAs groups" +msgstr "Elementy grupy" + +#, fuzzy, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "Pasuje %(count)d użytkownik" +msgstr[1] "Pasuje %(count)d użytkowników" +msgstr[2] "Pasuje %(count)d użytkowników" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" msgstr "" #, fuzzy @@ -24000,6 +24287,17 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + #, python-format msgid "" "\n" @@ -24019,34 +24317,6 @@ msgstr "" msgid "Topology does not allow server %(server)s to replicate with servers:" msgstr "" -msgid "Trusting forest" -msgstr "" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Unknown" -msgstr "" - -msgid "Non-Active Directory domain" -msgstr "" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - msgid "" "\n" "Classes to manage trust joins using DCE-RPC calls\n" @@ -24210,6 +24480,35 @@ msgstr "" msgid "must be at least 1" msgstr "musi wynosić co najmniej %(minvalue)d" +msgid "Out of memory\n" +msgstr "Brak pamięci\n" + +#, fuzzy +msgid "Warning unrecognized encryption type.\n" +msgstr "Obsługiwane typy szyfrowania:\n" + +msgid "Warning unrecognized salt type.\n" +msgstr "" + +msgid "Out of memory!?\n" +msgstr "Brak pamięci?\n" + +msgid "Enctype comparison failed!\n" +msgstr "Porównanie typów szyfrowania się nie powiodło.\n" + +#, fuzzy +msgid "Password is too long!\n" +msgstr "Rozmiar historii haseł" + +msgid "Failed to create random key!\n" +msgstr "Utworzenie losowego klucza się nie powiodło.\n" + +msgid "Failed to create key!\n" +msgstr "Utworzenie klucza się nie powiodło.\n" + +msgid "Bad or unsupported salt type.\n" +msgstr "" + #, fuzzy, c-format msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" msgstr "Nie można zainicjować biblioteki LDAP.\n" @@ -24237,17 +24536,3 @@ msgstr "" #, fuzzy msgid "Unable to initialize STARTTLS session\n" msgstr "Nie można zainicjować biblioteki LDAP.\n" - -#, fuzzy -msgid "Warning unrecognized encryption type.\n" -msgstr "Obsługiwane typy szyfrowania:\n" - -msgid "Warning unrecognized salt type.\n" -msgstr "" - -#, fuzzy -msgid "Password is too long!\n" -msgstr "Rozmiar historii haseł" - -msgid "Bad or unsupported salt type.\n" -msgstr "" diff --git a/po/pt.po b/po/pt.po index b9f39926e..bffce557b 100644 --- a/po/pt.po +++ b/po/pt.po @@ -14,228 +14,419 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" -msgid "" -"\n" -" Display information about an automember rule.\n" -" " +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "" + +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "" + +#, c-format +msgid "out of memory\n" +msgstr "" + +#, c-format +msgid "read error\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "" + +#, c-format +msgid "principal not found\n" +msgstr "" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "realm not found\n" +msgstr "" + +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" msgstr "" -"\n" -" Exibir informação acerca de uma regra de membro automática.\n" -" " msgid "" -"\n" -"Get information about installed IPA servers.\n" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" msgstr "" -"\n" -"Obter informação acerca dos servidores IPA.\n" -#, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "Cliente %(cver)s incompatível com servidor %(sver)s no '%(server)s'" +msgid "Kerberos Service Principal Name" +msgstr "" -#, python-format -msgid "%(exception)s" -msgstr "%(exception)s" +msgid "The keytab file to remove the principcal(s) from" +msgstr "" -#, python-format -msgid "%(info)s" -msgstr "%(info)s" +msgid "Keytab File Name" +msgstr "" -#, python-format -msgid "%(line)s" -msgstr "%(line)s" +msgid "Remove all principals in this realm" +msgstr "" -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" +msgid "Realm name" +msgstr "" -#, python-format -msgid "'%(name)s' is required" -msgstr "'%(name)s' é obrigatório" +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" -msgid "A list of LDAP entries" -msgstr "Uma lista de entradas LDAP" +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" -msgid "Add password policy" -msgstr "Adicionar política de palavra-passe" +#, c-format +msgid "Closing keytab failed\n" +msgstr "" -msgid "Already registered" -msgstr "Já registado" +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" -msgid "Command name" -msgstr "Nome do comando" +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "" -msgid "Command not implemented" -msgstr "Comando não implementado" +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "" -msgid "Display information about a DNS forward zone." -msgstr "Exibir informação acerca de uma zona de reencaminhamento DNS." +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "" -msgid "Display information about a DNS zone (SOA record)." -msgstr "Exibir informação acerca de uma zona DNS (registo SOA)." +#, c-format +msgid "Out of memory \n" +msgstr "" -msgid "Display information about a RADIUS proxy server." -msgstr "Exibir informação acerca do servidor proxy RADIUS." +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "" -msgid "Display information about a delegation." -msgstr "Exibir informação acerca de uma delegação." +msgid "Simple bind failed\n" +msgstr "" -msgid "Display information about a named group." -msgstr "Exibir informação acerca de um grupo nomeado." +msgid "SASL Bind failed\n" +msgstr "" -msgid "Display information about a self-service permission." -msgstr "Exibir informação acerca de uma permissão de serviço automático." +#, c-format +msgid "Operation failed: %s\n" +msgstr "" -msgid "Display information about a user." -msgstr "Exibir informação acerca de um utilizador." +#, c-format +msgid "Failed to get result: %s\n" +msgstr "" -msgid "Display information about an IPA location." -msgstr "Exibir informação acerca de uma localização IPA" +#, c-format +msgid "Timeout exceeded." +msgstr "" -msgid "Display information about password policy." -msgstr "Exibir informação acerca da política de palavra-passe." +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "" -msgid "Filename is empty" -msgstr "O nome de ficheiro está em branco" +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "" -msgid "Forward policy" -msgstr "Política de reencaminhamento" +#, c-format +msgid "Missing reply control list!\n" +msgstr "" -msgid "GECOS field" -msgstr "campo GECOS" +#, c-format +msgid "Missing reply control!\n" +msgstr "" -msgid "Identity" -msgstr "Identidade" +#, c-format +msgid "Out of Memory!\n" +msgstr "" -msgid "Identity Settings" -msgstr "Configurações de Identidade" +#, c-format +msgid "Failed to create control!\n" +msgstr "" -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "Acesso insuficiente: %(info)s" +#, c-format +msgid "Failed to bind to server!\n" +msgstr "" -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "Pedido JSON-RPC inválido: %(error)s" +#, c-format +msgid "Failed to get keytab!\n" +msgstr "" -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Erro Kerberos: %(major)s/%(minor)s" +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "" -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "Referenciador HTTP ausente ou inválido,%(referer)s" +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "" -msgid "Modify information about an IPA location." -msgstr "Modificar informação acerca de uma localização IPA" +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "" -msgid "Modify information about an IPA server." -msgstr "Modificar informação acerca de um servidor IPA" +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "" -msgid "Not registered yet" -msgstr "Ainda não registado" +#, c-format +msgid "Failed to retrieve any keys" +msgstr "" -msgid "Only one value is allowed" -msgstr "Só é permitido um valor" +msgid "Failed to decode control reply!\n" +msgstr "" -msgid "Password Policy" -msgstr "Política de Palavra-passe" - -msgid "Passwords do not match" +#, fuzzy, c-format +msgid "Passwords do not match!\n" msgstr "As palavras-passe não correspondem" -msgid "Permission type" -msgstr "Tipo de permissão" +#, c-format +msgid "Failed to open config file %s\n" +msgstr "" -msgid "Policy" -msgstr "Política" +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "" -msgid "Remove trusts" -msgstr "Remover interligações" +msgid "Failed to resolve symlink to keytab.\n" +msgstr "" -msgid "Search for trusts." -msgstr "Pesquisar por interligações." +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" -msgid "Session error" -msgstr "Erro de sessão" +msgid "Print as little as possible" +msgstr "" -msgid "The topic or command name." -msgstr "O nome do tópico ou do comando" +msgid "Output only on errors" +msgstr "" -msgid "This command requires root access" -msgstr "Este comando requer acesso \"root\"" +msgid "Output debug info" +msgstr "" -msgid "This entry already exists" -msgstr "Esta entrada já existe" +msgid "Contact this specific KDC Server" +msgstr "" -msgid "This entry cannot be enabled or disabled" -msgstr "Esta entrada não pode estar ativada ou desativada" +msgid "Server Name" +msgstr "" -msgid "This entry is already a member" -msgstr "Esta entrada já é um membro" +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" -msgid "This entry is already disabled" -msgstr "Esta entrada já está desativada" +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" -msgid "This entry is already enabled" -msgstr "Esta entrada já está ativada" +msgid "Encryption types to request" +msgstr "" -msgid "This entry is not a member" -msgstr "Esta entrada não é um membro" +msgid "Comma separated encryption types list" +msgstr "" -msgid "Ticket expired" -msgstr "Pedido expirado" +msgid "Show the list of permitted encryption types and exit" +msgstr "" -msgid "To get command help, use:" -msgstr "Para obter ajuda do comando, utilize:" +msgid "Permitted Encryption Types" +msgstr "" -msgid "Topic commands:" -msgstr "Comandos do tópico:" +msgid "Asks for a non-random password to use for the principal" +msgstr "" -msgid "Topic or Command" -msgstr "Tópico ou Comando" +msgid "LDAP DN" +msgstr "" -msgid "Trusts" -msgstr "Interligações" +msgid "DN to bind as if not using kerberos" +msgstr "" -msgid "an internal error has occurred" -msgstr "ocorreu um erro interno " +#, fuzzy +msgid "LDAP password" +msgstr "Adicionar política de palavra-passe" -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "ocorreu um erro interno no servidor em '%(server)s'" +msgid "password to use if not using kerberos" +msgstr "" -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "não é possível ligar a '%(uri)s': %(error)s" +msgid "Prompt for LDAP password" +msgstr "" -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "erro no servidor '%(server)s': %(error)s" +msgid "Path to the IPA CA certificate" +msgstr "" -msgid "incorrect type" -msgstr "tipo incorreto" +msgid "IPA CA certificate" +msgstr "" -#, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "'%(name)s' inválido: %(error)s" +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" -msgid "invalid SSH public key" -msgstr "chave SSh pública inválida" +msgid "url" +msgstr "" -msgid "options are not allowed" -msgstr "não são pertimidas opções" +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" -msgid "password policy" -msgstr "política de palavra-passe" +msgid "GSSAPI|EXTERNAL" +msgstr "" -msgid "trusts" -msgstr "interligações" +msgid "Retrieve current keys without changing them" +msgstr "" -#, python-format -msgid "unknown command '%(name)s'" -msgstr "comando desconhecido '%(name)s'" +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +msgid "Enter LDAP password" +msgstr "" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "" + +#, c-format +msgid "DNS discovery for domain %s\n" +msgstr "" + +#, c-format +msgid "Discovered server %s\n" +msgstr "" + +#, c-format +msgid "Using discovered server %s\n" +msgstr "" + +#, c-format +msgid "DNS Discovery failed\n" +msgstr "" + +#, c-format +msgid "Using server from config %s\n" +msgstr "" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "" + +#, c-format +msgid "Using provided server %s\n" +msgstr "" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "" + +msgid "New Principal Password" +msgstr "" + +msgid "Verify Principal Password" +msgstr "" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" + +#, c-format +msgid "Failed to create key material\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "" #, c-format msgid "Out of memory!\n" @@ -261,9 +452,6 @@ msgstr "" msgid "Unable to enable SSL in LDAP\n" msgstr "" -msgid "SASL Bind failed\n" -msgstr "" - #, c-format msgid "Search for %1$s on rootdse failed with error %2$d\n" msgstr "" @@ -490,390 +678,6 @@ msgstr "" msgid "The hostname must not be: %s\n" msgstr "" -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "" - -#, c-format -msgid "Out of memory \n" -msgstr "" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "" - -msgid "Simple bind failed\n" -msgstr "" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -#, c-format -msgid "Out of Memory!\n" -msgstr "" - -#, c-format -msgid "Failed to create control!\n" -msgstr "" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "" - -msgid "Failed to decode control reply!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Passwords do not match!\n" -msgstr "As palavras-passe não correspondem" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "" - -msgid "Failed to resolve symlink to keytab.\n" -msgstr "" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Output only on errors" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -msgid "Server Name" -msgstr "" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Encryption types to request" -msgstr "" - -msgid "Comma separated encryption types list" -msgstr "" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -msgid "Permitted Encryption Types" -msgstr "" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -msgid "LDAP DN" -msgstr "" - -msgid "DN to bind as if not using kerberos" -msgstr "" - -#, fuzzy -msgid "LDAP password" -msgstr "Adicionar política de palavra-passe" - -msgid "password to use if not using kerberos" -msgstr "" - -msgid "Prompt for LDAP password" -msgstr "" - -msgid "Path to the IPA CA certificate" -msgstr "" - -msgid "IPA CA certificate" -msgstr "" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -msgid "Enter LDAP password" -msgstr "" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -msgid "New Principal Password" -msgstr "" - -msgid "Verify Principal Password" -msgstr "" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, c-format -msgid "Failed to create key material\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -msgid "Realm name" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "" - -#, c-format -msgid "out of memory\n" -msgstr "" - -#, c-format -msgid "read error\n" -msgstr "" - msgid "Failed members" msgstr "" @@ -988,132 +792,34 @@ msgstr "" msgid "Skipped %(key)s" msgstr "" +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +msgid "Unrevoked" +msgstr "" + +msgid "Error" +msgstr "" + +msgid "Input filename" +msgstr "" + +msgid "File to load the certificate from." +msgstr "" + +msgid "cannot specify both raw certificate and file" +msgstr "" + msgid "Input file" msgstr "" msgid "File to load the certificate from" msgstr "" -msgid "cannot specify both raw certificate and file" -msgstr "" - #, python-format msgid "Profile configuration stored in file '%(file)s'" msgstr "" -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -msgid "Servers details:" -msgstr "" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "Add a new YubiKey OTP token." -msgstr "" - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -msgid "Maximum number of agreements per replica" -msgstr "" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -msgid "Delete a user" -msgstr "" - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - msgid "Split DNS record to parts" msgstr "" @@ -1178,6 +884,132 @@ msgstr "" msgid "file to store DNS records in nsupdate format" msgstr "" +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "" + +msgid "Servers details:" +msgstr "" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "" + +msgid "User ID" +msgstr "" + +#, fuzzy +msgid "Password" +msgstr "Política de Palavra-passe" + +msgid "First Code" +msgstr "" + +msgid "Second Code" +msgstr "" + +msgid "Token ID" +msgstr "" + +msgid "python-yubico is not installed." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" + +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "Add a new YubiKey OTP token." +msgstr "" + +msgid "YubiKey slot" +msgstr "" + +msgid "No free YubiKey slot!" +msgstr "" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "" + +msgid "Topology is disconnected" +msgstr "" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "" + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "" + +msgid "Maximum number of agreements per replica" +msgstr "" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "" + +msgid "Delete a user" +msgstr "" + +msgid "preserve and no-preserve cannot be both set" +msgstr "" + #, fuzzy, python-format msgid "Cannot read file '%(filename)s': %(exc)s" msgstr "'%(name)s' inválido: %(error)s" @@ -1299,48 +1131,20 @@ msgstr "" msgid "Missing vault private key" msgstr "" -msgid "Write certificate (chain if --chain used) to file" +#, python-format +msgid "Enabled Sudo Rule \"%s\"" msgstr "" -msgid "Unrevoked" +#, python-format +msgid "Disabled Sudo Rule \"%s\"" msgstr "" -msgid "Error" +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" msgstr "" -msgid "Input filename" -msgstr "" - -msgid "File to load the certificate from." -msgstr "" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -msgid "User ID" -msgstr "" - -#, fuzzy -msgid "Password" -msgstr "Política de Palavra-passe" - -msgid "First Code" -msgstr "" - -msgid "Second Code" -msgstr "" - -msgid "Token ID" +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" msgstr "" msgid "" @@ -1615,6 +1419,253 @@ msgstr "" msgid "Location of the ACI" msgstr "" +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Description" +msgstr "" + +msgid "A description of this auto member rule" +msgstr "" + +msgid "Default (fallback) Group" +msgstr "" + +msgid "Default group for entries to land" +msgstr "" + +msgid "Add an automember rule." +msgstr "" + +msgid "Automember Rule" +msgstr "" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +msgid "Grouping Type" +msgstr "" + +msgid "Grouping to which the rule applies" +msgstr "" + +#, fuzzy +msgid "Add conditions to an automember rule." +msgstr "" +"\n" +" Exibir informação acerca de uma regra de membro automática.\n" +" " + +msgid "Inclusive Regex" +msgstr "" + +msgid "Exclusive Regex" +msgstr "" + +msgid "Attribute Key" +msgstr "" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +msgid "Number of conditions added" +msgstr "" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +#, fuzzy +msgid "Display information about the default (fallback) automember groups." +msgstr "Exibir informação acerca de um grupo nomeado." + +msgid "Delete an automember rule." +msgstr "" + +msgid "List of deletions that failed" +msgstr "" + +#, fuzzy +msgid "Search for automember rules." +msgstr "Pesquisar por interligações." + +msgid "Modify an automember rule." +msgstr "" + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +msgid "Rights" +msgstr "" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Users" +msgstr "" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Hosts" +msgstr "" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +msgid "Conditions that could not be removed" +msgstr "" + +msgid "Number of conditions removed" +msgstr "" + +#, fuzzy +msgid "Display information about an automember rule." +msgstr "" +"\n" +" Exibir informação acerca de uma regra de membro automática.\n" +" " + msgid "" "\n" "Automount\n" @@ -1746,31 +1797,15 @@ msgstr "" msgid "Automount map name." msgstr "" -msgid "Description" -msgstr "" - msgid "Create a new automount key." msgstr "" -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - msgid "Delete an automount key." msgstr "" msgid "Continuous mode: Don't stop on errors." msgstr "" -msgid "List of deletions that failed" -msgstr "" - #, fuzzy msgid "Search for an automount key." msgstr "Pesquisar por interligações." @@ -1790,19 +1825,6 @@ msgstr "" msgid "Modify an automount key." msgstr "" -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "Rights" -msgstr "" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - msgid "New mount information" msgstr "" @@ -1901,6 +1923,186 @@ msgstr "" msgid "Nested Methods to execute" msgstr "" +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +#, fuzzy +msgid "Search for existing certificates." +msgstr "Pesquisar por interligações." + +msgid "Match cn attribute in subject" +msgstr "" + +#, fuzzy +msgid "Reason" +msgstr "%(reason)s" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "" + +msgid "minimum serial number" +msgstr "" + +msgid "maximum serial number" +msgstr "" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Maximum number of certs returned" +msgstr "" + +msgid "Take a revoked certificate off hold." +msgstr "" + +msgid "Serial number" +msgstr "" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +msgid "Submit a certificate signing request." +msgstr "" + +msgid "CSR" +msgstr "" + +msgid "Principal" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +msgid "Dictionary mapping variable name to value" +msgstr "" + +msgid "Revoke a certificate." +msgstr "" + +msgid "Retrieve an existing certificate." +msgstr "" + +msgid "Output filename" +msgstr "" + +msgid "File to store the certificate in." +msgstr "" + +msgid "Check the status of a certificate signing request." +msgstr "" + +msgid "Request id" +msgstr "" + msgid "" "\n" "Server configuration\n" @@ -2120,6 +2322,9 @@ msgstr "Pesquisar por interligações." msgid "Modify a delegation." msgstr "" +msgid "Display information about a delegation." +msgstr "Exibir informação acerca de uma delegação." + msgid "" "\n" "Domain Name System (DNS)\n" @@ -2380,6 +2585,9 @@ msgid "" "standard format \"IP_ADDRESS port PORT\"" msgstr "" +msgid "Forward policy" +msgstr "Política de reencaminhamento" + msgid "" "Global forwarding policy. Set to \"none\" to disable any configured global " "forwarders." @@ -3085,6 +3293,9 @@ msgstr "" msgid "Remove a permission for per-forward zone access delegation." msgstr "" +msgid "Display information about a DNS forward zone." +msgstr "Exibir informação acerca de uma zona de reencaminhamento DNS." + msgid "Add new DNS resource record." msgstr "" @@ -3163,6 +3374,312 @@ msgstr "" msgid "Remove a permission for per-zone access delegation." msgstr "" +msgid "Display information about a DNS zone (SOA record)." +msgstr "Exibir informação acerca de uma zona DNS (registo SOA)." + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "Group name" +msgstr "" + +msgid "Group description" +msgstr "" + +msgid "GID" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "" + +msgid "Member users" +msgstr "" + +msgid "Member groups" +msgstr "" + +msgid "Member of groups" +msgstr "" + +msgid "Roles" +msgstr "" + +msgid "Member of netgroups" +msgstr "" + +msgid "Member of Sudo rule" +msgstr "" + +msgid "Member of HBAC rule" +msgstr "" + +msgid "Indirect Member users" +msgstr "" + +msgid "Indirect Member groups" +msgstr "" + +msgid "Indirect Member of group" +msgstr "" + +msgid "Indirect Member of netgroup" +msgstr "" + +msgid "Indirect Member of role" +msgstr "" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +msgid "Create a new group." +msgstr "" + +msgid "Create as a non-POSIX group" +msgstr "" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +msgid "Add members to a group." +msgstr "" + +msgid "External member" +msgstr "" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +msgid "member user" +msgstr "" + +msgid "users to add" +msgstr "" + +msgid "member group" +msgstr "" + +msgid "groups to add" +msgstr "" + +msgid "Members that could not be added" +msgstr "" + +msgid "Number of members added" +msgstr "" + +msgid "Delete group." +msgstr "" + +msgid "Detach a managed group from a user." +msgstr "" + +#, fuzzy +msgid "Search for groups." +msgstr "Pesquisar por interligações." + +#, fuzzy +msgid "search for private groups" +msgstr "Pesquisar por interligações." + +#, fuzzy +msgid "search for POSIX groups" +msgstr "Pesquisar por interligações." + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +msgid "search for non-POSIX groups" +msgstr "" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "user" +msgstr "" + +msgid "Search for groups with these member users." +msgstr "" + +msgid "Search for groups without these member users." +msgstr "" + +msgid "group" +msgstr "" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +msgid "netgroup" +msgstr "" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +msgid "HBAC rule" +msgstr "" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +msgid "Modify a group." +msgstr "" + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +msgid "Remove members from a group." +msgstr "" + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "" + +msgid "Number of members removed" +msgstr "" + +msgid "Display information about a named group." +msgstr "Exibir informação acerca de um grupo nomeado." + msgid "" "\n" "Host-based access control\n" @@ -3243,15 +3760,9 @@ msgstr "" msgid "Enabled" msgstr "" -msgid "Users" -msgstr "" - msgid "User Groups" msgstr "" -msgid "Hosts" -msgstr "" - msgid "Host Groups" msgstr "" @@ -3267,9 +3778,6 @@ msgstr "" msgid "Create a new HBAC rule." msgstr "" -msgid "Suppress processing of membership attributes." -msgstr "" - msgid "Add target hosts and hostgroups to an HBAC rule." msgstr "" @@ -3285,12 +3793,6 @@ msgstr "" msgid "host groups to add" msgstr "" -msgid "Members that could not be added" -msgstr "" - -msgid "Number of members added" -msgstr "" - msgid "Add services to an HBAC rule." msgstr "" @@ -3309,18 +3811,6 @@ msgstr "" msgid "Add users and groups to an HBAC rule." msgstr "" -msgid "member user" -msgstr "" - -msgid "users to add" -msgstr "" - -msgid "member group" -msgstr "" - -msgid "groups to add" -msgstr "" - msgid "Delete an HBAC rule." msgstr "" @@ -3346,12 +3836,6 @@ msgstr "" msgid "host groups to remove" msgstr "" -msgid "Members that could not be removed" -msgstr "" - -msgid "Number of members removed" -msgstr "" - msgid "Remove service and service groups from an HBAC rule." msgstr "" @@ -3364,12 +3848,6 @@ msgstr "" msgid "Remove users and groups from an HBAC rule." msgstr "" -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - msgid "Display the properties of an HBAC rule." msgstr "" @@ -3481,6 +3959,242 @@ msgstr "" msgid "Display information about an HBAC service group." msgstr "Exibir informação acerca de um grupo nomeado." +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +msgid "User name" +msgstr "" + +msgid "Target host" +msgstr "" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +msgid "Warning" +msgstr "" + +msgid "Matched rules" +msgstr "" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + msgid "" "\n" "Hosts/Machines\n" @@ -3629,33 +4343,9 @@ msgstr "" msgid "Member of host-groups" msgstr "" -msgid "Roles" -msgstr "" - -msgid "Member of netgroups" -msgstr "" - -msgid "Member of Sudo rule" -msgstr "" - -msgid "Member of HBAC rule" -msgstr "" - -msgid "Indirect Member of netgroup" -msgstr "" - msgid "Indirect Member of host-group" msgstr "" -msgid "Indirect Member of role" -msgstr "" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - msgid "Keytab" msgstr "" @@ -3746,45 +4436,30 @@ msgstr "" msgid "Search for hosts without these member of host groups." msgstr "" -msgid "netgroup" -msgstr "" - msgid "Search for hosts with these member of netgroups." msgstr "" msgid "Search for hosts without these member of netgroups." msgstr "" -msgid "role" -msgstr "" - msgid "Search for hosts with these member of roles." msgstr "" msgid "Search for hosts without these member of roles." msgstr "" -msgid "HBAC rule" -msgstr "" - msgid "Search for hosts with these member of HBAC rules." msgstr "" msgid "Search for hosts without these member of HBAC rules." msgstr "" -msgid "sudo rule" -msgstr "" - msgid "Search for hosts with these member of sudo rules." msgstr "" msgid "Search for hosts without these member of sudo rules." msgstr "" -msgid "user" -msgstr "" - msgid "Search for hosts with these enrolled by users." msgstr "" @@ -3940,6 +4615,234 @@ msgstr "" msgid "Display information about a hostgroup." msgstr "Exibir informação acerca de um utilizador." +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +#, fuzzy +msgid "Range name" +msgstr "Nome do comando" + +msgid "First Posix ID of the range" +msgstr "" + +msgid "Number of IDs in the range" +msgstr "" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +msgid "Range type" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "Delete an ID range." +msgstr "" + +#, fuzzy +msgid "Search for ranges." +msgstr "Pesquisar por interligações." + +msgid "Modify ID range." +msgstr "" + +#, fuzzy +msgid "Display information about a range." +msgstr "Exibir informação acerca de um utilizador." + msgid "" "\n" "ID Views\n" @@ -3956,12 +4859,6 @@ msgstr "" msgid "Anchor to override" msgstr "" -msgid "Group name" -msgstr "" - -msgid "GID" -msgstr "" - msgid "Group ID Number" msgstr "" @@ -4191,9 +5088,6 @@ msgid "" " ipa krbtpolicy-mod admin --maxlife=3600\n" msgstr "" -msgid "User name" -msgstr "" - msgid "Manage ticket policy for specific user" msgstr "" @@ -4450,9 +5344,6 @@ msgid "" "retrieve and print all attributes from the server. Affects command output." msgstr "" -msgid "Dictionary mapping variable name to value" -msgstr "" - msgid "Total number of variables env (>= count)" msgstr "" @@ -4559,9 +5450,6 @@ msgstr "" msgid "Search for netgroups without these member users." msgstr "" -msgid "group" -msgstr "" - msgid "Search for netgroups with these member groups." msgstr "" @@ -4656,6 +5544,150 @@ msgstr "" msgid "Show the current OTP configuration." msgstr "" +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Manager" +msgstr "" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +msgid "Disabled" +msgstr "" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +msgid "Validity start" +msgstr "" + +msgid "First date/time the token can be used" +msgstr "" + +msgid "Validity end" +msgstr "" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "" + +msgid "Token model (informational only)" +msgstr "" + +msgid "Serial" +msgstr "" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +msgid "Add a new OTP token." +msgstr "" + +msgid "(deprecated)" +msgstr "" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +msgid "Delete an OTP token." +msgstr "" + +#, fuzzy +msgid "Search for OTP token." +msgstr "Pesquisar por interligações." + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +msgid "Modify a OTP token." +msgstr "" + +msgid "Rename the OTP token object" +msgstr "" + +#, fuzzy +msgid "Display information about an OTP token." +msgstr "Exibir informação acerca de uma localização IPA" + msgid "" "\n" "YubiKey Tokens\n" @@ -5175,6 +6207,9 @@ msgstr "" msgid "Modify a group password policy." msgstr "Adicionar política de palavra-passe" +msgid "Display information about password policy." +msgstr "Exibir informação acerca da política de palavra-passe." + msgid "User" msgstr "" @@ -5265,6 +6300,9 @@ msgstr "Exibir informação acerca do servidor proxy RADIUS." msgid "Rename the RADIUS proxy server object" msgstr "" +msgid "Display information about a RADIUS proxy server." +msgstr "Exibir informação acerca do servidor proxy RADIUS." + msgid "" "\n" "Realm domains\n" @@ -5349,12 +6387,6 @@ msgstr "" msgid "A description of this role-group" msgstr "" -msgid "Member users" -msgstr "" - -msgid "Member groups" -msgstr "" - msgid "Privileges" msgstr "" @@ -5468,6 +6500,9 @@ msgstr "Exibir informação acerca de uma permissão de serviço automático." msgid "Modify a self-service permission." msgstr "Exibir informação acerca de uma permissão de serviço automático." +msgid "Display information about a self-service permission." +msgstr "Exibir informação acerca de uma permissão de serviço automático." + msgid "" "\n" "SELinux User Mapping\n" @@ -5625,9 +6660,6 @@ msgid "" "httpd.keytab\n" msgstr "" -msgid "Principal" -msgstr "" - msgid "Service principal" msgstr "" @@ -6368,9 +7400,6 @@ msgstr "" msgid "Sudo Command Group" msgstr "" -msgid "Group description" -msgstr "" - #, fuzzy msgid "Commands" msgstr "Nome do comando" @@ -6413,1698 +7442,6 @@ msgstr "" msgid "Display Sudo Command Group." msgstr "" -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -msgid "First name" -msgstr "" - -msgid "Last name" -msgstr "" - -msgid "Full name" -msgstr "" - -msgid "Display name" -msgstr "" - -msgid "Initials" -msgstr "" - -msgid "Kerberos principal" -msgstr "" - -msgid "Kerberos principal expiration" -msgstr "" - -msgid "Email address" -msgstr "" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -msgid "Street address" -msgstr "" - -msgid "City" -msgstr "" - -msgid "State/Province" -msgstr "" - -msgid "ZIP" -msgstr "" - -msgid "Telephone Number" -msgstr "" - -msgid "Mobile Telephone Number" -msgstr "" - -msgid "Pager Number" -msgstr "" - -msgid "Fax Number" -msgstr "" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "" - -msgid "Manager" -msgstr "" - -msgid "Car License" -msgstr "" - -msgid "Account disabled" -msgstr "" - -msgid "User authentication types" -msgstr "" - -msgid "Types of supported user authentication" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "RADIUS proxy configuration" -msgstr "" - -msgid "RADIUS proxy username" -msgstr "" - -msgid "Department Number" -msgstr "" - -msgid "Employee Number" -msgstr "" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -msgid "Member of groups" -msgstr "" - -msgid "Indirect Member of group" -msgstr "" - -msgid "Kerberos keys available" -msgstr "" - -msgid "Add a new user." -msgstr "" - -msgid "Don't create user private group" -msgstr "" - -msgid "Delete a user." -msgstr "" - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -#, fuzzy -msgid "Search for users." -msgstr "Pesquisar por interligações." - -msgid "Self" -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -msgid "Modify a user." -msgstr "" - -msgid "Rename the user object" -msgstr "" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "A description of this auto member rule" -msgstr "" - -msgid "Default (fallback) Group" -msgstr "" - -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -msgid "Automember Rule" -msgstr "" - -msgid "Grouping Type" -msgstr "" - -msgid "Grouping to which the rule applies" -msgstr "" - -#, fuzzy -msgid "Add conditions to an automember rule." -msgstr "" -"\n" -" Exibir informação acerca de uma regra de membro automática.\n" -" " - -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -msgid "Attribute Key" -msgstr "" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -#, fuzzy -msgid "Display information about the default (fallback) automember groups." -msgstr "Exibir informação acerca de um grupo nomeado." - -msgid "Delete an automember rule." -msgstr "" - -#, fuzzy -msgid "Search for automember rules." -msgstr "Pesquisar por interligações." - -msgid "Modify an automember rule." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -msgid "Number of conditions removed" -msgstr "" - -#, fuzzy -msgid "Display information about an automember rule." -msgstr "" -"\n" -" Exibir informação acerca de uma regra de membro automática.\n" -" " - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -#, fuzzy -msgid "Search for existing certificates." -msgstr "Pesquisar por interligações." - -msgid "Match cn attribute in subject" -msgstr "" - -#, fuzzy -msgid "Reason" -msgstr "%(reason)s" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -msgid "minimum serial number" -msgstr "" - -msgid "maximum serial number" -msgstr "" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -msgid "Serial number" -msgstr "" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -msgid "Submit a certificate signing request." -msgstr "" - -msgid "CSR" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -msgid "Revoke a certificate." -msgstr "" - -msgid "Retrieve an existing certificate." -msgstr "" - -msgid "Output filename" -msgstr "" - -msgid "File to store the certificate in." -msgstr "" - -msgid "Check the status of a certificate signing request." -msgstr "" - -msgid "Request id" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "GID (use this option to set it manually)" -msgstr "" - -msgid "Indirect Member users" -msgstr "" - -msgid "Indirect Member groups" -msgstr "" - -msgid "Create a new group." -msgstr "" - -msgid "Create as a non-POSIX group" -msgstr "" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Add members to a group." -msgstr "" - -msgid "External member" -msgstr "" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -msgid "Delete group." -msgstr "" - -msgid "Detach a managed group from a user." -msgstr "" - -#, fuzzy -msgid "Search for groups." -msgstr "Pesquisar por interligações." - -#, fuzzy -msgid "search for private groups" -msgstr "Pesquisar por interligações." - -#, fuzzy -msgid "search for POSIX groups" -msgstr "Pesquisar por interligações." - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -msgid "search for non-POSIX groups" -msgstr "" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "Modify a group." -msgstr "" - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -msgid "Remove members from a group." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -msgid "Target host" -msgstr "" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Warning" -msgstr "" - -msgid "Matched rules" -msgstr "" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -msgid "NetBIOS name" -msgstr "" - -msgid "Domain GUID" -msgstr "" - -msgid "Fallback primary group" -msgstr "" - -#, fuzzy -msgid "Domain name" -msgstr "Nome do comando" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -msgid "Active Directory domain administrator" -msgstr "" - -msgid "Active Directory domain administrator's password" -msgstr "" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -#, fuzzy -msgid "Shared secret for the trust" -msgstr "Pesquisar por interligações." - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "Range type" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -msgid "Delete a trust." -msgstr "" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -#, fuzzy -msgid "Display information about a trust." -msgstr "Exibir informação acerca de um utilizador." - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -#, fuzzy -msgid "Search domains of the trust" -msgstr "Pesquisar por interligações." - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -#, fuzzy -msgid "Range name" -msgstr "Nome do comando" - -msgid "First Posix ID of the range" -msgstr "" - -msgid "Number of IDs in the range" -msgstr "" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "Delete an ID range." -msgstr "" - -#, fuzzy -msgid "Search for ranges." -msgstr "Pesquisar por interligações." - -msgid "Modify ID range." -msgstr "" - -#, fuzzy -msgid "Display information about a range." -msgstr "Exibir informação acerca de um utilizador." - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -msgid "Disabled" -msgstr "" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -msgid "Validity start" -msgstr "" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Validity end" -msgstr "" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -msgid "Serial" -msgstr "" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -msgid "Add a new OTP token." -msgstr "" - -msgid "(deprecated)" -msgstr "" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -msgid "Delete an OTP token." -msgstr "" - -#, fuzzy -msgid "Search for OTP token." -msgstr "Pesquisar por interligações." - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -msgid "Modify a OTP token." -msgstr "" - -msgid "Rename the OTP token object" -msgstr "" - -#, fuzzy -msgid "Display information about an OTP token." -msgstr "Exibir informação acerca de uma localização IPA" - msgid "" "\n" "Sudo Rules\n" @@ -8318,6 +7655,503 @@ msgstr "" msgid "Display Sudo Rule." msgstr "" +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +msgid "NetBIOS name" +msgstr "" + +msgid "Domain GUID" +msgstr "" + +msgid "Fallback primary group" +msgstr "" + +#, fuzzy +msgid "Domain name" +msgstr "Nome do comando" + +msgid "Trusted domain partner" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +msgid "Active Directory domain administrator" +msgstr "" + +msgid "Active Directory domain administrator's password" +msgstr "" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +#, fuzzy +msgid "Shared secret for the trust" +msgstr "Pesquisar por interligações." + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +msgid "Delete a trust." +msgstr "" + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +msgid "Search for trusts." +msgstr "Pesquisar por interligações." + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +#, fuzzy +msgid "Display information about a trust." +msgstr "Exibir informação acerca de um utilizador." + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +#, fuzzy +msgid "Search domains of the trust" +msgstr "Pesquisar por interligações." + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "" + +msgid "Last name" +msgstr "" + +msgid "Full name" +msgstr "" + +msgid "Display name" +msgstr "" + +msgid "Initials" +msgstr "" + +msgid "Kerberos principal" +msgstr "" + +msgid "Kerberos principal expiration" +msgstr "" + +msgid "Email address" +msgstr "" + +msgid "Prompt to set the user password" +msgstr "" + +msgid "Generate a random user password" +msgstr "" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" + +msgid "Street address" +msgstr "" + +msgid "City" +msgstr "" + +msgid "State/Province" +msgstr "" + +msgid "ZIP" +msgstr "" + +msgid "Telephone Number" +msgstr "" + +msgid "Mobile Telephone Number" +msgstr "" + +msgid "Pager Number" +msgstr "" + +msgid "Fax Number" +msgstr "" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "" + +msgid "Car License" +msgstr "" + +msgid "Account disabled" +msgstr "" + +msgid "User authentication types" +msgstr "" + +msgid "Types of supported user authentication" +msgstr "" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "RADIUS proxy configuration" +msgstr "" + +msgid "RADIUS proxy username" +msgstr "" + +msgid "Department Number" +msgstr "" + +msgid "Employee Number" +msgstr "" + +msgid "Employee Type" +msgstr "" + +msgid "Preferred Language" +msgstr "" + +msgid "Kerberos keys available" +msgstr "" + +msgid "Add a new user." +msgstr "" + +msgid "Don't create user private group" +msgstr "" + +msgid "Delete a user." +msgstr "" + +msgid "Disable a user account." +msgstr "" + +msgid "Enable a user account." +msgstr "" + +#, fuzzy +msgid "Search for users." +msgstr "Pesquisar por interligações." + +msgid "Self" +msgstr "" + +msgid "Display user record for current Kerberos principal" +msgstr "" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +msgid "Search for users with these member of HBAC rules." +msgstr "" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +msgid "Modify a user." +msgstr "" + +msgid "Rename the user object" +msgstr "" + +msgid "Display information about a user." +msgstr "Exibir informação acerca de um utilizador." + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + msgid "Time limit of search in seconds (0 is unlimited)" msgstr "" @@ -8436,6 +8270,111 @@ msgstr "" msgid "Display the properties of a CA ACL." msgstr "" +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "Profile ID" +msgstr "" + +msgid "Certificate Profile to use" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +msgid "Profile description" +msgstr "" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +#, fuzzy +msgid "Search for Certificate Profiles." +msgstr "Pesquisar por interligações." + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" msgstr "" @@ -8465,6 +8404,218 @@ msgstr "" msgid "Remove certificates from host entry" msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + msgid "Fallback to AD DC LDAP" msgstr "" @@ -8492,6 +8643,9 @@ msgid "" "to onelevel" msgstr "" +msgid "Remove users that can manage this token." +msgstr "" + msgid "Target DN subtree" msgstr "" @@ -8933,6 +9087,13 @@ msgid "" " " msgstr "" +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + msgid "Preserved user" msgstr "" @@ -9227,333 +9388,6 @@ msgstr "" msgid "Display information about a vault container." msgstr "Exibir informação acerca de um utilizador." -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "Profile ID" -msgstr "" - -msgid "Certificate Profile to use" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -msgid "Profile description" -msgstr "" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -#, fuzzy -msgid "Search for Certificate Profiles." -msgstr "Pesquisar por interligações." - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - msgid "Resolve a host name in DNS. (Deprecated)" msgstr "" @@ -11237,312 +11071,6 @@ msgid "" " ipa hostgroup-del baltimore\n" msgstr "" -msgid "" -"Comma-separated list of objectclasses used to search for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Comma-separated list of attributes to be ignored for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of attributes to be ignored for group entries in DS" -msgstr "" - -msgid "comma-separated list of groups to exclude from migration" -msgstr "" - -msgid "comma-separated list of users to exclude from migration" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "comma-separated list of netgroups to add" -msgstr "" - -msgid "comma-separated list of netgroups to remove" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable form of a 389-ds Access Control Rule, or instruction " -"(ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add or delete.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Read permission is granted for most attributes by default so the read\n" -"permission is not expected to be used very often.\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. type: a type of object (user, group, etc).\n" -"2. memberof: a member of a group or hostgroup\n" -"3. filter: an LDAP filter\n" -"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" -" super-set of the \"type\" target.\n" -"5. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write, add, delete, all)" -msgstr "" - -msgid "" -"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" -msgstr "" - -msgid "Target members of a group" -msgstr "" - -msgid "User group to apply permissions to" -msgstr "" - -msgid "comma-separated list of privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI" -msgstr "" - -msgid "comma-separated list of privileges to remove" -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" -"xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "comma-separated list of roles to add" -msgstr "" - -msgid "comma-separated list of permissions" -msgstr "" - -msgid "comma-separated list of roles to remove" -msgstr "" - -msgid "comma-separated list of privileges" -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add telephoneNumber to the list:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service" -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "comma-separated list of sudo commands to add" -msgstr "" - -msgid "comma-separated list of sudo commands to remove" -msgstr "" - -msgid "Active directory domain administrator's password" -msgstr "" - msgid "" "\n" "ID ranges\n" @@ -11729,6 +11257,312 @@ msgid "" " " msgstr "" +msgid "" +"Comma-separated list of objectclasses used to search for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Comma-separated list of attributes to be ignored for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of attributes to be ignored for group entries in DS" +msgstr "" + +msgid "comma-separated list of groups to exclude from migration" +msgstr "" + +msgid "comma-separated list of users to exclude from migration" +msgstr "" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +msgid "comma-separated list of netgroups to add" +msgstr "" + +msgid "comma-separated list of netgroups to remove" +msgstr "" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable form of a 389-ds Access Control Rule, or instruction " +"(ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add or delete.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Read permission is granted for most attributes by default so the read\n" +"permission is not expected to be used very often.\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. type: a type of object (user, group, etc).\n" +"2. memberof: a member of a group or hostgroup\n" +"3. filter: an LDAP filter\n" +"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" +" super-set of the \"type\" target.\n" +"5. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write, add, delete, all)" +msgstr "" + +msgid "" +"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" +msgstr "" + +msgid "Target members of a group" +msgstr "" + +msgid "User group to apply permissions to" +msgstr "" + +msgid "comma-separated list of privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI" +msgstr "" + +msgid "Permission type" +msgstr "Tipo de permissão" + +msgid "comma-separated list of privileges to remove" +msgstr "" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" +"xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "comma-separated list of roles to add" +msgstr "" + +msgid "comma-separated list of permissions" +msgstr "" + +msgid "comma-separated list of roles to remove" +msgstr "" + +msgid "comma-separated list of privileges" +msgstr "" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add telephoneNumber to the list:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +"admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "comma-separated list of sudo commands to add" +msgstr "" + +msgid "comma-separated list of sudo commands to remove" +msgstr "" + msgid "" "\n" "Sudo Rules\n" @@ -11770,11 +11604,11 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" -msgid "A dictionary representing an LDAP entry" +msgid "Active directory domain administrator's password" msgstr "" -msgid "All commands should at least have a result" -msgstr "" +msgid "GECOS field" +msgstr "campo GECOS" #, python-format msgid "Enter %(label)s again to verify: " @@ -11787,9 +11621,24 @@ msgstr "As palavras-passe não correspondem" msgid "No matching entries found" msgstr "" +msgid "Topic or Command" +msgstr "Tópico ou Comando" + +msgid "The topic or command name." +msgstr "O nome do tópico ou do comando" + +msgid "Topic commands:" +msgstr "Comandos do tópico:" + +msgid "To get command help, use:" +msgstr "Para obter ajuda do comando, utilize:" + msgid " ipa --help" msgstr "" +msgid "Command name" +msgstr "Nome do comando" + msgid "Positional arguments" msgstr "" @@ -11804,101 +11653,372 @@ msgid "No file to read" msgstr "" #, python-format -msgid "%(filename)s: file not found" -msgstr "" - -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "" - -msgid "empty DNS label" -msgstr "" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "" - -msgid "cannot be longer that {} characters" -msgstr "" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "" - -msgid "invalid hostmask" -msgstr "" +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +msgstr "Cliente %(cver)s incompatível com servidor %(sver)s no '%(server)s'" #, fuzzy, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "erro no servidor '%(server)s': %(error)s" + +msgid "an internal error has occurred" +msgstr "ocorreu um erro interno " + +#, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "ocorreu um erro interno no servidor em '%(server)s'" + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "comando desconhecido '%(name)s'" + +#, python-format +msgid "error on server '%(server)s': %(error)s" msgstr "erro no servidor '%(server)s': %(error)s" #, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "não é possível ligar a '%(uri)s': %(error)s" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "Pedido JSON-RPC inválido: %(error)s" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" msgstr "" +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "Referenciador HTTP ausente ou inválido,%(referer)s" + #, python-format msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." msgstr "" #, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Erro Kerberos: %(major)s/%(minor)s" -msgid "invalid escape code in domain name" -msgstr "" - -msgid "domain name cannot be longer than 255 characters" -msgstr "" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "" - -msgid "invalid domain name" +msgid "did not receive Kerberos credentials" msgstr "" #, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgid "Service '%(service)s' not found in Kerberos database" msgstr "" -#, fuzzy, python-format -msgid "invalid domain-name: %s" +msgid "No credentials cache found" +msgstr "" + +msgid "Ticket expired" +msgstr "Pedido expirado" + +msgid "Credentials cache permissions incorrect" +msgstr "" + +msgid "Bad format in credentials cache" +msgstr "" + +msgid "Cannot resolve KDC for requested realm" +msgstr "" + +msgid "Session error" +msgstr "Erro de sessão" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "Acesso insuficiente: %(info)s" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "" + +#, python-format +msgid "'%(name)s' is required" +msgstr "'%(name)s' é obrigatório" + +#, python-format +msgid "invalid '%(name)s': %(error)s" msgstr "'%(name)s' inválido: %(error)s" #, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgid "api has no such namespace: '%(name)s'" msgstr "" -msgid "invalid IP address format" +msgid "Passwords do not match" +msgstr "As palavras-passe não correspondem" + +msgid "Command not implemented" +msgstr "Comando não implementado" + +msgid "Client is not configured. Run ipa-client-install." msgstr "" #, python-format -msgid "%(port)s is not a valid port" +msgid "Could not get %(name)s interactively" +msgstr "" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "" + +#, python-format +msgid "%(reason)s" +msgstr "%(reason)s" + +msgid "This entry already exists" +msgstr "Esta entrada já existe" + +msgid "You must enroll a host in order to create a host service" +msgstr "" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" msgstr "" msgid "" -"at least one value equal to the canonical principal name must be present" +"The realm for the principal does not match the realm for this IPA server" msgstr "" -msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgid "This command requires root access" +msgstr "Este comando requer acesso \"root\"" + +#, fuzzy +msgid "This is already a posix group" +msgstr "Esta entrada já é um membro" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "" + +msgid "This entry is already enabled" +msgstr "Esta entrada já está ativada" + +msgid "This entry is already disabled" +msgstr "Esta entrada já está desativada" + +msgid "This entry cannot be enabled or disabled" +msgstr "Esta entrada não pode estar ativada ou desativada" + +msgid "This entry is not a member" +msgstr "Esta entrada não é um membro" + +msgid "A group may not be a member of itself" +msgstr "" + +msgid "This entry is already a member" +msgstr "Esta entrada já é um membro" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "" + +msgid "A group may not be added as a member of itself" +msgstr "" + +msgid "The default users group cannot be removed" +msgstr "" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" + +msgid "A managed group cannot have a password policy." +msgstr "" + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "" + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "" + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" + +#, fuzzy +msgid "This group already allows external members" +msgstr "Esta entrada já é um membro" + +msgid "This group cannot be posix because it is external" +msgstr "" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "" + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" + +#, python-format +msgid "'%(attr)s' already contains one or more values" +msgstr "" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "" + +msgid "change collided with another change" +msgstr "" + +msgid "no modifications to be performed" +msgstr "" + +#, fuzzy, python-format +msgid "%(desc)s: %(info)s" +msgstr "%(info)s" + +msgid "limits exceeded for this query" +msgstr "" + +#, python-format +msgid "%(info)s" +msgstr "%(info)s" + +#, fuzzy +msgid "modifying primary key is not allowed" +msgstr "não são pertimidas opções" + +#, fuzzy, python-format +msgid "%(attr)s: Only one value allowed." +msgstr "Só é permitido um valor" + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "" + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "" + +msgid "Not allowed on non-leaf entry" +msgstr "" + +msgid "LDAP timeout" +msgstr "" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "" + +msgid "Configured time limit exceeded" +msgstr "" + +msgid "Configured size limit exceeded" +msgstr "" + +msgid "Configured administrative server limit exceeded" +msgstr "" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "" + +msgid "Already registered" +msgstr "Já registado" + +msgid "Not registered yet" +msgstr "Ainda não registado" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "" + +#, python-format +msgid "%(exception)s" +msgstr "%(exception)s" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" + +msgid "Results are truncated, try a more specific search" +msgstr "" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "" + +msgid "Client version. Used to determine if server will accept request." msgstr "" msgid "Additional instructions:" @@ -11994,6 +12114,10 @@ msgstr "" msgid "'%(command)s' is deprecated. %(additional_info)s" msgstr "" +#, python-format +msgid "%(line)s" +msgstr "%(line)s" + #, python-format msgid "Search result has been truncated: %(reason)s" msgstr "" @@ -12054,273 +12178,31 @@ msgstr "" msgid "The certificate for %(ca)s is not available on this server." msgstr "" -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." -msgstr "" - -#, fuzzy, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "erro no servidor '%(server)s': %(error)s" - #, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" +msgid "%(count)d variables" msgstr "" #, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" - -msgid "did not receive Kerberos credentials" -msgstr "" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "" - -msgid "No credentials cache found" -msgstr "" - -msgid "Credentials cache permissions incorrect" -msgstr "" - -msgid "Bad format in credentials cache" -msgstr "" - -msgid "Cannot resolve KDC for requested realm" -msgstr "" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" msgstr[0] "" msgstr[1] "" -#, python-format -msgid "overlapping arguments and options: %(names)s" +msgid "A dictionary representing an LDAP entry" msgstr "" -#, python-format -msgid "api has no such namespace: '%(name)s'" +msgid "A list of LDAP entries" +msgstr "Uma lista de entradas LDAP" + +msgid "All commands should at least have a result" msgstr "" -msgid "Client is not configured. Run ipa-client-install." -msgstr "" +msgid "incorrect type" +msgstr "tipo incorreto" -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" - -msgid "You must enroll a host in order to create a host service" -msgstr "" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "" - -#, fuzzy -msgid "This is already a posix group" -msgstr "Esta entrada já é um membro" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "" - -msgid "A group may not be a member of itself" -msgstr "" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "" - -msgid "A group may not be added as a member of itself" -msgstr "" - -msgid "The default users group cannot be removed" -msgstr "" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" - -msgid "A managed group cannot have a password policy." -msgstr "" - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" - -#, fuzzy -msgid "This group already allows external members" -msgstr "Esta entrada já é um membro" - -msgid "This group cannot be posix because it is external" -msgstr "" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" - -#, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "" - -msgid "change collided with another change" -msgstr "" - -msgid "no modifications to be performed" -msgstr "" - -#, fuzzy, python-format -msgid "%(desc)s: %(info)s" -msgstr "%(info)s" - -msgid "limits exceeded for this query" -msgstr "" - -#, fuzzy -msgid "modifying primary key is not allowed" -msgstr "não são pertimidas opções" - -#, fuzzy, python-format -msgid "%(attr)s: Only one value allowed." +msgid "Only one value is allowed" msgstr "Só é permitido um valor" -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "" - -msgid "Not allowed on non-leaf entry" -msgstr "" - -msgid "LDAP timeout" -msgstr "" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" - -msgid "Configured time limit exceeded" -msgstr "" - -msgid "Configured size limit exceeded" -msgstr "" - -msgid "Configured administrative server limit exceeded" -msgstr "" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" - msgid "this option is deprecated" msgstr "" @@ -12447,27 +12329,116 @@ msgid "Service principal is required" msgstr "" #, python-format -msgid "%(count)d variables" +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +msgid "any of the configured servers" +msgstr "" + +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" +msgstr "O nome de ficheiro está em branco" + +#, python-format +msgid "Permission denied: %(file)s" +msgstr "" + +msgid "empty DNS label" +msgstr "" + +msgid "DNS label cannot be longer that 63 characters" msgstr "" #, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "" -msgstr[1] "" +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" -msgid "Results are truncated, try a more specific search" +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "" + +msgid "cannot be longer that {} characters" +msgstr "" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "" + +msgid "invalid SSH public key" +msgstr "chave SSh pública inválida" + +msgid "options are not allowed" +msgstr "não são pertimidas opções" + +msgid "invalid hostmask" +msgstr "" + +#, fuzzy, python-format +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "erro no servidor '%(server)s': %(error)s" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" msgstr "" #, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -msgid "Client version. Used to determine if server will accept request." +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" msgstr "" #, python-format -msgid "objectclass %s not found" +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +msgid "invalid escape code in domain name" +msgstr "" + +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +msgid "invalid domain name" +msgstr "" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" + +#, fuzzy, python-format +msgid "invalid domain-name: %s" +msgstr "'%(name)s' inválido: %(error)s" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +msgid "invalid IP address format" +msgstr "" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" #, python-format @@ -12486,950 +12457,1278 @@ msgstr "" msgid "Retrieving CA status failed with status %d" msgstr "" +#, python-format +msgid "objectclass %s not found" +msgstr "" + +msgid "Trusting forest" +msgstr "" + +#, fuzzy +msgid "Trusted forest" +msgstr "Interligações" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +msgid "Unknown" +msgstr "" + +msgid "Non-Active Directory domain" +msgstr "" + +msgid "Active Directory domain" +msgstr "" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "" +msgid "Failed to authenticate to CA REST API" +msgstr "" + #, python-format msgid "Replication agreement for %(hostname)s not found" msgstr "" -msgid "Failed to authenticate to CA REST API" +#, fuzzy +msgid "A list of ACI values" +msgstr "Uma lista de entradas LDAP" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" msgstr "" -msgid "One time password commands" -msgstr "" - -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" +msgid "ACI prefix is required" msgstr "" msgid "" -"\n" -"IPA server roles\n" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" msgstr "" -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgid "filter and memberof are mutually exclusive" msgstr "" -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" +msgid "group, permission and self are mutually exclusive" msgstr "" -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" - -msgid "server roles" -msgstr "" - -msgid "IPA Server Roles" -msgstr "" - -msgid "IPA Server Role" -msgstr "" - -msgid "IPA server role name" -msgstr "" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" +msgid "One of group, permission or self is required" msgstr "" #, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" +msgid "Group '%s' does not exist" +msgstr "" + +msgid "empty filter" +msgstr "" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "" + +msgid "ACI" +msgstr "" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" msgstr[0] "" msgstr[1] "" -msgid "Include IPA master entries" +#, python-format +msgid "Renamed ACI to \"%(value)s\"" msgstr "" -msgid "roles" +msgid "" +"\n" +"Auto Membership Rule.\n" msgstr "" -msgid "IPA role name" +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" msgstr "" -msgid "Class of Service object used for linking policies with groups" +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" msgstr "" #, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgid "%(otype)s \"%(oname)s\" not found" msgstr "" -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" +#, python-format +msgid "%s is not a valid attribute." msgstr "" #, fuzzy -msgid "password policies" -msgstr "política de palavra-passe" - -#, fuzzy -msgid "Password Policies" -msgstr "Política de Palavra-passe" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" +"\n" +" Add an automember rule.\n" +" " +msgstr "" +"\n" +" Exibir informação acerca de uma regra de membro automática.\n" +" " + +#, python-format +msgid "Added automember rule \"%(value)s\"" msgstr "" -msgid "Maximum password life must be greater than minimum." +msgid "Auto Membership is not configured" msgstr "" #, fuzzy -msgid "cannot delete global password policy" -msgstr "Adicionar política de palavra-passe" +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" +"\n" +" Exibir informação acerca de uma regra de membro automática.\n" +" " -msgid "priority cannot be set on global policy" +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Auto member rule: %s not found!" msgstr "" msgid "" "\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " msgstr "" -msgid "Realm domains" +#, fuzzy +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " msgstr "" +"\n" +" Exibir informação acerca de uma regra de membro automática.\n" +" " -msgid "Realm Domains" +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" msgstr "" msgid "" "\n" -" Modify realm domains\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +#, fuzzy +msgid "" "\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" +" Modify an automember rule.\n" +" " +msgstr "" "\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" +" Exibir informação acerca de uma regra de membro automática.\n" +" " + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" +"\n" +" Exibir informação acerca de uma regra de membro automática.\n" +" " + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" +"\n" +" Exibir informação acerca de uma regra de membro automática.\n" +" " + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" +"\n" +" Exibir informação acerca de uma regra de membro automática.\n" +" " + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" " " msgstr "" #, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " msgstr "" #, python-format -msgid "The following domains do not belong to this realm: %(domains)s" +msgid "Removed default (fallback) group for automember \"%(value)s\"" msgstr "" -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -msgid "Help topic" -msgstr "" - -msgid "Version" -msgstr "" - -msgid "Parameters" -msgstr "" - -msgid "Method of" +msgid "No default (fallback) group set" msgstr "" #, fuzzy -msgid "Method name" -msgstr "Nome do comando" +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" +"\n" +" Exibir informação acerca de uma regra de membro automática.\n" +" " + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "automount location" +msgstr "" + +msgid "automount locations" +msgstr "" + +msgid "Automount Locations" +msgstr "" + +msgid "Automount Location" +msgstr "" + +#, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "automount map" +msgstr "" + +msgid "automount maps" +msgstr "" + +msgid "Automount Maps" +msgstr "" + +msgid "Automount Map" +msgstr "" + +#, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Automount key object." +msgstr "" + +msgid "automount key" +msgstr "" + +msgid "automount keys" +msgstr "" + +msgid "Automount Keys" +msgstr "" + +msgid "Automount Key" +msgstr "" + +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" + +#, fuzzy, python-format +msgid "key named %(key)s already exists" +msgstr "Esta entrada já existe" + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "" + +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" + +#, python-format +msgid "Added automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added automount indirect map \"%(value)s\"" +msgstr "" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Member service groups" +msgstr "" + +msgid "Member HBAC service groups" +msgstr "" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +#, fuzzy +msgid "An IPA master host cannot be deleted or disabled" +msgstr "Esta entrada não pode estar ativada ou desativada" + +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" +msgstr "" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "" #, python-format msgid "%(pkey)s: %(oname)s not found" msgstr "" -#, fuzzy -msgid "Display information about a command." -msgstr "Exibir informação acerca de um utilizador." - -#, fuzzy -msgid "Search for commands." -msgstr "Pesquisar por interligações." - -msgid "Return command defaults" +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" msgstr "" -#, fuzzy -msgid "Display information about a class." -msgstr "Exibir informação acerca de um utilizador." +#, fuzzy, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "não são pertimidas opções" -#, fuzzy -msgid "Search for classes." -msgstr "Pesquisar por interligações." - -#, fuzzy -msgid "Display information about a help topic." -msgstr "Exibir informação acerca de uma delegação." - -#, fuzzy -msgid "Search for help topics." -msgstr "Pesquisar por interligações." - -msgid "Required" +#, python-format +msgid "these attributes are not allowed: %(attrs)s" msgstr "" -msgid "Multi-value" +msgid "attribute is not configurable" msgstr "" -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -msgid "CLI name" -msgstr "Nome do comando" - -msgid "Confirm (password)" -msgstr "" - -msgid "Default" -msgstr "" - -msgid "Default from" -msgstr "" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" +msgid "No such attribute on this entry" msgstr "" #, python-format -msgid "%(metaobject)s: %(oname)s not found" +msgid "Rename the %(ldap_obj_name)s object" msgstr "" -#, fuzzy -msgid "Display information about a command parameter." -msgstr "Exibir informação acerca de um grupo nomeado." - -msgid "Search command parameters." +msgid "the entry was deleted while being modified" msgstr "" #, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -#, fuzzy -msgid "Display information about a command output." -msgstr "Exibir informação acerca de um grupo nomeado." - -#, fuzzy -msgid "Search for command outputs." -msgstr "Pesquisar por interligações." - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" -msgstr "" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." +msgid "%s" msgstr "" #, python-format msgid "member %s" msgstr "" -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" +#, python-format +msgid "%s to add" msgstr "" #, python-format -msgid "Added service delegation rule \"%(value)s\"" +msgid "%s to remove" msgstr "" #, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation rule" +msgid "Results should contain primary key attribute only (\"%s\")" msgstr "" #, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" msgstr "" msgid "" "\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" msgstr "" msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -msgid "Malformed principal" -msgstr "" - -msgid "{} is required by the IPA master" -msgstr "" - -msgid "service" -msgstr "" - -msgid "services" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." msgstr "" msgid "Principal alias" msgstr "" -msgid "Service principal alias" +msgid "User password expiration" msgstr "" -msgid "Base-64 encoded service certificate" +msgid "SSH public key fingerprint" msgstr "" -msgid "Subject" +msgid "Base-64 encoded user certificate" msgstr "" -msgid "Serial Number" +msgid "Certificate mapping data" msgstr "" -msgid "Serial Number (hex)" +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +#, python-format +msgid "can be at most %(len)d characters" msgstr "" msgid "Issuer" msgstr "" -msgid "Not Before" +msgid "Issuer of the certificate" msgstr "" -msgid "Not After" +msgid "Subject" msgstr "" -msgid "Fingerprint (SHA1)" +msgid "Subject of the certificate" msgstr "" -msgid "Fingerprint (SHA256)" +msgid "cannot have an empty subject" msgstr "" -msgid "Revocation reason" +msgid "cannot specify both subject/issuer and certificate" msgstr "" -msgid "Authentication Indicators" +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" msgstr "" msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" msgstr "" -msgid "NONE value cannot be combined with other PAC types" +msgid "Make multiple ipa calls via one remote procedure call" msgstr "" -msgid "Add a new IPA service." -msgstr "" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "" - -msgid "force principal name even if host not in DNS" -msgstr "" - -msgid "Skip host check" +msgid "must contain a tuple (list, dict)" msgstr "" msgid "" -"force service to be created even when host object does not exist to manage it" +"\n" +"Manage Certificate Authorities\n" +msgstr "" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +msgid "Certificate Authority" +msgstr "" + +msgid "Certificate Authorities" +msgstr "" + +msgid "Name" +msgstr "" + +msgid "Name for referencing the CA" +msgstr "" + +msgid "Description of the purpose of the CA" +msgstr "" + +msgid "Authority ID" +msgstr "" + +msgid "Dogtag Authority ID" +msgstr "" + +msgid "Subject DN" +msgstr "" + +msgid "Subject Distinguished Name" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Issuer Distinguished Name" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +msgid "Certificate chain" +msgstr "" + +msgid "X.509 certificate chain" +msgstr "" + +#, fuzzy +msgid "Search for CAs." +msgstr "Pesquisar por interligações." + +#, python-format +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include certificate chain in output" +msgstr "" + +msgid "Display the properties of a CA." +msgstr "" + +msgid "Create a CA." msgstr "" #, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "" - -msgid "Add a new SMB service." -msgstr "" - -msgid "SMB service NetBIOS name" +msgid "Created CA \"%(value)s\"" msgstr "" #, python-format -msgid "Deleted service \"%(value)s\"" +msgid "Insufficient 'add' privilege for entry '%s'." msgstr "" #, python-format -msgid "Modified service \"%(value)s\"" +msgid "Unrecognized attributes: %(attrs)s" msgstr "" #, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" +msgid "Subject DN is already used by CA '%s'" +msgstr "" + +msgid "Delete a CA (must be disabled first)." +msgstr "" + +#, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "" + +msgid "Insufficient privilege to delete a CA." +msgstr "" + +msgid "CA" +msgstr "" + +msgid "IPA CA cannot be deleted" +msgstr "" + +msgid "Must be disabled first" +msgstr "" + +msgid "Modify CA configuration." +msgstr "" + +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "" + +msgid "Insufficient privilege to modify a CA." +msgstr "" + +msgid "Disable a CA." +msgstr "" + +#, python-format +msgid "Disabled CA \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "IPA CA cannot be disabled" +msgstr "Esta entrada não pode estar ativada ou desativada" + +msgid "Enable a CA." +msgstr "" + +#, python-format +msgid "Enabled CA \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "" + +msgid "CA ACLs" +msgstr "" + +msgid "CA category" +msgstr "" + +msgid "CA category the ACL applies to" +msgstr "" + +msgid "CAs" +msgstr "" + +#, python-format +msgid "Added CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "" + +msgid "default CA ACL can be only disabled" +msgstr "" + +#, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" + +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" msgstr[0] "" msgstr[1] "" #, python-format -msgid "Disabled service \"%(value)s\"" +msgid "Enabled CA ACL \"%(value)s\"" msgstr "" #, python-format -msgid "Added certificates to service principal \"%(value)s\"" +msgid "Disabled CA ACL \"%(value)s\"" msgstr "" #, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to a service" +msgid "%i user or group added." msgstr "" #, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a service" -msgstr "" - -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" -msgstr "" - -#, fuzzy -msgid "command" -msgstr "Comandos do tópico:" - -#, fuzzy -msgid "commands" -msgstr "Comandos do tópico:" - -msgid "runAs user" -msgstr "" - -msgid "runAs users" -msgstr "" - -msgid "group runAs" -msgstr "" - -msgid "runAs groups" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "commands cannot be added when command category='all'" +msgid "%i users or groups added." msgstr "" msgid "users cannot be added when user category='all'" msgstr "" +#, python-format +msgid "%i user or group removed." +msgstr "" + +#, python-format +msgid "%i users or groups removed." +msgstr "" + +#, python-format +msgid "%i host or hostgroup added." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "" + msgid "hosts cannot be added when host category='all'" msgstr "" -msgid "users cannot be added when runAs user or runAs group category='all'" +#, python-format +msgid "%i host or hostgroup removed." msgstr "" #, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" +msgid "%i hosts or hostgroups removed." msgstr "" #, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" +msgid "%i service added." msgstr "" #, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgid "%i services added." +msgstr "" + +msgid "services cannot be added when service category='all'" +msgstr "" + +#, python-format +msgid "%i service removed." +msgstr "" + +#, python-format +msgid "%i services removed." +msgstr "" + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, python-format +msgid "%i profiles removed." +msgstr "" + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." msgstr "" msgid "pyhbac is not installed." @@ -13645,15 +13944,6 @@ msgstr "" msgid "Name of issuing CA" msgstr "" -msgid "Base-64 encoded certificate." -msgstr "" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - msgid "Subject email address" msgstr "" @@ -13687,7 +13977,16 @@ msgstr "" msgid "Subject Other Name" msgstr "" -msgid "Issuer DN" +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" msgstr "" msgid "Serial number (hex)" @@ -13696,9 +13995,6 @@ msgstr "" msgid "Request status" msgstr "" -msgid "Include certificate chain in output" -msgstr "" - msgid "" "automatically add the principal if it doesn't exist (service principals only)" msgstr "" @@ -13792,6 +14088,9 @@ msgstr "" msgid "Revoked" msgstr "" +msgid "Revocation reason" +msgstr "" + msgid "" "Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " "revocation reason details. " @@ -13809,6 +14108,10 @@ msgstr "" msgid "7 is not a valid revocation reason" msgstr "" +#, fuzzy +msgid "Status of the certificate" +msgstr "Pesquisar por interligações." + msgid "Results should contain primary key attribute only (\"certificate\")" msgstr "" @@ -14040,7 +14343,110 @@ msgid_plural "%(count)s users matched" msgstr[0] "" msgstr[1] "" -msgid "Base-64 encoded user certificate" +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +msgid "Certificate Profile" +msgstr "" + +msgid "Certificate Profiles" +msgstr "" + +msgid "Profile configuration" +msgstr "" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." msgstr "" msgid "" @@ -14113,6 +14519,9 @@ msgstr "" msgid "Maximum hostname length" msgstr "" +msgid "Enable adding subids to new users" +msgstr "" + msgid "IPA masters" msgstr "" @@ -14185,6 +14594,21 @@ msgstr "" msgid "DNSec key master" msgstr "" +msgid "Setup SID configuration" +msgstr "" + +msgid "New users and groups automatically get a SID assigned" +msgstr "" + +msgid "Add SIDs" +msgstr "" + +msgid "Add SIDs for existing users and groups" +msgstr "" + +msgid "NetBIOS name of the IPA domain" +msgstr "" + #, fuzzy msgid "Empty domain is not allowed" msgstr "não são pertimidas opções" @@ -14201,6 +14625,20 @@ msgstr "" msgid "Disabled domain '%(domain)s' is not allowed" msgstr "" +msgid "not allowed to enable SID generation" +msgstr "" + +msgid "" +"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " +"allowed. Empty string is not allowed." +msgstr "" + +msgid "Failed to call DBus" +msgstr "" + +msgid "Configuration of SID failed. See details in the error log" +msgstr "" + msgid "The group doesn't exist" msgstr "" @@ -14225,55 +14663,1615 @@ msgstr "erro no servidor '%(server)s': %(error)s" msgid "SELinux user map default user not in order list" msgstr "" +#, python-format +msgid "You cannot specify %s without the --enable-sid option" +msgstr "" + +msgid "delegation" +msgstr "" + +msgid "delegations" +msgstr "" + +msgid "Delegations" +msgstr "" + +msgid "Delegation" +msgstr "" + +#, python-format +msgid "Added delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "" +msgstr[1] "" + msgid "" "\n" -"Groups of Sudo Commands\n" +"Domain Name System (DNS)\n" +msgstr "" + +msgid "" "\n" -"Manage groups of Sudo Commands.\n" +"Manage DNS zone and resource records.\n" +msgstr "" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" + +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "invalid IP network format" +msgstr "" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "" + +msgid "invalid address format" +msgstr "" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" + +msgid "algorithm value: allowed interval 0-255" +msgstr "" + +msgid "flags value: allowed interval 0-255" +msgstr "" + +msgid "iterations value: allowed interval 0-65535" +msgstr "" + +#, python-format +msgid "salt value: %(err)s" +msgstr "" + +msgid "invalid domain-name: not fully qualified" +msgstr "" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" + +#, python-format +msgid "" +"No answers could be found in the specified lifetime for DNS reverse zone " +"%(revdns)s" +msgstr "" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" + +#, python-format +msgid "%s record" +msgstr "" + +#, python-format +msgid "Raw %s records" +msgstr "" + +#, python-format +msgid "%s Record" +msgstr "" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "" + +msgid "Invalid number of parts!" +msgstr "" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "" + +msgid "Create reverse" +msgstr "" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "" + +msgid "Exchanger" +msgstr "" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" + +msgid "Priority (order)" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Relative weight for entries with the same priority." +msgstr "" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Target Uniform Resource Identifier" +msgstr "" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "" + +msgid "Managedby permission" +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "cannot be used when a zone is specified" +msgstr "" + +#, fuzzy +msgid "Only one zone type is allowed per zone name" +msgstr "Só é permitido um valor" + +#, python-format +msgid "Added system permission \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +msgid "permission \"%(value)s\" already exists" +msgstr "Esta entrada já existe" + +#, python-format +msgid "Removed system permission \"%(value)s\"" +msgstr "" + +msgid "DNS zone" +msgstr "" + +msgid "DNS zones" +msgstr "" + +msgid "DNS Zones" +msgstr "" + +msgid "DNS Zone" +msgstr "" + +msgid "Default time to live" +msgstr "" + +msgid "Time to live for records without explicit TTL definition" +msgstr "" + +msgid "setting Authoritative nameserver" +msgstr "" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "" + +msgid "" +msgstr "" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" + +#, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "is required" +msgstr "'%(name)s' é obrigatório" + +#, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "" + +msgid "DNS resource record" +msgstr "" + +msgid "DNS resource records" +msgstr "" + +msgid "DNS Resource Records" +msgstr "" + +msgid "DNS Resource Record" +msgstr "" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" + +msgid "only master zones can contain records" +msgstr "" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" + +msgid "DNS zone root record cannot be renamed" +msgstr "" + +msgid "DNS records can be only updated one at a time" +msgstr "" + +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Found '%(value)s'" +msgstr "" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "" + +msgid "DNS configuration options" +msgstr "" + +msgid "DNS Global Configuration" +msgstr "" + +msgid "IPA DNS version" +msgstr "" + +msgid "List of IPA masters configured as DNS servers" +msgstr "" + +msgid "IPA server configured as DNSSec key master" +msgstr "" + +msgid "Global DNS configuration is empty" +msgstr "" + +msgid "DNS forward zone" +msgstr "" + +msgid "DNS forward zones" +msgstr "" + +msgid "DNS Forward Zones" +msgstr "" + +#, fuzzy +msgid "DNS Forward Zone" +msgstr "Política de reencaminhamento" + +msgid "Please specify forwarders." +msgstr "" + +#, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "" + +msgid "IPA DNS records" +msgstr "" + +msgid "IPA location records" +msgstr "" + +msgid "Update location and IPA server DNS records" +msgstr "" + +msgid "Result of the command" +msgstr "" + +msgid "Dry run" +msgstr "" + +msgid "Do not update records only return expected records" +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +msgid "DNS Servers" +msgstr "" + +msgid "DNS Server" +msgstr "" + +msgid "DNS Server name" +msgstr "" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "Search for DNS servers." +msgstr "Pesquisar por interligações." + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +#, fuzzy +msgid "Display configuration of a DNS server." +msgstr "Exibir informação acerca do servidor proxy RADIUS." + +msgid "Add a new DNS server." +msgstr "" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "" + +msgid "Delete a DNS server" +msgstr "" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" "\n" "EXAMPLES:\n" "\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" "\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" "\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" "\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" "\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" msgstr "" -msgid "sudo command group" +msgid "groups" msgstr "" -msgid "sudo command groups" +msgid "User Group" msgstr "" #, python-format -msgid "Added Sudo Command Group \"%(value)s\"" +msgid "Added group \"%(value)s\"" +msgstr "" + +msgid "gid cannot be set for external group" +msgstr "" + +msgid "attribute \"gidNumber\" not allowed with --nonposix" msgstr "" #, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" +msgid "Deleted group \"%(value)s\"" +msgstr "" + +msgid "privileged group" msgstr "" #, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" +msgid "Modified group \"%(value)s\"" msgstr "" #, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" msgstr[0] "" msgstr[1] "" +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" +msgstr "" + +msgid "HBAC Services" +msgstr "" + +msgid "HBAC Service Groups" +msgstr "" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "" + +msgid "Access time" +msgstr "" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "" + +msgid "HBAC Service" +msgstr "" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC service group" +msgstr "" + +msgid "HBAC service groups" +msgstr "" + +msgid "HBAC Service Group" +msgstr "" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Access granted: %s" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host" +msgstr "" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Serial Number" +msgstr "" + +msgid "Serial Number (hex)" +msgstr "" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + msgid "" "\n" "Groups of hosts.\n" @@ -14353,295 +16351,503 @@ msgstr "" msgid "Remove users that can manage members of this hostgroup." msgstr "" -#, python-format msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" msgstr "" msgid "" "\n" -"Set a user's password\n" +"ID ranges\n" "\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" "\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" +"There are two type of ID ranges which are both handled by this utility:\n" "\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" "\n" -"EXAMPLES:\n" +"Both types have the following attributes in common:\n" "\n" -" To reset your own password:\n" -" ipa passwd\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" "\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"and an ID range of a trusted domain may set\n" +" - auto-private-groups: [true|false|hybrid] automatic creation of private " +"groups\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" "\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" msgstr "" -msgid "The OTP if the user has a token configured" +msgid "ID Ranges" msgstr "" -#, python-format -msgid "Changed password for \"%(value)s\"" +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" msgstr "" #, fuzzy -msgid "" -"\n" -"Permissions\n" -msgstr "Tipo de permissão" +msgid "Auto private groups" +msgstr "Pesquisar por interligações." + +msgid "Auto creation of private groups, one of allowed values" +msgstr "" msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" msgstr "" msgid "" "\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" +" Add new ID range.\n" "\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" +" To add a new ID range you always have to specify\n" "\n" -"A permission is made up of a number of different parts:\n" +" --base-id\n" +" --range-size\n" "\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" +" Additionally\n" "\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" +" --rid-base\n" +" --secondary-rid-base\n" "\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" +" may be given for a new ID range for the local domain while\n" "\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" +" --auto-private-groups\n" "\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -msgid "" +" may be given for a new ID range for a trusted AD domain and\n" "\n" -"Managed permissions\n" -msgstr "" - -msgid "" +" --rid-base\n" +" --dom-sid\n" "\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" +" must be given to add a new range for a trusted AD domain.\n" "\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" +msgstr "" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" msgstr "" msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" msgstr "" msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" msgstr "" -msgid "must be enclosed in parentheses" -msgstr "" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -#, python-format -msgid "Deprecated; use %s" -msgstr "" - -msgid "ACI" -msgstr "" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, python-format -msgid "Entry %s not found" -msgstr "" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" msgstr "" msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, python-format -msgid "%s: group not found" -msgstr "" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" -msgstr "" - -msgid "Bad search filter" -msgstr "" - -#, python-format -msgid "Entry %s does not exist" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." msgstr "" msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" +"private-groups is specified" +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." msgstr "" #, python-format -msgid "Added permission \"%(value)s\"" -msgstr "" - -msgid "attrs and included attributes are mutually exclusive" +msgid "Deleted ID range \"%(value)s\"" msgstr "" #, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "" - -msgid "cannot delete managed permissions" -msgstr "" - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "" - -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" msgstr[0] "" msgstr[1] "" -#, python-brace-format -msgid "{role}: role not found" +msgid "" +"Modify ID range.\n" +"\n" msgstr "" -#, python-brace-format -msgid "{attr}: no such attribute" +#, python-format +msgid "Modified ID range \"%(value)s\"" msgstr "" msgid "" -"\n" -"Session Support for IPA\n" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" msgstr "" +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +msgid "ID View" +msgstr "" + +msgid "system ID View" +msgstr "" + +msgid "ID Views" +msgstr "" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +msgid "Hosts the view applies to" +msgstr "" + +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "" + +msgid "Delete an ID override." +msgstr "" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "" + +msgid "Modify an ID override." +msgstr "" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +msgid "Display information about an ID override." +msgstr "Exibir informação acerca de um utilizador." + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + msgid "Internationalization messages" msgstr "" @@ -14657,9 +16863,6 @@ msgstr "" msgid "Are you sure you want to rebuild auto membership?" msgstr "" -msgid "Automember rebuild membership task completed" -msgstr "" - msgid "Are you sure you want to proceed with the action?" msgstr "" @@ -14896,6 +17099,9 @@ msgstr "" msgid "General" msgstr "" +msgid "Identity Settings" +msgstr "Configurações de Identidade" + #, fuzzy msgid "Record Settings" msgstr "Configurações de Identidade" @@ -15560,9 +17766,6 @@ msgstr "" msgid "Affiliation Changed" msgstr "" -msgid "CA" -msgstr "" - msgid "CA Compromise" msgstr "" @@ -15773,9 +17976,6 @@ msgstr "" msgid "Add certificate mapping data" msgstr "" -msgid "Certificate mapping data" -msgstr "" - msgid "Configuration string" msgstr "" @@ -15792,6 +17992,9 @@ msgstr "" msgid "Remove certificate identity mapping rules" msgstr "" +msgid "Version" +msgstr "" + msgid "Group Options" msgstr "" @@ -16511,9 +18714,6 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "" -msgid "Host" -msgstr "" - #, fuzzy msgid "Netgroup Settings" msgstr "Configurações de Identidade" @@ -16635,6 +18835,12 @@ msgstr "" msgid "New: key set" msgstr "" +msgid "Add password policy" +msgstr "Adicionar política de palavra-passe" + +msgid "Password Policy" +msgstr "Política de Palavra-passe" + #, fuzzy msgid "Remove password policies" msgstr "política de palavra-passe" @@ -16665,9 +18871,6 @@ msgstr "" msgid "Remove ID ranges" msgstr "Remover interligações" -msgid "Active Directory domain" -msgstr "" - msgid "Active Directory domain with POSIX attributes" msgstr "" @@ -16693,6 +18896,9 @@ msgstr "" msgid "Remove RADIUS servers" msgstr "" +msgid "Realm Domains" +msgstr "" + msgid "Check DNS" msgstr "" @@ -16871,6 +19077,33 @@ msgstr "" msgid "User categories" msgstr "" +msgid "Add subid" +msgstr "" + +msgid "Assigned subids" +msgstr "" + +msgid "DNA remaining" +msgstr "" + +msgid "SubGID range size" +msgstr "" + +msgid "SubGID range start" +msgstr "" + +msgid "SubUID range size" +msgstr "" + +msgid "SubUID range start" +msgstr "" + +msgid "Remaining subids" +msgstr "" + +msgid "Subordinate ID Statistics" +msgstr "" + msgid "Add sudo command" msgstr "" @@ -17095,6 +19328,9 @@ msgstr "" msgid "Pre-shared password" msgstr "" +msgid "Remove trusts" +msgstr "Remover interligações" + msgid "Remove domains" msgstr "" @@ -17160,6 +19396,14 @@ msgstr "" msgid "Add user '${primary_key}' into sudo rules" msgstr "" +msgid "Auto assign subordinate ids" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to auto-assign a subordinate id to user ${object}?" +msgstr "" + #, fuzzy msgid "Contact Settings" msgstr "Configurações de Identidade" @@ -17619,9 +19863,6 @@ msgstr "" msgid "Authentication" msgstr "" -msgid "Automember" -msgstr "" - msgid "Automount" msgstr "" @@ -17631,21 +19872,33 @@ msgstr "" msgid "Host-Based Access Control" msgstr "" +msgid "Identity" +msgstr "Identidade" + msgid "IPA Server" msgstr "" msgid "Network Services" msgstr "" +msgid "Policy" +msgstr "Política" + msgid "Role-Based Access Control" msgstr "" +msgid "Subordinate IDs" +msgstr "" + msgid "Sudo" msgstr "" msgid "Topology" msgstr "" +msgid "Trusts" +msgstr "Interligações" + msgid "True" msgstr "" @@ -17748,318 +20001,10 @@ msgstr "" msgid "Unsupported value" msgstr "" -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -msgid "invalid port number" -msgstr "" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" -msgstr "" - #, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -#, python-brace-format msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Access granted: %s" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." msgstr "" msgid "kerberos ticket policy settings" @@ -18206,6 +20151,9 @@ msgstr "Exibir informação acerca de uma localização IPA" msgid "Deleted IPA location \"%(value)s\"" msgstr "" +msgid "Modify information about an IPA location." +msgstr "Modificar informação acerca de uma localização IPA" + #, python-format msgid "Modified IPA location \"%(value)s\"" msgstr "" @@ -18220,9 +20168,1787 @@ msgid_plural "%(count)d IPA locations matched" msgstr[0] "" msgstr[1] "" +msgid "Display information about an IPA location." +msgstr "Exibir informação acerca de uma localização IPA" + msgid "Servers in location" msgstr "" +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +msgid "netgroups" +msgstr "" + +msgid "Netgroup" +msgstr "" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +msgid "URI" +msgstr "" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "" + +msgid "cannot be empty" +msgstr "" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"If the user authentication method is set to password+OTP, the user should\n" +"pass the --otp option when resetting the password.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To reset your own password when password+OTP is set as authentication " +"method:\n" +" ipa passwd --otp\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +msgid "The OTP if the user has a token configured" +msgstr "" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "" +"\n" +"Permissions\n" +msgstr "Tipo de permissão" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +msgid "" +"\n" +"Managed permissions\n" +msgstr "" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "must be enclosed in parentheses" +msgstr "" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "" + +#, python-format +msgid "Deprecated; use %s" +msgstr "" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, python-format +msgid "Entry %s not found" +msgstr "" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, python-format +msgid "option was renamed; use %s" +msgstr "" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, python-format +msgid "%s: group not found" +msgstr "" + +msgid "target and targetgroup are mutually exclusive" +msgstr "" + +msgid "subtree and type are mutually exclusive" +msgstr "" + +msgid "Bad search filter" +msgstr "" + +#, python-format +msgid "Entry %s does not exist" +msgstr "" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, python-format +msgid "Added permission \"%(value)s\"" +msgstr "" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "" + +msgid "cannot delete managed permissions" +msgstr "" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "" + +#, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +#, fuzzy +msgid "Whether PKINIT is enabled or disabled" +msgstr "Esta entrada não pode estar ativada ou desativada" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +msgid "invalid port number" +msgstr "" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "Role" +msgstr "" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"API Schema\n" +msgstr "" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +msgid "Documentation" +msgstr "" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +msgid "Help topic" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +#, fuzzy +msgid "Method name" +msgstr "Nome do comando" + +#, fuzzy +msgid "Display information about a command." +msgstr "Exibir informação acerca de um utilizador." + +#, fuzzy +msgid "Search for commands." +msgstr "Pesquisar por interligações." + +msgid "Return command defaults" +msgstr "" + +#, python-brace-format +msgid "{oname}: {command_name} not found" +msgstr "" + +#, fuzzy +msgid "Display information about a class." +msgstr "Exibir informação acerca de um utilizador." + +#, fuzzy +msgid "Search for classes." +msgstr "Pesquisar por interligações." + +#, fuzzy +msgid "Display information about a help topic." +msgstr "Exibir informação acerca de uma delegação." + +#, fuzzy +msgid "Search for help topics." +msgstr "Pesquisar por interligações." + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +msgid "CLI name" +msgstr "Nome do comando" + +msgid "Confirm (password)" +msgstr "" + +msgid "Default" +msgstr "" + +msgid "Default from" +msgstr "" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" +msgstr "" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +#, fuzzy +msgid "Display information about a command parameter." +msgstr "Exibir informação acerca de um grupo nomeado." + +msgid "Search command parameters." +msgstr "" + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +#, fuzzy +msgid "Display information about a command output." +msgstr "Exibir informação acerca de um grupo nomeado." + +#, fuzzy +msgid "Search for command outputs." +msgstr "Pesquisar por interligações." + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "self service permission" +msgstr "" + +msgid "self service permissions" +msgstr "" + +msgid "Self Service Permissions" +msgstr "" + +msgid "Self Service Permission" +msgstr "" + +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +msgid "SELinux User Map rule" +msgstr "" + +msgid "SELinux User Map rules" +msgstr "" + +msgid "SELinux User Maps" +msgstr "" + +msgid "SELinux User Map" +msgstr "" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "" + +#, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +msgid "server roles" +msgstr "" + +msgid "IPA Server Roles" +msgstr "" + +msgid "IPA Server Role" +msgstr "" + +msgid "IPA server role name" +msgstr "" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "IPA role name" +msgstr "" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +#, python-format +msgid "authentication indicators not allowed in service \"%s\"" +msgstr "" + +msgid "Malformed principal" +msgstr "" + +msgid "{} is required by the IPA master" +msgstr "" + +msgid "service" +msgstr "" + +msgid "services" +msgstr "" + +msgid "Service principal alias" +msgstr "" + +msgid "Base-64 encoded service certificate" +msgstr "" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +msgid "Add a new IPA service." +msgstr "" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "" + +msgid "force principal name even if host not in DNS" +msgstr "" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +msgid "Add a new SMB service." +msgstr "" + +msgid "SMB service NetBIOS name" +msgstr "" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to a service" +msgstr "" + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a service" +msgstr "" + +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "givenname is required" +msgstr "'%(name)s' é obrigatório" + +#, fuzzy +msgid "sn is required" +msgstr "'%(name)s' é obrigatório" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Subordinate ids\n" +"\n" +"Manage subordinate user and group ids for users\n" +"\n" +"EXAMPLES:\n" +"\n" +" Auto-assign a subordinate id range to current user\n" +" ipa subid-generate\n" +"\n" +" Auto-assign a subordinate id range to user alice:\n" +" ipa subid-generate --owner=alice\n" +"\n" +" Find subordinate ids for user alice:\n" +" ipa subid-find --owner=alice\n" +"\n" +" Match entry by any subordinate uid in range:\n" +" ipa subid-match --subuid=2147483649\n" +msgstr "" + +msgid "Subordinate id" +msgstr "" + +msgid "Subordinate ids" +msgstr "" + +msgid "Subordinate id description" +msgstr "" + +msgid "Owning user of subordinate id entry" +msgstr "" + +msgid "Start value for subordinate user ID (subuid) range" +msgstr "" + +msgid "Subordinate user ID count" +msgstr "" + +msgid "Start value for subordinate group ID (subgid) range" +msgstr "" + +msgid "Subordinate group ID count" +msgstr "" + +#, python-format +msgid "" +"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." +msgstr "" + +#, python-format +msgid "'%(dn)s is not a valid user" +msgstr "" + +msgid "subgidnumber must be equal to subuidnumber" +msgstr "" + +msgid "Add a new subordinate id." +msgstr "" + +#, python-format +msgid "Added subordinate id \"%(value)s\"" +msgstr "" + +msgid "Delete a subordinate id." +msgstr "" + +#, python-format +msgid "Deleted subordinate id \"%(value)s\"" +msgstr "" + +msgid "Modify a subordinate id." +msgstr "" + +#, python-format +msgid "Modified subordinate id \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "Search for subordinate id." +msgstr "Pesquisar por interligações." + +#, python-format +msgid "%(count)d subordinate id matched" +msgid_plural "%(count)d subordinate ids matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +msgid "Display information about a subordinate id." +msgstr "Exibir informação acerca de um utilizador." + +msgid "Generate and auto-assign subuid and subgid range to user entry" +msgstr "" + +msgid "Match users by any subordinate uid in their range" +msgstr "" + +msgid "SubUID match" +msgstr "" + +msgid "Match value for subordinate user ID" +msgstr "" + +msgid "Subordinate id statistics" +msgstr "" + +#, python-format +msgid "%(remaining)i remaining subordinate id ranges" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +#, fuzzy +msgid "sudo command" +msgstr "Comandos do tópico:" + +#, fuzzy +msgid "sudo commands" +msgstr "Comandos do tópico:" + +#, fuzzy +msgid "Sudo Commands" +msgstr "Comandos do tópico:" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + msgid "" "\n" "Topology\n" @@ -18439,1007 +22165,6 @@ msgid "" " replication agreements\n" msgstr "" -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -#, fuzzy -msgid "sudo command" -msgstr "Comandos do tópico:" - -#, fuzzy -msgid "sudo commands" -msgstr "Comandos do tópico:" - -#, fuzzy -msgid "Sudo Commands" -msgstr "Comandos do tópico:" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -msgid "Self Service Permissions" -msgstr "" - -msgid "Self Service Permission" -msgstr "" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "A list of ACI values" -msgstr "Uma lista de entradas LDAP" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -msgid "ACI prefix is required" -msgstr "" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "groups" -msgstr "" - -msgid "User Group" -msgstr "" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "" - -msgid "privileged group" -msgstr "" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -msgid "Not a managed group" -msgstr "" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -msgid "automount location" -msgstr "" - -msgid "automount locations" -msgstr "" - -msgid "Automount Locations" -msgstr "" - -msgid "Automount Location" -msgstr "" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "automount map" -msgstr "" - -msgid "automount maps" -msgstr "" - -msgid "Automount Maps" -msgstr "" - -msgid "Automount Map" -msgstr "" - -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Automount key object." -msgstr "" - -msgid "automount key" -msgstr "" - -msgid "automount keys" -msgstr "" - -msgid "Automount Keys" -msgstr "" - -msgid "Automount Key" -msgstr "" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, fuzzy, python-format -msgid "key named %(key)s already exists" -msgstr "Esta entrada já existe" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" -msgstr[1] "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -msgid "Delete an ID override." -msgstr "" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -msgid "Modify an ID override." -msgstr "" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "Display information about an ID override." -msgstr "Exibir informação acerca de um utilizador." - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -msgid "CA category" -msgstr "" - -msgid "CA category the ACL applies to" -msgstr "" - -msgid "CAs" -msgstr "" - -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, python-format -msgid "%i users or groups added." -msgstr "" - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, python-format -msgid "%i service added." -msgstr "" - -#, python-format -msgid "%i services added." -msgstr "" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - msgid "" "\n" "Cross-realm trusts\n" @@ -19567,6 +22292,9 @@ msgstr "" msgid "trust" msgstr "interligações" +msgid "trusts" +msgstr "interligações" + #, fuzzy msgid "Trust" msgstr "Interligações" @@ -19605,12 +22333,6 @@ msgid "" " " msgstr "" -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - msgid "Type of trusted domain ID range, one of allowed values" msgstr "" @@ -19849,738 +22571,9 @@ msgid "" "itself" msgstr "" -msgid "" -"\n" -"DNS server configuration\n" +msgid "users" msgstr "" -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "" - -msgid "DNS servers" -msgstr "" - -msgid "DNS Servers" -msgstr "" - -msgid "DNS Server" -msgstr "" - -msgid "DNS Server name" -msgstr "" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Search for DNS servers." -msgstr "Pesquisar por interligações." - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -#, fuzzy -msgid "Display configuration of a DNS server." -msgstr "Exibir informação acerca do servidor proxy RADIUS." - -msgid "Add a new DNS server." -msgstr "" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "" - -msgid "Delete a DNS server" -msgstr "" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "" - -msgid "HBAC Services" -msgstr "" - -msgid "HBAC Service" -msgstr "" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -msgid "HBAC service group" -msgstr "" - -msgid "HBAC service groups" -msgstr "" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" -msgstr "" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -msgid "Delegations" -msgstr "" - -msgid "Delegation" -msgstr "" - -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Role" -msgstr "" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -msgid "netgroups" -msgstr "" - -msgid "Netgroup" -msgstr "" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - #, python-format msgid "Added user \"%(value)s\"" msgstr "" @@ -20600,12 +22593,6 @@ msgstr "Esta entrada já está ativada" msgid "Modified user \"%(value)s\"" msgstr "" -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" -msgstr[1] "" - #, python-format msgid "Undeleted user account \"%(value)s\"" msgstr "" @@ -20701,12 +22688,6 @@ msgstr "" msgid "Removed certificates from user \"%(value)s\"" msgstr "" -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - msgid "Add new principal alias to the user entry" msgstr "" @@ -20721,555 +22702,6 @@ msgstr "" msgid "Removed aliases from user \"%(value)s\"" msgstr "" -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -#, fuzzy -msgid "Whether PKINIT is enabled or disabled" -msgstr "Esta entrada não pode estar ativada ou desativada" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" -"\n" -" Exibir informação acerca de uma regra de membro automática.\n" -" " - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "" - -msgid "Auto Membership is not configured" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" -"\n" -" Exibir informação acerca de uma regra de membro automática.\n" -" " - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" -"\n" -" Exibir informação acerca de uma regra de membro automática.\n" -" " - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" -"\n" -" Exibir informação acerca de uma regra de membro automática.\n" -" " - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" -"\n" -" Exibir informação acerca de uma regra de membro automática.\n" -" " - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" -"\n" -" Exibir informação acerca de uma regra de membro automática.\n" -" " - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" -"\n" -" Exibir informação acerca de uma regra de membro automática.\n" -" " - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" -msgstr "" - -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -msgid "SELinux User Maps" -msgstr "" - -msgid "SELinux User Map" -msgstr "" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "" - -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "" - msgid "" "\n" "Vaults\n" @@ -21612,108 +23044,159 @@ msgstr "" msgid "Checks if any of the servers has the KRA service enabled" msgstr "" -msgid "Member service groups" +msgid "operation not defined" msgstr "" -msgid "Member HBAC service groups" +#, python-format +msgid "not allowed to perform operation: %s" msgstr "" -msgid "Member ID user overrides" +msgid "No such virtual command" msgstr "" -msgid "Indirect Member ID user overrides" +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" msgstr "" -msgid "Indirect Member permissions" +msgid "Describe currently authenticated identity." msgstr "" -msgid "Indirect Member HBAC service" +msgid "Object class name" msgstr "" -msgid "Indirect Member HBAC service group" +msgid "Function to get details" msgstr "" -msgid "Invalid format. Should be name=value" +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +msgid "password policy" +msgstr "política de palavra-passe" + +#, fuzzy +msgid "password policies" +msgstr "política de palavra-passe" + +#, fuzzy +msgid "Password Policies" +msgstr "Política de Palavra-passe" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +msgid "User check" +msgstr "" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be equal to or greater than the minimum." msgstr "" #, fuzzy -msgid "An IPA master host cannot be deleted or disabled" -msgstr "Esta entrada não pode estar ativada ou desativada" +msgid "cannot delete global password policy" +msgstr "Adicionar política de palavra-passe" -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" -msgstr "" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, fuzzy, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "não são pertimidas opções" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" +msgid "priority cannot be set on global policy" msgstr "" msgid "" @@ -21721,6 +23204,13 @@ msgid "" "IPA servers\n" msgstr "" +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "" +"\n" +"Obter informação acerca dos servidores IPA.\n" + msgid "" "\n" " Find all servers:\n" @@ -21763,6 +23253,9 @@ msgstr "" msgid "List of enabled roles" msgstr "" +msgid "Modify information about an IPA server." +msgstr "Modificar informação acerca de um servidor IPA" + #, python-format msgid "Modified IPA server \"%(value)s\"" msgstr "" @@ -21852,6 +23345,10 @@ msgstr "" msgid "Ignoring topology connectivity errors." msgstr "" +#, fuzzy, python-format +msgid "Failed to remove server from security domain: %s" +msgstr "erro no servidor '%(server)s': %(error)s" + #, fuzzy msgid "Server has already been deleted" msgstr "Esta entrada já está ativada" @@ -21890,1396 +23387,188 @@ msgstr "" msgid "" "\n" -"Manage Certificate Authorities\n" +"Sudo Rules\n" msgstr "" msgid "" "\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" msgstr "" msgid "" "\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" msgstr "" msgid "" "\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" +"Each option needs to be added separately and no validation is done whether\n" +"the option is known by sudo or is in a valid format. Environment variables\n" +"also need to be set individually. For example env_keep=\"FOO BAR\" in " +"sudoers\n" +"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" +"+=BAR.\n" msgstr "" msgid "" "\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" msgstr "" msgid "" "\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" msgstr "" msgid "" "\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" msgstr "" msgid "" "\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" msgstr "" msgid "" "\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" "\n" -" ipa ca-del puppet\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" msgstr "" -msgid "Certificate Authority" +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" msgstr "" -msgid "Certificate Authorities" +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" msgstr "" -msgid "Name for referencing the CA" +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" msgstr "" -msgid "Description of the purpose of the CA" +msgid "" +"\n" +" Set multiple default Sudo options:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate' --" +"sudooption mail_badpass\n" msgstr "" -msgid "Authority ID" +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" msgstr "" -msgid "Dogtag Authority ID" +msgid "this option has been deprecated." msgstr "" -msgid "Subject DN" +msgid "sudo rules" msgstr "" -msgid "Subject Distinguished Name" +msgid "Sudo Rules" msgstr "" -msgid "Issuer Distinguished Name" +msgid "Sudo Rule" +msgstr "" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" msgstr "" #, fuzzy -msgid "Search for CAs." -msgstr "Pesquisar por interligações." +msgid "command" +msgstr "Comandos do tópico:" + +#, fuzzy +msgid "commands" +msgstr "Comandos do tópico:" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +msgid "group runAs" +msgstr "" + +msgid "runAs groups" +msgstr "" #, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" msgstr[0] "" msgstr[1] "" -msgid "Display the properties of a CA." +msgid "commands cannot be added when command category='all'" msgstr "" -msgid "Create a CA." +msgid "users cannot be added when runAs user or runAs group category='all'" msgstr "" #, python-format -msgid "Created CA \"%(value)s\"" +msgid "RunAsUser does not accept '%(name)s' as a user name" msgstr "" #, python-format -msgid "Insufficient 'add' privilege for entry '%s'." +msgid "RunAsUser does not accept '%(name)s' as a group name" msgstr "" #, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -msgid "IPA CA cannot be deleted" -msgstr "" - -msgid "Must be disabled first" -msgstr "" - -msgid "Modify CA configuration." -msgstr "" - -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -msgid "Disable a CA." -msgstr "" - -#, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "IPA CA cannot be disabled" -msgstr "Esta entrada não pode estar ativada ou desativada" - -msgid "Enable a CA." -msgstr "" - -#, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "givenname is required" -msgstr "'%(name)s' é obrigatório" - -#, fuzzy -msgid "sn is required" -msgstr "'%(name)s' é obrigatório" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -msgid "URI" -msgstr "" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "" - -msgid "cannot be empty" -msgstr "" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "invalid IP network format" -msgstr "" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -msgid "invalid address format" -msgstr "" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -msgid "flags value: allowed interval 0-255" -msgstr "" - -msgid "iterations value: allowed interval 0-65535" -msgstr "" - -#, python-format -msgid "salt value: %(err)s" -msgstr "" - -msgid "invalid domain-name: not fully qualified" -msgstr "" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" - -#, python-format -msgid "%s record" -msgstr "" - -#, python-format -msgid "Raw %s records" -msgstr "" - -#, python-format -msgid "%s Record" -msgstr "" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -msgid "Invalid number of parts!" -msgstr "" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -msgid "Create reverse" -msgstr "" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" - -msgid "Exchanger" -msgstr "" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -msgid "Priority (order)" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Relative weight for entries with the same priority." -msgstr "" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Target Uniform Resource Identifier" -msgstr "" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" - -msgid "Managedby permission" -msgstr "" - -msgid "cannot be used when a zone is specified" -msgstr "" - -#, fuzzy -msgid "Only one zone type is allowed per zone name" -msgstr "Só é permitido um valor" - -#, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "Esta entrada já existe" - -#, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "" - -msgid "DNS zone" -msgstr "" - -msgid "DNS zones" -msgstr "" - -msgid "DNS Zones" -msgstr "" - -msgid "DNS Zone" -msgstr "" - -msgid "Default time to live" -msgstr "" - -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -msgid "setting Authoritative nameserver" -msgstr "" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -msgid "" -msgstr "" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "is required" -msgstr "'%(name)s' é obrigatório" - -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "" - -msgid "DNS resource record" -msgstr "" - -msgid "DNS resource records" -msgstr "" - -msgid "DNS Resource Records" -msgstr "" - -msgid "DNS Resource Record" -msgstr "" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -msgid "only master zones can contain records" -msgstr "" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -msgid "DNS zone root record cannot be renamed" -msgstr "" - -msgid "DNS records can be only updated one at a time" -msgstr "" - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Found '%(value)s'" -msgstr "" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "" - -msgid "DNS configuration options" -msgstr "" - -msgid "DNS Global Configuration" -msgstr "" - -msgid "IPA DNS version" -msgstr "" - -msgid "List of IPA masters configured as DNS servers" -msgstr "" - -msgid "IPA server configured as DNSSec key master" -msgstr "" - -msgid "Global DNS configuration is empty" -msgstr "" - -msgid "DNS forward zone" -msgstr "" - -msgid "DNS forward zones" -msgstr "" - -msgid "DNS Forward Zones" -msgstr "" - -#, fuzzy -msgid "DNS Forward Zone" -msgstr "Política de reencaminhamento" - -msgid "Please specify forwarders." -msgstr "" - -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "" - -msgid "IPA DNS records" -msgstr "" - -msgid "IPA location records" -msgstr "" - -msgid "Update location and IPA server DNS records" -msgstr "" - -msgid "Result of the command" -msgstr "" - -msgid "Dry run" -msgstr "" - -msgid "Do not update records only return expected records" -msgstr "" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -msgid "Certificate Profile" -msgstr "" - -msgid "Certificate Profiles" -msgstr "" - -msgid "Profile configuration" -msgstr "" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -msgid "must be enabled only on a single master" +msgid "RunAsGroup does not accept '%(name)s' as a group name" msgstr "" msgid "Request must be a dict" @@ -23303,6 +23592,17 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + #, python-format msgid "" "\n" @@ -23322,35 +23622,6 @@ msgstr "" msgid "Topology does not allow server %(server)s to replicate with servers:" msgstr "" -msgid "Trusting forest" -msgstr "" - -#, fuzzy -msgid "Trusted forest" -msgstr "Interligações" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Unknown" -msgstr "" - -msgid "Non-Active Directory domain" -msgstr "" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - msgid "" "\n" "Classes to manage trust joins using DCE-RPC calls\n" @@ -23510,33 +23781,6 @@ msgstr "" msgid "must be at least 1" msgstr "" -#, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -msgid "Unable to initialize STARTTLS session\n" -msgstr "" - msgid "Out of memory\n" msgstr "" @@ -23563,3 +23807,30 @@ msgstr "" msgid "Bad or unsupported salt type.\n" msgstr "" + +#, c-format +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "" + +msgid "" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" +msgstr "" + +msgid "Unable to initialize STARTTLS session\n" +msgstr "" diff --git a/po/pt_BR.po b/po/pt_BR.po index 1f91ebf73..6c36bed58 100644 --- a/po/pt_BR.po +++ b/po/pt_BR.po @@ -500,12 +500,11 @@ msgstr "Comandos sudo" #, python-format msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set " -"LC_ALL=\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." msgstr "" -"O sistema de codificação deve ser UTF-8, não tendo suporte a " -"\"%(encoding)s\". Defina LC_ALL=\"C.UTF-8\", ou LC_ALL=\"\" e LC_CTYPE=\"C." -"UTF-8\"." +"O sistema de codificação deve ser UTF-8, não tendo suporte a \"%(encoding)s" +"\". Defina LC_ALL=\"C.UTF-8\", ou LC_ALL=\"\" e LC_CTYPE=\"C.UTF-8\"." #, python-format msgid "The certificate for %(ca)s is not available on this server." @@ -23739,3 +23738,438 @@ msgstr "Falha ao abrir o keytab\n" msgid "Bad or unsupported salt type.\n" msgstr "" + +msgid "Output debug info" +msgstr "" + +#, c-format +msgid "DNS discovery for domain %s\n" +msgstr "" + +#, c-format +msgid "Discovered server %s\n" +msgstr "" + +#, c-format +msgid "Using discovered server %s\n" +msgstr "" + +#, c-format +msgid "DNS Discovery failed\n" +msgstr "" + +#, c-format +msgid "Using server from config %s\n" +msgstr "" + +#, c-format +msgid "Using provided server %s\n" +msgstr "" + +#, fuzzy +msgid "Status of the certificate" +msgstr "deve ser um certificado" + +msgid "Enable adding subids to new users" +msgstr "" + +msgid "Setup SID configuration" +msgstr "" + +msgid "New users and groups automatically get a SID assigned" +msgstr "" + +msgid "Add SIDs" +msgstr "" + +msgid "Add SIDs for existing users and groups" +msgstr "" + +#, fuzzy +msgid "NetBIOS name of the IPA domain" +msgstr "SID não corresponde a nenhum domínio confiável" + +#, fuzzy +msgid "not allowed to enable SID generation" +msgstr "Não permitido em uma entrada não-folha" + +msgid "" +"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " +"allowed. Empty string is not allowed." +msgstr "" + +#, fuzzy +msgid "Failed to call DBus" +msgstr "Nenhum arquivo para ler" + +msgid "Configuration of SID failed. See details in the error log" +msgstr "" + +#, python-format +msgid "You cannot specify %s without the --enable-sid option" +msgstr "" + +#, python-format +msgid "" +"No answers could be found in the specified lifetime for DNS reverse zone " +"%(revdns)s" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"and an ID range of a trusted domain may set\n" +" - auto-private-groups: [true|false|hybrid] automatic creation of private " +"groups\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +#, fuzzy +msgid "Auto private groups" +msgstr "Pesquisa por tópicos de ajuda." + +msgid "Auto creation of private groups, one of allowed values" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --auto-private-groups\n" +"\n" +" may be given for a new ID range for a trusted AD domain and\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" +"private-groups is specified" +msgstr "" + +msgid "Add subid" +msgstr "" + +msgid "Assigned subids" +msgstr "" + +msgid "DNA remaining" +msgstr "" + +msgid "SubGID range size" +msgstr "" + +msgid "SubGID range start" +msgstr "" + +msgid "SubUID range size" +msgstr "" + +msgid "SubUID range start" +msgstr "" + +msgid "Remaining subids" +msgstr "" + +msgid "Subordinate ID Statistics" +msgstr "" + +msgid "Auto assign subordinate ids" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to auto-assign a subordinate id to user ${object}?" +msgstr "" + +msgid "Subordinate IDs" +msgstr "" + +#, fuzzy, python-brace-format +msgid "{oname}: {command_name} not found" +msgstr "realm não encontrado\n" + +#, python-format +msgid "authentication indicators not allowed in service \"%s\"" +msgstr "" + +msgid "" +"\n" +"Subordinate ids\n" +"\n" +"Manage subordinate user and group ids for users\n" +"\n" +"EXAMPLES:\n" +"\n" +" Auto-assign a subordinate id range to current user\n" +" ipa subid-generate\n" +"\n" +" Auto-assign a subordinate id range to user alice:\n" +" ipa subid-generate --owner=alice\n" +"\n" +" Find subordinate ids for user alice:\n" +" ipa subid-find --owner=alice\n" +"\n" +" Match entry by any subordinate uid in range:\n" +" ipa subid-match --subuid=2147483649\n" +msgstr "" + +msgid "Subordinate id" +msgstr "" + +msgid "Subordinate ids" +msgstr "" + +msgid "Subordinate id description" +msgstr "" + +msgid "Owning user of subordinate id entry" +msgstr "" + +msgid "Start value for subordinate user ID (subuid) range" +msgstr "" + +msgid "Subordinate user ID count" +msgstr "" + +msgid "Start value for subordinate group ID (subgid) range" +msgstr "" + +msgid "Subordinate group ID count" +msgstr "" + +#, fuzzy, python-format +msgid "" +"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." +msgstr "uma chave chamada %(key)s já existe" + +#, fuzzy, python-format +msgid "'%(dn)s is not a valid user" +msgstr "%(name)s certificado não é válido" + +msgid "subgidnumber must be equal to subuidnumber" +msgstr "" + +msgid "Add a new subordinate id." +msgstr "" + +#, fuzzy, python-format +msgid "Added subordinate id \"%(value)s\"" +msgstr "Alterado o estado do servidor de \"%(value)s\"." + +#, fuzzy +msgid "Delete a subordinate id." +msgstr "deve ser um certificado" + +#, fuzzy, python-format +msgid "Deleted subordinate id \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy +msgid "Modify a subordinate id." +msgstr "Modifica comando sudo." + +#, fuzzy, python-format +msgid "Modified subordinate id \"%(value)s\"" +msgstr "Alterado o estado do servidor de \"%(value)s\"." + +#, fuzzy +msgid "Search for subordinate id." +msgstr "Pesquisa por classes." + +#, fuzzy, python-format +msgid "%(count)d subordinate id matched" +msgid_plural "%(count)d subordinate ids matched" +msgstr[0] "%(count)d certificado correspondido" +msgstr[1] "%(count)d certificados correspondidos" + +#, fuzzy +msgid "Display information about a subordinate id." +msgstr "Exibe informações sobre um comando." + +msgid "Generate and auto-assign subuid and subgid range to user entry" +msgstr "" + +msgid "Match users by any subordinate uid in their range" +msgstr "" + +msgid "SubUID match" +msgstr "" + +msgid "Match value for subordinate user ID" +msgstr "" + +msgid "Subordinate id statistics" +msgstr "" + +#, python-format +msgid "%(remaining)i remaining subordinate id ranges" +msgstr "" + +msgid "Maximum password life must be equal to or greater than the minimum." +msgstr "" + +#, fuzzy, python-format +msgid "Failed to remove server from security domain: %s" +msgstr "Falha ao remover o servidor %(master)s da lista de servidores: %(err)s" + +msgid "" +"\n" +"Each option needs to be added separately and no validation is done whether\n" +"the option is known by sudo or is in a valid format. Environment variables\n" +"also need to be set individually. For example env_keep=\"FOO BAR\" in " +"sudoers\n" +"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" +"+=BAR.\n" +msgstr "" + +msgid "" +"\n" +" Set multiple default Sudo options:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate' --" +"sudooption mail_badpass\n" +msgstr "" diff --git a/po/ru.po b/po/ru.po index 65df0f619..0e5776986 100644 --- a/po/ru.po +++ b/po/ru.po @@ -14,8 +14,8 @@ msgstr "" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" -"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && " -"n%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2)\n" +"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n" +"%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2)\n" "X-Generator: Zanata 4.6.2\n" msgid "" @@ -1053,13 +1053,13 @@ msgstr "" msgid "" "\n" " Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red " -"Hat\"\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" msgstr "" "\n" " Изменить поставщика:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red " -"Hat\"\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" msgid "" "\n" @@ -1971,10 +1971,10 @@ msgstr "" " Запись SRV: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " "backup.example.com\n" "\n" -" Изменить запись SRV '0 3 389 fast.example.com'? Да/Нет (по умолчанию " -"\"Нет\"):\n" -" Изменить запись SRV '0 1 389 slow.example.com'? Да/Нет (по умолчанию " -"\"Нет\"): y\n" +" Изменить запись SRV '0 3 389 fast.example.com'? Да/Нет (по умолчанию \"Нет" +"\"):\n" +" Изменить запись SRV '0 1 389 slow.example.com'? Да/Нет (по умолчанию \"Нет" +"\"): y\n" " Приоритет SRV [0]: (сохранить значение по умолчанию)\n" " Вес SRV [1]: 2 (изменённое значение)\n" " Порт SRV [389]: (сохранить значение по умолчанию)\n" @@ -3348,8 +3348,8 @@ msgid "" "with\n" " posixGroup object class is allowed):\n" "\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB " -"Group\"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" msgstr "" "\n" "Отношения доверия между областями (realm)\n" @@ -3441,8 +3441,8 @@ msgstr "" "3. Изменить резервную основную группу обратно на скрытую группу по умолчанию " "(разрешена любая группа с классом объекта posixGroup):\n" "\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB " -"Group\"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" msgid "" "\n" @@ -3532,15 +3532,15 @@ msgid "" " primary user GID if user authenticating to IPA domain does not have any\n" " other primary GID already set):\n" "\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD " -"group\"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" "\n" "3. Change primary fallback group back to default hidden group (any group " "with\n" " posixGroup object class is allowed):\n" "\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB " -"Group\"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" msgstr "" "\n" "Отношения доверия между областями (realm)\n" @@ -3626,14 +3626,14 @@ msgstr "" "пользователя, который выполняет аутентификацию в домене IPA, не был " "установлен другой основной GID):\n" "\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD " -"group\"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" "\n" "3. Изменить резервную основную группу обратно на скрытую группу по умолчанию " "(разрешена любая группа с классом объекта posixGroup):\n" "\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB " -"Group\"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" msgid "" "\n" @@ -4035,8 +4035,8 @@ msgid "" " Add an ACI that allows members of the admins group to manage the street and " "zip code of those in the editors group:\n" " ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"admins edit the address of " -"editors\"\n" +"attrs=street,postalcode --prefix=none \"admins edit the address of editors" +"\"\n" "\n" " Add an ACI that allows the admins group manage the street and zipcode of " "those who work for the boss:\n" @@ -4240,9 +4240,9 @@ msgid "" " ipa dnszone-mod example.com --dynamic-update=TRUE\n" "\n" " This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-" -"policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * " -"AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" "\n" " Modify the zone to allow zone transfers for local network only:\n" " ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" @@ -4449,9 +4449,9 @@ msgstr "" " ipa dnszone-mod example.com --dynamic-update=TRUE\n" "\n" " Эта команда эквивалентна следующим командам:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-" -"policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * " -"AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" "\n" " Изменить зону, чтобы разрешить перенос зоны только для локальной сети:\n" " ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" @@ -4517,10 +4517,10 @@ msgstr "" " Запись SRV: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " "backup.example.com\n" "\n" -" Изменить запись SRV '0 3 389 fast.example.com'? Да/Нет (по умолчанию " -"\"Нет\"):\n" -" Изменить запись SRV '0 1 389 slow.example.com'? Да/Нет (по умолчанию " -"\"Нет\"): y\n" +" Изменить запись SRV '0 3 389 fast.example.com'? Да/Нет (по умолчанию \"Нет" +"\"):\n" +" Изменить запись SRV '0 1 389 slow.example.com'? Да/Нет (по умолчанию \"Нет" +"\"): y\n" " Приоритет SRV [0]: (сохранить значение по умолчанию)\n" " Вес SRV [1]: 2 (изменённое значение)\n" " Порт SRV [389]: (сохранить значение по умолчанию)\n" @@ -4660,9 +4660,9 @@ msgid "" " ipa dnszone-mod example.com --dynamic-update=TRUE\n" "\n" " This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-" -"policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * " -"AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" "\n" " Modify the zone to allow zone transfers for local network only:\n" " ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" @@ -4977,10 +4977,10 @@ msgstr "" " Запись SRV: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " "backup.example.com\n" "\n" -" Изменить запись SRV '0 3 389 fast.example.com'? Да/Нет (по умолчанию " -"\"Нет\"):\n" -" Изменить запись SRV '0 1 389 slow.example.com'? Да/Нет (по умолчанию " -"\"Нет\"): y\n" +" Изменить запись SRV '0 3 389 fast.example.com'? Да/Нет (по умолчанию \"Нет" +"\"):\n" +" Изменить запись SRV '0 1 389 slow.example.com'? Да/Нет (по умолчанию \"Нет" +"\"): y\n" " Приоритет SRV [0]: (сохранить значение по умолчанию)\n" " Вес SRV [1]: 2 (изменённое значение)\n" " Порт SRV [389]: (сохранить значение по умолчанию)\n" @@ -6312,8 +6312,8 @@ msgid "" "\n" "EXAMPLES:\n" "\n" -" Create a rule, \"test1\", that grants all users access to the host " -"\"server\" from\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" " anywhere:\n" " ipa hbacrule-add --usercat=all --srchostcat=all test1\n" " ipa hbacrule-add-host --hosts=server.example.com test1\n" @@ -6412,8 +6412,8 @@ msgid "" "\n" "EXAMPLES:\n" "\n" -" Create a rule, \"test1\", that grants all users access to the host " -"\"server\" from\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" " anywhere:\n" " ipa hbacrule-add --usercat=all test1\n" " ipa hbacrule-add-host --hosts=server.example.com test1\n" @@ -7530,8 +7530,8 @@ msgid "" " Display the properties of a named CA ACL:\n" " ipa caacl-show test\n" "\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-" -"CA\":\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" " ipa caacl-add alice_dnp3\n" " ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" " ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" @@ -8543,8 +8543,8 @@ msgid "" " ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" "\n" " Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red " -"Hat\"\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" "\n" " Delete a token:\n" " ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" @@ -8566,8 +8566,8 @@ msgstr "" " ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" "\n" " Изменить поставщика:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red " -"Hat\"\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" "\n" " Удалить токен:\n" " ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" @@ -9112,8 +9112,8 @@ msgid "" "\n" "{\"method\":\"batch\",\"params\":[[\n" " {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\"," -"\"all\":\"true\"}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" " {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" " ],{}],\"id\":1}\n" "\n" @@ -9143,8 +9143,8 @@ msgstr "" "\n" "{\"method\":\"batch\",\"params\":[[\n" " {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\"," -"\"all\":\"true\"}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" " {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" " ],{}],\"id\":1}\n" "\n" @@ -9175,8 +9175,8 @@ msgid "" "\n" "{\"method\":\"batch\",\"params\":[[\n" " {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\"," -"\"all\":\"true\"}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" " {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" " ],{}],\"id\":1}\n" "\n" @@ -9207,8 +9207,8 @@ msgstr "" "\n" "{\"method\":\"batch\",\"params\":[[\n" " {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\"," -"\"all\":\"true\"}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" " {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" " ],{}],\"id\":1}\n" "\n" @@ -12518,9 +12518,9 @@ msgstr "" "Подключаемый модуль hbactest позволяет проверять доступ как для локальных " "пользователей IPA, так и для пользователей из доверенных доменов, как с " "полным именем пользователя, так и по SID пользователей. В таких именах " -"пользователей должен быть указан доверенный домен в краткой форме " -"(DOMAIN\\Administrator) или имя учётной записи пользователя (UPN), " -"Administrator@ad.test.\n" +"пользователей должен быть указан доверенный домен в краткой форме (DOMAIN" +"\\Administrator) или имя учётной записи пользователя (UPN), Administrator@ad." +"test.\n" "\n" "Обратите внимание, что выполнять hbactest с аргументом пользователя " "доверенного домена в параметре --user могут только участники группы \"trust " @@ -12909,9 +12909,9 @@ msgstr "" "Подключаемый модуль hbactest позволяет проверять доступ как для локальных " "пользователей IPA, так и для пользователей из доверенных доменов, как с " "полным именем пользователя, так и по SID пользователей. В таких именах " -"пользователей должен быть указан доверенный домен в краткой форме " -"(DOMAIN\\Administrator) или имя учётной записи пользователя (UPN), " -"Administrator@ad.test.\n" +"пользователей должен быть указан доверенный домен в краткой форме (DOMAIN" +"\\Administrator) или имя учётной записи пользователя (UPN), Administrator@ad." +"test.\n" "\n" "Обратите внимание, что выполнять hbactest с аргументом пользователя " "доверенного домена в параметре --user могут только участники группы \"trust " @@ -13299,9 +13299,9 @@ msgstr "" "Подключаемый модуль hbactest позволяет проверять доступ как для локальных " "пользователей IPA, так и для пользователей из доверенных доменов, как с " "полным именем пользователя, так и по SID пользователей. В таких именах " -"пользователей должен быть указан доверенный домен в краткой форме " -"(DOMAIN\\Administrator) или имя учётной записи пользователя (UPN), " -"Administrator@ad.test.\n" +"пользователей должен быть указан доверенный домен в краткой форме (DOMAIN" +"\\Administrator) или имя учётной записи пользователя (UPN), Administrator@ad." +"test.\n" "\n" "Обратите внимание, что выполнять hbactest с аргументом пользователя " "доверенного домена в параметре --user могут только участники группы \"trust " @@ -15015,8 +15015,8 @@ msgstr[2] "установлено соответствие %(count)s польз #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" -"%(cver)s версия клиента несовместима с %(sver)s версией сервера " -"\"%(server)s\"" +"%(cver)s версия клиента несовместима с %(sver)s версией сервера \"%(server)s" +"\"" #, python-format msgid "%(desc)s: %(info)s" @@ -15337,8 +15337,8 @@ msgid "" "\n" "
\n" "

\n" -" If this is your first time, please configure your browser.\n" +" If this is your first time, please configure your browser.\n" "

\n" "
\n" msgstr "" @@ -16736,8 +16736,8 @@ msgstr "Добавлено %(src)s в %(dst)s" #, python-format msgid "Added Active Directory trust for realm \"%(value)s\"" msgstr "" -"Добавлено отношение доверия Active Directory для области (realm) " -"\"%(value)s\"" +"Добавлено отношение доверия Active Directory для области (realm) \"%(value)s" +"\"" #, python-format msgid "Added CA ACL \"%(value)s\"" @@ -17646,8 +17646,8 @@ msgstr "Ваши регистрационные данные отклонены #, python-format msgid "" -"CIFS server communication error: code \"%(num)s\", message " -"\"%(message)s\" (both may be \"None\")" +"CIFS server communication error: code \"%(num)s\", message \"%(message)s" +"\" (both may be \"None\")" msgstr "" "Ошибка обмена данными с сервером CIFS: код \"%(num)s\", сообщение " "\"%(message)s\" (оба значения могут быть \"None\")" @@ -21645,8 +21645,8 @@ msgstr "Учётная запись Kerberos" msgid "" "Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." msgstr "" -"Учётная запись Kerberos %s уже существует. Используйте команду \"ipa user-" -"mod\", чтобы установить её параметры вручную." +"Учётная запись Kerberos %s уже существует. Используйте команду \"ipa user-mod" +"\", чтобы установить её параметры вручную." msgid "Kerberos principal expiration" msgstr "Окончание действия учётной записи Kerberos" @@ -25092,8 +25092,8 @@ msgstr "" msgid "Results should contain primary key attribute only (\"delegation-name\")" msgstr "" -"Результаты должны содержать только атрибут главного ключа (\"delegation-" -"name\")" +"Результаты должны содержать только атрибут главного ключа (\"delegation-name" +"\")" msgid "Results should contain primary key attribute only (\"domain\")" msgstr "Результаты должны содержать только атрибут главного ключа (\"domain\")" @@ -25107,8 +25107,8 @@ msgstr "" msgid "Results should contain primary key attribute only (\"hostgroup-name\")" msgstr "" -"Результаты должны содержать только атрибут главного ключа (\"hostgroup-" -"name\")" +"Результаты должны содержать только атрибут главного ключа (\"hostgroup-name" +"\")" msgid "Results should contain primary key attribute only (\"hostname\")" msgstr "" @@ -26798,8 +26798,8 @@ msgstr "Записи DNS системы обновлены" #, python-format msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set " -"LC_ALL=\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." msgstr "" "Системной кодировкой должна быть UTF-8, поддержка \"%(encoding)s\" не " "предусмотрена. Установите либо LC_ALL=\"C.UTF-8\", либо LC_ALL=\"\" и " @@ -28011,8 +28011,8 @@ msgid "" "You can use FreeOTP as a software " "OTP token application." msgstr "" -"В качестве приложения для работы с токенами OTP можно использовать FreeOTP." +"В качестве приложения для работы с токенами OTP можно использовать FreeOTP." msgid "You may need to manually remove them from the tree" msgstr "Возможно, потребуется вручную удалить их из дерева" @@ -28218,8 +28218,8 @@ msgid "" "cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " "privilege" msgstr "" -"невозможно добавить разрешение \"%(perm)s\" с типом привязки " -"\"%(bindtype)s\" в привилегию" +"невозможно добавить разрешение \"%(perm)s\" с типом привязки \"%(bindtype)s" +"\" в привилегию" msgid "cannot be empty" msgstr "не может быть пустым" @@ -31292,6 +31292,689 @@ msgstr "" msgid "Password is too long!\n" msgstr "Размер журнала паролей" +msgid "Output debug info" +msgstr "" + +#, c-format +msgid "DNS discovery for domain %s\n" +msgstr "" + +#, fuzzy, c-format +msgid "Discovered server %s\n" +msgstr "Сообщено серверами" + +#, c-format +msgid "Using discovered server %s\n" +msgstr "" + +#, c-format +msgid "DNS Discovery failed\n" +msgstr "" + +#, c-format +msgid "Using server from config %s\n" +msgstr "" + +#, fuzzy, c-format +msgid "Using provided server %s\n" +msgstr "Проверить связь с удалённым сервером." + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" +"\n" +"Правила Sudo\n" +"\n" +"Sudo (su \"do\") позволяет системному администратору делегировать " +"полномочия, чтобы дать определённым пользователям (или группам " +"пользователей) возможность выполнять некоторые (или все) команды от имени " +"пользователя \"root\" или другого пользователя, вместе с тем предоставляя " +"журнал аудита команд и их аргументов.\n" +"\n" +"IPA предоставляет возможности настройки различных аспектов Sudo:\n" +" Users: пользователь (пользователи) или группа (группы), которые могут " +"вызывать Sudo.\n" +" Hosts: узел (узлы) или группа (группы) узлов, пользователи которых могут " +"вызывать Sudo.\n" +" Allow Command: конкретная команда (команды), которые разрешены для " +"выполнения с помощью Sudo. \n" +" Deny Command: конкретная команда (команды), которые запрещены для " +"выполнения с помощью Sudo.\n" +" RunAsUser: пользователь (пользователи) или группа (группы) пользователей, " +"от имени которых Sudo будет выполнять команды.\n" +" RunAsGroup: группа (группы), от имени которых Sudo будет выполнять " +"команды.\n" +" Options: различные параметры sudoers (участники Sudo), которые могут " +"изменить поведение Sudo.\n" +"\n" +"Правилу Sudo можно добавить порядок, который будет руководить порядком " +"обработки записей (если такой порядок предусмотрен на клиентской стороне). " +"Порядок определяется числовым индексом (целое число), который не должен " +"повторяться.\n" +"\n" +"IPA предусматривает специальную привязку DN (binddn) для использования с " +"Sudo:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"Чтобы включить binddn, выполните следующую команду для установки пароля:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Создать новое правило:\n" +" ipa sudorule-add readfiles\n" +"\n" +" Добавить объект команды Sudo и добавить его в правило в качестве " +"разрешённой команды:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"\n" +" Добавить узел в правило:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"\n" +" Добавить пользователя в правило:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +"\n" +" Добавить специальное правило Sudo для конфигурации сервера Sudo по " +"умолчанию:\n" +" ipa sudorule-add defaults\n" +"\n" +" Указать параметр Sudo по умолчанию:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"For more information, see the IPA Documentation to Sudo.\n" +msgstr "" +"\n" +"Правила Sudo\n" +"\n" +"Sudo (su \"do\") позволяет системному администратору делегировать " +"полномочия, чтобы дать определённым пользователям (или группам " +"пользователей) возможность выполнять некоторые (или все) команды от имени " +"пользователя \"root\" или другого пользователя, вместе с тем предоставляя " +"журнал аудита команд и их аргументов.\n" +"\n" +"IPA предоставляет возможности настройки различных аспектов Sudo:\n" +" Users: пользователь (пользователи) или группа (группы), которые могут " +"вызывать Sudo.\n" +" Hosts: узел (узлы) или группа (группы) узлов, пользователи которых могут " +"вызывать Sudo.\n" +" Allow Command: конкретная команда (команды), которые разрешены для " +"выполнения с помощью Sudo. \n" +" Deny Command: конкретная команда (команды), которые запрещены для " +"выполнения с помощью Sudo.\n" +" RunAsUser: пользователь (пользователи) или группа (группы) пользователей, " +"от имени которых Sudo будет выполнять команды.\n" +" RunAsGroup: группа (группы), от имени которых Sudo будет выполнять " +"команды.\n" +" Options: различные параметры sudoers (участники Sudo), которые могут " +"изменить поведение Sudo.\n" +"\n" +"Правилу Sudo можно добавить порядок, который будет руководить порядком " +"обработки записей (если такой порядок предусмотрен на клиентской стороне). " +"Порядок определяется числовым индексом (целое число), который не должен " +"повторяться.\n" +"\n" +"IPA предусматривает специальную привязку DN (binddn) для использования с " +"Sudo:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"Чтобы включить binddn, выполните следующую команду для установки пароля:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"Дополнительные сведения приведены в документации IPA по Sudo.\n" + +#, fuzzy +msgid "Status of the certificate" +msgstr "Субъект сертификата" + +msgid "Enable adding subids to new users" +msgstr "" + +#, fuzzy +msgid "Setup SID configuration" +msgstr "конфигурация отношений доверия" + +msgid "New users and groups automatically get a SID assigned" +msgstr "" + +#, fuzzy +msgid "Add SIDs" +msgstr "Добавить представление ID" + +msgid "Add SIDs for existing users and groups" +msgstr "" + +#, fuzzy +msgid "NetBIOS name of the IPA domain" +msgstr "Имя доверенного домена" + +#, fuzzy +msgid "not allowed to enable SID generation" +msgstr "не разрешено выполнение операции: %s" + +msgid "" +"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " +"allowed. Empty string is not allowed." +msgstr "" + +#, fuzzy +msgid "Failed to call DBus" +msgstr "Ошибка при добавлении" + +#, fuzzy +msgid "Configuration of SID failed. See details in the error log" +msgstr "" +"Не удалось получить домены из доверенного леса. Подробные сведения доступны " +"в файле error_log" + +#, python-format +msgid "You cannot specify %s without the --enable-sid option" +msgstr "" + +#, fuzzy, python-format +msgid "" +"No answers could be found in the specified lifetime for DNS reverse zone " +"%(revdns)s" +msgstr "Ни один сервер имён не ответил на запрос обратной зоны DNS %(revdns)s" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"and an ID range of a trusted domain may set\n" +" - auto-private-groups: [true|false|hybrid] automatic creation of private " +"groups\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +#, fuzzy +msgid "Auto private groups" +msgstr "Без личной группы" + +#, fuzzy +msgid "Auto creation of private groups, one of allowed values" +msgstr "Тип диапазона идентификаторов, одно из разрешённых значений" + +#, fuzzy +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --auto-private-groups\n" +"\n" +" may be given for a new ID range for a trusted AD domain and\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" +"\n" +"Добавление нового диапазона идентификаторов.\n" +"\n" +" Для добавления нового диапазона идентификаторов всегда необходимо " +"указывать\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Кроме того,\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" могут указываться для нового диапазона идентификаторов для локального " +"домена, в то время как\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" должны быть указаны для добавления нового диапазона для доверенного " +"домена AD.\n" +"\n" + +#, fuzzy +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" +"private-groups is specified" +msgstr "" +"Если указан SID доверенного домена, тип диапазона IPA должен быть ipa-ad-" +"trust или ipa-ad-trust-posix" + +#, fuzzy +msgid "Add subid" +msgstr "Добавить правило Sudo" + +#, fuzzy +msgid "Assigned subids" +msgstr "Назначенное представление ID" + +msgid "DNA remaining" +msgstr "" + +#, fuzzy +msgid "SubGID range size" +msgstr "Размер диапазона" + +msgid "SubGID range start" +msgstr "" + +#, fuzzy +msgid "SubUID range size" +msgstr "Размер диапазона" + +msgid "SubUID range start" +msgstr "" + +msgid "Remaining subids" +msgstr "" + +msgid "Subordinate ID Statistics" +msgstr "" + +msgid "Auto assign subordinate ids" +msgstr "" + +#, fuzzy, python-brace-format +msgid "" +"Are you sure you want to auto-assign a subordinate id to user ${object}?" +msgstr "Вы действительно хотите разблокировать пользователя ${object}?" + +msgid "Subordinate IDs" +msgstr "" + +#, fuzzy, python-brace-format +msgid "{oname}: {command_name} not found" +msgstr "{role}: роль не найдена" + +#, fuzzy, python-format +msgid "authentication indicators not allowed in service \"%s\"" +msgstr "Индикаторы аутентификации" + +msgid "" +"\n" +"Subordinate ids\n" +"\n" +"Manage subordinate user and group ids for users\n" +"\n" +"EXAMPLES:\n" +"\n" +" Auto-assign a subordinate id range to current user\n" +" ipa subid-generate\n" +"\n" +" Auto-assign a subordinate id range to user alice:\n" +" ipa subid-generate --owner=alice\n" +"\n" +" Find subordinate ids for user alice:\n" +" ipa subid-find --owner=alice\n" +"\n" +" Match entry by any subordinate uid in range:\n" +" ipa subid-match --subuid=2147483649\n" +msgstr "" + +msgid "Subordinate id" +msgstr "" + +msgid "Subordinate ids" +msgstr "" + +#, fuzzy +msgid "Subordinate id description" +msgstr "Описание профиля" + +msgid "Owning user of subordinate id entry" +msgstr "" + +msgid "Start value for subordinate user ID (subuid) range" +msgstr "" + +msgid "Subordinate user ID count" +msgstr "" + +msgid "Start value for subordinate group ID (subgid) range" +msgstr "" + +msgid "Subordinate group ID count" +msgstr "" + +#, fuzzy, python-format +msgid "" +"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." +msgstr "%(oname)s с именем \"%(pkey)s\" уже существует" + +#, fuzzy, python-format +msgid "'%(dn)s is not a valid user" +msgstr "%(port)s не является допустимым портом" + +msgid "subgidnumber must be equal to subuidnumber" +msgstr "" + +#, fuzzy +msgid "Add a new subordinate id." +msgstr "Добавить нового неподтверждённого пользователя." + +#, fuzzy, python-format +msgid "Added subordinate id \"%(value)s\"" +msgstr "Добавлена служба \"%(value)s\"" + +#, fuzzy +msgid "Delete a subordinate id." +msgstr "Удалить профиль сертификатов." + +#, fuzzy, python-format +msgid "Deleted subordinate id \"%(value)s\"" +msgstr "Удалена служба \"%(value)s\"" + +#, fuzzy +msgid "Modify a subordinate id." +msgstr "Изменить неподтверждённого пользователя." + +#, fuzzy, python-format +msgid "Modified subordinate id \"%(value)s\"" +msgstr "Изменена служба \"%(value)s\"" + +#, fuzzy +msgid "Search for subordinate id." +msgstr "Поиск диапазонов." + +#, fuzzy, python-format +msgid "%(count)d subordinate id matched" +msgid_plural "%(count)d subordinate ids matched" +msgstr[0] "установлено соответствие %(count)d службы" +msgstr[1] "установлено соответствие %(count)d служб" +msgstr[2] "установлено соответствие %(count)d служб" + +#, fuzzy +msgid "Display information about a subordinate id." +msgstr "Показать сведения о диапазоне." + +msgid "Generate and auto-assign subuid and subgid range to user entry" +msgstr "" + +msgid "Match users by any subordinate uid in their range" +msgstr "" + +msgid "SubUID match" +msgstr "" + +msgid "Match value for subordinate user ID" +msgstr "" + +msgid "Subordinate id statistics" +msgstr "" + +#, python-format +msgid "%(remaining)i remaining subordinate id ranges" +msgstr "" + +#, fuzzy +msgid "Maximum password life must be equal to or greater than the minimum." +msgstr "Максимальный срок жизни пароля должен быть больше минимального." + +#, fuzzy, python-format +msgid "Failed to remove server from security domain: %s" +msgstr "Не удалось удалить сервер %(master)s из списка серверов: %(err)s" + +msgid "" +"\n" +"Each option needs to be added separately and no validation is done whether\n" +"the option is known by sudo or is in a valid format. Environment variables\n" +"also need to be set individually. For example env_keep=\"FOO BAR\" in " +"sudoers\n" +"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" +"+=BAR.\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" +"\n" +"Чтобы включить binddn, выполните следующую команду для установки пароля:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" + +#, fuzzy +msgid "" +"\n" +" Set multiple default Sudo options:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate' --" +"sudooption mail_badpass\n" +msgstr "" +"\n" +" Указать параметр Sudo по умолчанию:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" + #~ msgid "" #~ "\n" #~ " Delete a CA.\n" diff --git a/po/si.po b/po/si.po index e3edea645..e62cb72e3 100644 --- a/po/si.po +++ b/po/si.po @@ -7834,9 +7834,9 @@ msgid "" "uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" "\n" "To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." +"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," +"dc=example,dc=com\n" "\n" "EXAMPLES:\n" "\n" @@ -11438,9 +11438,9 @@ msgid "" "uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" "\n" "To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." +"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," +"dc=example,dc=com\n" "\n" "For more information, see the IPA Documentation to Sudo.\n" msgstr "" @@ -13100,9 +13100,9 @@ msgstr "" msgid "" "\n" "To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." +"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," +"dc=example,dc=com\n" msgstr "" msgid "" @@ -23292,3 +23292,526 @@ msgstr "" msgid "Bad or unsupported salt type.\n" msgstr "" + +msgid "Output debug info" +msgstr "" + +#, c-format +msgid "DNS discovery for domain %s\n" +msgstr "" + +#, c-format +msgid "Discovered server %s\n" +msgstr "" + +#, c-format +msgid "Using discovered server %s\n" +msgstr "" + +#, c-format +msgid "DNS Discovery failed\n" +msgstr "" + +#, c-format +msgid "Using server from config %s\n" +msgstr "" + +#, c-format +msgid "Using provided server %s\n" +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"For more information, see the IPA Documentation to Sudo.\n" +msgstr "" + +msgid "Status of the certificate" +msgstr "" + +msgid "Enable adding subids to new users" +msgstr "" + +msgid "Setup SID configuration" +msgstr "" + +msgid "New users and groups automatically get a SID assigned" +msgstr "" + +msgid "Add SIDs" +msgstr "" + +msgid "Add SIDs for existing users and groups" +msgstr "" + +msgid "NetBIOS name of the IPA domain" +msgstr "" + +msgid "not allowed to enable SID generation" +msgstr "" + +msgid "" +"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " +"allowed. Empty string is not allowed." +msgstr "" + +msgid "Failed to call DBus" +msgstr "" + +msgid "Configuration of SID failed. See details in the error log" +msgstr "" + +#, python-format +msgid "You cannot specify %s without the --enable-sid option" +msgstr "" + +#, python-format +msgid "" +"No answers could be found in the specified lifetime for DNS reverse zone " +"%(revdns)s" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"and an ID range of a trusted domain may set\n" +" - auto-private-groups: [true|false|hybrid] automatic creation of private " +"groups\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "Auto private groups" +msgstr "" + +msgid "Auto creation of private groups, one of allowed values" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --auto-private-groups\n" +"\n" +" may be given for a new ID range for a trusted AD domain and\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" +"private-groups is specified" +msgstr "" + +msgid "Add subid" +msgstr "" + +msgid "Assigned subids" +msgstr "" + +msgid "DNA remaining" +msgstr "" + +msgid "SubGID range size" +msgstr "" + +msgid "SubGID range start" +msgstr "" + +msgid "SubUID range size" +msgstr "" + +msgid "SubUID range start" +msgstr "" + +msgid "Remaining subids" +msgstr "" + +msgid "Subordinate ID Statistics" +msgstr "" + +msgid "Auto assign subordinate ids" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to auto-assign a subordinate id to user ${object}?" +msgstr "" + +msgid "Subordinate IDs" +msgstr "" + +#, python-brace-format +msgid "{oname}: {command_name} not found" +msgstr "" + +#, python-format +msgid "authentication indicators not allowed in service \"%s\"" +msgstr "" + +msgid "" +"\n" +"Subordinate ids\n" +"\n" +"Manage subordinate user and group ids for users\n" +"\n" +"EXAMPLES:\n" +"\n" +" Auto-assign a subordinate id range to current user\n" +" ipa subid-generate\n" +"\n" +" Auto-assign a subordinate id range to user alice:\n" +" ipa subid-generate --owner=alice\n" +"\n" +" Find subordinate ids for user alice:\n" +" ipa subid-find --owner=alice\n" +"\n" +" Match entry by any subordinate uid in range:\n" +" ipa subid-match --subuid=2147483649\n" +msgstr "" + +msgid "Subordinate id" +msgstr "" + +msgid "Subordinate ids" +msgstr "" + +msgid "Subordinate id description" +msgstr "" + +msgid "Owning user of subordinate id entry" +msgstr "" + +msgid "Start value for subordinate user ID (subuid) range" +msgstr "" + +msgid "Subordinate user ID count" +msgstr "" + +msgid "Start value for subordinate group ID (subgid) range" +msgstr "" + +msgid "Subordinate group ID count" +msgstr "" + +#, python-format +msgid "" +"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." +msgstr "" + +#, python-format +msgid "'%(dn)s is not a valid user" +msgstr "" + +msgid "subgidnumber must be equal to subuidnumber" +msgstr "" + +msgid "Add a new subordinate id." +msgstr "" + +#, python-format +msgid "Added subordinate id \"%(value)s\"" +msgstr "" + +msgid "Delete a subordinate id." +msgstr "" + +#, python-format +msgid "Deleted subordinate id \"%(value)s\"" +msgstr "" + +msgid "Modify a subordinate id." +msgstr "" + +#, python-format +msgid "Modified subordinate id \"%(value)s\"" +msgstr "" + +msgid "Search for subordinate id." +msgstr "" + +#, python-format +msgid "%(count)d subordinate id matched" +msgid_plural "%(count)d subordinate ids matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about a subordinate id." +msgstr "" + +msgid "Generate and auto-assign subuid and subgid range to user entry" +msgstr "" + +msgid "Match users by any subordinate uid in their range" +msgstr "" + +msgid "SubUID match" +msgstr "" + +msgid "Match value for subordinate user ID" +msgstr "" + +msgid "Subordinate id statistics" +msgstr "" + +#, python-format +msgid "%(remaining)i remaining subordinate id ranges" +msgstr "" + +msgid "Maximum password life must be equal to or greater than the minimum." +msgstr "" + +#, python-format +msgid "Failed to remove server from security domain: %s" +msgstr "" + +msgid "" +"\n" +"Each option needs to be added separately and no validation is done whether\n" +"the option is known by sudo or is in a valid format. Environment variables\n" +"also need to be set individually. For example env_keep=\"FOO BAR\" in " +"sudoers\n" +"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" +"+=BAR.\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Set multiple default Sudo options:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate' --" +"sudooption mail_badpass\n" +msgstr "" diff --git a/po/sk.po b/po/sk.po index 80e2977c0..4573565a3 100644 --- a/po/sk.po +++ b/po/sk.po @@ -14,2641 +14,428 @@ msgstr "" "Plural-Forms: nplurals=3; plural=(n==1) ? 0 : (n>=2 && n<=4) ? 1 : 2\n" "X-Generator: Zanata 4.6.2\n" -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" -"\n" -" Pridanie lokality:\n" -" ipa location-add lokalita --description 'Moja lokalita'\n" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" -"\n" -" Odstránenie lokality:\n" -" ipa location-del lokalita\n" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" -"\n" -" Nájdenie všetkých lokalít:\n" -" ipa location-find\n" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" -"\n" -" Zobrazenie špecifickej lokality:\n" -" ipa location-show lokalita\n" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" -"\n" -"PRÍKLADY:\n" - -msgid "" -"\n" -"IPA locations\n" -msgstr "" -"\n" -"IPA lokality\n" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" -"\n" -"Spravovať YubiKey tokeny.\n" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" -"\n" -"Narábanie s DNS lokalitami\n" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" -"\n" -"OTP tokeny\n" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" -"\n" -"YubiKey Tokeny\n" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "\"%s\" nie je platný typ povolenia" - -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "${count} certifikátov prítomných" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "${count} položiek odstránených" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "${count} item(s) deaktivovaných" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "${count} položiek odstránneých" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "${count} option(s) odstránených" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "${count} používateľov obnovených" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "${count} users(s) predpripravených" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "Nastavenia pre ${entity} ${primary_key}" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "${primary_key} je členom:" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "%(attr)s neobsahuje '%(value)s'" - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "%(attr)s: Nesprávna syntax." - -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "%(attr)s: Len jedna hodnota je povolená." - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "%(count)d IPA lokalita nájdená" -msgstr[1] "%(count)d IPA lokalít nájdených" -msgstr[2] "%(count)d IPA lokalít nájdených" - -#, python-format -msgid "%(desc)s: %(info)s" -msgstr "%(desc)s: %(info)s" - -#, python-format -msgid "%(exception)s" -msgstr "%(exception)s" - -#, python-format -msgid "%(info)s" -msgstr "%(info)s" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" -"%(key)s nemôže byť odstránené pretože %(label)s %(dependent)s to vyžaduje" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" -"%(key)s nemôže byť odstránené alebo deaktivované pretože je to posledný člen " -"%(label)s %(container)s" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "%(label)s %(key)s nemôže byť ostránené/upravené: %(reason)s" - -#, python-format -msgid "%(line)s" -msgstr "%(line)s" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "%(name)s certifikát nie je platný" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "%(otype)s \"%(oname)s\" nenájdené" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "%(parent)s: %(oname)s nenájdený" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "%(pkey)s: %(oname)s nenájdený" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "%(port)s nie je platný port" - -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "%(user)s nie je POSIX užívateľ" - -#, python-format -msgid "%s Record" -msgstr "%s záznam" - -#, python-format -msgid "%s record" -msgstr "%s záznam" - -#, python-format -msgid "%s: group not found" -msgstr "%s: skupina nenájdená" - -#, python-format -msgid "%s: user is already preserved" -msgstr "%s: používateľ je už uschovaný" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "'${port}' nie je valídny port" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "'%(command)s' príkaz je zastaraný %(additional_info)s" - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "'%(entry)s' nemá certifikát." - -#, python-format -msgid "'%(name)s' is required" -msgstr "'%(name)s' je požadované" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "'%(option)s'voľba je zastaraná. %(additional_info)s" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "(pozrite RFC %s pre viac detailov)" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" -"
  1. Vytvorte databázu certifikátov alebo použite už existujúcu. " -"Vytvorenie novej databázy:
    # certutil -N -d <database path>" -"
  2. Vytvorte CSR so subjektom CN=<${cn_name}>,O=<" -"realm>, napríklad:
    # certutil -R -d <database path> " -"-a -g <key size> -s 'CN=${cn},O=${realm}'${san}
  3. " -"Nakopírujte CSR (od -----BEGIN NEW CERTIFICATE REQUEST----- do " -"-----END NEW CERTIFICATE REQUEST-----) do textového poľa nižšie:
" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "SYSTEM-ové povolenia nemožu byť upravené alebo odstránené" - -msgid "A group may not be a member of itself" -msgstr "Skupina nemože byť členom seba samej" - -msgid "ACI" -msgstr "ACI" - -msgid "ACI name" -msgstr "ACI názov" - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "ACI pre oprávnenie %s sa nenašlo" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "ACI s názvom \"%s\" nenájdené" - -msgid "ACIs" -msgstr "ACI" - -msgid "Access Denied" -msgstr "Prístup odmietnutý" - -msgid "Access Granted" -msgstr "Prístup povolený" - -#, python-format -msgid "Access granted: %s" -msgstr "Prístup povolený: %s" - -msgid "Access time" -msgstr "Čas prístupu" - -msgid "Account" -msgstr "Účet" - -msgid "Account Settings" -msgstr "Nastavenia účtu" - -msgid "Account Status" -msgstr "Stav účtu" - -msgid "Account disabled" -msgstr "Účet deaktivovaný" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "Účet deaktivovaný: %(disabled)s" - -msgid "Actions" -msgstr "Akcie" - -msgid "Active Directory domain" -msgstr "Active Directory doména" - -msgid "Active Directory domain with POSIX attributes" -msgstr "Active Directory doména s POSIX attribútmy" - -msgid "Active Directory winsync" -msgstr "Active Directory winsync" - -msgid "Active users" -msgstr "Aktívni používatelia" - -msgid "Active zone" -msgstr "Aktívna zóna" - -msgid "Add" -msgstr "Pridať" - -msgid "Add a new HBAC service." -msgstr "Pridať novú HBAC službu." - -msgid "Add a new ID View." -msgstr "Pridať nové ID View" - -msgid "Add a new IPA location." -msgstr "Pridať novú IPA lokalitu." - -msgid "Add a new YubiKey OTP token." -msgstr "Pridať nový YubiKey OTP token." - -msgid "Add and Add Another" -msgstr "Pridať a pridať ďalšie" - -msgid "Add and Close" -msgstr "Pridať a zavrieť" - -msgid "Add and Edit" -msgstr "Pridať a upraviť" - -msgid "Add new DNS resource record." -msgstr "Pridať nový DNS záznam" - -msgid "Add new certificates to a service" -msgstr "Pridať nové certifikáty k službe" - -msgid "Add one or more certificates to the user entry" -msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" - -msgid "Add services to an HBAC rule." -msgstr "Pridať služby do HBAC pravidla." - -msgid "Add to default group" -msgstr "Pridať do predvolenej skupiny" - -msgid "Add users and groups to an HBAC rule." -msgstr "Pridať používateľov a skupiny do HBAC pravidla." - -msgid "Add users that can manage this token." -msgstr "Pridať používateľa, ktorý môže spravovať tento token." - -#, python-format -msgid "Added %(map)s" -msgstr "Pridané %(map)s" - -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "Pridané %(src)s do %(dst)s" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "HBAC pravidlo \"%(value)s\" bolo pridané" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola pridaná" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "Pridané ID View \"%(value)s\"" - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "Pridaná IPA lokalita \"%(value)s\"" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "Pridané automember pravidlo \"%(value)s\"" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -msgid "Address not valid, can't redirect" -msgstr "Neplatná adresa, nemôžem presmerovať" - -msgid "Administrator e-mail address" -msgstr "E-mailová adresa administrátora" - -msgid "Advertised by servers" -msgstr "Oznamované servermi" - -msgid "All" -msgstr "Všetko" - -msgid "Allow" -msgstr "Povoliť" - -msgid "Allow PTR sync" -msgstr "Povoliť PTR synchronizáciu" - -msgid "Allow dynamic updates." -msgstr "Povoliť dynamické aktualizácie" - -msgid "Allow query" -msgstr "Povoliť dotazy" - -msgid "Allow transfer" -msgstr "Povoliť prenos" - -#, python-brace-format -msgid "An error has occurred (${error})" -msgstr "Nastala chyba (${error})" - -msgid "Any CA" -msgstr "Akákoľvek CA" - -msgid "Any Command" -msgstr "Akýkoľvek príkaz" - -msgid "Any Group" -msgstr "Akákoľvek skupina" - -msgid "Any Profile" -msgstr "Akýkoľvek profil" - -msgid "Any Service" -msgstr "Akákoľvek služba" - -msgid "Anyone" -msgstr "Každý" - -msgid "Apply" -msgstr "Použiť" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" -"Ste si istý/istá, že chcete ${action} používateľa?
Zmena bude vykonaná " -"okamžite." - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "Ste si istý/istá, že chcete pridať povolenie pre DNS zónu ${object}?" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "Ste si istý/istá, že chcete odstrániť ${object}?" - -msgid "Are you sure you want to delete selected entries?" -msgstr "Ste si istý/istá, že chcete odstrániť vybrané položky?" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "Ste si istý/istá, že chcete deaktivovať ${object}?" - -msgid "Are you sure you want to disable selected entries?" -msgstr "Ste si istý/istá, že chcete deaktivovať vybrané položky?" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "Ste si istý/istá, že chcete aktivovať ${object}?" - -msgid "Are you sure you want to enable selected entries?" -msgstr "Ste si istý/istá, že chcete aktivovať vybrané položky?" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "" -"Ste si istý/istá, že chcete odstrániť povolenie pre DNS zónu ${object}?" - -msgid "Are you sure you want to restore selected users?" -msgstr "Ste si istý/istá, že chcete obnoviť vybraných používateľov?" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "Ste si istý/istá, že chcete odomknúť užívateľa ${object}?" - -msgid "Attributes" -msgstr "Atribúty" - -msgid "Audit" -msgstr "Audit" - -msgid "Authentication" -msgstr "Autentifikácia" - -msgid "Authoritative nameserver" -msgstr "Autoritatívny nameserver" - -msgid "Authoritative nameserver domain name" -msgstr "Doménové meno autoritatívneho nameservera" - -msgid "Authority ID" -msgstr "ID autority" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "Automember pravidlo: %s nenájdené!" - -msgid "Automember" -msgstr "Automember" - -msgid "Automember Rule" -msgstr "Automember pravidlo" - -msgid "Automember rebuild membership task completed" -msgstr "Úloha obnovenia automember členstva dokončená" - -msgid "Automember rebuild membership task started" -msgstr "Úloha obnovenia automember členstva začala" - -msgid "Automount" -msgstr "Automount" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "Zlý vyhľadávací filter %(info)s" - -msgid "Base-64 encoded certificate." -msgstr "Base-64 zakódovaný certifikát." - -msgid "Base-64 encoded service certificate" -msgstr "Base-64 zakódovaný certifikát služby" - -msgid "Base-64 encoded user certificate" -msgstr "Base-64 zakódovaný používateľský certifikát" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "Base64 dekódovanie zlyhalo: %(reason)s" - -msgid "CA certificate" -msgstr "CA certifikát" - -msgid "Cancel" -msgstr "Zrušiť" - -#, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "Nie je možné dekódovať súbor '%(filename)s': %(exc)s" - -#, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "Nie je možné čítať súbor '%(filename)s': %(exc)s" - -msgid "Certificate" -msgstr "Certifikát" - -msgid "Certificate Authorities" -msgstr "Certifikačné autority" - -msgid "Certificate Authority" -msgstr "Certifikačná autorita" - -msgid "Certificate Hold" -msgstr "Držanie certifikátu" - -msgid "Certificate Hold Removed" -msgstr "Držanie certifikátu odstránené" - -msgid "Certificate Profile" -msgstr "Certifikačný profil" - -msgid "Certificate Profiles" -msgstr "Certifikačné profily" - -msgid "Certificate Revoked" -msgstr "Certifikát revokovaný" - -msgid "Certificate Type" -msgstr "Typ certifikátu" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "Certifikát pre ${entity} ${primary_key}" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "Chyba formátu certifikátu: %(error)s" - -msgid "Certificate profiles cannot be renamed" -msgstr "Certifikačné profily nemôžu byť premenované" - -msgid "Certificate requested" -msgstr "Certifikačná požiadavka" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" -"Certifikát so sériovým číslom %(serial)s vydaný CA '%(ca)s' sa nenašiel" - -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "Certifikát(y) sú uložené v súbore '%(file)s'" - -msgid "Certificates" -msgstr "Certifikáty" - -msgid "Change password" -msgstr "Zmeniť heslo" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "Zmenené heslo pre \"%(value)s\"" - -msgid "Check DNS" -msgstr "Skontrolovať DNS" - -msgid "City" -msgstr "Mesto" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "Klient nie je nakonfigurovaný. Spustite ipa-client-install." - -msgid "Collapse All" -msgstr "Zbaliť všetko" - -msgid "Command name" -msgstr "Názov príkazu" - -msgid "Command not implemented" -msgstr "Príkaz nie je implementovaný" - -msgid "Commands" -msgstr "Príkazy" - -msgid "Configuration" -msgstr "Konfigurácia" - -msgid "Configured size limit exceeded" -msgstr "Nakonfigurovaný veľkostný limit bol dosiahnutý" - -msgid "Configured time limit exceeded" -msgstr "Nakonfigurovaný časový limit bol dosiahnutý" - -msgid "Confirmation" -msgstr "Potvrdenie" - -msgid "Contact Settings" -msgstr "Nastavenia kontaktných údajov" - -msgid "Continue" -msgstr "Pokračovať" - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "Nie je možné interaktívne získať %(name)s" - -msgid "Create a new HBAC rule." -msgstr "Vytvoriť nové HBAC pravidlo" - -msgid "Create a new group." -msgstr "Vytvoriť novú skupinu." - -msgid "Create dns record" -msgstr "Vytvoriť DNS záznam" - -msgid "Create new DNS forward zone." -msgstr "Vytvoriť novú DNS forward zónu" - -msgid "Create reverse" -msgstr "Vytvoriť reverzný" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "Vytvorené ACI \"%(value)s\"" - -msgid "Creating record." -msgstr "Vytváranie záznamu." - -msgid "Current DNS record contents:\n" -msgstr "Aktuálny obsah DNS záznamu:\n" - -msgid "Current Password" -msgstr "Súčasné heslo" - -msgid "Current password is required" -msgstr "Súčasné heslo je povinné" - -msgid "Custom value" -msgstr "Vlastná hodnota" - -msgid "DNS" -msgstr "DNS" - -msgid "DNS Forward Zone" -msgstr "DNS forward zóna" - -msgid "DNS Forward Zones" -msgstr "DNS forward zóny" - -msgid "DNS Global Configuration" -msgstr "DNS globálne nastavenia" - -msgid "DNS Zone" -msgstr "DNS zóna" - -msgid "DNS Zone Settings" -msgstr "Nastavenia DNS zóny" - -msgid "DNS Zones" -msgstr "DNS zóny" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "DNS kontrola zlyhala: Očakávané {%(expected)s} prijaté {%(got)s}" - -msgid "DNS configuration options" -msgstr "DNS konfiguračné voľby" - -msgid "DNS forward zone" -msgstr "DNS forward zóna" - -msgid "DNS forward zones" -msgstr "DNS forward zóny" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" -"Sémantika DNS forwarderov je zmenená od IPA 4.0.\n" -"Pravdepodobne ste chceli použiť (dnsforwardzone-*).\n" -"Pre viac informácií prosím prečítajte dokumentáciu." - -msgid "DNS label cannot be longer than 63 characters" -msgstr "DNS label nemôže byť dlhší ako 63 znakov" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "DNS label nemôže byť dlhší ako 63 znakov" - -msgid "DNS record was deleted because it contained no data." -msgstr "DNS záznam bol odstránený pretože neobsahoval žiadne údaje." - -msgid "DNS resource record type" -msgstr "Typ DNS záznamu" - -msgid "DNS server" -msgstr "DNS server" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"DNS server %(server)s nepodporuje DNSSEC: %(error)s.\n" -"Ak je DNSSEC validácia aktivovaná na IPA serveroch, prosím deaktivujte ju." - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"DNS server %(server)s nepodporuje EDNS0 (RFC 6891): %(error)s.\n" -"Ak je DNSSEC validácia aktivovaná na IPA serveroch, prosím deaktivujte ju." - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "DNS server %(server)s: %(error)s." - -msgid "DNS zone" -msgstr "DNS zóna" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "DNS zóna %(zone)s nenájdená" - -msgid "DNS zones" -msgstr "DNS zóny" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" -"DNSSEC podpora je experimentálna.\n" -"%(additional_info)s" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" -"DNSSEC validácia zlyhala: %(error)s.\n" -"Prosím overte Vašu DNSSEC konfiguráciu alebo deaktivujte DNSSEC validáciu na " -"všetkých IPA serveroch." - -msgid "Default attributes" -msgstr "Predvolené atribúty" - -msgid "Default group for new users not found" -msgstr "Predvolená skupina pre nových používateľov nenájdená" - -msgid "Default user group" -msgstr "Predvolená používateľská skupina" - -msgid "Delete" -msgstr "Odstrániť" - -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "Odstrániť %(name)s '%(value)s'?" - -msgid "Delete DNS forward zone." -msgstr "Odstrániť DNS forward zónu." - -msgid "Delete DNS resource record." -msgstr "Odstrániť DNS záznam" - -msgid "Delete DNS zone (SOA record)." -msgstr "Odstrániť DNS zónu (SOA záznam)." - -msgid "Delete a CA ACL." -msgstr "Odstrániť CA ACL." - -msgid "Delete a Certificate Profile." -msgstr "Odstrániť certifikačný profil" - -msgid "Delete a user" -msgstr "Odstrániť používateľa" - -msgid "Delete all?" -msgstr "Odstrániť všetko?" - -msgid "Delete an HBAC rule." -msgstr "Odstrániť HBAC pravidlo." - -msgid "Delete an ID View." -msgstr "Odstrániť ID View." - -msgid "Delete an ID range." -msgstr "Zmazať ID rozsah." - -msgid "Delete an IPA location." -msgstr "Odstrániť IPA lokalitu." - -msgid "Delete an OTP token." -msgstr "Odstrániť OTP token" - -msgid "Delete an existing HBAC service." -msgstr "Odstrániť existujúcu HBAC službu." - -msgid "Delete group." -msgstr "Odstrániť skupinu." - -msgid "Delete mode" -msgstr "Mód odstránenia" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "Odstránené ACI \"%(value)s\"" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "Odstránené CA ACL \"%(value)s\"" - -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "Odstránená DNS forward zóna \"%(value)s\"" - -#, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "Odstránená DNS zóna \"%(value)s\"" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "Odstránené HBAC pravidlo \"%(value)s\"" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola odstránená" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "Odstránené ID View \"%(value)s\"" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "Odstránená IPA lokalita \"%(value)s\"" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "Odstránený OTP token \"%(value)s\"" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "Odstránené automember pravidlo \"%(value)s\"" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "Odstránená skupina \"%(value)s\"" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "Odstránený profil \"%(value)s\"" - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "Odstránený záznam \"%(value)s\"" - -msgid "Deny" -msgstr "Zakázať" - -msgid "Department Number" -msgstr "Číslo oddelenia" - -msgid "Deprecated options" -msgstr "Zastarané voľby" - -msgid "Description" -msgstr "Popis" - -msgid "Detect" -msgstr "Detekovať" - -msgid "Dict of JSON encoded IPA Commands" -msgstr "Slovník JSON zakódovaných IPA príkazov" - -msgid "Dict of JSON encoded IPA Methods" -msgstr "Slovník JSON zakódovaných IPA metód" - -msgid "Dict of JSON encoded IPA Objects" -msgstr "Slovník JSON zakódovaných IPA objektov" - -msgid "Direct" -msgstr "Priame" - -msgid "Direct Membership" -msgstr "Priame členstvo" - -msgid "Disable" -msgstr "Deaktivovať" - -msgid "Disable DNS Forward Zone." -msgstr "Deaktivovať DNS forward zónu." - -msgid "Disable DNS Zone." -msgstr "Deaktivovať DNS zónu." - -msgid "Disable a CA ACL." -msgstr "Deaktivovať CA ACL." - -msgid "Disable a user account." -msgstr "Deaktivovať používateľský účet." - -msgid "Disable an HBAC rule." -msgstr "Deaktivovať HBAC pravidlo." - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "Deaktivovať Kerberos kľúč a SSL certifikát služby." - -msgid "Disable token" -msgstr "Deaktiovať token" - -msgid "Disabled" -msgstr "Deaktivované" - -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "Deaktivované CA ACL \"%(value)s\"" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "Deaktivovaná DNS forward zóna \"%(value)s\"" - -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "Deaktivovaná DNS zóna \"%(value)s\"" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "Deaktivované HBAC pravidlo \"%(value)s\"" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "Deaktivované sudo pravidlá \"%s\"" - -#, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "Deaktivovaná služba \"%(value)s\"" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "Deaktivovaný používateľský účet \"%(value)s\"" - -msgid "Display information about a DNS forward zone." -msgstr "Zobraziť informácie o DNS forward zóne" - -msgid "Display information about an IPA location." -msgstr "Zobraziť informácie o IPA lokalite." - -msgid "Display name" -msgstr "Zobrazované meno" - -msgid "Dogtag Authority ID" -msgstr "ID Dogtag autority" - -msgid "Domain" -msgstr "Doména" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "Doména '%(domain)s' nie je koreňovou doménou pre les '%(forest)s'" - -msgid "Domain NetBIOS name" -msgstr "Doménové NetBIOS meno" - -msgid "Domain name" -msgstr "Doménové meno" - -msgid "Duplicate keys skipped:" -msgstr "Duplikované kľúče preskočené:" - -msgid "Dynamic update" -msgstr "Dynamické aktualizácie" - -msgid "Edit" -msgstr "Upraviť" - -msgid "Email address" -msgstr "E-mailová adresa" - -msgid "Employee Information" -msgstr "Informácie o zamestnancovi" - -msgid "Employee Number" -msgstr "Zamestnanecké číslo" - -msgid "Employee Type" -msgstr "Typ zamestnanca" - -msgid "Enable an HBAC rule." -msgstr "Aktivovať HBAC pravidlo." - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "HBAC pravidlo \"%(value)s\" bolo aktivované" - -#, python-format -msgid "Entry %s does not exist" -msgstr "Položka %s neexistuje" - -#, python-format -msgid "Entry %s not found" -msgstr "Položka %s nenájdená" - -msgid "Excluded attributes" -msgstr "Vylúčené atribúty" - -msgid "Expand All" -msgstr "Rozbaliť všetko" - -msgid "Expression" -msgstr "Výraz" - -msgid "Failed to add" -msgstr "Zlyhalo pridanie" - -msgid "Fax Number" -msgstr "Faxové číslo" - -#, python-format -msgid "File %(file)s not found" -msgstr "Súbor %(file)s nenájdený" - -msgid "Filter" -msgstr "Filter" - -msgid "Find" -msgstr "Hľadať" - -msgid "First Code" -msgstr "Prvý kód" - -msgid "First OTP" -msgstr "Prvé OTP" - -msgid "First name" -msgstr "Meno" - -msgid "Force" -msgstr "Vynútiť" - -msgid "Force Update" -msgstr "Vynútiť aktualizáciu" - -msgid "Format error" -msgstr "Chyba formátu" - -msgid "Forwarders" -msgstr "Forwardery" - -#, python-format -msgid "Found '%(value)s'" -msgstr "Nájdené '%(value)s'" - -msgid "Full name" -msgstr "Celé meno" - -msgid "GECOS" -msgstr "GECOS" - -msgid "GID" -msgstr "GID" - -msgid "Get Certificate" -msgstr "Získať certifikát" - -msgid "Global DNS configuration is empty" -msgstr "Globálna DNS konfigurácia je prázdna," - -msgid "Global forwarders" -msgstr "Globálne forwardery" - -msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Globálne forwardery. Vlastný port môže byť nastavený použítím štandardného " -"formátu \"IP_ADRESA port PORT\" pre každý forwarder " - -msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." -msgstr "" -"Globálna forward politika. Nastavením na \"none\" sa deaktivuje akýkoľvek " -"nastavený globálny forwarder." - -msgid "Group ID Number" -msgstr "ID skupiny" - -msgid "Group Options" -msgstr "Voľby skupiny" - -msgid "Group Settings" -msgstr "Nastavenia skupiny" - -msgid "Group Type" -msgstr "Typ skupiny" - -msgid "Group description" -msgstr "Popis skupiny" - -msgid "Group name" -msgstr "Názov skupiny" - -msgid "Groups" -msgstr "Skupiny" - -msgid "HBAC Rules" -msgstr "HBAC pravidlá" - -msgid "HBAC Service" -msgstr "HBAC služba" - -msgid "HBAC Services" -msgstr "HBAC služby" - -msgid "HBAC Test" -msgstr "HBAC test" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "HBAC pravidlo %(rule)s nenájdené" - -msgid "HBAC rules" -msgstr "HBAC pravidlá" - -msgid "HBAC service" -msgstr "HBAC služba" - -msgid "HBAC service description" -msgstr "HBAC popis služby" - -msgid "HBAC services" -msgstr "HBAC služby" - -msgid "HTTP Error" -msgstr "Chyba HTTP" - -msgid "Hide" -msgstr "Skryť" - -msgid "Hide details" -msgstr "Skryť detaily" - -msgid "Home directory" -msgstr "Domovský priečinok" - -msgid "ID Range" -msgstr "ID rozsah" - -msgid "ID Ranges" -msgstr "ID rozsahy" - -msgid "ID View Name" -msgstr "Názov ID View" - -msgid "ID Views" -msgstr "ID Views" - -msgid "IP Address" -msgstr "IP adresa" - -msgid "IPA CA cannot be deleted" -msgstr "IPA CA nemôže byť odstránené" - -msgid "IPA DNS records" -msgstr "IPA DNS záznamy" - -msgid "IPA DNS version" -msgstr "Verzia IPA DNS" - -msgid "IPA Error" -msgstr "IPA chyba" - -msgid "IPA Location" -msgstr "IPA lokalita" - -msgid "IPA Location description" -msgstr "Popis IPA lokality" - -msgid "IPA Locations" -msgstr "IPA lokality" - -msgid "IPA Server" -msgstr "IPA Server" - -msgid "IPA location name" -msgstr "Názov IPA lokality" - -msgid "IPA object" -msgstr "IPA objekt" - -msgid "IPA role name" -msgstr "Názov IPA role" - -msgid "IPA server role name" -msgstr "Názov role servera" - -msgid "IPA trust" -msgstr "IPA trust" - -msgid "IPA unique ID" -msgstr "IPA unikátne ID" - -msgid "Identity" -msgstr "Identita" - -msgid "Identity Settings" -msgstr "Nastavenia identity" - -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "Ignorované %(src)s do %(dst)s" - -msgid "Ignored keys:" -msgstr "Ignorované kľúče:" - -msgid "Import a Certificate Profile." -msgstr "Importovať certifikačný profil" - -msgid "Imported keys:" -msgstr "Importované kľúče:" - -msgid "Include all disabled IPA rules into test" -msgstr "Zahrnúť všetky deaktivované IPA pravidlá do testu" - -msgid "Included attributes" -msgstr "Zahrnuté atribúty" - -msgid "Indirect" -msgstr "Nepriame" - -msgid "Indirect Membership" -msgstr "Nepriame členstvo" - -msgid "Inherited from server configuration" -msgstr "Zdedené z konfigurácie servera" - -msgid "Initials" -msgstr "Iniciály" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "Nedostatočný prístup: %(info)s" - -msgid "Internal Error" -msgstr "Vnútorná chyba" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "Nevalídna JSON-RPC požiadavka: %(error)s" - -msgid "Invalid LDAP URI." -msgstr "Neplatná LDAP URI." - -msgid "Invalid credentials" -msgstr "Nesprávne prihlasovacie údaje" - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "Nesprávny alebo nepodporovaný typ. Povolené hodnoty sú: %s" - -msgid "Is zone active?" -msgstr "Je zóna aktívna?" - -msgid "Issue" -msgstr "Vydať" - -msgid "Job Title" -msgstr "Pracovná pozícia" - -msgid "Kerberos Key" -msgstr "Kerberos kľúč" - -msgid "Kerberos Key Not Present" -msgstr "Kerberos kľúč nie je prítomný" - -msgid "Keytab" -msgstr "Keytab" - -msgid "LDAP URI" -msgstr "LDAP URI" - -msgid "LDAP schema" -msgstr "LDAP schéma" - -msgid "Last name" -msgstr "Priezvisko" - -msgid "Leading and trailing spaces are not allowed" -msgstr "Počiatočné a koncové medzery nie sú povolené" - -msgid "Length of TOTP token code validity" -msgstr "Dĺžka platnosti TOTP token kódu" - -msgid "List of deletions that failed" -msgstr "Zoznam odstránení, ktoré zlyhaly" - -msgid "List of servers which advertise the given location" -msgstr "Zoznam serverov oznamujúcich danú lokalitu" - -msgid "Load CA certificate of LDAP server from FILE" -msgstr "Načítať CA certifikát LDAP servera zo súboru" - -msgid "Local domain" -msgstr "Lokálna doména" - -msgid "Locality" -msgstr "Lokalita" - -msgid "Location name" -msgstr "Názov lokality" - -msgid "Location of the ACI" -msgstr "Umiestnenie ACI" - -msgid "MAC address" -msgstr "MAC adresa" - -msgid "MS-PAC" -msgstr "MS-PAC" - -msgid "Mailing Address" -msgstr "Poštová adresa" - -msgid "Malformed DN" -msgstr "Poškodené DN" - -msgid "Manager" -msgstr "Manažér" - -msgid "Mark the token as disabled (default: false)" -msgstr "Označiť token ako deaktivovaný (predvolené: false)" - -msgid "Maximum serial number" -msgstr "Maximálne sériové číslo" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "Maximálna hodnota je ${value}" - -msgid "Member groups" -msgstr "Členské skupiny" - -msgid "Member of" -msgstr "Členom" - -msgid "Member of a group" -msgstr "Členom skupiny" - -msgid "Member of groups" -msgstr "Člen skupín" - -msgid "Minimum serial number" -msgstr "Minimálne sériové číslo" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "Minimálna hodnota je ${value}" - -msgid "Misc. Information" -msgstr "Rôzne informácie" - -msgid "Mobile Telephone Number" -msgstr "Mobilné číslo" - -msgid "Modified" -msgstr "Modifikované" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "Upravené ACI \"%(value)s\"" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "HBAC pravidlo \"%(value)s\" bolo upravené" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola upravená." - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "Upravená IPA lokalita \"%(value)s\"" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "Upravený OTP token \"%(value)s\"" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "Upraviť %(name)s '%(value)s'?" - -msgid "Modify CA configuration." -msgstr "Upraviť CA konfiguráciu." - -msgid "Modify DNS forward zone." -msgstr "Upraviť DNS forward zónu" - -msgid "Modify OTP configuration options." -msgstr "Upraviť OTP konfiguračné voľby." - -msgid "Modify a DNS resource record." -msgstr "Upraviť DNS záznam" - -msgid "Modify a OTP token." -msgstr "Upraviť OTP token" - -msgid "Modify a group." -msgstr "Upraviť skupinu." - -msgid "Modify a vault." -msgstr "Upraviť vault." - -msgid "Modify an HBAC rule." -msgstr "Upraviť HBAC pravidlo." - -msgid "Modify an HBAC service." -msgstr "Upraviť HBAC službu." - -msgid "Modify configuration options." -msgstr "Upraviť konfiguračné voľby." - -msgid "Modify information about an IPA location." -msgstr "Upraviť informácie o IPA lokalite." - -msgid "NIS domain name" -msgstr "NIS doménové meno" - -msgid "Name" -msgstr "Názov" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "Nameserver '%(host)s' nemá zodpovedajúci A/AAAA záznam" - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" -"Nebola zadaná ani voľba --del-all a ani voľby pre zmazanie špecifického " -"záznamu.\n" -"Príkaz help môže byť použitý pre zobrazenie podporovaných typov záznamov." - -msgid "NetBIOS name" -msgstr "NetBIOS meno" - -msgid "Netgroup Settings" -msgstr "Netgroup nastavenia" - -msgid "Network Services" -msgstr "Sieťové služby" - -msgid "New ACI name" -msgstr "Nový ACI názov" - -msgid "New Certificate" -msgstr "Nový certifikát" - -msgid "New Password" -msgstr "Nové heslo" - -msgid "New password is required" -msgstr "Nové heslo je povinné" - -msgid "Next" -msgstr "Ďalšie" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "Nenašli sa žiadne A, AAAA, SSHFP, alebo PTR záznamy." - -msgid "No Valid Certificate" -msgstr "Žiadny platný certifikát" - -msgid "No entries." -msgstr "Žiadne položky." - -msgid "No free YubiKey slot!" -msgstr "Žiadny voľný YubiKey slot!" - -msgid "No matching entries found" -msgstr "Nenašli sa žiadne zhodné položky" - -msgid "No option to delete specific record provided." -msgstr "Nebola poskytnutá žiadna voľba pre zmazanie špecifického záznamu" - -msgid "No private group" -msgstr "Bez privátnej skupiny" - -msgid "No response" -msgstr "Bez odpovede" - -msgid "Not a valid IP address" -msgstr "Neplatná IP adresa" - -msgid "Not a valid IPv4 address" -msgstr "Neplatná IPv4 adresa" - -msgid "Not a valid IPv6 address" -msgstr "Neplatná IPv6 adresa" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "Neplatná sieťová adresa (príklady: 2001:db8::/64, 192.0.2.0/24)" - -msgid "Note" -msgstr "Poznámka" - -msgid "Number of entries returned" -msgstr "Počet vrátených položiek" - -msgid "OK" -msgstr "OK" - -msgid "OTP" -msgstr "OTP" - -msgid "OTP Configuration" -msgstr "OTP konfigurácia" - -msgid "OTP Token" -msgstr "OTP token" - -msgid "OTP Token Settings" -msgstr "Nastavenia pre OTP token" - -msgid "OTP Tokens" -msgstr "OTP tokeny" - -msgid "OTP configuration options" -msgstr "OTP konfiguračné voľby" - -msgid "OTP token" -msgstr "OTP token" - -msgid "OTP tokens" -msgstr "OTP tokeny" - -msgid "One Time Password" -msgstr "Jednorázové heslo (OTP)" - -msgid "Only one value is allowed" -msgstr "Len jedna hodnota je povolená" - -msgid "Operating system" -msgstr "Operačný systém" - -msgid "Option added" -msgstr "Voľba pridaná" - -msgid "Options" -msgstr "Voľby" - -msgid "Order" -msgstr "Poradie" - -msgid "Org. Unit" -msgstr "Org. jednotka" - -msgid "Organization" -msgstr "Organizácia" - -msgid "Organizational Unit" -msgstr "Organizačná jednotka" - -msgid "Other Record Types" -msgstr "Ostatné typy záznamov" - -msgid "Override inherited settings" -msgstr "Potlačiť zdedené nastavenia" - -msgid "Overwrite GID" -msgstr "Prepísať GID" - -msgid "Owner" -msgstr "Vlastník" - -msgid "POSIX" -msgstr "POSIX" - -msgid "Page" -msgstr "Strana" - -msgid "Pager Number" -msgstr "Pager číslo" - -msgid "Password" -msgstr "Heslo" - -msgid "Password Policies" -msgstr "Politiky hesiel" - -msgid "Password Policy" -msgstr "Politika hesiel" - -msgid "Password can be specified only for symmetric vault" -msgstr "Heslo môže byť špecifikované len pre symetrický vault" - -msgid "Password change complete" -msgstr "Zmena hesla dokončená" - -msgid "Password expiration" -msgstr "Vypršanie hesla" - -msgid "Password reset was not successful." -msgstr "Nastavenie hesla nebolo úspešné" - -msgid "Passwords do not match" -msgstr "Heslá sa nezhodujú" - -msgid "Passwords do not match!" -msgstr "Heslá sa nezhodujú!" - -msgid "Passwords must match" -msgstr "Heslá sa musia zhodovať" - -msgid "Permission" -msgstr "Povolenie" - -msgid "Permission settings" -msgstr "Nastavenia oprávnenia" - -msgid "Permissions" -msgstr "Povolenia" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "Prosím vyberte typ DNS záznamu" - -msgid "Please specify forwarders." -msgstr "Prosím špecifikujte forwardery." - -msgid "Policy" -msgstr "Politika" - -msgid "Port" -msgstr "Port" - -msgid "Positional arguments" -msgstr "Pozičný argument" - -msgid "Preferred Language" -msgstr "Preferovaný jazyk" - -msgid "Preserved user" -msgstr "Uschovaný používateľ" - -msgid "Preserved users" -msgstr "Uschovaní používatelia" - -msgid "Prev" -msgstr "Predcházajúce" - -msgid "Priority" -msgstr "Priorita" - -msgid "Privilege Settings" -msgstr "Nastavenia privilégia" - -msgid "Profile ID" -msgstr "ID profilu" - -msgid "Profile configuration" -msgstr "Configurácia profilu" - -#, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "Konfigurácia profilu bola uložená do súboru '%(file)s'" - -msgid "Profiles" -msgstr "Profily" - -msgid "Public key can be specified only for asymmetric vault" -msgstr "Verejný kľúč môže byť špecifikovný len pre asymetrický vault" - -msgid "Quick Links" -msgstr "Rýchle odkazy" - -msgid "RADIUS" -msgstr "RADIUS" - -msgid "RADIUS Proxy Server Settings" -msgstr "RADIUS Proxy serverové nastavenia" - -msgid "RADIUS proxy configuration" -msgstr "RADIUS proxy konfigurácia" - -msgid "RADIUS proxy username" -msgstr "RADIUS proxy používateľské meno" - -msgid "Range Settings" -msgstr "Nastavenie rozsahu" - -msgid "Realm Domains" -msgstr "Realm domény" - -msgid "Reason for Revocation" -msgstr "Dôvod pre revokáciu" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "Dôvod revokácie certifikátu (0-10)" - -msgid "Record Type" -msgstr "Typ záznamu" - -msgid "Record creation failed." -msgstr "Vytvorenie záznamu zlyhalo." - -msgid "Record name" -msgstr "Názov záznamu" - -msgid "Record not found." -msgstr "Záznam nenájdený" - -msgid "Record type" -msgstr "Typ záznamu" - -msgid "Records" -msgstr "Záznamy" - -msgid "Records for DNS Zone" -msgstr "Záznamy pre DNS zónu" - -msgid "Redirection to PTR record" -msgstr "Presmerovanie na PTR záznam" - -msgid "Refresh" -msgstr "Znovu načítať" - -msgid "Refresh the page." -msgstr "Znovu načítať stránku." - -msgid "Reload current settings from the server." -msgstr "Znovu načítať aktuálne nastavenia zo servera." - -msgid "Remove Permission" -msgstr "Odstrániť povolenie" - -msgid "Remove certificates from a service" -msgstr "Odstrániť certifikáty zo služby" - -msgid "Remove one or more certificates to the user entry" -msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" - -msgid "Remove service and service groups from an HBAC rule." -msgstr "Odstrániť služby a skupiny služieb z HBAC pravidla." - -msgid "Remove users and groups from an HBAC rule." -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "Odstraňovanie %(servers)s z replikačnej topológie, prosím čakajte..." - -msgid "Rename" -msgstr "Premenovať" - -msgid "Replication configuration" +#, fuzzy, c-format +msgid "cannot open configuration file %s\n" msgstr "Konfigurácia repliky" -msgid "Required" -msgstr "Povinné" - -msgid "Required field" -msgstr "Povinné pole" - -msgid "Reset Password" -msgstr "Obnoviť heslo" - -msgid "Reset your password." -msgstr "Obnoviť Vaše heslo." - -msgid "Restore" -msgstr "Obnoviť" - -msgid "Results are truncated, try a more specific search" -msgstr "Výsledky sú skrátené, vyskúšajte viac špecifické vyhľadávanie" - -msgid "Retrieve an existing certificate." -msgstr "Získať existujúci certifikát." - -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "Získanie CA stavu zlyhalo: %s" - -msgid "Revert" -msgstr "Vrátiť" - -msgid "Revoke a certificate." -msgstr "Revokácia certifikátu." - -msgid "Role Settings" -msgstr "Nastavenia role" - -msgid "Role name" -msgstr "Názov role" - -msgid "Roles" -msgstr "Role" - -msgid "Rule name" -msgstr "Názov pravidla" - -msgid "Rule status" -msgstr "Stav pravidla" - -msgid "Rules" -msgstr "Pravidlá" - -msgid "Run Test" -msgstr "Spustiť test" - -msgid "SELinux Options" -msgstr "SELinux voľby" - -msgid "SELinux User" -msgstr "SELinux používateľ" - -msgid "SID" -msgstr "SID" - -msgid "SOA record serial number" -msgstr "Sériové číslo SOA záznamu" - -msgid "SSH public key" -msgstr "Verejný SSH kľúč" - -msgid "SSH public key fingerprint" -msgstr "Odtlačok verejného SSH kľúča (fingerprint)" - -msgid "SSH public key:" -msgstr "Verejný SSH kľuč" - -msgid "SSH public keys" -msgstr "Verejné SSH kľúče" - -#, python-format -msgid "Same as --%s" -msgstr "Rovnaké ako --%s" - -msgid "Save" -msgstr "Uložiť" - -msgid "Search" -msgstr "Vyhľadávanie" - -msgid "Search Options" -msgstr "Voľby vyhľadávania" - -msgid "Search for DNS forward zones." -msgstr "Vyhľadávať DNS forward zóny" - -msgid "Search for DNS servers." -msgstr "Vyhľadať DNS servery" - -msgid "Search for HBAC rules." -msgstr "Vyhľadať HBAC pravidlá." - -msgid "Search for HBAC services." -msgstr "Vyhľadať HBAC služby." - -msgid "Search for IPA locations." -msgstr "Vyhľadať IPA lokalitu." - -msgid "Search for OTP token." -msgstr "Vyhľadať OTP token" - -msgid "Search for Sudo Commands." -msgstr "Vyhľadať sudo príkazy." - -msgid "Search for existing certificates." -msgstr "Vyhľadávanie existujúcich certifikátov." - -msgid "Search for groups." -msgstr "Vyhľadávať skupiny." - -msgid "Search for permissions." -msgstr "Vyhľadať povolenia." - -msgid "Search scope" -msgstr "Rozsah vyhľadávania" - -msgid "Second Code" -msgstr "Druhý kód" - -msgid "Second OTP" -msgstr "Druhé OTP" - -msgid "Segment details" -msgstr "Detaily segmentu" - -msgid "Select All" -msgstr "Označiť všetko" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" +#, c-format +msgid "cannot stat() configuration file %s\n" msgstr "" -"Sémantika %(label)s bola zmenená. %(current_behavior)s\n" -"%(hint)s" -msgid "Serial Number" -msgstr "Sériové číslo" - -msgid "Serial Number (hex)" -msgstr "Sériové číslo (hexadecimálne)" - -msgid "Serial number" -msgstr "Sériové číslo" - -msgid "Serial number (hex)" -msgstr "Sériové číslo (hexadecimálne)" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "Server %(srv)s nemôže kontaktovať servery: %(replicas)s" - -msgid "Server Role" -msgstr "Server rola" - -msgid "Server Roles" -msgstr "Serverové role" - -msgid "Server will check DNS forwarder(s)." -msgstr "Server skontroluje DNS forwarder(y)." - -msgid "Servers" -msgstr "Servery" - -msgid "Servers details:" -msgstr "Detaily serverov:" - -msgid "Servers in location" -msgstr "Servery v lokalite." - -msgid "Servers that belongs to the IPA location" -msgstr "Servery patriace do IPA lokality" - -msgid "Service" -msgstr "Služba" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "Služba '%(service)s' nenájdená v Kerberos databáze" - -msgid "Service Certificate" -msgstr "Certifikát služby" - -msgid "Service Options" -msgstr "Voľby služieb" - -msgid "Service Settings" -msgstr "Nastavenia služby" - -msgid "Service name" -msgstr "Názov služby" - -msgid "Services" -msgstr "Služby" - -msgid "Set" -msgstr "Nastaviť" - -msgid "Set OTP" -msgstr "Nastaviť OTP" - -msgid "Set SSH key" -msgstr "Nastaviť SSH kľúč" - -msgid "Set a user's password." -msgstr "Nastaviť používateľské heslo." - -msgid "Settings" -msgstr "Nastavenia" - -msgid "Show" -msgstr "Zobraziť" - -msgid "Show QR code" -msgstr "Zobraziť QR kód" - -msgid "Show Results" -msgstr "Zobraz výsledky" - -msgid "Show details" -msgstr "Zobraziť detaily" - -msgid "Show the current OTP configuration." -msgstr "Zobraziť aktuálnu OTP konfiguráciu." - -msgid "Show the current configuration." -msgstr "Zobraziť konfiguračné voľby" - -msgid "Show/Set key" -msgstr "Zobraziť/Nastaviť kľúč" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "Zobrazených ${start} až ${end} z ${total} položiek." - -msgid "Size" -msgstr "Veľkosť" - -msgid "Skip DNS check" -msgstr "Preskočiť DNS kontrolu" - -#, python-format -msgid "Skipped %(key)s" -msgstr "Preskočené %(key)s" - -#, python-format -msgid "Skipped %(map)s" -msgstr "Preskočené %(map)s" - -msgid "Some entries were not deleted" -msgstr "Niektoré položky neboli odstránené" - -msgid "Specified CAs" -msgstr "Špecifikované CA" - -msgid "Specified Groups" -msgstr "Špecifikované skupiny" - -msgid "Specified Profiles" -msgstr "Špecifikované profily" - -msgid "Specified Services and Groups" -msgstr "Špecifikované služby a skupiny" - -msgid "Stage users" -msgstr "Predpripravení používatelia" - -msgid "Standard Record Types" -msgstr "Štandardné typy záznamov" - -msgid "State/Province" -msgstr "Štát/Provincia" - -msgid "Status" -msgstr "Stav" - -msgid "Street address" -msgstr "Ulica" - -msgid "Structured" -msgstr "Štrukturovane" - -msgid "Subtree" -msgstr "Podstrom" - -msgid "Success" -msgstr "Úspech" - -msgid "Sudo Commands" -msgstr "Sudo príkazy" - -msgid "Sudo Rules" -msgstr "Sudo pravidlá" - -msgid "Sync OTP Token" -msgstr "Synchronizovať OTP Token" - -msgid "Synchronize an OTP token." -msgstr "Synchronizovať OTP token" - -msgid "Target DN" -msgstr "Cieľové DN" - -msgid "Target group" -msgstr "Cieľová skupina" - -msgid "Target reverse zone not found." -msgstr "Cieľová reverzná zóna nenájdená." - -msgid "Telephone Number" -msgstr "Telefónne číslo" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "ACI pre oprávnenie %(name)s sa nenašlo v %(dn)s " - -msgid "The IPA realm" -msgstr "IPA realm" - -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "Najbežnejšie typy záznamov pre tento typ zóny sú: %s\n" - -msgid "The username, password or token codes are not correct" -msgstr "Prihlasovacie meno, heslo alebo token sú nesprávne" - -msgid "This command requires root access" -msgstr "Tento príkaz vyžaduje root oprávnenia" - -msgid "This entry already exists" -msgstr "Táto položka už existuje" - -msgid "This entry cannot be enabled or disabled" -msgstr "Táto položka nemôže byť aktivovaná alebo deaktivovaná" - -msgid "This entry is already a member" -msgstr "Táto položka už je členom" - -msgid "This entry is already disabled" -msgstr "Táto položka bola už deaktivovaná" - -msgid "This entry is not a member" -msgstr "Táto položka nie je členom" - -msgid "This is already a posix group" -msgstr "Toto už je posix skupina" - -msgid "This may take some time, please wait ..." -msgstr "Toto môže trvať nejaký čas, prosím čakajte ..." - -msgid "This page has unsaved changes. Please save or revert." +#, c-format +msgid "out of memory\n" msgstr "" -"Táto stránka obsahuje neuložené zmeny. Prosím uložte alebo vráťte zmeny späť." -msgid "Token ID" -msgstr "Token ID" +#, fuzzy, c-format +msgid "read error\n" +msgstr "Chyba formátu" -msgid "Token synchronization failed" -msgstr "Synchronizácia tokenu zlyhala" - -msgid "Token was synchronized" -msgstr "Token bol zosynchronizovaný" - -msgid "Topic or Command" -msgstr "Téma alebo príkaz" - -msgid "Topology is disconnected" -msgstr "Topológia je odpojená" - -msgid "Trust Settings" -msgstr "Trust nastavenia" - -msgid "Two factor authentication (password + OTP)" -msgstr "Dvojfaktorová autentifikácia (heslo + OTP)" - -msgid "Type" -msgstr "Typ" - -msgid "Type of the token" -msgstr "Typ tokenu" - -msgid "Types of supported user authentication" -msgstr "Podporované typy autentifikácie používateľa" - -msgid "UID" -msgstr "UID" - -msgid "URI" -msgstr "URI" - -msgid "URL" -msgstr "URL" - -msgid "Undo" -msgstr "Vrátiť späť" - -msgid "Undo All" -msgstr "Vrátiť späť všetko" - -msgid "Undo this change." -msgstr "Vrátiť späť túto zmenu." - -msgid "Unique ID" -msgstr "Unikátne ID" - -msgid "Unknown Error" -msgstr "Neznáma chyba" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "Neznáma voľba: %(option)s" - -msgid "Unlock" -msgstr "Odomknúť" - -msgid "Unsaved Changes" -msgstr "Neuložené zmeny" - -msgid "Unselect All" -msgstr "Odznačiť všetko" - -msgid "Unspecified" -msgstr "Nešpecifikované" - -msgid "Unsupported value" -msgstr "Nepodporovaná hodnota" - -msgid "Update" -msgstr "Aktualizovať" - -msgid "Update DNS entries" -msgstr "Aktualizovať DNS položky." - -msgid "User" -msgstr "Používateľ" - -msgid "User Group" -msgstr "Používateľská skupina" - -msgid "User Groups" -msgstr "Používateľské skupiny" - -msgid "User ID" -msgstr "ID používateľa" - -msgid "User ID Number" -msgstr "ID používateľa" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "ID používateľa (systém priradí automaticky ak nie je zadané) " - -msgid "User Options" -msgstr "Voľby používateľov" - -msgid "User authentication types" -msgstr "Typy autentifikácie používateľa" - -msgid "User categories" -msgstr "Kategórie používateľov" - -msgid "User group" -msgstr "Používateľská skupina" - -msgid "User group ACI grants access to" -msgstr "ACI používateľskej skupiny udeluje prístup k" - -msgid "User login" -msgstr "Prihlasovacie meno" - -msgid "User name" -msgstr "Používateľské meno" - -msgid "User password" -msgstr "Používateľské heslo" - -msgid "Username" -msgstr "Používateľské meno" - -msgid "Users" -msgstr "Používatelia" - -msgid "Valid Certificate Present" -msgstr "Prítomný platný certifikát" - -msgid "Validation error" -msgstr "Chyba validácie" - -msgid "Validity" -msgstr "Platnosť" - -msgid "Validity end" -msgstr "Koniec platnosti" - -msgid "Validity start" -msgstr "Začiatok platnosti" - -msgid "Verify Password" -msgstr "Overiť heslo" - -msgid "View Certificate" -msgstr "Prezrieť certifikát" - -msgid "Warning" -msgstr "Varovanie" - -msgid "Weight" -msgstr "Váha" - -msgid "Weight for server services" -msgstr "Váha pre služby servera" - -msgid "Who" -msgstr "Kto" - -msgid "YubiKey slot" -msgstr "YubiKey slot" - -msgid "ZIP" -msgstr "PSČ" - -msgid "Zone forwarders" -msgstr "Zónové forwardery" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "Zóna nájdená: ${zone}" - -msgid "Zone name" -msgstr "Názov zóny" - -msgid "Zone name (FQDN)" -msgstr "Názov zóny (FQDN)" - -msgid "algorithm value: allowed interval 0-255" -msgstr "algoritmus: hodnota má povolený interval 0-255" - -msgid "an internal error has occurred" -msgstr "nastala interná chyba" - -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "nastala interná chyba na serveri '%(server)s'" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "môže byť najviac %(maxvalue)d" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "môže byť najviac %(maxvalue)s" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "nedá sa pripojiť k '%(uri)s': %(error)s" - -msgid "change collided with another change" -msgstr "zmena spôsobila kolíziu s inou zmenou" - -msgid "cn is immutable" -msgstr "cn je nemeniteľné" - -msgid "configuration options" -msgstr "konfiguračné voľby" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "kontajner (%(container)s) nenájdený" - -msgid "delete" -msgstr "odstrániť" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +#, c-format +msgid "Unable to parse principal name\n" msgstr "" -"doménové meno '%(domain)s' by malo byť normalizované na: %(normalized)s" -msgid "domain name cannot be longer than 255 characters" -msgstr "doménové meno nemôže byť dlhšie ako 255 znakov" +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" -msgid "empty DNS label" -msgstr "prázdny DNS label" +#, c-format +msgid "Removing principal %s\n" +msgstr "" -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "chyba na serveri '%(server)s': %(error)s" +#, fuzzy, c-format +msgid "Failed to open keytab\n" +msgstr "Zlyhalo pridanie" -msgid "flags value: allowed interval 0-255" -msgstr "flagy: hodnota má povolený interval 0-255" - -msgid "group" -msgstr "skupina" - -msgid "groups" -msgstr "skupiny" - -msgid "incorrect type" -msgstr "Nesprávný typ" - -#, python-format -msgid "invalid DN (%s)" -msgstr "neplatné DN (%s)" - -msgid "invalid IP address format" -msgstr "neplatný formát IP adresy" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "neplatná verzia IP adresy (je %(value)d, musí byť %(required_value)d)!" - -msgid "invalid IP network format" -msgstr "neplatný formát IP siete" - -msgid "invalid Profile ID" -msgstr "nevalídne ID profilu" - -msgid "invalid SSH public key" -msgstr "neplatný verejný SSH kľúč" - -msgid "invalid address format" -msgstr "neplatný formát adresy" - -msgid "invalid domain name" -msgstr "neplatné doménové meno" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "neplatné doménové meno: %s" - -msgid "invalid domain-name: not fully qualified" -msgstr "neplatné doménové meno: nie je plne kvalifikované (FQDN)" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "neplatný formát e-mailovej adresy: %(email)s" - -msgid "invalid escape code in domain name" -msgstr "neplatný escape kód v doménovom mene" - -msgid "is required" -msgstr "je povinné" - -msgid "iterations value: allowed interval 0-65535" -msgstr "iterácie: hodnota má povolený interval 0-65535" - -msgid "kerberos ticket policy settings" -msgstr "nastavenia kerberos ticket policy" - -#, python-format -msgid "key %(key)s already exists" -msgstr "kľúč %(key)s už existuje" - -msgid "location" -msgstr "lokalita" - -msgid "locations" -msgstr "lokality" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "manažér %(manager)s nenájdený" - -#, python-format -msgid "map %(map)s already exists" -msgstr "mapovanie %(map)s už existuje" - -msgid "maximum serial number" -msgstr "maximálne sériové číslo" - -msgid "minimum serial number" -msgstr "minimálne sériové číslo" - -msgid "must be True or False" -msgstr "musí byť True alebo False" - -msgid "must be Unicode text" -msgstr "musí byť Unicode text" - -msgid "must be a decimal number" -msgstr "musí byť desiatkové číslo" - -msgid "must be an integer" -msgstr "musí byť integer" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "musí byť najmenej %(minvalue)d" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "musí byť najmenej %(minvalue)s" - -msgid "must be binary data" -msgstr "musí byť binárny údaj" - -msgid "no modifications to be performed" -msgstr "žiadne úpravy neboli vykonané" - -msgid "not found" +#, fuzzy, c-format +msgid "principal not found\n" msgstr "Nenašlo sa" -msgid "not fully qualified" -msgstr "nie je plne kvalifikované (FQDN)" +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" -#, python-format -msgid "objectclass %s not found" -msgstr "objectclass %s nenájdená" +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, fuzzy, c-format +msgid "realm not found\n" +msgstr "Nenašlo sa" + +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" +msgstr "" -#, python-format msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" msgstr "" -"povolené sú len písmená, čísla, %(chars)s . DNS label nesmie začínať alebo " -"končiť s %(chars2)s" -msgid "options are not allowed" -msgstr "voľby nie sú povolené" - -msgid "password policies" -msgstr "Politky hesiel" - -msgid "permission" -msgstr "povolenie" - -msgid "pkinit" -msgstr "pkinit" - -msgid "preserve" -msgstr "uschovať" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "dotaz '%(owner)s %(rtype)s' s EDNS0: %(error)s" - -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "dotaz '%(owner)s %(rtype)s': %(error)s" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgid "Kerberos Service Principal Name" msgstr "" -"záznam '%(owner)s %(rtype)s' neprešiel DNSSEC validáciou na serveri %(ip)s" -#, python-format -msgid "request failed with HTTP status %d" -msgstr "požiadavka zlyhala s HTTP stavom %d" +msgid "The keytab file to remove the principcal(s) from" +msgstr "" -#, python-format -msgid "salt value: %(err)s" -msgstr "salt hodnota: %(err)s" +msgid "Keytab File Name" +msgstr "" -msgid "sudo commands" -msgstr "sudo príkazy" +msgid "Remove all principals in this realm" +msgstr "" -msgid "sudo rules" -msgstr "sudo pravidlá" +#, fuzzy +msgid "Realm name" +msgstr "Premenovať" -msgid "this option is deprecated" -msgstr "táto voľba je zastaraná" +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" -msgid "too many '@' characters" -msgstr "príliš mnoho '@' znakov" +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" -msgid "trusted domain object not found" -msgstr "trust doménový objekt nenájdený" +#, c-format +msgid "Closing keytab failed\n" +msgstr "" -msgid "trusted domain user not found" -msgstr "trust doménový užívateľ nenájdený" +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" -#, python-format -msgid "unknown command '%(name)s'" -msgstr "neznámy príkaz '%(name)s'" +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "" -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "neznáma chyba %(code)d od %(server)s: %(error)s" +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "" -msgid "value" -msgstr "hodnota" +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "" -#, python-brace-format -msgid "{role}: role not found" -msgstr "{role}: rola nenájdená" +#, c-format +msgid "Out of memory \n" +msgstr "" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "" + +msgid "Simple bind failed\n" +msgstr "" + +msgid "SASL Bind failed\n" +msgstr "" + +#, fuzzy, c-format +msgid "Operation failed: %s\n" +msgstr "Vytvorenie záznamu zlyhalo." + +#, c-format +msgid "Failed to get result: %s\n" +msgstr "" + +#, c-format +msgid "Timeout exceeded." +msgstr "" + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "" + +#, c-format +msgid "Missing reply control!\n" +msgstr "" + +#, c-format +msgid "Out of Memory!\n" +msgstr "" + +#, c-format +msgid "Failed to create control!\n" +msgstr "" + +#, c-format +msgid "Failed to bind to server!\n" +msgstr "" + +#, fuzzy, c-format +msgid "Failed to get keytab!\n" +msgstr "Zlyhalo pridanie" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "" + +msgid "Failed to decode control reply!\n" +msgstr "" + +#, fuzzy, c-format +msgid "Passwords do not match!\n" +msgstr "Heslá sa nezhodujú!" + +#, c-format +msgid "Failed to open config file %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "" + +msgid "Failed to resolve symlink to keytab.\n" +msgstr "" + +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" + +msgid "Print as little as possible" +msgstr "" + +msgid "Output only on errors" +msgstr "" + +msgid "Output debug info" +msgstr "" + +msgid "Contact this specific KDC Server" +msgstr "" + +#, fuzzy +msgid "Server Name" +msgstr "Názov služby" + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" + +msgid "Encryption types to request" +msgstr "" + +msgid "Comma separated encryption types list" +msgstr "" + +msgid "Show the list of permitted encryption types and exit" +msgstr "" + +msgid "Permitted Encryption Types" +msgstr "" + +msgid "Asks for a non-random password to use for the principal" +msgstr "" + +#, fuzzy +msgid "LDAP DN" +msgstr "LDAP URI" + +msgid "DN to bind as if not using kerberos" +msgstr "" + +#, fuzzy +msgid "LDAP password" +msgstr "Heslo" + +msgid "password to use if not using kerberos" +msgstr "" + +msgid "Prompt for LDAP password" +msgstr "" + +#, fuzzy +msgid "Path to the IPA CA certificate" +msgstr "CA certifikát" + +#, fuzzy +msgid "IPA CA certificate" +msgstr "CA certifikát" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" + +msgid "url" +msgstr "" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" + +msgid "GSSAPI|EXTERNAL" +msgstr "" + +msgid "Retrieve current keys without changing them" +msgstr "" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +#, fuzzy +msgid "Enter LDAP password" +msgstr "Používateľské heslo" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "" + +#, c-format +msgid "DNS discovery for domain %s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Advertised by servers" +msgid "Discovered server %s\n" +msgstr "Oznamované servermi" + +#, c-format +msgid "Using discovered server %s\n" +msgstr "" + +#, c-format +msgid "DNS Discovery failed\n" +msgstr "" + +#, c-format +msgid "Using server from config %s\n" +msgstr "" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "" + +#, c-format +msgid "Using provided server %s\n" +msgstr "" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "" + +#, fuzzy +msgid "New Principal Password" +msgstr "Nové heslo" + +#, fuzzy +msgid "Verify Principal Password" +msgstr "Overiť heslo" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" + +#, fuzzy, c-format +msgid "Failed to open Keytab\n" +msgstr "Zlyhalo pridanie" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" + +#, c-format +msgid "Failed to create key material\n" +msgstr "" + +#, fuzzy, c-format +msgid "Failed to get keytab\n" +msgstr "Zlyhalo pridanie" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "" #, c-format msgid "Out of memory!\n" @@ -2674,9 +461,6 @@ msgstr "" msgid "Unable to enable SSL in LDAP\n" msgstr "" -msgid "SASL Bind failed\n" -msgstr "" - #, c-format msgid "Search for %1$s on rootdse failed with error %2$d\n" msgstr "" @@ -2907,398 +691,6 @@ msgstr "" msgid "The hostname must not be: %s\n" msgstr "" -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "" - -#, c-format -msgid "Out of memory \n" -msgstr "" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "" - -msgid "Simple bind failed\n" -msgstr "" - -#, fuzzy, c-format -msgid "Operation failed: %s\n" -msgstr "Vytvorenie záznamu zlyhalo." - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -#, c-format -msgid "Out of Memory!\n" -msgstr "" - -#, c-format -msgid "Failed to create control!\n" -msgstr "" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to get keytab!\n" -msgstr "Zlyhalo pridanie" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "" - -msgid "Failed to decode control reply!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Passwords do not match!\n" -msgstr "Heslá sa nezhodujú!" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "" - -msgid "Failed to resolve symlink to keytab.\n" -msgstr "" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Output only on errors" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -#, fuzzy -msgid "Server Name" -msgstr "Názov služby" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Encryption types to request" -msgstr "" - -msgid "Comma separated encryption types list" -msgstr "" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -msgid "Permitted Encryption Types" -msgstr "" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -#, fuzzy -msgid "LDAP DN" -msgstr "LDAP URI" - -msgid "DN to bind as if not using kerberos" -msgstr "" - -#, fuzzy -msgid "LDAP password" -msgstr "Heslo" - -msgid "password to use if not using kerberos" -msgstr "" - -msgid "Prompt for LDAP password" -msgstr "" - -#, fuzzy -msgid "Path to the IPA CA certificate" -msgstr "CA certifikát" - -#, fuzzy -msgid "IPA CA certificate" -msgstr "CA certifikát" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -#, fuzzy -msgid "Enter LDAP password" -msgstr "Používateľské heslo" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -#, fuzzy -msgid "New Principal Password" -msgstr "Nové heslo" - -#, fuzzy -msgid "Verify Principal Password" -msgstr "Overiť heslo" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to open Keytab\n" -msgstr "Zlyhalo pridanie" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, c-format -msgid "Failed to create key material\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to get keytab\n" -msgstr "Zlyhalo pridanie" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to open keytab\n" -msgstr "Zlyhalo pridanie" - -#, fuzzy, c-format -msgid "principal not found\n" -msgstr "Nenašlo sa" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, fuzzy, c-format -msgid "realm not found\n" -msgstr "Nenašlo sa" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -#, fuzzy -msgid "Realm name" -msgstr "Premenovať" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, fuzzy, c-format -msgid "cannot open configuration file %s\n" -msgstr "Konfigurácia repliky" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "" - -#, c-format -msgid "out of memory\n" -msgstr "" - -#, fuzzy, c-format -msgid "read error\n" -msgstr "Chyba formátu" - msgid "Failed members" msgstr "" @@ -3354,6 +746,9 @@ msgstr "Zlyhalo pridanie" msgid "Failed owners" msgstr "Zlyhalo pridanie" +msgid "Failed to add" +msgstr "Zlyhalo pridanie" + msgid "maps not connected to /etc/auto.master:" msgstr "" @@ -3370,14 +765,76 @@ msgid "" "Continuous operation mode. Errors are reported but the process continues." msgstr "" +#, python-format +msgid "File %(file)s not found" +msgstr "Súbor %(file)s nenájdený" + +#, python-format +msgid "key %(key)s already exists" +msgstr "kľúč %(key)s už existuje" + +#, python-format +msgid "map %(map)s already exists" +msgstr "mapovanie %(map)s už existuje" + #, fuzzy msgid "Imported maps:" msgstr "Importované kľúče:" +#, python-format +msgid "Added %(map)s" +msgstr "Pridané %(map)s" + +msgid "Imported keys:" +msgstr "Importované kľúče:" + +#, python-format +msgid "Added %(src)s to %(dst)s" +msgstr "Pridané %(src)s do %(dst)s" + +msgid "Ignored keys:" +msgstr "Ignorované kľúče:" + +#, python-format +msgid "Ignored %(src)s to %(dst)s" +msgstr "Ignorované %(src)s do %(dst)s" + #, fuzzy msgid "Duplicate maps skipped:" msgstr "Duplikované kľúče preskočené:" +#, python-format +msgid "Skipped %(map)s" +msgstr "Preskočené %(map)s" + +msgid "Duplicate keys skipped:" +msgstr "Duplikované kľúče preskočené:" + +#, python-format +msgid "Skipped %(key)s" +msgstr "Preskočené %(key)s" + +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +msgid "Unrevoked" +msgstr "" + +#, fuzzy +msgid "Error" +msgstr "IPA chyba" + +#, fuzzy +msgid "Input filename" +msgstr "Názov pravidla" + +#, fuzzy +msgid "File to load the certificate from." +msgstr "Odstrániť certifikačný profil" + +msgid "cannot specify both raw certificate and file" +msgstr "" + msgid "Input file" msgstr "" @@ -3385,8 +842,87 @@ msgstr "" msgid "File to load the certificate from" msgstr "Odstrániť certifikačný profil" -msgid "cannot specify both raw certificate and file" +#, python-format +msgid "Profile configuration stored in file '%(file)s'" +msgstr "Konfigurácia profilu bola uložená do súboru '%(file)s'" + +#, fuzzy +msgid "Split DNS record to parts" +msgstr "IPA DNS záznamy" + +msgid "Please choose a type of DNS resource record to be added" +msgstr "Prosím vyberte typ DNS záznamu" + +#, python-format +msgid "The most common types for this type of zone are: %s\n" +msgstr "Najbežnejšie typy záznamov pre tento typ zóny sú: %s\n" + +msgid "DNS resource record type" +msgstr "Typ DNS záznamu" + +#, python-format +msgid "Invalid or unsupported type. Allowed values are: %s" +msgstr "Nesprávny alebo nepodporovaný typ. Povolené hodnoty sú: %s" + +#, fuzzy +msgid "No option to modify specific record provided." +msgstr "Nebola poskytnutá žiadna voľba pre zmazanie špecifického záznamu" + +msgid "Current DNS record contents:\n" +msgstr "Aktuálny obsah DNS záznamu:\n" + +#, python-format +msgid "Modify %(name)s '%(value)s'?" +msgstr "Upraviť %(name)s '%(value)s'?" + +#, python-format +msgid "" +"%(count)d %(type)s record skipped. Only one value per DNS record type can be " +"modified at one time." +msgid_plural "" +"%(count)d %(type)s records skipped. Only one value per DNS record type can " +"be modified at one time." +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"Neither --del-all nor options to delete a specific record provided.\n" +"Command help may be consulted for all supported record types." msgstr "" +"Nebola zadaná ani voľba --del-all a ani voľby pre zmazanie špecifického " +"záznamu.\n" +"Príkaz help môže byť použitý pre zobrazenie podporovaných typov záznamov." + +msgid "No option to delete specific record provided." +msgstr "Nebola poskytnutá žiadna voľba pre zmazanie špecifického záznamu" + +msgid "Delete all?" +msgstr "Odstrániť všetko?" + +#, python-format +msgid "Delete %(name)s '%(value)s'?" +msgstr "Odstrániť %(name)s '%(value)s'?" + +msgid "Server will check DNS forwarder(s)." +msgstr "Server skontroluje DNS forwarder(y)." + +msgid "This may take some time, please wait ..." +msgstr "Toto môže trvať nejaký čas, prosím čakajte ..." + +#, fuzzy +msgid "DNS forwarder" +msgstr "DNS forward zóna" + +msgid "file to store DNS records in nsupdate format" +msgstr "" + +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "Certifikát(y) sú uložené v súbore '%(file)s'" + +msgid "Servers details:" +msgstr "Detaily serverov:" msgid "" "Migration mode is disabled.\n" @@ -3401,32 +937,82 @@ msgid "" "can use their Kerberos accounts." msgstr "" +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "Synchronizovať OTP token" + +msgid "User ID" +msgstr "ID používateľa" + +msgid "Password" +msgstr "Heslo" + +msgid "First Code" +msgstr "Prvý kód" + +msgid "Second Code" +msgstr "Druhý kód" + +msgid "Token ID" +msgstr "Token ID" + msgid "python-yubico is not installed." msgstr "" +msgid "" +"\n" +"YubiKey Tokens\n" +msgstr "" +"\n" +"YubiKey Tokeny\n" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" +"\n" +"Spravovať YubiKey tokeny.\n" + msgid "" "\n" "This code is an extension to the otptoken plugin and provides support for\n" "reading/writing YubiKey tokens directly.\n" msgstr "" +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" +"\n" +"PRÍKLADY:\n" + msgid "" "\n" " Add a new token:\n" " ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" msgstr "" -#, fuzzy, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "Deaktivované sudo pravidlá \"%s\"" +msgid "Add a new YubiKey OTP token." +msgstr "Pridať nový YubiKey OTP token." + +msgid "YubiKey slot" +msgstr "YubiKey slot" + +msgid "No free YubiKey slot!" +msgstr "Žiadny voľný YubiKey slot!" #, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "Odstraňovanie %(servers)s z replikačnej topológie, prosím čakajte..." #, python-format msgid "Replication topology of suffix \"%(suffix)s\" is in order." @@ -3436,6 +1022,13 @@ msgstr "" msgid "Replication topology of suffix \"%(suffix)s\" contains errors." msgstr "" +msgid "Topology is disconnected" +msgstr "Topológia je odpojená" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "Server %(srv)s nemôže kontaktovať servery: %(replicas)s" + msgid "Recommended maximum number of agreements per replica exceeded" msgstr "" @@ -3449,34 +1042,22 @@ msgstr "" msgid "Delete a user, keeping the entry available for future use" msgstr "" +msgid "Delete a user" +msgstr "Odstrániť používateľa" + msgid "preserve and no-preserve cannot be both set" msgstr "" -#, fuzzy -msgid "Split DNS record to parts" -msgstr "IPA DNS záznamy" - -#, fuzzy -msgid "No option to modify specific record provided." -msgstr "Nebola poskytnutá žiadna voľba pre zmazanie špecifického záznamu" +#, python-format +msgid "Cannot read file '%(filename)s': %(exc)s" +msgstr "Nie je možné čítať súbor '%(filename)s': %(exc)s" #, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" +msgid "Cannot decode file '%(filename)s': %(exc)s" +msgstr "Nie je možné dekódovať súbor '%(filename)s': %(exc)s" -#, fuzzy -msgid "DNS forwarder" -msgstr "DNS forward zóna" - -msgid "file to store DNS records in nsupdate format" -msgstr "" +msgid "Invalid credentials" +msgstr "Nesprávne prihlasovacie údaje" #, fuzzy msgid "Create a new vault." @@ -3492,6 +1073,12 @@ msgstr "" msgid "File containing the vault public key" msgstr "" +msgid "Password can be specified only for symmetric vault" +msgstr "Heslo môže byť špecifikované len pre symetrický vault" + +msgid "Public key can be specified only for asymmetric vault" +msgstr "Verejný kľúč môže byť špecifikovný len pre asymetrický vault" + #, fuzzy msgid "Password specified multiple times" msgstr "Zmena hesla dokončená" @@ -3507,6 +1094,12 @@ msgstr "neplatný verejný SSH kľúč" msgid "Invalid or unsupported vault public key: %s" msgstr "Nesprávny alebo nepodporovaný typ. Povolené hodnoty sú: %s" +msgid "Modify a vault." +msgstr "Upraviť vault." + +msgid "Change password" +msgstr "Zmeniť heslo" + #, fuzzy msgid "Old vault password" msgstr "Zmeniť heslo" @@ -3582,33 +1175,21 @@ msgstr "" msgid "Missing vault private key" msgstr "" -msgid "Write certificate (chain if --chain used) to file" +#, fuzzy, python-format +msgid "Enabled Sudo Rule \"%s\"" +msgstr "Deaktivované sudo pravidlá \"%s\"" + +#, python-format +msgid "Disabled Sudo Rule \"%s\"" +msgstr "Deaktivované sudo pravidlá \"%s\"" + +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" msgstr "" -msgid "Unrevoked" -msgstr "" - -#, fuzzy -msgid "Error" -msgstr "IPA chyba" - -#, fuzzy -msgid "Input filename" -msgstr "Názov pravidla" - -#, fuzzy -msgid "File to load the certificate from." -msgstr "Odstrániť certifikačný profil" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" +#, fuzzy, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" msgid "" "\n" @@ -3731,25 +1312,61 @@ msgid "" "targetattr REPLACES the current attributes, it does not add to them.\n" msgstr "" +msgid "ACI name" +msgstr "ACI názov" + +msgid "Permission" +msgstr "Povolenie" + #, fuzzy msgid "Permission ACI grants access to" msgstr "ACI používateľskej skupiny udeluje prístup k" +msgid "User group" +msgstr "Používateľská skupina" + +msgid "User group ACI grants access to" +msgstr "ACI používateľskej skupiny udeluje prístup k" + +msgid "Permissions" +msgstr "Povolenia" + msgid "Permissions to grant(read, write, add, delete, all)" msgstr "" msgid "Attributes to which the permission applies" msgstr "" +msgid "Attributes" +msgstr "Atribúty" + +msgid "Type" +msgstr "Typ" + msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" msgstr "" +msgid "Member of" +msgstr "Členom" + +msgid "Member of a group" +msgstr "Členom skupiny" + +msgid "Filter" +msgstr "Filter" + msgid "Legal LDAP filter (e.g. ou=Engineering)" msgstr "" +msgid "Subtree" +msgstr "Podstrom" + msgid "Subtree to apply ACI to" msgstr "" +msgid "Target group" +msgstr "Cieľová skupina" + msgid "Group to apply ACI to" msgstr "" @@ -3825,6 +1442,9 @@ msgstr "" msgid "Results should contain primary key attribute only (\"name\")" msgstr "" +msgid "Number of entries returned" +msgstr "Počet vrátených položiek" + #, fuzzy msgid "True if not all results were returned" msgstr "Počet vrátených položiek" @@ -3837,9 +1457,267 @@ msgstr "Upraviť HBAC pravidlo." msgid "Rename an ACI." msgstr "Premenovať" +msgid "New ACI name" +msgstr "Nový ACI názov" + msgid "Display a single ACI given an ACI name." msgstr "" +msgid "Location of the ACI" +msgstr "Umiestnenie ACI" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Description" +msgstr "Popis" + +msgid "A description of this auto member rule" +msgstr "" + +#, fuzzy +msgid "Default (fallback) Group" +msgstr "Predvolená používateľská skupina" + +#, fuzzy +msgid "Default group for entries to land" +msgstr "Predvolená skupina pre nových používateľov nenájdená" + +#, fuzzy +msgid "Add an automember rule." +msgstr "Automember pravidlo" + +msgid "Automember Rule" +msgstr "Automember pravidlo" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +#, fuzzy +msgid "Grouping Type" +msgstr "Typ skupiny" + +msgid "Grouping to which the rule applies" +msgstr "" + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +msgid "Exclusive Regex" +msgstr "" + +#, fuzzy +msgid "Attribute Key" +msgstr "Atribúty" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +#, fuzzy +msgid "Number of conditions added" +msgstr "Počet vrátených položiek" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +#, fuzzy +msgid "Default (fallback) group for entries to land" +msgstr "Predvolená skupina pre nových používateľov nenájdená" + +#, fuzzy +msgid "Display information about the default (fallback) automember groups." +msgstr "Zobraziť informácie o IPA lokalite." + +#, fuzzy +msgid "Delete an automember rule." +msgstr "Odstránené automember pravidlo \"%(value)s\"" + +msgid "List of deletions that failed" +msgstr "Zoznam odstránení, ktoré zlyhaly" + +#, fuzzy +msgid "Search for automember rules." +msgstr "Vyhľadať HBAC pravidlá." + +#, fuzzy +msgid "Modify an automember rule." +msgstr "Upraviť HBAC pravidlo." + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +#, fuzzy +msgid "Rights" +msgstr "Váha" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Users" +msgstr "Používatelia" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Hosts" +msgstr "" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +#, fuzzy +msgid "Remove conditions from an automember rule." +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +msgid "Conditions that could not be removed" +msgstr "" + +#, fuzzy +msgid "Number of conditions removed" +msgstr "Počet vrátených položiek" + +#, fuzzy +msgid "Display information about an automember rule." +msgstr "Zobraziť informácie o IPA lokalite." + msgid "" "\n" "Automount\n" @@ -3982,16 +1860,6 @@ msgstr "Automount" msgid "Create a new automount key." msgstr "Vytvoriť novú skupinu." -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - #, fuzzy msgid "Delete an automount key." msgstr "Odstrániť OTP token" @@ -4020,24 +1888,13 @@ msgstr "Počet vrátených položiek" msgid "Modify an automount key." msgstr "Upraviť vault." -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -#, fuzzy -msgid "Rights" -msgstr "Váha" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - #, fuzzy msgid "New mount information" msgstr "Informácie o zamestnancovi" +msgid "Rename" +msgstr "Premenovať" + msgid "Rename the automount key object" msgstr "" @@ -4136,6 +1993,190 @@ msgstr "" msgid "Nested Methods to execute" msgstr "" +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +msgid "Search for existing certificates." +msgstr "Vyhľadávanie existujúcich certifikátov." + +msgid "Match cn attribute in subject" +msgstr "" + +#, fuzzy +msgid "Reason" +msgstr "%(reason)s" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "Dôvod revokácie certifikátu (0-10)" + +msgid "minimum serial number" +msgstr "minimálne sériové číslo" + +msgid "maximum serial number" +msgstr "maximálne sériové číslo" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +#, fuzzy +msgid "Maximum number of certs returned" +msgstr "Počet vrátených položiek" + +#, fuzzy +msgid "Take a revoked certificate off hold." +msgstr "Revokácia certifikátu." + +msgid "Serial number" +msgstr "Sériové číslo" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +#, fuzzy +msgid "Submit a certificate signing request." +msgstr "Certifikačná požiadavka" + +msgid "CSR" +msgstr "" + +msgid "Principal" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +msgid "Dictionary mapping variable name to value" +msgstr "" + +msgid "Revoke a certificate." +msgstr "Revokácia certifikátu." + +msgid "Retrieve an existing certificate." +msgstr "Získať existujúci certifikát." + +msgid "Output filename" +msgstr "" + +#, fuzzy +msgid "File to store the certificate in." +msgstr "Revokácia certifikátu." + +msgid "Check the status of a certificate signing request." +msgstr "" + +#, fuzzy +msgid "Request id" +msgstr "Povinné" + msgid "" "\n" "Server configuration\n" @@ -4308,6 +2349,12 @@ msgstr "Typy autentifikácie používateľa" msgid "Default types of supported user authentication" msgstr "Podporované typy autentifikácie používateľa" +msgid "Modify configuration options." +msgstr "Upraviť konfiguračné voľby." + +msgid "Show the current configuration." +msgstr "Zobraziť konfiguračné voľby" + msgid "" "\n" "Group to Group Delegation\n" @@ -4626,22 +2673,57 @@ msgid "" " ipa dnsconfig-mod --forwarder=203.0.113.113\n" msgstr "" +msgid "Global forwarders" +msgstr "Globálne forwardery" + +msgid "" +"Global forwarders. A custom port can be specified for each forwarder using a " +"standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Globálne forwardery. Vlastný port môže byť nastavený použítím štandardného " +"formátu \"IP_ADRESA port PORT\" pre každý forwarder " + #, fuzzy msgid "Forward policy" msgstr "Politika hesiel" +msgid "" +"Global forwarding policy. Set to \"none\" to disable any configured global " +"forwarders." +msgstr "" +"Globálna forward politika. Nastavením na \"none\" sa deaktivuje akýkoľvek " +"nastavený globálny forwarder." + +msgid "Allow PTR sync" +msgstr "Povoliť PTR synchronizáciu" + msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" msgstr "" msgid "Zone refresh interval" msgstr "" +msgid "Zone name" +msgstr "Názov zóny" + +msgid "Zone name (FQDN)" +msgstr "Názov zóny (FQDN)" + msgid "Reverse zone IP network" msgstr "" msgid "IP network to create reverse zone name from" msgstr "" +msgid "Active zone" +msgstr "Aktívna zóna" + +msgid "Is zone active?" +msgstr "Je zóna aktívna?" + +msgid "Zone forwarders" +msgstr "Zónové forwardery" + #, fuzzy msgid "" "Per-zone forwarders. A custom port can be specified for each forwarder using " @@ -4656,9 +2738,18 @@ msgid "" "forwarders are disregarded." msgstr "" +msgid "Record name" +msgstr "Názov záznamu" + msgid "Time to live" msgstr "" +msgid "Records" +msgstr "Záznamy" + +msgid "Record type" +msgstr "Typ záznamu" + #, fuzzy msgid "Record data" msgstr "Názov záznamu" @@ -4675,6 +2766,9 @@ msgstr "Záznamy" msgid "A IP Address" msgstr "IP adresa" +msgid "IP Address" +msgstr "IP adresa" + #, fuzzy msgid "A Create reverse" msgstr "Vytvoriť reverzný" @@ -4752,6 +2846,9 @@ msgstr "Záznamy" msgid "CERT Certificate Type" msgstr "Typ certifikátu" +msgid "Certificate Type" +msgstr "Typ certifikátu" + msgid "CERT Key Tag" msgstr "" @@ -4976,6 +3073,9 @@ msgstr "" msgid "LOC Size" msgstr "Veľkosť" +msgid "Size" +msgstr "Veľkosť" + msgid "LOC Horizontal Precision" msgstr "" @@ -5018,6 +3118,9 @@ msgstr "IPA DNS záznamy" msgid "NAPTR Order" msgstr "Poradie" +msgid "Order" +msgstr "Poradie" + msgid "NAPTR Preference" msgstr "" @@ -5035,6 +3138,9 @@ msgstr "" msgid "NAPTR Service" msgstr "Akákoľvek služba" +msgid "Service" +msgstr "Služba" + msgid "NAPTR Regular Expression" msgstr "" @@ -5134,14 +3240,23 @@ msgstr "IPA DNS záznamy" msgid "SRV Priority" msgstr "Priorita" +msgid "Priority" +msgstr "Priorita" + #, fuzzy msgid "SRV Weight" msgstr "Váha" +msgid "Weight" +msgstr "Váha" + #, fuzzy msgid "SRV Port" msgstr "Port" +msgid "Port" +msgstr "Port" + #, fuzzy msgid "SRV Target" msgstr "Cieľové DN" @@ -5250,9 +3365,21 @@ msgstr "" msgid "Text Data" msgstr "" +msgid "Authoritative nameserver" +msgstr "Autoritatívny nameserver" + +msgid "Authoritative nameserver domain name" +msgstr "Doménové meno autoritatívneho nameservera" + +msgid "Administrator e-mail address" +msgstr "E-mailová adresa administrátora" + msgid "SOA serial" msgstr "" +msgid "SOA record serial number" +msgstr "Sériové číslo SOA záznamu" + #, fuzzy msgid "SOA refresh" msgstr "Znovu načítať" @@ -5287,11 +3414,23 @@ msgstr "" msgid "BIND update policy" msgstr "" +msgid "Dynamic update" +msgstr "Dynamické aktualizácie" + +msgid "Allow dynamic updates." +msgstr "Povoliť dynamické aktualizácie" + +msgid "Allow query" +msgstr "Povoliť dotazy" + msgid "" "Semicolon separated list of IP addresses or networks which are allowed to " "issue queries" msgstr "" +msgid "Allow transfer" +msgstr "Povoliť prenos" + msgid "" "Semicolon separated list of IP addresses or networks which are allowed to " "transfer the zone" @@ -5329,6 +3468,9 @@ msgstr "Upraviť CA konfiguráciu." msgid "Show the current global DNS configuration." msgstr "Zobraziť konfiguračné voľby" +msgid "Create new DNS forward zone." +msgstr "Vytvoriť novú DNS forward zónu" + msgid "Add a permission for per-forward zone access delegation." msgstr "" @@ -5336,19 +3478,46 @@ msgstr "" msgid "Permission value" msgstr "Povolenie" +msgid "Delete DNS forward zone." +msgstr "Odstrániť DNS forward zónu." + +msgid "Disable DNS Forward Zone." +msgstr "Deaktivovať DNS forward zónu." + #, fuzzy msgid "Enable DNS Forward Zone." msgstr "Deaktivovať DNS forward zónu." +msgid "Search for DNS forward zones." +msgstr "Vyhľadávať DNS forward zóny" + +msgid "Modify DNS forward zone." +msgstr "Upraviť DNS forward zónu" + msgid "Remove a permission for per-forward zone access delegation." msgstr "" +msgid "Display information about a DNS forward zone." +msgstr "Zobraziť informácie o DNS forward zóne" + +msgid "Add new DNS resource record." +msgstr "Pridať nový DNS záznam" + +msgid "Force" +msgstr "Vynútiť" + msgid "force NS record creation even if its hostname is not in DNS" msgstr "" +msgid "Structured" +msgstr "Štrukturovane" + msgid "Parse all raw DNS records and return them in a structured way" msgstr "" +msgid "Delete DNS resource record." +msgstr "Odstrániť DNS záznam" + #, fuzzy msgid "Delete all associated records" msgstr "Odstrániť DNS záznam" @@ -5361,6 +3530,9 @@ msgstr "Odstrániť DNS záznam" msgid "Search for DNS resources." msgstr "Vyhľadať DNS servery" +msgid "Modify a DNS resource record." +msgstr "Upraviť DNS záznam" + #, fuzzy msgid "Rename the DNS resource record object" msgstr "Odstrániť DNS záznam" @@ -5379,6 +3551,12 @@ msgstr "" msgid "Add a permission for per-zone access delegation." msgstr "" +msgid "Delete DNS zone (SOA record)." +msgstr "Odstrániť DNS zónu (SOA záznam)." + +msgid "Disable DNS Zone." +msgstr "Deaktivovať DNS zónu." + #, fuzzy msgid "Enable DNS Zone." msgstr "Deaktivovať DNS zónu." @@ -5409,6 +3587,336 @@ msgstr "" msgid "Display information about a DNS zone (SOA record)." msgstr "Zobraziť informácie o DNS forward zóne" +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "Group name" +msgstr "Názov skupiny" + +msgid "Group description" +msgstr "Popis skupiny" + +msgid "GID" +msgstr "GID" + +msgid "GID (use this option to set it manually)" +msgstr "" + +#, fuzzy +msgid "Member users" +msgstr "Členské skupiny" + +msgid "Member groups" +msgstr "Členské skupiny" + +msgid "Member of groups" +msgstr "Člen skupín" + +msgid "Roles" +msgstr "Role" + +#, fuzzy +msgid "Member of netgroups" +msgstr "Člen skupín" + +#, fuzzy +msgid "Member of Sudo rule" +msgstr "Členom skupiny" + +#, fuzzy +msgid "Member of HBAC rule" +msgstr "Členom skupiny" + +#, fuzzy +msgid "Indirect Member users" +msgstr "Nepriame členstvo" + +#, fuzzy +msgid "Indirect Member groups" +msgstr "Nepriame členstvo" + +#, fuzzy +msgid "Indirect Member of group" +msgstr "Člen skupín" + +#, fuzzy +msgid "Indirect Member of netgroup" +msgstr "Člen skupín" + +#, fuzzy +msgid "Indirect Member of role" +msgstr "Nepriame členstvo" + +#, fuzzy +msgid "Indirect Member of Sudo rule" +msgstr "Nepriame členstvo" + +#, fuzzy +msgid "Indirect Member of HBAC rule" +msgstr "Nepriame členstvo" + +msgid "Create a new group." +msgstr "Vytvoriť novú skupinu." + +#, fuzzy +msgid "Create as a non-POSIX group" +msgstr "Vytvoriť novú skupinu." + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +#, fuzzy +msgid "Add members to a group." +msgstr "Členom skupiny" + +#, fuzzy +msgid "External member" +msgstr "Sériové číslo" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +#, fuzzy +msgid "member user" +msgstr "Automember pravidlo" + +#, fuzzy +msgid "users to add" +msgstr "Zlyhalo pridanie" + +#, fuzzy +msgid "member group" +msgstr "Členské skupiny" + +#, fuzzy +msgid "groups to add" +msgstr "skupiny" + +msgid "Members that could not be added" +msgstr "" + +#, fuzzy +msgid "Number of members added" +msgstr "Počet vrátených položiek" + +msgid "Delete group." +msgstr "Odstrániť skupinu." + +msgid "Detach a managed group from a user." +msgstr "" + +msgid "Search for groups." +msgstr "Vyhľadávať skupiny." + +#, fuzzy +msgid "search for private groups" +msgstr "Vyhľadávať skupiny." + +#, fuzzy +msgid "search for POSIX groups" +msgstr "Vyhľadávať skupiny." + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +#, fuzzy +msgid "search for non-POSIX groups" +msgstr "Vyhľadávať skupiny." + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "user" +msgstr "" + +#, fuzzy +msgid "Search for groups with these member users." +msgstr "Vyhľadávať skupiny." + +msgid "Search for groups without these member users." +msgstr "" + +msgid "group" +msgstr "skupina" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +#, fuzzy +msgid "netgroup" +msgstr "skupina" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +#, fuzzy +msgid "HBAC rule" +msgstr "HBAC pravidlá" + +#, fuzzy +msgid "Search for groups with these member of HBAC rules." +msgstr "Vyhľadať HBAC pravidlá." + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +#, fuzzy +msgid "sudo rule" +msgstr "sudo pravidlá" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +msgid "Modify a group." +msgstr "Upraviť skupinu." + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +#, fuzzy +msgid "Remove members from a group." +msgstr "Členom skupiny" + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "" + +#, fuzzy +msgid "Number of members removed" +msgstr "Počet vrátených položiek" + +#, fuzzy +msgid "Display information about a named group." +msgstr "Zobraziť informácie o DNS forward zóne" + msgid "" "\n" "Host-based access control\n" @@ -5459,6 +3967,9 @@ msgid "" " ipa hbacrule-del allow_server\n" msgstr "" +msgid "Rule name" +msgstr "Názov pravidla" + #, fuzzy msgid "Rule type" msgstr "Typ záznamu" @@ -5492,13 +4003,16 @@ msgstr "" msgid "Enabled" msgstr "Deaktivované" -msgid "Hosts" -msgstr "" +msgid "User Groups" +msgstr "Používateľské skupiny" #, fuzzy msgid "Host Groups" msgstr "Používateľské skupiny" +msgid "Services" +msgstr "Služby" + #, fuzzy msgid "Service Groups" msgstr "Špecifikované skupiny" @@ -5506,8 +4020,8 @@ msgstr "Špecifikované skupiny" msgid "External host" msgstr "" -msgid "Suppress processing of membership attributes." -msgstr "" +msgid "Create a new HBAC rule." +msgstr "Vytvoriť nové HBAC pravidlo" #, fuzzy msgid "Add target hosts and hostgroups to an HBAC rule." @@ -5527,12 +4041,8 @@ msgstr "Člen skupín" msgid "host groups to add" msgstr "" -msgid "Members that could not be added" -msgstr "" - -#, fuzzy -msgid "Number of members added" -msgstr "Počet vrátených položiek" +msgid "Add services to an HBAC rule." +msgstr "Pridať služby do HBAC pravidla." #, fuzzy msgid "member HBAC service" @@ -5550,21 +4060,23 @@ msgstr "HBAC služba" msgid "HBAC service groups to add" msgstr "HBAC popis služby" -#, fuzzy -msgid "member user" -msgstr "Automember pravidlo" +msgid "Add users and groups to an HBAC rule." +msgstr "Pridať používateľov a skupiny do HBAC pravidla." -#, fuzzy -msgid "users to add" -msgstr "Zlyhalo pridanie" +msgid "Delete an HBAC rule." +msgstr "Odstrániť HBAC pravidlo." -#, fuzzy -msgid "member group" -msgstr "Členské skupiny" +msgid "Disable an HBAC rule." +msgstr "Deaktivovať HBAC pravidlo." -#, fuzzy -msgid "groups to add" -msgstr "skupiny" +msgid "Enable an HBAC rule." +msgstr "Aktivovať HBAC pravidlo." + +msgid "Search for HBAC rules." +msgstr "Vyhľadať HBAC pravidlá." + +msgid "Modify an HBAC rule." +msgstr "Upraviť HBAC pravidlo." #, fuzzy msgid "Remove target hosts and hostgroups from an HBAC rule." @@ -5576,12 +4088,8 @@ msgstr "" msgid "host groups to remove" msgstr "" -msgid "Members that could not be removed" -msgstr "" - -#, fuzzy -msgid "Number of members removed" -msgstr "Počet vrátených položiek" +msgid "Remove service and service groups from an HBAC rule." +msgstr "Odstrániť služby a skupiny služieb z HBAC pravidla." #, fuzzy msgid "HBAC services to remove" @@ -5591,11 +4099,8 @@ msgstr "HBAC služby" msgid "HBAC service groups to remove" msgstr "HBAC popis služby" -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" +msgid "Remove users and groups from an HBAC rule." +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." #, fuzzy msgid "Display the properties of an HBAC rule." @@ -5624,13 +4129,34 @@ msgid "" " ipa hbacsvc-del tftp\n" msgstr "" +msgid "Service name" +msgstr "Názov služby" + +msgid "HBAC service" +msgstr "HBAC služba" + +msgid "HBAC service description" +msgstr "HBAC popis služby" + #, fuzzy msgid "Member of HBAC service groups" msgstr "Člen skupín" +msgid "Add a new HBAC service." +msgstr "Pridať novú HBAC službu." + +msgid "Delete an existing HBAC service." +msgstr "Odstrániť existujúcu HBAC službu." + +msgid "Search for HBAC services." +msgstr "Vyhľadať HBAC služby." + msgid "Results should contain primary key attribute only (\"service\")" msgstr "" +msgid "Modify an HBAC service." +msgstr "Upraviť HBAC službu." + #, fuzzy msgid "Display information about an HBAC service." msgstr "Zobraziť informácie o IPA lokalite." @@ -5697,6 +4223,246 @@ msgstr "Odstrániť certifikáty zo služby" msgid "Display information about an HBAC service group." msgstr "Zobraziť informácie o IPA lokalite." +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +msgid "User name" +msgstr "Používateľské meno" + +#, fuzzy +msgid "Target host" +msgstr "Cieľové DN" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +#, fuzzy +msgid "Include all enabled IPA rules into test [default]" +msgstr "Zahrnúť všetky deaktivované IPA pravidlá do testu" + +msgid "Include all disabled IPA rules into test" +msgstr "Zahrnúť všetky deaktivované IPA pravidlá do testu" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +msgid "Warning" +msgstr "Varovanie" + +#, fuzzy +msgid "Matched rules" +msgstr "sudo pravidlá" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +#, fuzzy +msgid "Result of simulation" +msgstr "Konfigurácia repliky" + msgid "" "\n" "Hosts/Machines\n" @@ -5768,6 +4534,9 @@ msgstr "Priezvisko" msgid "A description of this host" msgstr "" +msgid "Locality" +msgstr "Lokalita" + msgid "Host locality (e.g. \"Baltimore, MD\")" msgstr "" @@ -5780,9 +4549,15 @@ msgstr "" msgid "Host hardware platform (e.g. \"Lenovo T61\")" msgstr "" +msgid "Operating system" +msgstr "Operačný systém" + msgid "Host operating system and version (e.g. \"Fedora 9\")" msgstr "" +msgid "User password" +msgstr "Používateľské heslo" + msgid "Password used in bulk enrollment" msgstr "" @@ -5793,6 +4568,9 @@ msgstr "" msgid "Random password" msgstr "Zmeniť heslo" +msgid "Certificate" +msgstr "Certifikát" + #, fuzzy msgid "Base-64 encoded server certificate" msgstr "Base-64 zakódovaný certifikát služby" @@ -5801,9 +4579,15 @@ msgstr "Base-64 zakódovaný certifikát služby" msgid "Principal name" msgstr "Zobrazované meno" +msgid "MAC address" +msgstr "MAC adresa" + msgid "Hardware MAC address(es) on this host" msgstr "" +msgid "SSH public key" +msgstr "Verejný SSH kľúč" + msgid "Class" msgstr "" @@ -5833,37 +4617,12 @@ msgstr "" msgid "Member of host-groups" msgstr "Člen skupín" -#, fuzzy -msgid "Member of netgroups" -msgstr "Člen skupín" - -#, fuzzy -msgid "Member of Sudo rule" -msgstr "Členom skupiny" - -#, fuzzy -msgid "Member of HBAC rule" -msgstr "Členom skupiny" - -#, fuzzy -msgid "Indirect Member of netgroup" -msgstr "Člen skupín" - #, fuzzy msgid "Indirect Member of host-group" msgstr "Nepriame členstvo" -#, fuzzy -msgid "Indirect Member of role" -msgstr "Nepriame členstvo" - -#, fuzzy -msgid "Indirect Member of Sudo rule" -msgstr "Nepriame členstvo" - -#, fuzzy -msgid "Indirect Member of HBAC rule" -msgstr "Nepriame členstvo" +msgid "Keytab" +msgstr "Keytab" #, fuzzy msgid "Managed by" @@ -5960,29 +4719,18 @@ msgstr "" msgid "Search for hosts without these member of host groups." msgstr "" -#, fuzzy -msgid "netgroup" -msgstr "skupina" - msgid "Search for hosts with these member of netgroups." msgstr "" msgid "Search for hosts without these member of netgroups." msgstr "" -msgid "role" -msgstr "" - msgid "Search for hosts with these member of roles." msgstr "" msgid "Search for hosts without these member of roles." msgstr "" -#, fuzzy -msgid "HBAC rule" -msgstr "HBAC pravidlá" - #, fuzzy msgid "Search for hosts with these member of HBAC rules." msgstr "Vyhľadať HBAC pravidlá." @@ -5990,19 +4738,12 @@ msgstr "Vyhľadať HBAC pravidlá." msgid "Search for hosts without these member of HBAC rules." msgstr "" -#, fuzzy -msgid "sudo rule" -msgstr "sudo pravidlá" - msgid "Search for hosts with these member of sudo rules." msgstr "" msgid "Search for hosts without these member of sudo rules." msgstr "" -msgid "user" -msgstr "" - msgid "Search for hosts with these enrolled by users." msgstr "" @@ -6031,6 +4772,9 @@ msgstr "Upraviť informácie o IPA lokalite." msgid "Kerberos principal name for this host" msgstr "" +msgid "Update DNS entries" +msgstr "Aktualizovať DNS položky." + #, fuzzy msgid "Remove hosts that can manage this host." msgstr "Pridať používateľa, ktorý môže spravovať tento token." @@ -6168,6 +4912,237 @@ msgstr "Členom skupiny" msgid "Display information about a hostgroup." msgstr "Zobraziť informácie o IPA lokalite." +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +#, fuzzy +msgid "Range name" +msgstr "Premenovať" + +msgid "First Posix ID of the range" +msgstr "" + +#, fuzzy +msgid "Number of IDs in the range" +msgstr "Počet vrátených položiek" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +#, fuzzy +msgid "Range type" +msgstr "Typ záznamu" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "Delete an ID range." +msgstr "Zmazať ID rozsah." + +#, fuzzy +msgid "Search for ranges." +msgstr "Vyhľadávať skupiny." + +#, fuzzy +msgid "Modify ID range." +msgstr "Upraviť DNS forward zónu" + +#, fuzzy +msgid "Display information about a range." +msgstr "Zobraziť informácie o DNS forward zóne" + msgid "" "\n" "ID Views\n" @@ -6184,9 +5159,30 @@ msgstr "" msgid "Anchor to override" msgstr "" +msgid "Group ID Number" +msgstr "ID skupiny" + +msgid "User login" +msgstr "Prihlasovacie meno" + +msgid "UID" +msgstr "UID" + +msgid "User ID Number" +msgstr "ID používateľa" + +msgid "GECOS" +msgstr "GECOS" + +msgid "Home directory" +msgstr "Domovský priečinok" + msgid "Login shell" msgstr "" +msgid "ID View Name" +msgstr "Názov ID View" + #, fuzzy msgid "Add a new Group ID override." msgstr "Pridať nové ID View" @@ -6236,6 +5232,9 @@ msgstr "" msgid "Display information about an User ID override." msgstr "Zobraziť informácie o DNS forward zóne" +msgid "Add a new ID View." +msgstr "Pridať nové ID View" + msgid "" "Applies ID View to specified hosts or current members of specified " "hostgroups. If any other ID View is applied to the host, it is overriden." @@ -6266,6 +5265,9 @@ msgstr "" msgid "Number of hosts the ID View was applied to:" msgstr "" +msgid "Delete an ID View." +msgstr "Odstrániť ID View." + #, fuzzy msgid "Search for an ID View." msgstr "Vyhľadať DNS servery" @@ -6327,6 +5329,15 @@ msgstr "" msgid "Name of command to export" msgstr "" +msgid "Dict of JSON encoded IPA Objects" +msgstr "Slovník JSON zakódovaných IPA objektov" + +msgid "Dict of JSON encoded IPA Methods" +msgstr "Slovník JSON zakódovaných IPA metód" + +msgid "Dict of JSON encoded IPA Commands" +msgstr "Slovník JSON zakódovaných IPA príkazov" + msgid "" "\n" "Joining an IPA domain\n" @@ -6339,6 +5350,9 @@ msgstr "Lokálna doména" msgid "The hostname to register as" msgstr "" +msgid "The IPA realm" +msgstr "IPA realm" + msgid "Hardware platform of the host (e.g. Lenovo T61)" msgstr "" @@ -6508,6 +5522,9 @@ msgstr "" msgid "Migrate users and groups from DS to IPA." msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." +msgid "LDAP URI" +msgstr "LDAP URI" + msgid "LDAP URI of DS server to migrate from" msgstr "" @@ -6570,16 +5587,25 @@ msgstr "Zahrnuté atribúty" msgid "Attributes to be ignored for group entries in DS" msgstr "" +msgid "Overwrite GID" +msgstr "Prepísať GID" + msgid "" "When migrating a group already existing in IPA domain overwrite the group " "GID and report as success" msgstr "" +msgid "LDAP schema" +msgstr "LDAP schéma" + msgid "" "The schema used on the LDAP server. Supported values are RFC2307 and " "RFC2307bis. The default is RFC2307bis" msgstr "" +msgid "Continue" +msgstr "Pokračovať" + msgid "" "Continuous operation mode. Errors are reported but the process continues" msgstr "" @@ -6596,6 +5622,12 @@ msgstr "" msgid "Allows migration despite the usage of compat plugin" msgstr "" +msgid "CA certificate" +msgstr "CA certifikát" + +msgid "Load CA certificate of LDAP server from FILE" +msgstr "Načítať CA certifikát LDAP servera zo súboru" + msgid "groups to exclude from migration" msgstr "" @@ -6629,9 +5661,6 @@ msgid "" "retrieve and print all attributes from the server. Affects command output." msgstr "" -msgid "Dictionary mapping variable name to value" -msgstr "" - msgid "Total number of variables env (>= count)" msgstr "" @@ -6682,6 +5711,12 @@ msgstr "Názov skupiny" msgid "Netgroup description" msgstr "Popis skupiny" +msgid "NIS domain name" +msgstr "NIS doménové meno" + +msgid "IPA unique ID" +msgstr "IPA unikátne ID" + #, fuzzy msgid "Member netgroups" msgstr "Členské skupiny" @@ -6842,6 +5877,158 @@ msgstr "Synchronizácia tokenu zlyhala" msgid "HOTP synchronization skip-ahead" msgstr "Synchronizácia tokenu zlyhala" +msgid "Modify OTP configuration options." +msgstr "Upraviť OTP konfiguračné voľby." + +msgid "Show the current OTP configuration." +msgstr "Zobraziť aktuálnu OTP konfiguráciu." + +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "Unikátne ID" + +msgid "Type of the token" +msgstr "Typ tokenu" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "Vlastník" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Manager" +msgstr "Manažér" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +msgid "Disabled" +msgstr "Deaktivované" + +msgid "Mark the token as disabled (default: false)" +msgstr "Označiť token ako deaktivovaný (predvolené: false)" + +msgid "Validity start" +msgstr "Začiatok platnosti" + +msgid "First date/time the token can be used" +msgstr "" + +msgid "Validity end" +msgstr "Koniec platnosti" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "" + +msgid "Token model (informational only)" +msgstr "" + +#, fuzzy +msgid "Serial" +msgstr "Sériové číslo" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "Dĺžka platnosti TOTP token kódu" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +#, fuzzy +msgid "Add a new OTP token." +msgstr "Pridať nový YubiKey OTP token." + +#, fuzzy +msgid "(deprecated)" +msgstr "Zastarané voľby" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "Pridať používateľa, ktorý môže spravovať tento token." + +msgid "Delete an OTP token." +msgstr "Odstrániť OTP token" + +msgid "Search for OTP token." +msgstr "Vyhľadať OTP token" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +msgid "Modify a OTP token." +msgstr "Upraviť OTP token" + +msgid "Rename the OTP token object" +msgstr "" + +#, fuzzy +msgid "Display information about an OTP token." +msgstr "Zobraziť informácie o IPA lokalite." + msgid "" "\n" "YubiKey Tokens\n" @@ -6877,6 +6064,21 @@ msgid "" " ipa passwd tuser1\n" msgstr "" +msgid "Set a user's password." +msgstr "Nastaviť používateľské heslo." + +msgid "New Password" +msgstr "Nové heslo" + +msgid "Current Password" +msgstr "Súčasné heslo" + +msgid "OTP" +msgstr "OTP" + +msgid "One Time Password" +msgstr "Jednorázové heslo (OTP)" + msgid "" "\n" "Permissions\n" @@ -6965,13 +6167,22 @@ msgstr "Vylúčené atribúty" msgid "All attributes to which the permission applies" msgstr "" +msgid "Included attributes" +msgstr "Zahrnuté atribúty" + msgid "User-specified attributes to which the permission applies" msgstr "" +msgid "Excluded attributes" +msgstr "Vylúčené atribúty" + msgid "" "User-specified attributes to which the permission explicitly does not apply" msgstr "" +msgid "Default attributes" +msgstr "Predvolené atribúty" + msgid "Attributes to which the permission applies by default" msgstr "" @@ -6991,6 +6202,9 @@ msgstr "" msgid "All target filters, including those implied by type and memberof" msgstr "" +msgid "Target DN" +msgstr "Cieľové DN" + msgid "" "Optional DN to apply the permission to (must be in the subtree, but may not " "yet exist)" @@ -7055,6 +6269,9 @@ msgstr "povolenie" msgid "force delete of SYSTEM permissions" msgstr "" +msgid "Search for permissions." +msgstr "Vyhľadať povolenia." + #, fuzzy msgid "Modify a permission." msgstr "Upraviť skupinu." @@ -7183,6 +6400,9 @@ msgstr "Zlyhalo pridanie" msgid "Add permissions to a privilege." msgstr "Pridať služby do HBAC pravidla." +msgid "permission" +msgstr "povolenie" + #, fuzzy msgid "permissions" msgstr "povolenie" @@ -7354,6 +6574,9 @@ msgstr "Upraviť skupinu." msgid "Display information about password policy." msgstr "Zobraziť informácie o DNS forward zóne" +msgid "User" +msgstr "Používateľ" + msgid "Display effective policy for a specific user" msgstr "" @@ -7472,6 +6695,9 @@ msgid "" " ipa realmdomains-mod --del-domain=olddomain.com\n" msgstr "" +msgid "Domain" +msgstr "Doména" + #, fuzzy msgid "Add domain" msgstr "Lokálna doména" @@ -7528,13 +6754,12 @@ msgid "" " add users, reset passwords or add a user to the default IPA user group.\n" msgstr "" +msgid "Role name" +msgstr "Názov role" + msgid "A description of this role-group" msgstr "" -#, fuzzy -msgid "Member users" -msgstr "Členské skupiny" - #, fuzzy msgid "Privileges" msgstr "Nastavenia privilégia" @@ -7718,6 +6943,9 @@ msgid "" " and the default SELinux user are available in the config-show command.\n" msgstr "" +msgid "SELinux User" +msgstr "SELinux používateľ" + #, fuzzy msgid "HBAC Rule" msgstr "HBAC pravidlá" @@ -7832,9 +7060,6 @@ msgid "" "httpd.keytab\n" msgstr "" -msgid "Principal" -msgstr "" - #, fuzzy msgid "Service principal" msgstr "Názov služby" @@ -7871,6 +7096,9 @@ msgstr "" msgid "Delete an IPA service." msgstr "Odstrániť ID View." +msgid "Disable the Kerberos key and SSL certificate of a service." +msgstr "Deaktivovať Kerberos kľúč a SSL certifikát služby." + msgid "" "Disallow users, groups, hosts or host groups to create a keytab of this " "service." @@ -8538,6 +7766,9 @@ msgstr "Vyhľadať sudo príkazy." msgid "Delete Sudo Command." msgstr "Sudo príkazy" +msgid "Search for Sudo Commands." +msgstr "Vyhľadať sudo príkazy." + msgid "Results should contain primary key attribute only (\"command\")" msgstr "" @@ -8578,6 +7809,9 @@ msgstr "" msgid "Sudo Command Group" msgstr "Sudo príkazy" +msgid "Commands" +msgstr "Príkazy" + #, fuzzy msgid "Member Sudo commands" msgstr "sudo príkazy" @@ -8625,1573 +7859,6 @@ msgstr "sudo príkazy" msgid "Display Sudo Command Group." msgstr "Sudo príkazy" -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -#, fuzzy -msgid "Kerberos principal" -msgstr "Kerberos kľúč" - -msgid "Kerberos principal expiration" -msgstr "" - -#, fuzzy -msgid "Prompt to set the user password" -msgstr "Nastaviť používateľské heslo." - -#, fuzzy -msgid "Generate a random user password" -msgstr "Nastaviť používateľské heslo." - -msgid "Car License" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -#, fuzzy -msgid "Indirect Member of group" -msgstr "Člen skupín" - -#, fuzzy -msgid "Kerberos keys available" -msgstr "Kerberos kľúč" - -#, fuzzy -msgid "Add a new user." -msgstr "Pridať novú HBAC službu." - -#, fuzzy -msgid "Don't create user private group" -msgstr "Bez privátnej skupiny" - -#, fuzzy -msgid "Delete a user." -msgstr "Odstrániť používateľa" - -#, fuzzy -msgid "Enable a user account." -msgstr "Deaktivovať používateľský účet." - -#, fuzzy -msgid "Search for users." -msgstr "Vyhľadať DNS servery" - -msgid "Self" -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -#, fuzzy -msgid "Search for users with these member of HBAC rules." -msgstr "Vyhľadať HBAC pravidlá." - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -#, fuzzy -msgid "Modify a user." -msgstr "Upraviť skupinu." - -msgid "Rename the user object" -msgstr "" - -#, fuzzy -msgid "Display information about a user." -msgstr "Zobraziť informácie o IPA lokalite." - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "A description of this auto member rule" -msgstr "" - -#, fuzzy -msgid "Default (fallback) Group" -msgstr "Predvolená používateľská skupina" - -#, fuzzy -msgid "Default group for entries to land" -msgstr "Predvolená skupina pre nových používateľov nenájdená" - -#, fuzzy -msgid "Add an automember rule." -msgstr "Automember pravidlo" - -#, fuzzy -msgid "Grouping Type" -msgstr "Typ skupiny" - -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -#, fuzzy -msgid "Attribute Key" -msgstr "Atribúty" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -#, fuzzy -msgid "Number of conditions added" -msgstr "Počet vrátených položiek" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -#, fuzzy -msgid "Default (fallback) group for entries to land" -msgstr "Predvolená skupina pre nových používateľov nenájdená" - -#, fuzzy -msgid "Display information about the default (fallback) automember groups." -msgstr "Zobraziť informácie o IPA lokalite." - -#, fuzzy -msgid "Delete an automember rule." -msgstr "Odstránené automember pravidlo \"%(value)s\"" - -#, fuzzy -msgid "Search for automember rules." -msgstr "Vyhľadať HBAC pravidlá." - -#, fuzzy -msgid "Modify an automember rule." -msgstr "Upraviť HBAC pravidlo." - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -#, fuzzy -msgid "Remove conditions from an automember rule." -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -msgid "Conditions that could not be removed" -msgstr "" - -#, fuzzy -msgid "Number of conditions removed" -msgstr "Počet vrátených položiek" - -#, fuzzy -msgid "Display information about an automember rule." -msgstr "Zobraziť informácie o IPA lokalite." - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -msgid "Match cn attribute in subject" -msgstr "" - -#, fuzzy -msgid "Reason" -msgstr "%(reason)s" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -#, fuzzy -msgid "Maximum number of certs returned" -msgstr "Počet vrátených položiek" - -#, fuzzy -msgid "Take a revoked certificate off hold." -msgstr "Revokácia certifikátu." - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -#, fuzzy -msgid "Submit a certificate signing request." -msgstr "Certifikačná požiadavka" - -msgid "CSR" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -msgid "Output filename" -msgstr "" - -#, fuzzy -msgid "File to store the certificate in." -msgstr "Revokácia certifikátu." - -msgid "Check the status of a certificate signing request." -msgstr "" - -#, fuzzy -msgid "Request id" -msgstr "Povinné" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "GID (use this option to set it manually)" -msgstr "" - -#, fuzzy -msgid "Indirect Member users" -msgstr "Nepriame členstvo" - -#, fuzzy -msgid "Indirect Member groups" -msgstr "Nepriame členstvo" - -#, fuzzy -msgid "Create as a non-POSIX group" -msgstr "Vytvoriť novú skupinu." - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -#, fuzzy -msgid "Add members to a group." -msgstr "Členom skupiny" - -#, fuzzy -msgid "External member" -msgstr "Sériové číslo" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -msgid "Detach a managed group from a user." -msgstr "" - -#, fuzzy -msgid "search for private groups" -msgstr "Vyhľadávať skupiny." - -#, fuzzy -msgid "search for POSIX groups" -msgstr "Vyhľadávať skupiny." - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -#, fuzzy -msgid "search for non-POSIX groups" -msgstr "Vyhľadávať skupiny." - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -#, fuzzy -msgid "Search for groups with these member users." -msgstr "Vyhľadávať skupiny." - -msgid "Search for groups without these member users." -msgstr "" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -#, fuzzy -msgid "Search for groups with these member of HBAC rules." -msgstr "Vyhľadať HBAC pravidlá." - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -#, fuzzy -msgid "Remove members from a group." -msgstr "Členom skupiny" - -#, fuzzy -msgid "Display information about a named group." -msgstr "Zobraziť informácie o DNS forward zóne" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -#, fuzzy -msgid "Target host" -msgstr "Cieľové DN" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -#, fuzzy -msgid "Include all enabled IPA rules into test [default]" -msgstr "Zahrnúť všetky deaktivované IPA pravidlá do testu" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -#, fuzzy -msgid "Matched rules" -msgstr "sudo pravidlá" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -#, fuzzy -msgid "Result of simulation" -msgstr "Konfigurácia repliky" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -#, fuzzy -msgid "Domain GUID" -msgstr "Doména" - -msgid "Fallback primary group" -msgstr "" - -#, fuzzy -msgid "Trusted domain partner" -msgstr "trust doménový užívateľ nenájdený" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -#, fuzzy -msgid "Active Directory domain administrator" -msgstr "Active Directory doména" - -#, fuzzy -msgid "Active Directory domain administrator's password" -msgstr "Active Directory doména" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -#, fuzzy -msgid "Range type" -msgstr "Typ záznamu" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -#, fuzzy -msgid "Delete a trust." -msgstr "Odstrániť používateľa" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -#, fuzzy -msgid "Search for trusts." -msgstr "Vyhľadávať skupiny." - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -#, fuzzy -msgid "Display information about a trust." -msgstr "Zobraziť informácie o IPA lokalite." - -#, fuzzy -msgid "Modify global trust configuration." -msgstr "Upraviť CA konfiguráciu." - -#, fuzzy -msgid "Show global trust configuration." -msgstr "Zobraziť konfiguračné voľby" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -#, fuzzy -msgid "Range name" -msgstr "Premenovať" - -msgid "First Posix ID of the range" -msgstr "" - -#, fuzzy -msgid "Number of IDs in the range" -msgstr "Počet vrátených položiek" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -#, fuzzy -msgid "Search for ranges." -msgstr "Vyhľadávať skupiny." - -#, fuzzy -msgid "Modify ID range." -msgstr "Upraviť DNS forward zónu" - -#, fuzzy -msgid "Display information about a range." -msgstr "Zobraziť informácie o DNS forward zóne" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -#, fuzzy -msgid "Serial" -msgstr "Sériové číslo" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -#, fuzzy -msgid "Add a new OTP token." -msgstr "Pridať nový YubiKey OTP token." - -#, fuzzy -msgid "(deprecated)" -msgstr "Zastarané voľby" - -msgid "Do not display QR code" -msgstr "" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -msgid "Rename the OTP token object" -msgstr "" - -#, fuzzy -msgid "Display information about an OTP token." -msgstr "Zobraziť informácie o IPA lokalite." - msgid "" "\n" "Sudo Rules\n" @@ -10430,6 +8097,519 @@ msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." msgid "Display Sudo Rule." msgstr "Deaktivované sudo pravidlá \"%s\"" +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "Doménové NetBIOS meno" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +msgid "NetBIOS name" +msgstr "NetBIOS meno" + +#, fuzzy +msgid "Domain GUID" +msgstr "Doména" + +msgid "Fallback primary group" +msgstr "" + +msgid "Domain name" +msgstr "Doménové meno" + +#, fuzzy +msgid "Trusted domain partner" +msgstr "trust doménový užívateľ nenájdený" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +#, fuzzy +msgid "Active Directory domain administrator" +msgstr "Active Directory doména" + +#, fuzzy +msgid "Active Directory domain administrator's password" +msgstr "Active Directory doména" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +#, fuzzy +msgid "Delete a trust." +msgstr "Odstrániť používateľa" + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +#, fuzzy +msgid "Search for trusts." +msgstr "Vyhľadávať skupiny." + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +#, fuzzy +msgid "Display information about a trust." +msgstr "Zobraziť informácie o IPA lokalite." + +#, fuzzy +msgid "Modify global trust configuration." +msgstr "Upraviť CA konfiguráciu." + +#, fuzzy +msgid "Show global trust configuration." +msgstr "Zobraziť konfiguračné voľby" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "Meno" + +msgid "Last name" +msgstr "Priezvisko" + +msgid "Full name" +msgstr "Celé meno" + +msgid "Display name" +msgstr "Zobrazované meno" + +msgid "Initials" +msgstr "Iniciály" + +#, fuzzy +msgid "Kerberos principal" +msgstr "Kerberos kľúč" + +msgid "Kerberos principal expiration" +msgstr "" + +msgid "Email address" +msgstr "E-mailová adresa" + +#, fuzzy +msgid "Prompt to set the user password" +msgstr "Nastaviť používateľské heslo." + +#, fuzzy +msgid "Generate a random user password" +msgstr "Nastaviť používateľské heslo." + +msgid "User ID Number (system will assign one if not provided)" +msgstr "ID používateľa (systém priradí automaticky ak nie je zadané) " + +msgid "Street address" +msgstr "Ulica" + +msgid "City" +msgstr "Mesto" + +msgid "State/Province" +msgstr "Štát/Provincia" + +msgid "ZIP" +msgstr "PSČ" + +msgid "Telephone Number" +msgstr "Telefónne číslo" + +msgid "Mobile Telephone Number" +msgstr "Mobilné číslo" + +msgid "Pager Number" +msgstr "Pager číslo" + +msgid "Fax Number" +msgstr "Faxové číslo" + +msgid "Org. Unit" +msgstr "Org. jednotka" + +msgid "Job Title" +msgstr "Pracovná pozícia" + +msgid "Car License" +msgstr "" + +msgid "Account disabled" +msgstr "Účet deaktivovaný" + +msgid "User authentication types" +msgstr "Typy autentifikácie používateľa" + +msgid "Types of supported user authentication" +msgstr "Podporované typy autentifikácie používateľa" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "RADIUS proxy configuration" +msgstr "RADIUS proxy konfigurácia" + +msgid "RADIUS proxy username" +msgstr "RADIUS proxy používateľské meno" + +msgid "Department Number" +msgstr "Číslo oddelenia" + +msgid "Employee Number" +msgstr "Zamestnanecké číslo" + +msgid "Employee Type" +msgstr "Typ zamestnanca" + +msgid "Preferred Language" +msgstr "Preferovaný jazyk" + +#, fuzzy +msgid "Kerberos keys available" +msgstr "Kerberos kľúč" + +#, fuzzy +msgid "Add a new user." +msgstr "Pridať novú HBAC službu." + +#, fuzzy +msgid "Don't create user private group" +msgstr "Bez privátnej skupiny" + +#, fuzzy +msgid "Delete a user." +msgstr "Odstrániť používateľa" + +msgid "Disable a user account." +msgstr "Deaktivovať používateľský účet." + +#, fuzzy +msgid "Enable a user account." +msgstr "Deaktivovať používateľský účet." + +#, fuzzy +msgid "Search for users." +msgstr "Vyhľadať DNS servery" + +msgid "Self" +msgstr "" + +msgid "Display user record for current Kerberos principal" +msgstr "" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +#, fuzzy +msgid "Search for users with these member of HBAC rules." +msgstr "Vyhľadať HBAC pravidlá." + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +#, fuzzy +msgid "Modify a user." +msgstr "Upraviť skupinu." + +msgid "Rename the user object" +msgstr "" + +#, fuzzy +msgid "Display information about a user." +msgstr "Zobraziť informácie o IPA lokalite." + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + msgid "Time limit of search in seconds (0 is unlimited)" msgstr "" @@ -10493,6 +8673,9 @@ msgstr "" msgid "Service category the ACL applies to" msgstr "" +msgid "Profiles" +msgstr "Profily" + #, fuzzy msgid "Create a new CA ACL." msgstr "Vytvoriť nové HBAC pravidlo" @@ -10521,6 +8704,12 @@ msgstr "Pridať služby do HBAC pravidla." msgid "Add users and groups to a CA ACL." msgstr "Pridať používateľov a skupiny do HBAC pravidla." +msgid "Delete a CA ACL." +msgstr "Odstrániť CA ACL." + +msgid "Disable a CA ACL." +msgstr "Deaktivovať CA ACL." + #, fuzzy msgid "Enable a CA ACL." msgstr "Deaktivovať CA ACL." @@ -10556,6 +8745,118 @@ msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." msgid "Display the properties of a CA ACL." msgstr "" +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "Profile ID" +msgstr "ID profilu" + +#, fuzzy +msgid "Certificate Profile to use" +msgstr "Certifikačné profily" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +#, fuzzy +msgid "Profile description" +msgstr "Popis skupiny" + +msgid "Brief description of this profile" +msgstr "" + +#, fuzzy +msgid "Store issued certificates" +msgstr "Certifikát služby" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "Odstrániť certifikačný profil" + +#, fuzzy +msgid "Search for Certificate Profiles." +msgstr "Certifikačné profily" + +msgid "Import a Certificate Profile." +msgstr "Importovať certifikačný profil" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +#, fuzzy +msgid "Modify Certificate Profile configuration." +msgstr "Upraviť CA konfiguráciu." + +#, fuzzy +msgid "File containing profile configuration" +msgstr "Configurácia profilu" + +#, fuzzy +msgid "Display the properties of a Certificate Profile." +msgstr "Odstrániť certifikačný profil" + +#, fuzzy +msgid "Write profile configuration to file" +msgstr "Configurácia profilu" + msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" msgstr "" @@ -10588,6 +8889,218 @@ msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" msgid "Remove certificates from host entry" msgstr "Odstrániť certifikáty zo služby" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + msgid "Fallback to AD DC LDAP" msgstr "" @@ -10601,14 +9114,24 @@ msgid "" "hostgroups. If any other ID View is applied to the host, it is overridden." msgstr "" +msgid "Add to default group" +msgstr "Pridať do predvolenej skupiny" + msgid "Add migrated users without a group to a default group (default: true)" msgstr "" +msgid "Search scope" +msgstr "Rozsah vyhľadávania" + msgid "" "LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " "to onelevel" msgstr "" +#, fuzzy +msgid "Remove users that can manage this token." +msgstr "Pridať používateľa, ktorý môže spravovať tento token." + #, fuzzy msgid "Target DN subtree" msgstr "Cieľové DN" @@ -10678,6 +9201,12 @@ msgstr "Vyhľadať DNS servery" msgid "Show IPA server." msgstr "IPA Server" +msgid "Add new certificates to a service" +msgstr "Pridať nové certifikáty k službe" + +msgid "Remove certificates from a service" +msgstr "Odstrániť certifikáty zo služby" + msgid "" "\n" "Service Constrained Delegation\n" @@ -11069,6 +9598,22 @@ msgid "" " " msgstr "" +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + +msgid "Preserved user" +msgstr "Uschovaný používateľ" + +msgid "Add one or more certificates to the user entry" +msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" + +msgid "Remove one or more certificates to the user entry" +msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" + msgid "Move deleted user into staged area" msgstr "" @@ -11378,332 +9923,6 @@ msgstr "" msgid "Display information about a vault container." msgstr "Zobraziť informácie o IPA lokalite." -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -#, fuzzy -msgid "Certificate Profile to use" -msgstr "Certifikačné profily" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -#, fuzzy -msgid "Profile description" -msgstr "Popis skupiny" - -msgid "Brief description of this profile" -msgstr "" - -#, fuzzy -msgid "Store issued certificates" -msgstr "Certifikát služby" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -#, fuzzy -msgid "Search for Certificate Profiles." -msgstr "Certifikačné profily" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -#, fuzzy -msgid "Modify Certificate Profile configuration." -msgstr "Upraviť CA konfiguráciu." - -#, fuzzy -msgid "File containing profile configuration" -msgstr "Configurácia profilu" - -#, fuzzy -msgid "Display the properties of a Certificate Profile." -msgstr "Odstrániť certifikačný profil" - -#, fuzzy -msgid "Write profile configuration to file" -msgstr "Configurácia profilu" - -#, fuzzy -msgid "Remove users that can manage this token." -msgstr "Pridať používateľa, ktorý môže spravovať tento token." - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - msgid "Resolve a host name in DNS. (Deprecated)" msgstr "" @@ -12959,6 +11178,9 @@ msgstr "" msgid "Register to the entitlement system." msgstr "" +msgid "Username" +msgstr "Používateľské meno" + #, fuzzy msgid "Enrollment UUID (not implemented)" msgstr "Príkaz nie je implementovaný" @@ -13411,6 +11633,192 @@ msgid "" " ipa hostgroup-del baltimore\n" msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + msgid "" "Comma-separated list of objectclasses used to search for user entries in DS" msgstr "" @@ -13720,200 +12128,6 @@ msgstr "" msgid "comma-separated list of sudo commands to remove" msgstr "" -#, fuzzy -msgid "Active directory domain administrator's password" -msgstr "Active Directory doména s POSIX attribútmy" - -#, fuzzy -msgid "GECOS field" -msgstr "GECOS" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - msgid "" "\n" "Sudo Rules\n" @@ -13955,19 +12169,27 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" -msgid "A dictionary representing an LDAP entry" -msgstr "" +#, fuzzy +msgid "Active directory domain administrator's password" +msgstr "Active Directory doména s POSIX attribútmy" -msgid "A list of LDAP entries" -msgstr "" - -msgid "All commands should at least have a result" -msgstr "" +#, fuzzy +msgid "GECOS field" +msgstr "GECOS" #, python-format msgid "Enter %(label)s again to verify: " msgstr "" +msgid "Passwords do not match!" +msgstr "Heslá sa nezhodujú!" + +msgid "No matching entries found" +msgstr "Nenašli sa žiadne zhodné položky" + +msgid "Topic or Command" +msgstr "Téma alebo príkaz" + #, fuzzy msgid "The topic or command name." msgstr "Téma alebo príkaz" @@ -13982,50 +12204,398 @@ msgstr "" msgid " ipa --help" msgstr "" +msgid "Command name" +msgstr "Názov príkazu" + +msgid "Positional arguments" +msgstr "Pozičný argument" + +#, python-format +msgid "Same as --%s" +msgstr "Rovnaké ako --%s" + +msgid "Deprecated options" +msgstr "Zastarané voľby" + #, fuzzy msgid "No file to read" msgstr "Zlyhalo pridanie" -#, fuzzy, python-format -msgid "%(filename)s: file not found" -msgstr "Súbor %(file)s nenájdený" - -#, python-brace-format -msgid "Unable to parse option {item}" +#, python-format +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" -msgid "Filename is empty" +#, python-format +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "neznáma chyba %(code)d od %(server)s: %(error)s" + +msgid "an internal error has occurred" +msgstr "nastala interná chyba" + +#, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "nastala interná chyba na serveri '%(server)s'" + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "neznámy príkaz '%(name)s'" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "chyba na serveri '%(server)s': %(error)s" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "nedá sa pripojiť k '%(uri)s': %(error)s" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "Nevalídna JSON-RPC požiadavka: %(error)s" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" msgstr "" -#, fuzzy, python-format -msgid "Permission denied: %(file)s" -msgstr "Nastavenia oprávnenia" - -msgid "single label {}s are not supported" +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" msgstr "" -#, fuzzy -msgid "cannot be longer that {} characters" -msgstr "DNS label nemôže byť dlhší ako 63 znakov" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -#, fuzzy -msgid "invalid hostmask" -msgstr "neplatné doménové meno" - #, python-format msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +msgstr "" + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "" + +msgid "did not receive Kerberos credentials" +msgstr "" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "Služba '%(service)s' nenájdená v Kerberos databáze" + +msgid "No credentials cache found" +msgstr "" + +msgid "Ticket expired" +msgstr "" + +msgid "Credentials cache permissions incorrect" +msgstr "" + +msgid "Bad format in credentials cache" +msgstr "" + +msgid "Cannot resolve KDC for requested realm" +msgstr "" + +#, fuzzy +msgid "Session error" +msgstr "Chyba validácie" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "Nedostatočný prístup: %(info)s" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "" + +#, python-format +msgid "'%(name)s' is required" +msgstr "'%(name)s' je požadované" + +#, fuzzy, python-format +msgid "invalid '%(name)s': %(error)s" +msgstr "Nevalídna JSON-RPC požiadavka: %(error)s" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "" + +msgid "Passwords do not match" +msgstr "Heslá sa nezhodujú" + +msgid "Command not implemented" +msgstr "Príkaz nie je implementovaný" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "Klient nie je nakonfigurovaný. Spustite ipa-client-install." + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "Nie je možné interaktívne získať %(name)s" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "Doména '%(domain)s' nie je koreňovou doménou pre les '%(forest)s'" + +#, python-format +msgid "%(reason)s" +msgstr "%(reason)s" + +msgid "This entry already exists" +msgstr "Táto položka už existuje" + +msgid "You must enroll a host in order to create a host service" +msgstr "" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" msgstr "" msgid "" -"at least one value equal to the canonical principal name must be present" +"The realm for the principal does not match the realm for this IPA server" msgstr "" -msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgid "This command requires root access" +msgstr "Tento príkaz vyžaduje root oprávnenia" + +msgid "This is already a posix group" +msgstr "Toto už je posix skupina" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "" + +#, fuzzy +msgid "This entry is already enabled" +msgstr "Táto položka bola už deaktivovaná" + +msgid "This entry is already disabled" +msgstr "Táto položka bola už deaktivovaná" + +msgid "This entry cannot be enabled or disabled" +msgstr "Táto položka nemôže byť aktivovaná alebo deaktivovaná" + +msgid "This entry is not a member" +msgstr "Táto položka nie je členom" + +msgid "A group may not be a member of itself" +msgstr "Skupina nemože byť členom seba samej" + +msgid "This entry is already a member" +msgstr "Táto položka už je členom" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "Base64 dekódovanie zlyhalo: %(reason)s" + +#, fuzzy +msgid "A group may not be added as a member of itself" +msgstr "Skupina nemože byť členom seba samej" + +#, fuzzy +msgid "The default users group cannot be removed" +msgstr "Certifikačné profily nemôžu byť premenované" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" + +msgid "A managed group cannot have a password policy." +msgstr "" + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "'%(entry)s' nemá certifikát." + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "" + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "%(attr)s neobsahuje '%(value)s'" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" + +#, fuzzy +msgid "This group already allows external members" +msgstr "Táto položka už je členom" + +msgid "This group cannot be posix because it is external" +msgstr "" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "" + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "" + +#, fuzzy, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "požiadavka zlyhala s HTTP stavom %d" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" + +#, fuzzy, python-format +msgid "'%(attr)s' already contains one or more values" +msgstr "%(attr)s neobsahuje '%(value)s'" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "" + +msgid "change collided with another change" +msgstr "zmena spôsobila kolíziu s inou zmenou" + +msgid "no modifications to be performed" +msgstr "žiadne úpravy neboli vykonané" + +#, python-format +msgid "%(desc)s: %(info)s" +msgstr "%(desc)s: %(info)s" + +msgid "limits exceeded for this query" +msgstr "" + +#, python-format +msgid "%(info)s" +msgstr "%(info)s" + +#, fuzzy +msgid "modifying primary key is not allowed" +msgstr "voľby nie sú povolené" + +#, python-format +msgid "%(attr)s: Only one value allowed." +msgstr "%(attr)s: Len jedna hodnota je povolená." + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "%(attr)s: Nesprávna syntax." + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "Zlý vyhľadávací filter %(info)s" + +msgid "Not allowed on non-leaf entry" +msgstr "" + +msgid "LDAP timeout" +msgstr "" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "" + +msgid "Configured time limit exceeded" +msgstr "Nakonfigurovaný časový limit bol dosiahnutý" + +msgid "Configured size limit exceeded" +msgstr "Nakonfigurovaný veľkostný limit bol dosiahnutý" + +#, fuzzy +msgid "Configured administrative server limit exceeded" +msgstr "Nakonfigurovaný veľkostný limit bol dosiahnutý" + +#, fuzzy, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "Chyba formátu certifikátu: %(error)s" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "Chyba formátu certifikátu: %(error)s" + +msgid "Already registered" +msgstr "" + +msgid "Not registered yet" +msgstr "" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" +"%(key)s nemôže byť odstránené pretože %(label)s %(dependent)s to vyžaduje" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" +"%(key)s nemôže byť odstránené alebo deaktivované pretože je to posledný člen " +"%(label)s %(container)s" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "%(label)s %(key)s nemôže byť ostránené/upravené: %(reason)s" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "%(name)s certifikát nie je platný" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "" + +#, fuzzy, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "Nameserver '%(host)s' nemá zodpovedajúci A/AAAA záznam" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "DNS kontrola zlyhala: Očakávané {%(expected)s} prijaté {%(got)s}" + +#, python-format +msgid "%(exception)s" +msgstr "%(exception)s" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" + +msgid "Results are truncated, try a more specific search" +msgstr "Výsledky sú skrátené, vyskúšajte viac špecifické vyhľadávanie" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "Neznáma voľba: %(option)s" + +msgid "Client version. Used to determine if server will accept request." msgstr "" msgid "Additional instructions:" @@ -14037,6 +12607,47 @@ msgid "" "Assuming server's API version, %(server_version)s" msgstr "" +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" +"Sémantika DNS forwarderov je zmenená od IPA 4.0.\n" +"Pravdepodobne ste chceli použiť (dnsforwardzone-*).\n" +"Pre viac informácií prosím prečítajte dokumentáciu." + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" +"DNSSEC podpora je experimentálna.\n" +"%(additional_info)s" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "'%(option)s'voľba je zastaraná. %(additional_info)s" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" +"Sémantika %(label)s bola zmenená. %(current_behavior)s\n" +"%(hint)s" + +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "DNS server %(server)s: %(error)s." + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"DNS server %(server)s nepodporuje DNSSEC: %(error)s.\n" +"Ak je DNSSEC validácia aktivovaná na IPA serveroch, prosím deaktivujte ju." + #, python-format msgid "" "forward zone \"%(fwzone)s\" is not effective because of missing proper NS " @@ -14044,6 +12655,24 @@ msgid "" "\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." msgstr "" +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"DNS server %(server)s nepodporuje EDNS0 (RFC 6891): %(error)s.\n" +"Ak je DNSSEC validácia aktivovaná na IPA serveroch, prosím deaktivujte ju." + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" +"DNSSEC validácia zlyhala: %(error)s.\n" +"Prosím overte Vašu DNSSEC konfiguráciu alebo deaktivujte DNSSEC validáciu na " +"všetkých IPA serveroch." + #, python-format msgid "" "The _kerberos TXT record from domain %(domain)s could not be created " @@ -14072,6 +12701,14 @@ msgid "" "by a missing dot at the end of the name specification." msgstr "" +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "'%(command)s' príkaz je zastaraný %(additional_info)s" + +#, python-format +msgid "%(line)s" +msgstr "%(line)s" + #, python-format msgid "Search result has been truncated: %(reason)s" msgstr "" @@ -14132,217 +12769,59 @@ msgstr "" msgid "The certificate for %(ca)s is not available on this server." msgstr "" -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." -msgstr "" - -#, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "" - -msgid "did not receive Kerberos credentials" -msgstr "" - -msgid "No credentials cache found" -msgstr "" - -msgid "Ticket expired" -msgstr "" - -msgid "Credentials cache permissions incorrect" -msgstr "" - -msgid "Bad format in credentials cache" -msgstr "" - -msgid "Cannot resolve KDC for requested realm" -msgstr "" - -#, fuzzy -msgid "Session error" -msgstr "Chyba validácie" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "" +#, fuzzy, python-format +msgid "%(count)d variables" +msgstr "Účet deaktivovaný" #, fuzzy, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "Nevalídna JSON-RPC požiadavka: %(error)s" +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "%(count)d IPA lokalita nájdená" +msgstr[1] "%(count)d IPA lokalít nájdených" +msgstr[2] "%(count)d IPA lokalít nájdených" + +msgid "A dictionary representing an LDAP entry" +msgstr "" + +msgid "A list of LDAP entries" +msgstr "" + +msgid "All commands should at least have a result" +msgstr "" + +msgid "incorrect type" +msgstr "Nesprávný typ" + +msgid "Only one value is allowed" +msgstr "Len jedna hodnota je povolená" + +msgid "this option is deprecated" +msgstr "táto voľba je zastaraná" + +msgid "must be True or False" +msgstr "musí byť True alebo False" + +msgid "must be an integer" +msgstr "musí byť integer" #, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "" +msgid "must be at least %(minvalue)d" +msgstr "musí byť najmenej %(minvalue)d" #, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "" +msgid "can be at most %(maxvalue)d" +msgstr "môže byť najviac %(maxvalue)d" -msgid "You must enroll a host in order to create a host service" -msgstr "" +msgid "must be a decimal number" +msgstr "musí byť desiatkové číslo" #, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "" +msgid "must be at least %(minvalue)s" +msgstr "musí byť najmenej %(minvalue)s" #, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "" - -#, fuzzy -msgid "This entry is already enabled" -msgstr "Táto položka bola už deaktivovaná" - -#, fuzzy -msgid "A group may not be added as a member of itself" -msgstr "Skupina nemože byť členom seba samej" - -#, fuzzy -msgid "The default users group cannot be removed" -msgstr "Certifikačné profily nemôžu byť premenované" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" - -msgid "A managed group cannot have a password policy." -msgstr "" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" - -#, fuzzy -msgid "This group already allows external members" -msgstr "Táto položka už je členom" - -msgid "This group cannot be posix because it is external" -msgstr "" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" - -#, fuzzy, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "požiadavka zlyhala s HTTP stavom %d" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" - -#, fuzzy, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "%(attr)s neobsahuje '%(value)s'" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "" - -msgid "limits exceeded for this query" -msgstr "" - -#, fuzzy -msgid "modifying primary key is not allowed" -msgstr "voľby nie sú povolené" - -msgid "Not allowed on non-leaf entry" -msgstr "" - -msgid "LDAP timeout" -msgstr "" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" - -#, fuzzy -msgid "Configured administrative server limit exceeded" -msgstr "Nakonfigurovaný veľkostný limit bol dosiahnutý" - -#, fuzzy, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "Chyba formátu certifikátu: %(error)s" - -msgid "Already registered" -msgstr "" - -msgid "Not registered yet" -msgstr "" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" - -#, fuzzy, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "Nameserver '%(host)s' nemá zodpovedajúci A/AAAA záznam" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" +msgid "can be at most %(maxvalue)s" +msgstr "môže byť najviac %(maxvalue)s" #, python-format msgid "" @@ -14354,6 +12833,9 @@ msgstr "" msgid "must match pattern \"%(pattern)s\"" msgstr "" +msgid "must be binary data" +msgstr "musí byť binárny údaj" + #, fuzzy, python-format msgid "must be at least %(minlength)d bytes" msgstr "musí byť najmenej %(minvalue)d" @@ -14378,6 +12860,12 @@ msgstr "Certifikačná požiadavka" msgid "Failure decoding Certificate Signing Request: %s" msgstr "" +msgid "must be Unicode text" +msgstr "musí byť Unicode text" + +msgid "Leading and trailing spaces are not allowed" +msgstr "Počiatočné a koncové medzery nie sú povolené" + #, fuzzy, python-format msgid "must be at least %(minlength)d characters" msgstr "musí byť najmenej %(minvalue)d" @@ -14440,986 +12928,1442 @@ msgid "Service principal is required" msgstr "Nové heslo je povinné" #, fuzzy, python-format -msgid "%(count)d variables" -msgstr "Účet deaktivovaný" +msgid "%(filename)s: file not found" +msgstr "Súbor %(file)s nenájdený" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +msgid "any of the configured servers" +msgstr "" + +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" +msgstr "" #, fuzzy, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "%(count)d IPA lokalita nájdená" -msgstr[1] "%(count)d IPA lokalít nájdených" -msgstr[2] "%(count)d IPA lokalít nájdených" +msgid "Permission denied: %(file)s" +msgstr "Nastavenia oprávnenia" -msgid "Client version. Used to determine if server will accept request." +msgid "empty DNS label" +msgstr "prázdny DNS label" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "DNS label nemôže byť dlhší ako 63 znakov" + +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" +"povolené sú len písmená, čísla, %(chars)s . DNS label nesmie začínať alebo " +"končiť s %(chars2)s" + +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "príliš mnoho '@' znakov" + +#, fuzzy +msgid "cannot be longer that {} characters" +msgstr "DNS label nemôže byť dlhší ako 63 znakov" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "nie je plne kvalifikované (FQDN)" + +msgid "invalid SSH public key" +msgstr "neplatný verejný SSH kľúč" + +msgid "options are not allowed" +msgstr "voľby nie sú povolené" + +#, fuzzy +msgid "invalid hostmask" +msgstr "neplatné doménové meno" + +#, python-format +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "dotaz '%(owner)s %(rtype)s': %(error)s" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "dotaz '%(owner)s %(rtype)s' s EDNS0: %(error)s" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" +"záznam '%(owner)s %(rtype)s' neprešiel DNSSEC validáciou na serveri %(ip)s" + +msgid "invalid escape code in domain name" +msgstr "neplatný escape kód v doménovom mene" + +msgid "domain name cannot be longer than 255 characters" +msgstr "doménové meno nemôže byť dlhšie ako 255 znakov" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "DNS label nemôže byť dlhší ako 63 znakov" + +msgid "invalid domain name" +msgstr "neplatné doménové meno" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" +"doménové meno '%(domain)s' by malo byť normalizované na: %(normalized)s" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "neplatné doménové meno: %s" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "neplatná verzia IP adresy (je %(value)d, musí byť %(required_value)d)!" + +msgid "invalid IP address format" +msgstr "neplatný formát IP adresy" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "%(port)s nie je platný port" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" #, fuzzy, python-format msgid "Retrieving CA cert chain failed: %s" msgstr "Získanie CA stavu zlyhalo: %s" +#, python-format +msgid "request failed with HTTP status %d" +msgstr "požiadavka zlyhala s HTTP stavom %d" + +#, python-format +msgid "Retrieving CA status failed: %s" +msgstr "Získanie CA stavu zlyhalo: %s" + #, fuzzy, python-format msgid "Retrieving CA status failed with status %d" msgstr "Získanie CA stavu zlyhalo: %s" +#, python-format +msgid "objectclass %s not found" +msgstr "objectclass %s nenájdená" + +#, fuzzy +msgid "Trusting forest" +msgstr "Trust nastavenia" + +msgid "Trusted forest" +msgstr "" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +#, fuzzy +msgid "Unknown" +msgstr "Neznáma chyba" + +#, fuzzy +msgid "Non-Active Directory domain" +msgstr "Active Directory doména" + +msgid "Active Directory domain" +msgstr "Active Directory doména" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "" +msgid "Failed to authenticate to CA REST API" +msgstr "" + #, fuzzy, python-format msgid "Replication agreement for %(hostname)s not found" msgstr "%(parent)s: %(oname)s nenájdený" -msgid "Failed to authenticate to CA REST API" +#, fuzzy +msgid "A list of ACI values" +msgstr "Odstránené ACI \"%(value)s\"" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" msgstr "" #, fuzzy -msgid "One time password commands" -msgstr "Jednorázové heslo (OTP)" - -#, fuzzy -msgid "" -"\n" -"IPA server roles\n" -msgstr "Názov role servera" +msgid "ACI prefix is required" +msgstr "je povinné" msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" msgstr "" -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" +msgid "filter and memberof are mutually exclusive" msgstr "" -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgid "group, permission and self are mutually exclusive" msgstr "" -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" +msgid "One of group, permission or self is required" msgstr "" -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -#, fuzzy -msgid "server role" -msgstr "Server rola" - -#, fuzzy -msgid "server roles" -msgstr "Serverové role" - -#, fuzzy -msgid "IPA Server Roles" -msgstr "Serverové role" - -#, fuzzy -msgid "IPA Server Role" -msgstr "Server rola" - -#, fuzzy -msgid "Role status" -msgstr "Stav pravidla" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -#, fuzzy -msgid "Find a server role on a server(s)" -msgstr "Názov role servera" - #, fuzzy, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" +msgid "Group '%s' does not exist" +msgstr "Položka %s neexistuje" + +msgid "empty filter" +msgstr "" + +#, fuzzy, python-format +msgid "Syntax Error: %(error)s" +msgstr "Chyba formátu certifikátu: %(error)s" + +#, python-format +msgid "invalid DN (%s)" +msgstr "neplatné DN (%s)" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "ACI s názvom \"%s\" nenájdené" + +#, fuzzy +msgid "ACI object." +msgstr "IPA objekt" + +msgid "ACIs" +msgstr "ACI" + +msgid "ACI" +msgstr "ACI" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "Vytvorené ACI \"%(value)s\"" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "Odstránené ACI \"%(value)s\"" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "Upravené ACI \"%(value)s\"" + +#, fuzzy, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "Vytvorené ACI \"%(value)s\"" + +#, fuzzy +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "Automember pravidlo" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +#, fuzzy +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" +"\n" +" Nájdenie všetkých lokalít:\n" +" ipa location-find\n" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +#, fuzzy +msgid "Auto Membership Rule" +msgstr "Automember pravidlo" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "%(otype)s \"%(oname)s\" nenájdené" + +#, fuzzy, python-format +msgid "%s is not a valid attribute." +msgstr "%(port)s nie je platný port" + +#, fuzzy +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "Pridané automember pravidlo \"%(value)s\"" + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "Pridané automember pravidlo \"%(value)s\"" + +#, fuzzy +msgid "Auto Membership is not configured" +msgstr "Automember pravidlo: %s nenájdené!" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "Pridaná IPA lokalita \"%(value)s\"" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "Automember pravidlo: %s nenájdené!" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "Pridané automember pravidlo \"%(value)s\"" + +#, fuzzy +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "Odstránené automember pravidlo \"%(value)s\"" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "Odstránené automember pravidlo \"%(value)s\"" + +#, fuzzy +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "Vyhľadať HBAC pravidlá." + +#, fuzzy, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" msgstr[0] "%(count)d HBAC pravidlo nájdené" msgstr[1] "%(count)d HBAC pravidiel nájdených" msgstr[2] "%(count)d HBAC pravidiel nájdených" #, fuzzy -msgid "Include IPA master entries" -msgstr "Zahrnuté atribúty" - -#, fuzzy -msgid "roles" -msgstr "Role" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -#, fuzzy -msgid "Modify Class of Service entry" -msgstr "Upraviť HBAC službu." - -msgid "Display Class of Service entry" -msgstr "" - -#, fuzzy -msgid "Search for Class of Service entry" -msgstr "Vyhľadať HBAC služby." - -#, fuzzy -msgid "password policy" -msgstr "Politky hesiel" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -#, fuzzy -msgid "User check" -msgstr "Používateľské meno" - -msgid "Check if the password contains the username" -msgstr "" - msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" -msgstr "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "Zobraziť informácie o IPA lokalite." msgid "" "\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -#, fuzzy -msgid "Realm domains" -msgstr "Realm domény" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" +" Set default (fallback) group for all unmatched entries.\n" " " msgstr "" #, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" +msgid "Set default (fallback) group for automember \"%(value)s\"" msgstr "" +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, fuzzy, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "Úloha obnovenia automember členstva začala" + +msgid "Automember rebuild membership task completed" +msgstr "Úloha obnovenia automember členstva dokončená" + #, python-format -msgid "The following domains do not belong to this realm: %(domains)s" +msgid "Task DN = '%s'" msgstr "" -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -#, fuzzy -msgid "IPA server domain cannot be omitted" -msgstr "IPA CA nemôže byť odstránené" - -#, fuzzy -msgid "IPA server domain cannot be deleted" -msgstr "IPA CA nemôže byť odstránené" - -#, fuzzy -msgid "" -"\n" -"API Schema\n" -msgstr "LDAP schéma" +msgid "Automember" +msgstr "Automember" msgid "" "\n" -"Provides API introspection capabilities.\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" msgstr "" #, fuzzy -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" -"\n" -" Zobrazenie špecifickej lokality:\n" -" ipa location-show lokalita\n" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -#, fuzzy -msgid "Documentation" +msgid "automount location" msgstr "Autentifikácia" -msgid "Exclude from" -msgstr "" +#, fuzzy +msgid "automount locations" +msgstr "lokality" #, fuzzy -msgid "Include in" -msgstr "Zahrnuté atribúty" +msgid "Automount Locations" +msgstr "IPA lokality" + +#, fuzzy +msgid "Automount Location" +msgstr "Autentifikácia" + +#, fuzzy, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "Pridaná IPA lokalita \"%(value)s\"" + +#, fuzzy, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "Odstránená IPA lokalita \"%(value)s\"" + +#, fuzzy, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "%(count)d IPA lokalita nájdená" +msgstr[1] "%(count)d IPA lokalít nájdených" +msgstr[2] "%(count)d IPA lokalít nájdených" + +#, fuzzy +msgid "automount map" +msgstr "Automount" + +#, fuzzy +msgid "automount maps" +msgstr "Automount" + +#, fuzzy +msgid "Automount Maps" +msgstr "Automount" + +#, fuzzy +msgid "Automount Map" +msgstr "Automount" + +#, fuzzy, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +#, fuzzy, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "Odstránená skupina \"%(value)s\"" + +#, fuzzy, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +#, fuzzy, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "%(count)d IPA lokalita nájdená" +msgstr[1] "%(count)d IPA lokalít nájdených" +msgstr[2] "%(count)d IPA lokalít nájdených" + +#, fuzzy +msgid "Automount key object." +msgstr "Automount" + +#, fuzzy +msgid "automount key" +msgstr "Automount" + +#, fuzzy +msgid "automount keys" +msgstr "Automount" + +#, fuzzy +msgid "Automount Keys" +msgstr "Automount" + +#, fuzzy +msgid "Automount Key" +msgstr "Automount" #, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -msgid "Help topic" -msgstr "" - -#, fuzzy -msgid "Version" -msgstr "Povolenie" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -msgid "Method name" -msgstr "Názov záznamu" - -#, fuzzy -msgid "Display information about a command." -msgstr "Zobraziť informácie o IPA lokalite." - -#, fuzzy -msgid "Search for commands." -msgstr "Vyhľadať sudo príkazy." - -msgid "Return command defaults" -msgstr "" - -#, fuzzy -msgid "Display information about a class." -msgstr "Zobraziť informácie o IPA lokalite." - -#, fuzzy -msgid "Search for classes." -msgstr "Vyhľadať HBAC pravidlá." - -#, fuzzy -msgid "Display information about a help topic." -msgstr "Zobraziť informácie o IPA lokalite." - -#, fuzzy -msgid "Search for help topics." -msgstr "Vyhľadávať skupiny." - -#, fuzzy -msgid "Multi-value" -msgstr "hodnota" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -msgid "CLI name" -msgstr "ACI názov" - -#, fuzzy -msgid "Confirm (password)" -msgstr "Zmeniť heslo" - -msgid "Default" -msgstr "" - -#, fuzzy -msgid "Default from" -msgstr "Predvolená používateľská skupina" - -msgid "Label" -msgstr "" - -#, fuzzy -msgid "Convert on server" -msgstr "Oznamované servermi" - -#, fuzzy -msgid "Option group" -msgstr "Voľby" - -msgid "Sensitive" -msgstr "" - -#, fuzzy -msgid "Positional argument" -msgstr "Pozičný argument" - -#, fuzzy, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "%(parent)s: %(oname)s nenájdený" - -#, fuzzy -msgid "Display information about a command parameter." -msgstr "Zobraziť informácie o DNS forward zóne" - -msgid "Search command parameters." -msgstr "" - -#, fuzzy, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "%(parent)s: %(oname)s nenájdený" - -#, fuzzy -msgid "Display information about a command output." -msgstr "Zobraziť informácie o DNS forward zóne" - -#, fuzzy -msgid "Search for command outputs." -msgstr "Vyhľadať sudo príkazy." - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" msgstr "" -msgid "Allowed to Impersonate" +#, fuzzy, python-format +msgid "key named %(key)s already exists" +msgstr "kľúč %(key)s už existuje" + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" msgstr "" +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" + +#, fuzzy, python-format +msgid "Added automount key \"%(value)s\"" +msgstr "Pridané automember pravidlo \"%(value)s\"" + +#, fuzzy, python-format +msgid "Added automount indirect map \"%(value)s\"" +msgstr "Pridané automember pravidlo \"%(value)s\"" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "Odstránené automember pravidlo \"%(value)s\"" + +#, fuzzy, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "Upravený OTP token \"%(value)s\"" + +#, fuzzy, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "%(count)d IPA lokalita nájdená" +msgstr[1] "%(count)d IPA lokalít nájdených" +msgstr[2] "%(count)d IPA lokalít nájdených" + #, fuzzy -msgid "Member principals" +msgid "Member service groups" msgstr "Členské skupiny" -#, python-format -msgid "Malformed principal: %(error)s" +#, fuzzy +msgid "Member HBAC service groups" +msgstr "HBAC služby" + +msgid "Member ID user overrides" msgstr "" -msgid "Add target to a named service delegation." +#, fuzzy +msgid "Indirect Member ID user overrides" +msgstr "Nepriame členstvo" + +#, fuzzy +msgid "Indirect Member permissions" +msgstr "Nepriame členstvo" + +#, fuzzy +msgid "Indirect Member HBAC service" +msgstr "Nepriame členstvo" + +#, fuzzy +msgid "Indirect Member HBAC service group" +msgstr "Nepriame členstvo" + +msgid "Invalid format. Should be name=value" +msgstr "" + +#, fuzzy +msgid "An IPA master host cannot be deleted or disabled" +msgstr "Táto položka nemôže byť aktivovaná alebo deaktivovaná" + +msgid "entry" +msgstr "" + +#, fuzzy +msgid "entries" +msgstr "Žiadne položky." + +msgid "Entry" +msgstr "" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "kontajner (%(container)s) nenájdený" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "%(parent)s: %(oname)s nenájdený" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "%(pkey)s: %(oname)s nenájdený" + +#, fuzzy, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "kľúč %(key)s už existuje" + +#, fuzzy, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "voľby nie sú povolené" + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" msgstr "" #, fuzzy, python-format msgid "member %s" msgstr "Členom" -#, fuzzy -msgid "Remove member from a named service delegation." -msgstr "Odstrániť certifikáty zo služby" +#, fuzzy, python-format +msgid "%s to add" +msgstr "Zlyhalo pridanie" -#, fuzzy -msgid "service delegation rule" -msgstr "Pridať služby do HBAC pravidla." +#, python-format +msgid "%s to remove" +msgstr "" -#, fuzzy -msgid "service delegation rules" -msgstr "Voľby služieb" +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" -#, fuzzy -msgid "Service delegation rules" -msgstr "Voľby služieb" +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" -#, fuzzy -msgid "Service delegation rule" -msgstr "Voľby služieb" +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" #, fuzzy, python-format -msgid "Added service delegation rule \"%(value)s\"" +msgid "added attribute value to entry %(value)s" msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" #, fuzzy, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola odstránená" +msgid "removed attribute values from entry %(value)s" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" -msgid "privileged service delegation rule" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "%(count)d IPA lokalita nájdená" -msgstr[1] "%(count)d IPA lokalít nájdených" -msgstr[2] "%(count)d IPA lokalít nájdených" - -msgid "service delegation target" -msgstr "" - -#, fuzzy -msgid "service delegation targets" -msgstr "Nastavenia služby" - -#, fuzzy -msgid "Service delegation targets" -msgstr "Nastavenia služby" - -#, fuzzy -msgid "Service delegation target" -msgstr "Nastavenia služby" - -#, fuzzy, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola odstránená" - -msgid "privileged service delegation target" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "%(count)d IPA lokalita nájdená" -msgstr[1] "%(count)d IPA lokalít nájdených" -msgstr[2] "%(count)d IPA lokalít nájdených" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgid "one or more values to remove" msgstr "" msgid "" "\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" msgstr "" +#, fuzzy +msgid "must be TRUE or FALSE" +msgstr "musí byť True alebo False" + msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." msgstr "" -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -#, fuzzy -msgid "Malformed principal" -msgstr "Poškodené DN" - -msgid "{} is required by the IPA master" -msgstr "" - -#, fuzzy -msgid "service" -msgstr "Služba" - -#, fuzzy -msgid "services" -msgstr "Služby" - msgid "Principal alias" msgstr "" #, fuzzy -msgid "Service principal alias" -msgstr "Voľby služieb" +msgid "User password expiration" +msgstr "Vypršanie hesla" -msgid "Subject" +msgid "SSH public key fingerprint" +msgstr "Odtlačok verejného SSH kľúča (fingerprint)" + +msgid "Base-64 encoded user certificate" +msgstr "Base-64 zakódovaný používateľský certifikát" + +#, fuzzy +msgid "Certificate mapping data" +msgstr "Držanie certifikátu" + +msgid "SMB logon script path" msgstr "" +msgid "SMB profile path" +msgstr "" + +#, fuzzy +msgid "SMB Home Directory" +msgstr "Domovský priečinok" + +#, fuzzy +msgid "SMB Home Directory Drive" +msgstr "Domovský priečinok" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "neplatný formát e-mailovej adresy: %(email)s" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "manažér %(manager)s nenájdený" + +#, fuzzy, python-format +msgid "can be at most %(len)d characters" +msgstr "môže byť najviac %(maxvalue)d" + #, fuzzy msgid "Issuer" msgstr "Vydať" -msgid "Not Before" -msgstr "" +#, fuzzy +msgid "Issuer of the certificate" +msgstr "Revokácia certifikátu." -msgid "Not After" -msgstr "" - -msgid "Fingerprint (SHA1)" -msgstr "" - -msgid "Fingerprint (SHA256)" +msgid "Subject" msgstr "" #, fuzzy -msgid "Revocation reason" -msgstr "Konfigurácia repliky" +msgid "Subject of the certificate" +msgstr "Certifikát služby" -#, fuzzy -msgid "Authentication Indicators" -msgstr "Autentifikácia" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgid "cannot have an empty subject" msgstr "" -msgid "NONE value cannot be combined with other PAC types" +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" msgstr "" #, fuzzy -msgid "Add a new IPA service." -msgstr "Pridať novú HBAC službu." +msgid "Add one or more certificate mappings to the user entry." +msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" #, fuzzy, python-format -msgid "Added service \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola pridaná" +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" -msgid "force principal name even if host not in DNS" +#, fuzzy +msgid "Remove one or more certificate mappings from the user entry." +msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" + +#, fuzzy, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" msgstr "" #, fuzzy -msgid "Skip host check" -msgstr "Preskočiť DNS kontrolu" +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "Certifikačné autority" msgid "" -"force service to be created even when host object does not exist to manage it" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +msgid "Certificate Authority" +msgstr "Certifikačná autorita" + +msgid "Certificate Authorities" +msgstr "Certifikačné autority" + +msgid "Name" +msgstr "Názov" + +msgid "Name for referencing the CA" +msgstr "" + +msgid "Description of the purpose of the CA" +msgstr "" + +msgid "Authority ID" +msgstr "ID autority" + +msgid "Dogtag Authority ID" +msgstr "ID Dogtag autority" + +msgid "Subject DN" +msgstr "" + +msgid "Subject Distinguished Name" +msgstr "" + +#, fuzzy +msgid "Issuer DN" +msgstr "Vydať" + +msgid "Issuer Distinguished Name" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "Base-64 zakódovaný certifikát." + +#, fuzzy +msgid "Certificate chain" +msgstr "Certifikát" + +#, fuzzy +msgid "X.509 certificate chain" +msgstr "CA certifikát" + +#, fuzzy +msgid "Search for CAs." +msgstr "Vyhľadávať skupiny." + +#, fuzzy, python-format +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +msgid "Include certificate chain in output" +msgstr "" + +msgid "Display the properties of a CA." +msgstr "" + +#, fuzzy +msgid "Create a CA." +msgstr "Vytvoriť novú skupinu." + +#, fuzzy, python-format +msgid "Created CA \"%(value)s\"" +msgstr "Vytvorené ACI \"%(value)s\"" + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." msgstr "" #, python-format -msgid "The host '%s' does not exist to add a service to." +msgid "Unrecognized attributes: %(attrs)s" +msgstr "" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "" + +msgid "Delete a CA (must be disabled first)." +msgstr "" + +#, fuzzy, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "Odstránené ACI \"%(value)s\"" + +msgid "Insufficient privilege to delete a CA." +msgstr "" + +msgid "CA" +msgstr "" + +msgid "IPA CA cannot be deleted" +msgstr "IPA CA nemôže byť odstránené" + +msgid "Must be disabled first" +msgstr "" + +msgid "Modify CA configuration." +msgstr "Upraviť CA konfiguráciu." + +#, fuzzy, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "Upravené ACI \"%(value)s\"" + +msgid "Insufficient privilege to modify a CA." msgstr "" #, fuzzy -msgid "Add a new SMB service." -msgstr "Pridať novú HBAC službu." +msgid "Disable a CA." +msgstr "Deaktivovať CA ACL." + +#, fuzzy, python-format +msgid "Disabled CA \"%(value)s\"" +msgstr "Deaktivované CA ACL \"%(value)s\"" #, fuzzy -msgid "SMB service NetBIOS name" -msgstr "NetBIOS meno" +msgid "IPA CA cannot be disabled" +msgstr "IPA CA nemôže byť odstránené" + +#, fuzzy +msgid "Enable a CA." +msgstr "Deaktivovať CA ACL." #, fuzzy, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola odstránená" +msgid "Enabled CA \"%(value)s\"" +msgstr "HBAC pravidlo \"%(value)s\" bolo aktivované" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "" + +msgid "CA ACLs" +msgstr "" + +#, fuzzy +msgid "CA category" +msgstr "Kategórie používateľov" + +msgid "CA category the ACL applies to" +msgstr "" + +msgid "CAs" +msgstr "" #, fuzzy, python-format -msgid "Modified service \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola upravená." +msgid "Added CA ACL \"%(value)s\"" +msgstr "Odstránené CA ACL \"%(value)s\"" + +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "Odstránené CA ACL \"%(value)s\"" + +msgid "default CA ACL can be only disabled" +msgstr "" #, fuzzy, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" +msgid "Modified CA ACL \"%(value)s\"" +msgstr "Upravené ACI \"%(value)s\"" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" msgstr[0] "%(count)d HBAC pravidlo nájdené" msgstr[1] "%(count)d HBAC pravidiel nájdených" msgstr[2] "%(count)d HBAC pravidiel nájdených" #, fuzzy, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -#, fuzzy -msgid "Add new principal alias to a service" -msgstr "Pridať nové certifikáty k službe" - -#, fuzzy, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy -msgid "Remove principal alias from a service" -msgstr "Odstrániť certifikáty zo služby" - -#, fuzzy, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -#, fuzzy -msgid "" -"\n" -"Sudo Rules\n" -msgstr "Sudo pravidlá" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -#, fuzzy -msgid "this option has been deprecated." -msgstr "táto voľba je zastaraná" - -#, fuzzy -msgid "Sudo Rule" -msgstr "Sudo pravidlá" +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "Deaktivované CA ACL \"%(value)s\"" #, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, fuzzy, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "HBAC pravidlo \"%(value)s\" bolo pridané" - -#, fuzzy, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "Odstránené HBAC pravidlo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "HBAC pravidlo \"%(value)s\" bolo upravené" +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "Deaktivované CA ACL \"%(value)s\"" #, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgid "%i user or group added." msgstr "" -#, fuzzy -msgid "users" -msgstr "Používatelia" - -#, fuzzy -msgid "command" -msgstr "Príkazy" - -#, fuzzy -msgid "commands" -msgstr "Príkazy" - -msgid "runAs user" -msgstr "" - -#, fuzzy -msgid "runAs users" -msgstr "Uschovaní používatelia" - -#, fuzzy -msgid "group runAs" -msgstr "skupiny" - -#, fuzzy -msgid "runAs groups" -msgstr "skupiny" - #, fuzzy, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -msgid "commands cannot be added when command category='all'" -msgstr "" +msgid "%i users or groups added." +msgstr "Vyhľadávať skupiny." msgid "users cannot be added when user category='all'" msgstr "" +#, python-format +msgid "%i user or group removed." +msgstr "" + +#, python-format +msgid "%i users or groups removed." +msgstr "" + +#, python-format +msgid "%i host or hostgroup added." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "" + msgid "hosts cannot be added when host category='all'" msgstr "" -msgid "users cannot be added when runAs user or runAs group category='all'" +#, python-format +msgid "%i host or hostgroup removed." msgstr "" #, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" +msgid "%i hosts or hostgroups removed." +msgstr "" + +#, fuzzy, python-format +msgid "%i service added." +msgstr "Názov služby" + +#, fuzzy, python-format +msgid "%i services added." +msgstr "Názov služby" + +msgid "services cannot be added when service category='all'" msgstr "" #, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" +msgid "%i service removed." msgstr "" #, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgid "%i services removed." +msgstr "" + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, python-format +msgid "%i profiles removed." +msgstr "" + +#, fuzzy +msgid "Add CAs to a CA ACL." +msgstr "Odstrániť CA ACL." + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." msgstr "" msgid "pyhbac is not installed." @@ -15639,14 +14583,6 @@ msgstr "" msgid "Name of issuing CA" msgstr "" -#, fuzzy -msgid "Certificate chain" -msgstr "Certifikát" - -#, fuzzy -msgid "X.509 certificate chain" -msgstr "CA certifikát" - #, fuzzy msgid "Subject email address" msgstr "E-mailová adresa" @@ -15684,17 +14620,25 @@ msgstr "" msgid "Subject Other Name" msgstr "" -#, fuzzy -msgid "Issuer DN" -msgstr "Vydať" +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" +msgstr "" + +msgid "Serial number (hex)" +msgstr "Sériové číslo (hexadecimálne)" #, fuzzy msgid "Request status" msgstr "Stav pravidla" -msgid "Include certificate chain in output" -msgstr "" - msgid "" "automatically add the principal if it doesn't exist (service principals only)" msgstr "" @@ -15783,9 +14727,16 @@ msgstr "" msgid "PTR record for SAN IP (%s) does not match A/AAAA records" msgstr "" +msgid "Status" +msgstr "Stav" + msgid "Revoked" msgstr "" +#, fuzzy +msgid "Revocation reason" +msgstr "Konfigurácia repliky" + #, fuzzy msgid "" "Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " @@ -15796,10 +14747,20 @@ msgstr "Dôvod revokácie certifikátu (0-10)" msgid "Owner %s" msgstr "Vlastník" +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" +"Certifikát so sériovým číslom %(serial)s vydaný CA '%(ca)s' sa nenašiel" + #, fuzzy msgid "7 is not a valid revocation reason" msgstr "\"%s\" nie je platný typ povolenia" +#, fuzzy +msgid "Status of the certificate" +msgstr "Certifikát služby" + msgid "Results should contain primary key attribute only (\"certificate\")" msgstr "" @@ -16046,6 +15007,113 @@ msgstr[0] "%(count)d HBAC pravidlo nájdené" msgstr[1] "%(count)d HBAC pravidiel nájdených" msgstr[2] "%(count)d HBAC pravidiel nájdených" +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "invalid Profile ID" +msgstr "nevalídne ID profilu" + +msgid "Certificate Profile" +msgstr "Certifikačný profil" + +msgid "Certificate Profiles" +msgstr "Certifikačné profily" + +msgid "Profile configuration" +msgstr "Configurácia profilu" + +#, fuzzy, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "Odstránený profil \"%(value)s\"" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "Odstránený profil \"%(value)s\"" + +#, fuzzy, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "Certifikačné profily nemôžu byť premenované" + +#, fuzzy, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +msgid "Certificate profiles cannot be renamed" +msgstr "Certifikačné profily nemôžu byť premenované" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + msgid "" "\n" "Server configuration\n" @@ -16108,9 +15176,18 @@ msgstr "" msgid "must be at least 10" msgstr "musí byť najmenej %(minvalue)d" +msgid "configuration options" +msgstr "konfiguračné voľby" + +msgid "Configuration" +msgstr "Konfigurácia" + msgid "Maximum hostname length" msgstr "" +msgid "Enable adding subids to new users" +msgstr "" + #, fuzzy msgid "IPA masters" msgstr "IPA trust" @@ -16188,6 +15265,23 @@ msgstr "" msgid "DNSec key master" msgstr "" +#, fuzzy +msgid "Setup SID configuration" +msgstr "Configurácia profilu" + +msgid "New users and groups automatically get a SID assigned" +msgstr "" + +#, fuzzy +msgid "Add SIDs" +msgstr "Pridať nové ID View" + +msgid "Add SIDs for existing users and groups" +msgstr "" + +msgid "NetBIOS name of the IPA domain" +msgstr "" + #, fuzzy msgid "Empty domain is not allowed" msgstr "voľby nie sú povolené" @@ -16204,6 +15298,22 @@ msgstr "" msgid "Disabled domain '%(domain)s' is not allowed" msgstr "" +msgid "not allowed to enable SID generation" +msgstr "" + +msgid "" +"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " +"allowed. Empty string is not allowed." +msgstr "" + +#, fuzzy +#| msgid "Failed to add" +msgid "Failed to call DBus" +msgstr "Zlyhalo pridanie" + +msgid "Configuration of SID failed. See details in the error log" +msgstr "" + #, fuzzy msgid "The group doesn't exist" msgstr "Položka %s neexistuje" @@ -16229,5256 +15339,10 @@ msgstr "chyba na serveri '%(server)s': %(error)s" msgid "SELinux user map default user not in order list" msgstr "" -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -#, fuzzy -msgid "sudo command group" -msgstr "sudo príkazy" - -#, fuzzy -msgid "sudo command groups" -msgstr "sudo príkazy" - -#, fuzzy, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "Odstránená skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -#, fuzzy -msgid "host groups" -msgstr "skupiny" - -#, fuzzy -msgid "Host Group" -msgstr "Používateľská skupina" - -#, fuzzy, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - #, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" +msgid "You cannot specify %s without the --enable-sid option" msgstr "" -#, fuzzy, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "Odstránená skupina \"%(value)s\"" - -#, fuzzy -msgid "hostgroup" -msgstr "skupina" - -#, fuzzy -msgid "privileged hostgroup" -msgstr "Bez privátnej skupiny" - -#, fuzzy, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -msgid "Add users that can manage members of this hostgroup." -msgstr "Pridať používateľa, ktorý môže spravovať tento token." - -#, fuzzy -msgid "Remove users that can manage members of this hostgroup." -msgstr "Pridať používateľa, ktorý môže spravovať tento token." - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "The OTP if the user has a token configured" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Permissions\n" -msgstr "Povolenia" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "SYSTEM-ové povolenia nemožu byť upravené alebo odstránené" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Managed permissions\n" -msgstr "povolenie" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -#, fuzzy -msgid "must be enclosed in parentheses" -msgstr "musí byť integer" - -#, fuzzy, python-format -msgid "\"%s\" is not an object type" -msgstr "\"%s\" nie je platný typ povolenia" - -#, fuzzy, python-format -msgid "Deprecated; use %s" -msgstr "Zastarané voľby" - -#, fuzzy, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "SYSTEM-ové povolenia nemožu byť upravené alebo odstránené" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" -msgstr "" - -#, fuzzy -msgid "Bad search filter" -msgstr "Zlý vyhľadávací filter %(info)s" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, fuzzy, python-format -msgid "Added permission \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "Odstránený profil \"%(value)s\"" - -msgid "cannot delete managed permissions" -msgstr "" - -#, fuzzy, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "%(count)d IPA lokalita nájdená" -msgstr[1] "%(count)d IPA lokalít nájdených" -msgstr[2] "%(count)d IPA lokalít nájdených" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -msgid "Internationalization messages" -msgstr "" - -msgid "Your session has expired. Please log in again." -msgstr "" - -#, fuzzy -msgid "Rebuild auto membership" -msgstr "Priame členstvo" - -#, fuzzy -msgid "Are you sure you want to rebuild auto membership?" -msgstr "Ste si istý/istá, že chcete aktivovať ${object}?" - -#, fuzzy -msgid "Are you sure you want to proceed with the action?" -msgstr "Ste si istý/istá, že chcete odstrániť ${object}?" - -#, fuzzy, python-brace-format -msgid "${count} item(s) added" -msgstr "${count} položiek odstránených" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "" - -msgid "Remove" -msgstr "" - -#, fuzzy -msgid "Authentication indicators" -msgstr "Autentifikácia" - -#, fuzzy -msgid "Authentication indicator" -msgstr "Autentifikácia" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "Add Custom Authentication Indicator" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -msgid "Disable per-user override" -msgstr "" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "About" -msgstr "" - -#, fuzzy -msgid "Activate" -msgstr "Aktívna zóna" - -#, fuzzy -msgid "Add Many" -msgstr "Pridať a upraviť" - -msgid "Back" -msgstr "" - -msgid "Clear" -msgstr "" - -#, fuzzy -msgid "Clear all fields on the page." -msgstr "Znovu načítať stránku." - -msgid "Close" -msgstr "" - -msgid "Download" -msgstr "" - -#, fuzzy -msgid "Download certificate as PEM formatted file." -msgstr "Odstrániť certifikačný profil" - -#, fuzzy -msgid "Enable" -msgstr "Deaktivovať" - -#, fuzzy -msgid "Get" -msgstr "Nastaviť" - -msgid "Match" -msgstr "" - -#, fuzzy -msgid "Match users according to certificate." -msgstr "Vyhľadávanie existujúcich certifikátov." - -msgid "Migrate" -msgstr "" - -msgid "Remove hold" -msgstr "" - -msgid "Reset" -msgstr "" - -#, fuzzy -msgid "Reset Password and Log in" -msgstr "Obnoviť heslo" - -msgid "Retry" -msgstr "" - -msgid "Revoke" -msgstr "" - -#, fuzzy -msgid "Stage" -msgstr "Predpripravení používatelia" - -#, fuzzy -msgid "View" -msgstr "ID Views" - -#, fuzzy -msgid "Customization" -msgstr "Potvrdenie" - -msgid "Pagination Size" -msgstr "" - -msgid "General" -msgstr "" - -#, fuzzy -msgid "Record Settings" -msgstr "Nastavenia role" - -msgid "Back to Top" -msgstr "" - -#, fuzzy, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "Nastavenia pre ${entity} ${primary_key}" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "" - -#, fuzzy -msgid "Add custom value" -msgstr "Vlastná hodnota" - -#, fuzzy -msgid "Available" -msgstr "Deaktivovať" - -#, fuzzy -msgid "Some operations failed." -msgstr "Vytvorenie záznamu zlyhalo." - -#, fuzzy -msgid "Operations Error" -msgstr "Chyba validácie" - -#, fuzzy, python-brace-format -msgid "Edit ${entity}" -msgstr "Identita" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "" - -msgid "Prospective" -msgstr "" - -#, fuzzy -msgid "Redirection" -msgstr "Domovský priečinok" - -msgid "Select entries to be removed." -msgstr "" - -#, fuzzy -msgid "Result" -msgstr "Zobraz výsledky" - -msgid "Input form contains invalid or missing values." -msgstr "" - -msgid "Please try the following options:" -msgstr "" - -msgid "If the problem persists please contact the system administrator." -msgstr "" - -msgid "Reload the browser." -msgstr "" - -msgid "Return to the main page and retry the operation" -msgstr "" - -#, fuzzy, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "${primary_key} je členom:" - -#, fuzzy, python-brace-format -msgid "${primary_key} members:" -msgstr "${primary_key} je členom:" - -#, fuzzy, python-brace-format -msgid "${primary_key} member managers:" -msgstr "${primary_key} je členom:" - -msgid "False" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Allowed to create keytab" -msgstr "" - -msgid "Allowed to retrieve keytab" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Add Kerberos Principal Alias" -msgstr "" - -msgid "New kerberos principal alias" -msgstr "" - -msgid "Remove Kerberos Alias" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "" - -msgid "PAD" -msgstr "" - -#, fuzzy -msgid "Authenticating" -msgstr "Autentifikácia" - -msgid "Authentication with personal certificate failed" -msgstr "" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" - -msgid "Continue to next page" -msgstr "" - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" - -msgid "Login failed due to an unknown reason" -msgstr "" - -msgid "Logged In As" -msgstr "" - -msgid "Authentication with Kerberos failed" -msgstr "" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -msgid "Loading" -msgstr "" - -msgid "Kerberos Principal you entered is expired" -msgstr "" - -msgid "Loading data" -msgstr "" - -msgid "Log in" -msgstr "" - -#, fuzzy -msgid "Log In Using Certificate" -msgstr "Žiadny platný certifikát" - -msgid "Log in using personal certificate" -msgstr "" - -msgid "Log out" -msgstr "" - -#, fuzzy -msgid "Log out error" -msgstr "Chyba formátu" - -msgid "Password or Password+One-Time Password" -msgstr "" - -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "" - -msgid "Synchronizing" -msgstr "" - -msgid "The user account you entered is locked" -msgstr "" - -#, fuzzy -msgid "number of passwords" -msgstr "Používateľské heslo" - -msgid "seconds" -msgstr "" - -#, fuzzy -msgid "Migrating" -msgstr "Konfigurácia" - -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -#, fuzzy -msgid "Password migration was not successful" -msgstr "Nastavenie hesla nebolo úspešné" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -#, fuzzy -msgid "The password or username you entered is incorrect" -msgstr "Prihlasovacie meno, heslo alebo token sú nesprávne" - -#, fuzzy -msgid "Password migration was successful" -msgstr "Nastavenie hesla nebolo úspešné" - -#, fuzzy -msgid "Attribute" -msgstr "Atribúty" - -msgid "Add delegation" -msgstr "" - -#, fuzzy -msgid "Remove delegations" -msgstr "Odstrániť povolenie" - -#, fuzzy -msgid "Add permission" -msgstr "povolenie" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove permissions" -msgstr "Odstrániť povolenie" - -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "" - -msgid "Add privilege" -msgstr "" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -msgid "Remove privileges" -msgstr "" - -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "" - -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "" - -msgid "Add role" -msgstr "" - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "Certifikát pre ${entity} ${primary_key}" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove roles" -msgstr "Serverové role" - -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "Certifikát pre ${entity} ${primary_key}" - -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Add self service permission" -msgstr "HBAC popis služby" - -#, fuzzy -msgid "Remove self service permissions" -msgstr "Odstrániť povolenie" - -#, fuzzy -msgid "Add rule" -msgstr "HBAC pravidlá" - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Are you sure you want to change default group?" -msgstr "Ste si istý/istá, že chcete odstrániť ${object}?" - -#, fuzzy -msgid "Default host group" -msgstr "Predvolená používateľská skupina" - -msgid "Exclusive" -msgstr "" - -msgid "Host group rule" -msgstr "" - -#, fuzzy -msgid "Host group rules" -msgstr "sudo pravidlá" - -msgid "Inclusive" -msgstr "" - -#, fuzzy -msgid "Remove auto membership rules" -msgstr "Automember pravidlo" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "User group rule" -msgstr "Používateľská skupina" - -#, fuzzy -msgid "User group rules" -msgstr "Používateľská skupina" - -#, fuzzy -msgid "Add automount key" -msgstr "Automount" - -msgid "Remove automount keys" -msgstr "" - -#, fuzzy -msgid "Add automount location" -msgstr "Pridať novú IPA lokalitu." - -#, fuzzy -msgid "Automount Location Settings" -msgstr "Nastavenia účtu" - -#, fuzzy -msgid "Remove automount locations" -msgstr "Servery v lokalite." - -#, fuzzy -msgid "Add automount map" -msgstr "Automount" - -#, fuzzy -msgid "Map Type" -msgstr "Typ skupiny" - -msgid "Remove automount maps" -msgstr "" - -#, fuzzy -msgid "Add certificate authority" -msgstr "Certifikačná autorita" - -#, fuzzy -msgid "Remove certificate authorities" -msgstr "Certifikačné autority" - -msgid "Add CA ACL" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "Certifikát pre ${entity} ${primary_key}" - -#, fuzzy, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "Pridať používateľov a skupiny do HBAC pravidla." - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "Certifikát pre ${entity} ${primary_key}" - -#, fuzzy, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "Pridať služby do HBAC pravidla." - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -msgid "Any Host" -msgstr "" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" - -#, fuzzy -msgid "Remove CA ACLs" -msgstr "Odstrániť CA ACL." - -#, fuzzy, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "Certifikát pre ${entity} ${primary_key}" - -#, fuzzy, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, fuzzy, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "Odstrániť certifikáty zo služby" - -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Specified Hosts and Groups" -msgstr "Špecifikované služby a skupiny" - -#, fuzzy -msgid "Specified Users and Groups" -msgstr "Špecifikované služby a skupiny" - -msgid "Permitted to have certificates issued" -msgstr "" - -#, fuzzy -msgid "Remove certificate profiles" -msgstr "Certifikačné profily" - -msgid "AA Compromise" -msgstr "" - -msgid "Add principal" -msgstr "" - -msgid "Affiliation Changed" -msgstr "" - -msgid "CA" -msgstr "" - -msgid "CA Compromise" -msgstr "" - -#, fuzzy -msgid "Cessation of Operation" -msgstr "Konfigurácia repliky" - -#, fuzzy -msgid "Common Name" -msgstr "Názov príkazu" - -#, fuzzy -msgid "the certificate with serial number " -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -msgid "Expires On" -msgstr "" - -msgid "Issued on from" -msgstr "" - -msgid "Issued on to" -msgstr "" - -msgid "Revoked on from" -msgstr "" - -msgid "Revoked on to" -msgstr "" - -#, fuzzy -msgid "Valid not after from" -msgstr "Chyba validácie" - -#, fuzzy -msgid "Valid not after to" -msgstr "Začiatok platnosti" - -msgid "Valid not before from" -msgstr "" - -msgid "Valid not before to" -msgstr "" - -msgid "Fingerprints" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "Certifikát pre ${entity} ${primary_key}" - -#, fuzzy, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "Certifikát pre ${entity} ${primary_key}" - -#, fuzzy, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "Certifikát pre ${entity} ${primary_key}" - -#, fuzzy -msgid "Issue new certificate" -msgstr "Nový certifikát" - -#, fuzzy -msgid "Issued By" -msgstr "Vydať" - -#, fuzzy -msgid "Issued On" -msgstr "Vydať" - -#, fuzzy -msgid "Issued To" -msgstr "Vydať" - -msgid "Key Compromise" -msgstr "" - -msgid "Certificate in base64 or PEM format" -msgstr "" - -#, fuzzy -msgid "Privilege Withdrawn" -msgstr "Nastavenia privilégia" - -#, fuzzy -msgid "Remove certificate hold" -msgstr "Revokácia certifikátu." - -msgid "Do you want to remove the certificate hold?" -msgstr "" - -msgid "Remove from CRL" -msgstr "" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" - -#, fuzzy -msgid "Revoke certificate" -msgstr "Revokácia certifikátu." - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" - -msgid "REVOKED" -msgstr "" - -#, fuzzy -msgid "SHA1 Fingerprint" -msgstr "Odtlačok verejného SSH kľúča (fingerprint)" - -msgid "SHA256 Fingerprint" -msgstr "" - -msgid "Superseded" -msgstr "" - -#, fuzzy -msgid "Valid from" -msgstr "Chyba validácie" - -#, fuzzy -msgid "Valid to" -msgstr "Platnosť" - -#, fuzzy -msgid "Certificate Data" -msgstr "Certifikát" - -#, fuzzy -msgid "Certificate For Match" -msgstr "Certifikačná autorita" - -#, fuzzy -msgid "Certificate Mapping Match" -msgstr "Typ certifikátu" - -msgid "Matched Users" -msgstr "" - -#, fuzzy -msgid "User Login" -msgstr "Prihlasovacie meno" - -#, fuzzy -msgid "Add certificate identity mapping rule" -msgstr "Pridať nové certifikáty k službe" - -#, fuzzy -msgid "Add certificate mapping data" -msgstr "CA certifikát" - -#, fuzzy -msgid "Certificate mapping data" -msgstr "Držanie certifikátu" - -#, fuzzy -msgid "Configuration string" -msgstr "Konfigurácia" - -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "" - -#, fuzzy -msgid "Remove certificate mapping data" -msgstr "Odstrániť certifikáty zo služby" - -msgid "Issuer and subject" -msgstr "" - -#, fuzzy -msgid "Remove certificate identity mapping rules" -msgstr "Odstrániť certifikáty zo služby" - -#, fuzzy -msgid "Server Options" -msgstr "Voľby služieb" - -#, fuzzy -msgid "Forward first" -msgstr "Forwardery" - -#, fuzzy -msgid "Forwarding disabled" -msgstr "Účet deaktivovaný" - -#, fuzzy -msgid "Forward only" -msgstr "DNS forward zóna" - -#, fuzzy -msgid "Update System DNS Records" -msgstr "Aktualizovať DNS položky." - -msgid "Do you want to update system DNS records?" -msgstr "" - -msgid "System DNS records updated" -msgstr "" - -#, fuzzy -msgid "Add DNS forward zone" -msgstr "DNS forward zóna" - -#, fuzzy -msgid "Remove DNS forward zones" -msgstr "DNS forward zóny" - -#, fuzzy -msgid "Add DNS resource record" -msgstr "Pridať nový DNS záznam" - -#, fuzzy -msgid "Checking if record exists." -msgstr "Vytváranie záznamu." - -#, fuzzy -msgid "Fetching DNS zones." -msgstr "DNS zóny" - -msgid "An error occurred while fetching dns zones." -msgstr "" - -msgid "You will be redirected to DNS Zone." -msgstr "" - -#, fuzzy -msgid "Remove DNS resource records" -msgstr "Odstrániť DNS záznam" - -#, fuzzy -msgid "Add DNS zone" -msgstr "DNS zóna" - -#, fuzzy -msgid "Remove DNS zones" -msgstr "DNS zóny" - -#, fuzzy -msgid "Skip overlap check" -msgstr "Preskočiť DNS kontrolu" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" - -#, fuzzy -msgid "Authoritative nameserver change" -msgstr "Autoritatívny nameserver" - -msgid "Level" -msgstr "" - -msgid "Set Domain Level" -msgstr "" - -#, fuzzy -msgid "Add user group" -msgstr "Používateľská skupina" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "Pridať používateľov a skupiny do HBAC pravidla." - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -msgid "External" -msgstr "" - -#, fuzzy -msgid "Group categories" -msgstr "Kategórie používateľov" - -msgid "Change to external group" -msgstr "" - -#, fuzzy -msgid "Change to POSIX group" -msgstr "Cieľová skupina" - -#, fuzzy -msgid "Non-POSIX" -msgstr "POSIX" - -#, fuzzy -msgid "Remove user groups" -msgstr "Členské skupiny" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, fuzzy, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, fuzzy, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, fuzzy, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "Odstrániť služby a skupiny služieb z HBAC pravidla." - -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Add HBAC rule" -msgstr "HBAC pravidlá" - -#, fuzzy, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "Pridať používateľov a skupiny do HBAC pravidla." - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "Pridať služby do HBAC pravidla." - -#, fuzzy, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "Pridať služby do HBAC pravidla." - -#, fuzzy -msgid "Accessing" -msgstr "Čas prístupu" - -#, fuzzy -msgid "Remove HBAC rules" -msgstr "HBAC pravidlá" - -#, fuzzy, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, fuzzy, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "Odstrániť služby a skupiny služieb z HBAC pravidla." - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, fuzzy -msgid "Via Service" -msgstr "Služba" - -#, fuzzy -msgid "Add HBAC service" -msgstr "HBAC služba" - -#, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "" - -#, fuzzy -msgid "Remove HBAC services" -msgstr "HBAC služby" - -#, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "" - -#, fuzzy -msgid "Add HBAC service group" -msgstr "Pridať novú HBAC službu." - -#, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove HBAC service groups" -msgstr "HBAC služby" - -#, fuzzy, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "Odstrániť služby a skupiny služieb z HBAC pravidla." - -#, fuzzy -msgid "Include Disabled" -msgstr "Deaktivované" - -#, fuzzy -msgid "Include Enabled" -msgstr "Zahrnuté atribúty" - -msgid "Matched" -msgstr "" - -msgid "Missing values: " -msgstr "" - -#, fuzzy -msgid "New Test" -msgstr "Spustiť test" - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "" - -msgid "Unmatched" -msgstr "" - -msgid "Add host" -msgstr "" - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "Pridať služby do HBAC pravidla." - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -#, fuzzy -msgid "Host Certificate" -msgstr "Získať certifikát" - -#, fuzzy -msgid "Host Name" -msgstr "Názov" - -msgid "Delete Key, Unprovision" -msgstr "" - -#, fuzzy -msgid "Host Settings" -msgstr "Trust nastavenia" - -msgid "Enrolled" -msgstr "" - -msgid "Enrollment" -msgstr "" - -msgid "Fully Qualified Host Name" -msgstr "" - -#, fuzzy -msgid "Generate OTP" -msgstr "Nastaviť OTP" - -#, fuzzy -msgid "Generated OTP" -msgstr "Druhé OTP" - -#, fuzzy -msgid "Kerberos Key Present, Host Provisioned" -msgstr "Kerberos kľúč nie je prítomný" - -#, fuzzy -msgid "One-Time Password" -msgstr "Jednorázové heslo (OTP)" - -#, fuzzy -msgid "One-Time Password Not Present" -msgstr "Jednorázové heslo (OTP)" - -#, fuzzy -msgid "One-Time Password Present" -msgstr "Jednorázové heslo (OTP)" - -#, fuzzy -msgid "Reset OTP" -msgstr "Nastaviť OTP" - -#, fuzzy -msgid "Reset One-Time Password" -msgstr "Jednorázové heslo (OTP)" - -#, fuzzy -msgid "OTP set" -msgstr "OTP token" - -#, fuzzy -msgid "Set One-Time Password" -msgstr "Jednorázové heslo (OTP)" - -#, fuzzy -msgid "Remove hosts" -msgstr "Odstrániť povolenie" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "" - -#, fuzzy -msgid "Unprovision" -msgstr "povolenie" - -#, fuzzy -msgid "Are you sure you want to unprovision this host?" -msgstr "Ste si istý/istá, že chcete odomknúť užívateľa ${object}?" - -msgid "Unprovisioning host" -msgstr "" - -msgid "Host unprovisioned" -msgstr "" - -#, fuzzy -msgid "Add host group" -msgstr "Pridať do predvolenej skupiny" - -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Host Group Settings" -msgstr "Nastavenia skupiny" - -#, fuzzy -msgid "Remove host groups" -msgstr "Člen skupín" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "User to override" -msgstr "Kategórie používateľov" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" - -msgid "Enter trusted user login." -msgstr "" - -#, fuzzy -msgid "Profile" -msgstr "Profily" - -msgid "Group to override" -msgstr "" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" - -msgid "Enter trusted group name." -msgstr "" - -#, fuzzy -msgid "Add ID view" -msgstr "Pridať nové ID View" - -msgid "Add group ID override" -msgstr "" - -msgid "Add user ID override" -msgstr "" - -#, fuzzy, python-brace-format -msgid "${primary_key} applies to:" -msgstr "${primary_key} je členom:" - -msgid "Applied to hosts" -msgstr "" - -#, fuzzy -msgid "Apply to host groups" -msgstr "Pridať do predvolenej skupiny" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" - -msgid "Apply to hosts" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#, fuzzy, python-brace-format -msgid "${primary_key} overrides:" -msgstr "${primary_key} je členom:" - -#, fuzzy -msgid "Remove ID views" -msgstr "ID Views" - -msgid "Remove user ID overrides" -msgstr "" - -msgid "Remove group ID overrides" -msgstr "" - -msgid "Un-apply from host groups" -msgstr "" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" - -#, fuzzy -msgid "Un-apply" -msgstr "Použiť" - -msgid "Un-apply from hosts" -msgstr "" - -msgid "Un-apply ID Views from hosts" -msgstr "" - -#, fuzzy -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "Ste si istý/istá, že chcete aktivovať vybrané položky?" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" - -#, fuzzy -msgid "Kerberos Ticket Policy" -msgstr "nastavenia kerberos ticket policy" - -#, fuzzy -msgid "Add netgroup" -msgstr "Pridať do predvolenej skupiny" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -msgid "Host" -msgstr "" - -#, fuzzy -msgid "Netgroups" -msgstr "skupiny" - -#, fuzzy -msgid "Remove netgroups" -msgstr "Členské skupiny" - -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Add OTP token" -msgstr "OTP token" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" - -#, fuzzy -msgid "Configure your token" -msgstr "Konfigurácia" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" - -#, fuzzy -msgid "Enable token" -msgstr "Deaktiovať token" - -#, fuzzy -msgid "Remove OTP tokens" -msgstr "OTP tokeny" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Show configuration uri" -msgstr "DNS konfiguračné voľby" - -msgid "Counter-based (HOTP)" -msgstr "" - -msgid "Time-based (TOTP)" -msgstr "" - -#, fuzzy -msgid "Add Custom Attribute" -msgstr "Atribúty" - -#, fuzzy -msgid "Attribute breakdown" -msgstr "Atribúty" - -#, fuzzy -msgid "Public key:" -msgstr "Verejný SSH kľuč" - -#, fuzzy -msgid "Set public key" -msgstr "Verejný SSH kľúč" - -msgid "Modified: key not set" -msgstr "" - -msgid "New: key not set" -msgstr "" - -msgid "New: key set" -msgstr "" - -#, fuzzy -msgid "Add password policy" -msgstr "Politky hesiel" - -#, fuzzy -msgid "Remove password policies" -msgstr "Politky hesiel" - -#, fuzzy -msgid "Add ID range" -msgstr "ID rozsah" - -msgid "Base ID" -msgstr "" - -msgid "Primary RID base" -msgstr "" - -#, fuzzy -msgid "Range size" -msgstr "ID rozsahy" - -#, fuzzy -msgid "Domain SID" -msgstr "Doména" - -msgid "Secondary RID base" -msgstr "" - -#, fuzzy -msgid "Remove ID ranges" -msgstr "ID rozsahy" - -#, fuzzy -msgid "Add RADIUS server" -msgstr "DNS server" - -msgid "Remove RADIUS servers" -msgstr "" - -msgid "Do you also want to perform DNS check?" -msgstr "" - -#, fuzzy -msgid "Add SELinux user map" -msgstr "SELinux používateľ" - -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "" - -msgid "Remove selinux user maps" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" - -msgid "Warning: Consider service replication" -msgstr "" - -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" - -#, fuzzy -msgid "Delete Server" -msgstr "Odstrániť používateľa" - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" - -#, fuzzy -msgid "Add service" -msgstr "HBAC služba" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -#, fuzzy -msgid "Provisioning" -msgstr "Nastavenia oprávnenia" - -#, fuzzy -msgid "Remove services" -msgstr "Odstrániť povolenie" - -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Are you sure you want to unprovision this service?" -msgstr "Ste si istý/istá, že chcete obnoviť vybraných používateľov?" - -msgid "Unprovisioning service" -msgstr "" - -#, fuzzy -msgid "Service unprovisioned" -msgstr "Voľby služieb" - -#, fuzzy -msgid "Kerberos Key Present, Service Provisioned" -msgstr "Kerberos kľúč nie je prítomný" - -#, fuzzy -msgid "Are you sure you want to activate selected users?" -msgstr "Ste si istý/istá, že chcete obnoviť vybraných používateľov?" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "Ste si istý/istá, že chcete deaktivovať ${object}?" - -#, fuzzy, python-brace-format -msgid "${count} user(s) activated" -msgstr "${count} users(s) predpripravených" - -#, fuzzy -msgid "Add stage user" -msgstr "Predpripravení používatelia" - -#, fuzzy -msgid "Remove preserved users" -msgstr "Uschovaní používatelia" - -#, fuzzy -msgid "Remove stage users" -msgstr "Predpripravení používatelia" - -#, fuzzy -msgid "Are you sure you want to stage selected users?" -msgstr "Ste si istý/istá, že chcete obnoviť vybraných používateľov?" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "Ste si istý/istá, že chcete deaktivovať ${object}?" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "Ste si istý/istá, že chcete odstrániť ${object}?" - -#, fuzzy -msgid "Add sudo command" -msgstr "sudo príkazy" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "" - -#, fuzzy -msgid "Remove sudo commands" -msgstr "sudo príkazy" - -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "" - -#, fuzzy -msgid "Add sudo command group" -msgstr "sudo príkazy" - -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove sudo command groups" -msgstr "sudo príkazy" - -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Add sudo rule" -msgstr "sudo pravidlá" - -msgid "Add sudo option" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Run Commands" -msgstr "Sudo príkazy" - -#, fuzzy -msgid "Access this host" -msgstr "Čas prístupu" - -#, fuzzy -msgid "Remove sudo rules" -msgstr "sudo pravidlá" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -msgid "As Whom" -msgstr "" - -#, fuzzy -msgid "Specified Commands and Groups" -msgstr "Špecifikované služby a skupiny" - -#, fuzzy -msgid "Remove sudo options" -msgstr "Odstrániť povolenie" - -#, fuzzy -msgid "Autogenerated" -msgstr "Automember" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" - -#, fuzzy -msgid "Add IPA location" -msgstr "Pridať novú IPA lokalitu." - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove IPA locations" -msgstr "" -"\n" -"IPA lokality\n" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -msgid "Add topology segment" -msgstr "" - -msgid "Remove topology segments" -msgstr "" - -#, fuzzy -msgid "Add trust" -msgstr "IPA trust" - -msgid "Administrative account" -msgstr "" - -msgid "SID blocklists" -msgstr "" - -msgid "Establish using" -msgstr "" - -#, fuzzy -msgid "Fetch domains" -msgstr "Lokálna doména" - -#, fuzzy -msgid "Pre-shared password" -msgstr "Zmeniť heslo" - -#, fuzzy -msgid "Remove trusts" -msgstr "Odstrániť povolenie" - -#, fuzzy -msgid "Remove domains" -msgstr "Realm domény" - -#, fuzzy -msgid "Trust direction" -msgstr "Trust nastavenia" - -#, fuzzy -msgid "Trust status" -msgstr "Stav pravidla" - -msgid "Trust type" -msgstr "" - -msgid "Alternative UPN suffixes" -msgstr "" - -#, fuzzy -msgid "User attributes for SMB services" -msgstr "Vyhľadať HBAC služby." - -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -msgid "Path to a user home directory, in UNC format" -msgstr "" - -msgid "Drive to mount a home directory" -msgstr "" - -#, fuzzy -msgid "Add user" -msgstr "Aktívni používatelia" - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "Pridať služby do HBAC pravidla." - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -msgid "Error changing account status" -msgstr "" - -#, fuzzy -msgid "Remove users" -msgstr "Odstrániť povolenie" - -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Click to ${action}" -msgstr "" - -msgid "Add vault" -msgstr "" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -msgid "Asymmetric" -msgstr "" - -msgid "Vaults Config" -msgstr "" - -#, fuzzy -msgid "Members" -msgstr "Členom" - -msgid "My User Vaults" -msgstr "" - -#, fuzzy -msgid "Owners" -msgstr "Vlastník" - -msgid "Remove vaults" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Service Vaults" -msgstr "Služby" - -msgid "Shared" -msgstr "" - -msgid "Shared Vaults" -msgstr "" - -msgid "Standard" -msgstr "" - -msgid "Symmetric" -msgstr "" - -#, fuzzy -msgid "Vault Type" -msgstr "Typ skupiny" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -#, fuzzy -msgid "User Vaults" -msgstr "Používateľské skupiny" - -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "" - -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" - -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" - -msgid "Your password has expired. Please enter a new password." -msgstr "" - -#, fuzzy, python-brace-format -msgid "${count} item(s) enabled" -msgstr "${count} item(s) deaktivovaných" - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" - -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" - -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" - -msgid "Working" -msgstr "" - -msgid "Host-Based Access Control" -msgstr "" - -msgid "Role-Based Access Control" -msgstr "" - -msgid "Sudo" -msgstr "" - -msgid "Topology" -msgstr "" - -#, fuzzy -msgid "Trusts" -msgstr "Trust nastavenia" - -msgid "True" -msgstr "" - -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" - -msgid "API Browser" -msgstr "" - -#, fuzzy -msgid "First" -msgstr "Prvé OTP" - -#, fuzzy -msgid "Last" -msgstr "Priezvisko" - -msgid "Undo all changes in this field." -msgstr "" - -msgid "Text does not match field pattern" -msgstr "" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" - -#, fuzzy -msgid "Must be a decimal number" -msgstr "musí byť desiatkové číslo" - -#, fuzzy -msgid "Must be an integer" -msgstr "musí byť integer" - -#, fuzzy -msgid "Parse error" -msgstr "Chyba formátu" - -#, fuzzy -msgid "Must be a positive number" -msgstr "musí byť desiatkové číslo" - -#, fuzzy -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "RADIUS Proxy serverové nastavenia" - -#, fuzzy -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "RADIUS Proxy serverové nastavenia" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" -"\n" -" Odstránenie lokality:\n" -" ipa location-del lokalita\n" - -#, fuzzy -msgid "invalid attribute name" -msgstr "neplatné doménové meno" - -#, fuzzy -msgid "invalid port number" -msgstr "neplatné doménové meno" - -#, fuzzy -msgid "RADIUS proxy server" -msgstr "RADIUS proxy používateľské meno" - -#, fuzzy -msgid "RADIUS proxy servers" -msgstr "RADIUS proxy používateľské meno" - -#, fuzzy -msgid "RADIUS Servers" -msgstr "RADIUS Proxy serverové nastavenia" - -#, fuzzy -msgid "RADIUS Server" -msgstr "IPA Server" - -#, fuzzy, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola pridaná" - -#, fuzzy, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola odstránená" - -#, fuzzy, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola upravená." - -#, fuzzy, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -#, fuzzy -msgid "RADIUS max renew" -msgstr "RADIUS proxy používateľské meno" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" -"\n" -" Nájdenie všetkých lokalít:\n" -" ipa location-find\n" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -#, fuzzy -msgid "segments" -msgstr "Detaily segmentu" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy, python-format -msgid "Added segment \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "Odstránená skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(value)s" -msgstr "hodnota" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "Odstránený profil \"%(value)s\"" - -#, fuzzy, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -#, fuzzy -msgid "sudo command" -msgstr "sudo príkazy" - -#, fuzzy, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "Pridaná IPA lokalita \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "Odstránená DNS zóna \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "Upravené ACI \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "%(count)d IPA lokalita nájdená" -msgstr[1] "%(count)d IPA lokalít nájdených" -msgstr[2] "%(count)d IPA lokalít nájdených" - -#, fuzzy -msgid "self service permission" -msgstr "Odstrániť povolenie" - -#, fuzzy -msgid "self service permissions" -msgstr "Vyhľadať povolenia." - -#, fuzzy -msgid "Self Service Permissions" -msgstr "Odstrániť povolenie" - -#, fuzzy -msgid "Self Service Permission" -msgstr "Odstrániť povolenie" - -#, fuzzy, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola pridaná" - -#, fuzzy, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola odstránená" - -#, fuzzy, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola upravená." - -#, fuzzy, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -msgid "A list of ACI values" -msgstr "Odstránené ACI \"%(value)s\"" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -#, fuzzy -msgid "ACI prefix is required" -msgstr "je povinné" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, fuzzy, python-format -msgid "Group '%s' does not exist" -msgstr "Položka %s neexistuje" - -msgid "empty filter" -msgstr "" - -#, fuzzy, python-format -msgid "Syntax Error: %(error)s" -msgstr "Chyba formátu certifikátu: %(error)s" - -#, fuzzy -msgid "ACI object." -msgstr "IPA objekt" - -#, fuzzy, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "Vytvorené ACI \"%(value)s\"" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, fuzzy -msgid "privileged group" -msgstr "Bez privátnej skupiny" - -#, fuzzy, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, fuzzy, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -#, fuzzy -msgid "Not a managed group" -msgstr "Vytvoriť novú skupinu." - -#, fuzzy -msgid "Add users that can manage members of this group." -msgstr "Pridať používateľa, ktorý môže spravovať tento token." - -#, fuzzy -msgid "Remove users that can manage members of this group." -msgstr "Pridať používateľa, ktorý môže spravovať tento token." - -#, fuzzy -msgid "automount location" -msgstr "Autentifikácia" - -#, fuzzy -msgid "automount locations" -msgstr "lokality" - -#, fuzzy -msgid "Automount Locations" -msgstr "IPA lokality" - -#, fuzzy -msgid "Automount Location" -msgstr "Autentifikácia" - -#, fuzzy, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "Pridaná IPA lokalita \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "Odstránená IPA lokalita \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "%(count)d IPA lokalita nájdená" -msgstr[1] "%(count)d IPA lokalít nájdených" -msgstr[2] "%(count)d IPA lokalít nájdených" - -#, fuzzy -msgid "automount map" -msgstr "Automount" - -#, fuzzy -msgid "automount maps" -msgstr "Automount" - -#, fuzzy -msgid "Automount Maps" -msgstr "Automount" - -#, fuzzy -msgid "Automount Map" -msgstr "Automount" - -#, fuzzy, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "Odstránená skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "%(count)d IPA lokalita nájdená" -msgstr[1] "%(count)d IPA lokalít nájdených" -msgstr[2] "%(count)d IPA lokalít nájdených" - -#, fuzzy -msgid "Automount key object." -msgstr "Automount" - -#, fuzzy -msgid "automount key" -msgstr "Automount" - -#, fuzzy -msgid "automount keys" -msgstr "Automount" - -#, fuzzy -msgid "Automount Keys" -msgstr "Automount" - -#, fuzzy -msgid "Automount Key" -msgstr "Automount" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, fuzzy, python-format -msgid "key named %(key)s already exists" -msgstr "kľúč %(key)s už existuje" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, fuzzy, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "Pridané automember pravidlo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "Pridané automember pravidlo \"%(value)s\"" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "Odstránené automember pravidlo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "Upravený OTP token \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "%(count)d IPA lokalita nájdená" -msgstr[1] "%(count)d IPA lokalít nájdených" -msgstr[2] "%(count)d IPA lokalít nájdených" - -#, fuzzy -msgid "ID View" -msgstr "ID Views" - -#, fuzzy -msgid "system ID View" -msgstr "ID Views" - -#, fuzzy -msgid "User object overrides" -msgstr "Kategórie používateľov" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, fuzzy, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "Pridané ID View \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -#, fuzzy -msgid "Add a new ID override." -msgstr "Pridať nové ID View" - -#, fuzzy, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "Pridané ID View \"%(value)s\"" - -#, fuzzy -msgid "Delete an ID override." -msgstr "Odstrániť ID View." - -#, fuzzy, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "Odstránené ID View \"%(value)s\"" - -#, fuzzy -msgid "Modify an ID override." -msgstr "Upraviť HBAC službu." - -#, fuzzy, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola upravená." - -msgid "ID override" -msgstr "" - -#, fuzzy -msgid "ID overrides cannot be renamed" -msgstr "Certifikačné profily nemôžu byť premenované" - -#, fuzzy -msgid "Search for an ID override." -msgstr "Vyhľadať DNS servery" - -#, fuzzy, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -msgid "Display information about an ID override." -msgstr "Zobraziť informácie o DNS forward zóne" - -#, fuzzy -msgid "User ID override" -msgstr "ID používateľa" - -#, fuzzy -msgid "User ID overrides" -msgstr "ID používateľa" - -#, fuzzy -msgid "Group ID override" -msgstr "ID skupiny" - -#, fuzzy -msgid "Group ID overrides" -msgstr "ID skupiny" - -#, fuzzy -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" - -#, fuzzy, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" - -#, fuzzy, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -#, fuzzy, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "Pridané ID View \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "Odstránené ID View \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola upravená." - -#, fuzzy, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "Pridané ID View \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "Odstránené ID View \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -#, fuzzy -msgid "CA category" -msgstr "Kategórie používateľov" - -msgid "CA category the ACL applies to" -msgstr "" - -msgid "CAs" -msgstr "" - -#, fuzzy, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "Odstránené CA ACL \"%(value)s\"" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, fuzzy, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "Upravené ACI \"%(value)s\"" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "Deaktivované CA ACL \"%(value)s\"" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, fuzzy, python-format -msgid "%i users or groups added." -msgstr "Vyhľadávať skupiny." - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, fuzzy, python-format -msgid "%i service added." -msgstr "Názov služby" - -#, fuzzy, python-format -msgid "%i services added." -msgstr "Názov služby" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -#, fuzzy -msgid "Add CAs to a CA ACL." -msgstr "Odstrániť CA ACL." - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -#, fuzzy -msgid "trust" -msgstr "IPA trust" - -#, fuzzy -msgid "trusts" -msgstr "IPA trust" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, fuzzy, python-brace-format -msgid "invalid SID: {SID}" -msgstr "nevalídne ID profilu" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -#, fuzzy -msgid "Active Directory domain range" -msgstr "Active Directory doména" - -#, fuzzy -msgid "Active Directory trust range with POSIX attributes" -msgstr "Active Directory doména s POSIX attribútmy" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, fuzzy, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "Deaktivovaný používateľský účet \"%(value)s\"" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -#, fuzzy -msgid "Realm-domain mismatch" -msgstr "Realm domény" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -#, fuzzy -msgid "id range" -msgstr "ID rozsah" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -#, fuzzy -msgid "range exists" -msgstr "Nastavenie rozsahu" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "Odstránená skupina \"%(value)s\"" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -msgid "trust configuration" -msgstr "Configurácia profilu" - -#, fuzzy -msgid "Global Trust Configuration" -msgstr "DNS globálne nastavenia" - -#, fuzzy -msgid "IPA AD trust agents" -msgstr "IPA trust" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -#, fuzzy -msgid "unsupported trust type" -msgstr "Nepodporovaná hodnota" - -#, fuzzy, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "Upravené ACI \"%(value)s\"" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -#, fuzzy -msgid "trust domains" -msgstr "trust doménový užívateľ nenájdený" - -#, fuzzy -msgid "Trusted domains" -msgstr "trust doménový užívateľ nenájdený" - -#, fuzzy -msgid "Trusted domain" -msgstr "trust doménový užívateľ nenájdený" - -#, fuzzy -msgid "Domain enabled" -msgstr "Doménové meno" - -#, fuzzy, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, fuzzy, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "HBAC pravidlo \"%(value)s\" bolo aktivované" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, fuzzy, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "Deaktivovaný používateľský účet \"%(value)s\"" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"DNS server configuration\n" -msgstr "RADIUS proxy konfigurácia" - -#, fuzzy -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" -"\n" -"Narábanie s DNS lokalitami\n" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -#, fuzzy -msgid "DNS servers" -msgstr "DNS server" - -#, fuzzy -msgid "DNS Servers" -msgstr "DNS server" - -#, fuzzy -msgid "DNS Server" -msgstr "DNS server" - -#, fuzzy -msgid "DNS Server name" -msgstr "Názov služby" - -msgid "SOA mname override" -msgstr "" - -#, fuzzy -msgid "SOA mname (authoritative server) override" -msgstr "Doménové meno autoritatívneho nameservera" - -#, fuzzy -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Globálne forwardery. Vlastný port môže byť nastavený použítím štandardného " -"formátu \"IP_ADRESA port PORT\" pre každý forwarder " - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -#, fuzzy -msgid "Modify DNS server configuration" -msgstr "Upraviť CA konfiguráciu." - -#, fuzzy, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola upravená." - -#, fuzzy, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -msgid "IPA DNS Server is not installed" -msgstr "Verzia IPA DNS" - -#, fuzzy -msgid "Display configuration of a DNS server." -msgstr "Zobraziť informácie o DNS forward zóne" - -#, fuzzy -msgid "Add a new DNS server." -msgstr "Pridať novú HBAC službu." - -#, fuzzy, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola pridaná" - -#, fuzzy -msgid "Delete a DNS server" -msgstr "Odstrániť používateľa" - -#, fuzzy, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "Odstránená DNS zóna \"%(value)s\"" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" -"\n" -" Odstránenie lokality:\n" -" ipa location-del lokalita\n" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "Deaktivovať Kerberos kľúč a SSL certifikát služby." - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -#, fuzzy -msgid "Base-64 encoded host certificate" -msgstr "Base-64 zakódovaný používateľský certifikát" - -#, fuzzy, python-format -msgid "Added host \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "can be at most %(len)d characters" -msgstr "môže byť najviac %(maxvalue)d" - -#, fuzzy, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "Odstránená skupina \"%(value)s\"" - -#, fuzzy -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "Nenašli sa žiadne A, AAAA, SSHFP, alebo PTR záznamy." - -#, fuzzy, python-format -msgid "Modified host \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "%(count)d IPA lokalita nájdená" -msgstr[1] "%(count)d IPA lokalít nájdených" -msgstr[2] "%(count)d IPA lokalít nájdených" - -#, fuzzy, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "Deaktivovaná služba \"%(value)s\"" - -#, fuzzy, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -#, fuzzy -msgid "Add new principal alias to host entry" -msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" - -#, fuzzy, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy -msgid "Remove principal alias from a host entry" -msgstr "Odstrániť certifikáty zo služby" - -#, fuzzy, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -msgid "HBAC service group" -msgstr "HBAC služba" - -#, fuzzy -msgid "HBAC service groups" -msgstr "HBAC služby" - -#, fuzzy -msgid "HBAC Service Groups" -msgstr "HBAC služby" - -#, fuzzy -msgid "HBAC Service Group" -msgstr "HBAC služba" - -#, fuzzy, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola pridaná" - -#, fuzzy, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola odstránená" - -#, fuzzy, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola upravená." - -#, fuzzy, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - #, fuzzy msgid "delegation" msgstr "lokalita" @@ -21514,2120 +15378,6 @@ msgstr[0] "%(count)d IPA lokalita nájdená" msgstr[1] "%(count)d IPA lokalít nájdených" msgstr[2] "%(count)d IPA lokalít nájdených" -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -#, fuzzy -msgid "Privilege" -msgstr "Nastavenia privilégia" - -#, fuzzy, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "HBAC pravidlo \"%(value)s\" bolo pridané" - -#, fuzzy, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "Odstránený profil \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "HBAC pravidlo \"%(value)s\" bolo upravené" - -#, fuzzy, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -msgid "Role" -msgstr "Role" - -#, fuzzy, python-format -msgid "Added role \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "Odstránený profil \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified role \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -#, fuzzy -msgid "local domain range" -msgstr "Lokálna doména" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "Pridané ID View \"%(value)s\"" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -#, fuzzy -msgid "Specified trusted domain name could not be found." -msgstr "trust doménový objekt nenájdený" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "Odstránené ID View \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -msgid "" -"Modify ID range.\n" -"\n" -msgstr "Upraviť DNS forward zónu" - -#, fuzzy, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "Upravené ACI \"%(value)s\"" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, fuzzy -msgid "netgroups" -msgstr "skupiny" - -#, fuzzy -msgid "Netgroup" -msgstr "skupina" - -#, fuzzy, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "Odstránená skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy, python-format -msgid "Added user \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -#, fuzzy -msgid "Default group for new users is not POSIX" -msgstr "Predvolená skupina pre nových používateľov nenájdená" - -#, fuzzy, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "Odstránený záznam \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified user \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "Deaktivovaný používateľský účet \"%(value)s\"" - -#, fuzzy, python-format -msgid "user \"%s\" is already active" -msgstr "%s: používateľ je už uschovaný" - -#, fuzzy, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "Deaktivovaný používateľský účet \"%(value)s\"" - -#, fuzzy, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "Deaktivovaný používateľský účet \"%(value)s\"" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, fuzzy, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "Deaktivovaný používateľský účet \"%(value)s\"" - -#, fuzzy -msgid "Failed logins" -msgstr "Zlyhalo pridanie" - -#, fuzzy -msgid "Last successful authentication" -msgstr "Typy autentifikácie používateľa" - -#, fuzzy -msgid "Last failed authentication" -msgstr "Typy autentifikácie používateľa" - -msgid "Time now" -msgstr "" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, fuzzy, python-format -msgid "%(host)s failed: %(error)s" -msgstr "salt hodnota: %(err)s" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, fuzzy -msgid "Add one or more certificate mappings to the user entry." -msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" - -#, fuzzy -msgid "Remove one or more certificate mappings from the user entry." -msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" - -#, fuzzy -msgid "Add new principal alias to the user entry" -msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" - -#, fuzzy, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy -msgid "Remove principal alias from the user entry" -msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" - -#, fuzzy, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -#, fuzzy -msgid "Whether PKINIT is enabled or disabled" -msgstr "Táto položka nemôže byť aktivovaná alebo deaktivovaná" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "Automember pravidlo" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" -"\n" -" Nájdenie všetkých lokalít:\n" -" ipa location-find\n" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -#, fuzzy -msgid "Auto Membership Rule" -msgstr "Automember pravidlo" - -#, fuzzy, python-format -msgid "%s is not a valid attribute." -msgstr "%(port)s nie je platný port" - -#, fuzzy -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "Pridané automember pravidlo \"%(value)s\"" - -#, fuzzy -msgid "Auto Membership is not configured" -msgstr "Automember pravidlo: %s nenájdené!" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "Pridaná IPA lokalita \"%(value)s\"" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "Pridané automember pravidlo \"%(value)s\"" - -#, fuzzy -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "Odstránené automember pravidlo \"%(value)s\"" - -#, fuzzy -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "Vyhľadať HBAC pravidlá." - -#, fuzzy, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "Zobraziť informácie o IPA lokalite." - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" -msgstr "" - -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -#, fuzzy -msgid "SELinux User Map rule" -msgstr "SELinux používateľ" - -#, fuzzy -msgid "SELinux User Map rules" -msgstr "SELinux používateľ" - -#, fuzzy -msgid "SELinux User Maps" -msgstr "SELinux používateľ" - -#, fuzzy -msgid "SELinux User Map" -msgstr "SELinux používateľ" - -#, fuzzy, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "Odstránená skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "Deaktivovaný používateľský účet \"%(value)s\"" - -#, fuzzy, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "Deaktivovaný používateľský účet \"%(value)s\"" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" -"\n" -"Spravovať YubiKey tokeny.\n" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -#, fuzzy -msgid "Vault Container" -msgstr "Pokračovať" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -#, fuzzy -msgid "Deleted vault container" -msgstr "Odstrániť používateľa" - -#, fuzzy, python-format -msgid "owner %s" -msgstr "Vlastník" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -#, fuzzy -msgid "Add a vault." -msgstr "Upraviť vault." - -#, fuzzy, python-format -msgid "Added vault \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "Odstránená skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, fuzzy, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -#, fuzzy -msgid "Vault configuration" -msgstr "Configurácia profilu" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -#, fuzzy, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "Pridané automember pravidlo \"%(value)s\"" - -msgid "Retrieve data from a vault." -msgstr "" - -#, fuzzy, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -#, fuzzy -msgid "Member service groups" -msgstr "Členské skupiny" - -#, fuzzy -msgid "Member HBAC service groups" -msgstr "HBAC služby" - -msgid "Member ID user overrides" -msgstr "" - -#, fuzzy -msgid "Indirect Member ID user overrides" -msgstr "Nepriame členstvo" - -#, fuzzy -msgid "Indirect Member permissions" -msgstr "Nepriame členstvo" - -#, fuzzy -msgid "Indirect Member HBAC service" -msgstr "Nepriame členstvo" - -#, fuzzy -msgid "Indirect Member HBAC service group" -msgstr "Nepriame členstvo" - -msgid "Invalid format. Should be name=value" -msgstr "" - -#, fuzzy -msgid "An IPA master host cannot be deleted or disabled" -msgstr "Táto položka nemôže byť aktivovaná alebo deaktivovaná" - -msgid "entry" -msgstr "" - -#, fuzzy -msgid "entries" -msgstr "Žiadne položky." - -msgid "Entry" -msgstr "" - -#, fuzzy, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "kľúč %(key)s už existuje" - -#, fuzzy, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "voľby nie sú povolené" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, fuzzy, python-format -msgid "%s to add" -msgstr "Zlyhalo pridanie" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, fuzzy, python-format -msgid "added attribute value to entry %(value)s" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -msgid "one or more values to remove" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"IPA servers\n" -msgstr "IPA Server" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" -"\n" -" Nájdenie všetkých lokalít:\n" -" ipa location-find\n" - -#, fuzzy -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" -"\n" -" Zobrazenie špecifickej lokality:\n" -" ipa location-show lokalita\n" - -#, fuzzy -msgid "server" -msgstr "Servery" - -#, fuzzy -msgid "servers" -msgstr "Servery" - -#, fuzzy -msgid "IPA Servers" -msgstr "IPA Server" - -#, fuzzy -msgid "Server location" -msgstr "Servery v lokalite." - -#, fuzzy -msgid "Service weight" -msgstr "Nastavenia služby" - -#, fuzzy -msgid "Service relative weight" -msgstr "Certifikát služby" - -#, fuzzy -msgid "Relative weight for server services (counts per location)" -msgstr "Váha pre služby servera" - -#, fuzzy -msgid "Enabled server roles" -msgstr "Deaktivovaná služba \"%(value)s\"" - -msgid "List of enabled roles" -msgstr "" - -#, fuzzy -msgid "Modify information about an IPA server." -msgstr "Upraviť informácie o IPA lokalite." - -#, fuzzy, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola upravená." - -#, fuzzy, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola odstránená" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, fuzzy, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "chyba na serveri '%(server)s': %(error)s" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -#, fuzzy -msgid "Server has already been deleted" -msgstr "Niektoré položky neboli odstránené" - -msgid "Agreements deleted" -msgstr "" - -#, fuzzy -msgid "Following segments were not deleted:" -msgstr "Niektoré položky neboli odstránené" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -#, fuzzy -msgid "State" -msgstr "Stav" - -#, fuzzy -msgid "Server state" -msgstr "Servery" - -#, fuzzy, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "Zmenené heslo pre \"%(value)s\"" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "Certifikačné autority" - -msgid "" -"\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" - -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" - -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" - -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" - -msgid "" -"\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" -msgstr "" - -msgid "" -"\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" -msgstr "" - -msgid "" -"\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" - -msgid "Name for referencing the CA" -msgstr "" - -msgid "Description of the purpose of the CA" -msgstr "" - -msgid "Subject DN" -msgstr "" - -msgid "Subject Distinguished Name" -msgstr "" - -msgid "Issuer Distinguished Name" -msgstr "" - -#, fuzzy -msgid "Search for CAs." -msgstr "Vyhľadávať skupiny." - -#, fuzzy, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -msgid "Display the properties of a CA." -msgstr "" - -#, fuzzy -msgid "Create a CA." -msgstr "Vytvoriť novú skupinu." - -#, fuzzy, python-format -msgid "Created CA \"%(value)s\"" -msgstr "Vytvorené ACI \"%(value)s\"" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "" - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "Odstránené ACI \"%(value)s\"" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -msgid "Must be disabled first" -msgstr "" - -#, fuzzy, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "Upravené ACI \"%(value)s\"" - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -#, fuzzy -msgid "Disable a CA." -msgstr "Deaktivovať CA ACL." - -#, fuzzy, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "Deaktivované CA ACL \"%(value)s\"" - -#, fuzzy -msgid "IPA CA cannot be disabled" -msgstr "IPA CA nemôže byť odstránené" - -#, fuzzy -msgid "Enable a CA." -msgstr "Deaktivovať CA ACL." - -#, fuzzy, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "HBAC pravidlo \"%(value)s\" bolo aktivované" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -#, fuzzy -msgid "Stage Users" -msgstr "Predpripravení používatelia" - -#, fuzzy -msgid "Stage User" -msgstr "Predpripravení používatelia" - -#, fuzzy -msgid "stage user" -msgstr "Predpripravení používatelia" - -#, fuzzy -msgid "stage users" -msgstr "Predpripravení používatelia" - -#, fuzzy, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy -msgid "givenname is required" -msgstr "'%(name)s' je požadované" - -#, fuzzy -msgid "sn is required" -msgstr "je povinné" - -#, fuzzy, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "Odstránená skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy -msgid "Entry RDN is not 'uid'" -msgstr "Položka %s nenájdená" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, fuzzy, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "kľúč %(key)s už existuje" - -#, fuzzy, python-format -msgid "Stage user %s activated" -msgstr "Predpripravení používatelia" - -#, fuzzy -msgid "Add one or more certificates to the stageuser entry" -msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" - -#, fuzzy, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy -msgid "Remove one or more certificates to the stageuser entry" -msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" - -#, fuzzy, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -#, fuzzy -msgid "Add new principal alias to the stageuser entry" -msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" - -#, fuzzy, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy -msgid "Remove principal alias from the stageuser entry" -msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" - -#, fuzzy, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -#, fuzzy -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" - -#, fuzzy -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -#, fuzzy -msgid "must be TRUE or FALSE" -msgstr "musí byť True alebo False" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -#, fuzzy -msgid "User password expiration" -msgstr "Vypršanie hesla" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -#, fuzzy -msgid "SMB Home Directory" -msgstr "Domovský priečinok" - -#, fuzzy -msgid "SMB Home Directory Drive" -msgstr "Domovský priečinok" - -#, fuzzy -msgid "Issuer of the certificate" -msgstr "Revokácia certifikátu." - -#, fuzzy -msgid "Subject of the certificate" -msgstr "Certifikát služby" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -#, fuzzy -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" -"\n" -"Spravovať YubiKey tokeny.\n" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -#, fuzzy, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "Upravený OTP token \"%(value)s\"" - -#, fuzzy -msgid "cannot be empty" -msgstr "IPA CA nemôže byť odstránené" - -#, fuzzy, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "%(count)d IPA lokalita nájdená" -msgstr[1] "%(count)d IPA lokalít nájdených" -msgstr[2] "%(count)d IPA lokalít nájdených" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - msgid "" "\n" "Domain Name System (DNS)\n" @@ -24029,14 +15779,36 @@ msgid "" " ipa dnsconfig-mod --forwarder=203.0.113.113\n" msgstr "" +msgid "invalid IP network format" +msgstr "neplatný formát IP siete" + msgid "each ACL element must be terminated with a semicolon" msgstr "" +msgid "invalid address format" +msgstr "neplatný formát adresy" + msgid "" "expected format: <0-255> <0-255> <0-65535> even-" "length_hexadecimal_digits_or_hyphen" msgstr "" +msgid "algorithm value: allowed interval 0-255" +msgstr "algoritmus: hodnota má povolený interval 0-255" + +msgid "flags value: allowed interval 0-255" +msgstr "flagy: hodnota má povolený interval 0-255" + +msgid "iterations value: allowed interval 0-65535" +msgstr "iterácie: hodnota má povolený interval 0-65535" + +#, python-format +msgid "salt value: %(err)s" +msgstr "salt hodnota: %(err)s" + +msgid "invalid domain-name: not fully qualified" +msgstr "neplatné doménové meno: nie je plne kvalifikované (FQDN)" + msgid "should not be a wildcard domain name (RFC 4592 section 4)" msgstr "" @@ -24045,12 +15817,22 @@ msgid "" "All nameservers failed to answer the query for DNS reverse zone %(revdns)s" msgstr "" +#, python-format +msgid "" +"No answers could be found in the specified lifetime for DNS reverse zone " +"%(revdns)s" +msgstr "" + #, python-format msgid "" "DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " "server" msgstr "" +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "DNS zóna %(zone)s nenájdená" + #, python-format msgid "IP address %(ip)s is already assigned in domain %(domain)s." msgstr "" @@ -24060,10 +15842,22 @@ msgid "" "Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." msgstr "" +#, python-format +msgid "%s record" +msgstr "%s záznam" + #, fuzzy, python-format msgid "Raw %s records" msgstr "%s záznam" +#, python-format +msgid "%s Record" +msgstr "%s záznam" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "(pozrite RFC %s pre viac detailov)" + #, python-format msgid "'%s' is a required part of DNS record" msgstr "" @@ -24079,6 +15873,9 @@ msgstr "" msgid "format must be specified as \"%(format)s\" %(rfcs)s" msgstr "" +msgid "Create reverse" +msgstr "Vytvoriť reverzný" + #, fuzzy, python-format msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" msgstr "Nie je možné čítať súbor '%(filename)s': %(exc)s" @@ -24133,10 +15930,17 @@ msgstr "" msgid "Target Uniform Resource Identifier according to RFC 3986" msgstr "" +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "Nameserver '%(host)s' nemá zodpovedajúci A/AAAA záznam" + #, fuzzy msgid "Managedby permission" msgstr "povolenie" +msgid "DNS is not configured" +msgstr "" + msgid "cannot be used when a zone is specified" msgstr "" @@ -24156,6 +15960,18 @@ msgstr "kľúč %(key)s už existuje" msgid "Removed system permission \"%(value)s\"" msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" +msgid "DNS zone" +msgstr "DNS zóna" + +msgid "DNS zones" +msgstr "DNS zóny" + +msgid "DNS Zones" +msgstr "DNS zóny" + +msgid "DNS Zone" +msgstr "DNS zóna" + #, fuzzy msgid "Default time to live" msgstr "Predvolené atribúty" @@ -24180,6 +15996,17 @@ msgstr "Verzia IPA DNS" msgid "Nameserver for reverse zone cannot be a relative DNS name" msgstr "" +#, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "Odstránená DNS zóna \"%(value)s\"" + +msgid "is required" +msgstr "je povinné" + +#, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "Deaktivovaná DNS zóna \"%(value)s\"" + #, fuzzy, python-format msgid "Enabled DNS zone \"%(value)s\"" msgstr "Deaktivovaná DNS zóna \"%(value)s\"" @@ -24256,24 +16083,70 @@ msgstr "Certifikačné profily nemôžu byť premenované" msgid "DNS records can be only updated one at a time" msgstr "" +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "Odstránený záznam \"%(value)s\"" + #, fuzzy, python-format msgid "Zone record '%s' cannot be deleted" msgstr "IPA CA nemôže byť odstránené" +#, python-format +msgid "Found '%(value)s'" +msgstr "Nájdené '%(value)s'" + #, fuzzy, python-format msgid "Host '%(host)s' not found" msgstr "DNS zóna %(zone)s nenájdená" +msgid "DNS configuration options" +msgstr "DNS konfiguračné voľby" + +msgid "DNS Global Configuration" +msgstr "DNS globálne nastavenia" + +msgid "IPA DNS version" +msgstr "Verzia IPA DNS" + msgid "List of IPA masters configured as DNS servers" msgstr "" msgid "IPA server configured as DNSSec key master" msgstr "" +msgid "Global DNS configuration is empty" +msgstr "Globálna DNS konfigurácia je prázdna," + +msgid "DNS forward zone" +msgstr "DNS forward zóna" + +msgid "DNS forward zones" +msgstr "DNS forward zóny" + +msgid "DNS Forward Zones" +msgstr "DNS forward zóny" + +msgid "DNS Forward Zone" +msgstr "DNS forward zóna" + +msgid "Please specify forwarders." +msgstr "Prosím špecifikujte forwardery." + +#, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "Odstránená DNS forward zóna \"%(value)s\"" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "Deaktivovaná DNS forward zóna \"%(value)s\"" + #, fuzzy, python-format msgid "Enabled DNS forward zone \"%(value)s\"" msgstr "Deaktivovaná DNS forward zóna \"%(value)s\"" +msgid "IPA DNS records" +msgstr "IPA DNS záznamy" + #, fuzzy msgid "IPA location records" msgstr "Názov IPA lokality" @@ -24291,110 +16164,8541 @@ msgstr "" msgid "Do not update records only return expected records" msgstr "" +#, fuzzy +msgid "" +"\n" +"DNS server configuration\n" +msgstr "RADIUS proxy konfigurácia" + +#, fuzzy +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" +"\n" +"Narábanie s DNS lokalitami\n" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "DNS server" + +#, fuzzy +msgid "DNS servers" +msgstr "DNS server" + +#, fuzzy +msgid "DNS Servers" +msgstr "DNS server" + +#, fuzzy +msgid "DNS Server" +msgstr "DNS server" + +#, fuzzy +msgid "DNS Server name" +msgstr "Názov služby" + +msgid "SOA mname override" +msgstr "" + +#, fuzzy +msgid "SOA mname (authoritative server) override" +msgstr "Doménové meno autoritatívneho nameservera" + +msgid "Forwarders" +msgstr "Forwardery" + +#, fuzzy +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Globálne forwardery. Vlastný port môže byť nastavený použítím štandardného " +"formátu \"IP_ADRESA port PORT\" pre každý forwarder " + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +#, fuzzy +msgid "Modify DNS server configuration" +msgstr "Upraviť CA konfiguráciu." + +#, fuzzy, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola upravená." + +msgid "Search for DNS servers." +msgstr "Vyhľadať DNS servery" + +#, fuzzy, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy +msgid "IPA DNS Server is not installed" +msgstr "Verzia IPA DNS" + +#, fuzzy +msgid "Display configuration of a DNS server." +msgstr "Zobraziť informácie o DNS forward zóne" + +#, fuzzy +msgid "Add a new DNS server." +msgstr "Pridať novú HBAC službu." + +#, fuzzy, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola pridaná" + +#, fuzzy +msgid "Delete a DNS server" +msgstr "Odstrániť používateľa" + +#, fuzzy, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "Odstránená DNS zóna \"%(value)s\"" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "groups" +msgstr "skupiny" + +msgid "User Group" +msgstr "Používateľská skupina" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +msgid "gid cannot be set for external group" +msgstr "" + +msgid "attribute \"gidNumber\" not allowed with --nonposix" +msgstr "" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "Odstránená skupina \"%(value)s\"" + +#, fuzzy +msgid "privileged group" +msgstr "Bez privátnej skupiny" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +#, fuzzy, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, fuzzy, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +#, fuzzy +msgid "Not a managed group" +msgstr "Vytvoriť novú skupinu." + +#, fuzzy +msgid "Add users that can manage members of this group." +msgstr "Pridať používateľa, ktorý môže spravovať tento token." + +#, fuzzy +msgid "Remove users that can manage members of this group." +msgstr "Pridať používateľa, ktorý môže spravovať tento token." + +msgid "Host-based access control commands" +msgstr "" + msgid "The deny type has been deprecated." msgstr "" +msgid "HBAC rules" +msgstr "HBAC pravidlá" + +msgid "HBAC Rules" +msgstr "HBAC pravidlá" + +msgid "HBAC Services" +msgstr "HBAC služby" + +#, fuzzy +msgid "HBAC Service Groups" +msgstr "HBAC služby" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "HBAC pravidlo \"%(value)s\" bolo pridané" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "Odstránené HBAC pravidlo \"%(value)s\"" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "HBAC pravidlo \"%(value)s\" bolo upravené" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "HBAC pravidlo \"%(value)s\" bolo aktivované" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "Deaktivované HBAC pravidlo \"%(value)s\"" + +msgid "Access time" +msgstr "Čas prístupu" + #, fuzzy msgid "Add source hosts and hostgroups to an HBAC rule." msgstr "Pridať používateľov a skupiny do HBAC pravidla." msgid "" "\n" -"Manage Certificate Profiles\n" +"HBAC Services\n" "\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" "\n" "EXAMPLES:\n" "\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" "\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" "\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" "\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" "\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" +msgstr "" + +msgid "HBAC services" +msgstr "HBAC služby" + +msgid "HBAC Service" +msgstr "HBAC služba" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola pridaná" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola odstránená" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola upravená." + +#, fuzzy, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy +msgid "HBAC service group" +msgstr "HBAC služba" + +#, fuzzy +msgid "HBAC service groups" +msgstr "HBAC služby" + +#, fuzzy +msgid "HBAC Service Group" +msgstr "HBAC služba" + +#, fuzzy, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola pridaná" + +#, fuzzy, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola odstránená" + +#, fuzzy, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola upravená." + +#, fuzzy, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +msgid "" "\n" -"PROFILE CONFIGURATION FORMAT:\n" +"Simulate use of Host-based access controls\n" "\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" "\n" -"The following restrictions apply to profiles managed by IPA:\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" "\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" "\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" "\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +" --user, --host, and --service are mandatory, others are optional.\n" "\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Access granted: %s" +msgstr "Prístup povolený: %s" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +#, fuzzy +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" +"\n" +" Odstránenie lokality:\n" +" ipa location-del lokalita\n" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +#, fuzzy +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "Deaktivovať Kerberos kľúč a SSL certifikát služby." + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host" +msgstr "" + +#, fuzzy +msgid "Base-64 encoded host certificate" +msgstr "Base-64 zakódovaný používateľský certifikát" + +msgid "Serial Number" +msgstr "Sériové číslo" + +msgid "Serial Number (hex)" +msgstr "Sériové číslo (hexadecimálne)" + +#, fuzzy +msgid "Authentication Indicators" +msgstr "Autentifikácia" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, fuzzy, python-format +msgid "Added host \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +#, fuzzy, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "Odstránená skupina \"%(value)s\"" + +#, fuzzy +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "Nenašli sa žiadne A, AAAA, SSHFP, alebo PTR záznamy." + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "Nenašli sa žiadne A, AAAA, SSHFP, alebo PTR záznamy." + +#, fuzzy, python-format +msgid "Modified host \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "cn je nemeniteľné" + +#, fuzzy, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "%(count)d IPA lokalita nájdená" +msgstr[1] "%(count)d IPA lokalít nájdených" +msgstr[2] "%(count)d IPA lokalít nájdených" + +#, fuzzy, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "Deaktivovaná služba \"%(value)s\"" + +#, fuzzy, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +#, fuzzy +msgid "Add new principal alias to host entry" +msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" + +#, fuzzy, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy +msgid "Remove principal alias from a host entry" +msgstr "Odstrániť certifikáty zo služby" + +#, fuzzy, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#, fuzzy +msgid "host groups" +msgstr "skupiny" + +#, fuzzy +msgid "Host Group" +msgstr "Používateľská skupina" + +#, fuzzy, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "Odstránená skupina \"%(value)s\"" + +#, fuzzy +msgid "hostgroup" +msgstr "skupina" + +#, fuzzy +msgid "privileged hostgroup" +msgstr "Bez privátnej skupiny" + +#, fuzzy, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +#, fuzzy, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy +msgid "Add users that can manage members of this hostgroup." +msgstr "Pridať používateľa, ktorý môže spravovať tento token." + +#, fuzzy +msgid "Remove users that can manage members of this hostgroup." +msgstr "Pridať používateľa, ktorý môže spravovať tento token." + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"and an ID range of a trusted domain may set\n" +" - auto-private-groups: [true|false|hybrid] automatic creation of private " +"groups\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "ID rozsahy" + +msgid "ID Range" +msgstr "ID rozsah" + +#, fuzzy +msgid "local domain range" +msgstr "Lokálna doména" + +#, fuzzy +msgid "Active Directory domain range" +msgstr "Active Directory doména" + +#, fuzzy +msgid "Active Directory trust range with POSIX attributes" +msgstr "Active Directory doména s POSIX attribútmy" + +msgid "ID range type, one of allowed values" +msgstr "" + +#, fuzzy +#| msgid "No private group" +msgid "Auto private groups" +msgstr "Bez privátnej skupiny" + +msgid "Auto creation of private groups, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --auto-private-groups\n" +"\n" +" may be given for a new ID range for a trusted AD domain and\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" "\n" msgstr "" #, fuzzy, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" +msgid "Added ID range \"%(value)s\"" +msgstr "Pridané ID View \"%(value)s\"" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +#, fuzzy +msgid "Specified trusted domain name could not be found." +msgstr "trust doménový objekt nenájdený" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" +"private-groups is specified" +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, fuzzy, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "Odstránené ID View \"%(value)s\"" + +#, fuzzy, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy +msgid "" +"Modify ID range.\n" +"\n" +msgstr "Upraviť DNS forward zónu" + +#, fuzzy, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "Upravené ACI \"%(value)s\"" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +#, fuzzy +msgid "ID View" +msgstr "ID Views" + +#, fuzzy +msgid "system ID View" +msgstr "ID Views" + +msgid "ID Views" +msgstr "ID Views" + +#, fuzzy +msgid "User object overrides" +msgstr "Kategórie používateľov" + +msgid "Group object overrides" +msgstr "" + +msgid "Hosts the view applies to" +msgstr "" + +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "Pridané ID View \"%(value)s\"" + +#, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "Odstránené ID View \"%(value)s\"" + +#, fuzzy, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "Pridané ID View \"%(value)s\"" + +#, fuzzy, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +msgid "not found" +msgstr "Nenašlo sa" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "hodnota" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "IPA objekt" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +#, fuzzy +msgid "Add a new ID override." +msgstr "Pridať nové ID View" + +#, fuzzy, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "Pridané ID View \"%(value)s\"" + +#, fuzzy +msgid "Delete an ID override." +msgstr "Odstrániť ID View." + +#, fuzzy, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "Odstránené ID View \"%(value)s\"" + +#, fuzzy +msgid "Modify an ID override." +msgstr "Upraviť HBAC službu." + +#, fuzzy, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola upravená." + +msgid "ID override" +msgstr "" + +#, fuzzy +msgid "ID overrides cannot be renamed" +msgstr "Certifikačné profily nemôžu byť premenované" + +#, fuzzy +msgid "Search for an ID override." +msgstr "Vyhľadať DNS servery" + +#, fuzzy, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy +msgid "Display information about an ID override." +msgstr "Zobraziť informácie o DNS forward zóne" + +#, fuzzy +msgid "User ID override" +msgstr "ID používateľa" + +#, fuzzy +msgid "User ID overrides" +msgstr "ID používateľa" + +#, fuzzy +msgid "Group ID override" +msgstr "ID skupiny" + +#, fuzzy +msgid "Group ID overrides" +msgstr "ID skupiny" + +#, fuzzy +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" + +#, fuzzy, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" + +#, fuzzy, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +#, fuzzy, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "Pridané ID View \"%(value)s\"" + +#, fuzzy, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "Odstránené ID View \"%(value)s\"" + +#, fuzzy, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola upravená." + +#, fuzzy, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" msgstr[0] "%(count)d HBAC pravidlo nájdené" msgstr[1] "%(count)d HBAC pravidiel nájdených" msgstr[2] "%(count)d HBAC pravidiel nájdených" #, fuzzy, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "Odstránený profil \"%(value)s\"" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" +msgid "Added Group ID override \"%(value)s\"" +msgstr "Pridané ID View \"%(value)s\"" #, fuzzy, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "Certifikačné profily nemôžu byť premenované" +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "Odstránené ID View \"%(value)s\"" #, fuzzy, python-format -msgid "Modified Certificate Profile \"%(value)s\"" +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +#, fuzzy, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +msgid "Internationalization messages" +msgstr "" + +msgid "Your session has expired. Please log in again." +msgstr "" + +msgid "Apply" +msgstr "Použiť" + +#, fuzzy +msgid "Rebuild auto membership" +msgstr "Priame členstvo" + +#, fuzzy +msgid "Are you sure you want to rebuild auto membership?" +msgstr "Ste si istý/istá, že chcete aktivovať ${object}?" + +#, fuzzy +msgid "Are you sure you want to proceed with the action?" +msgstr "Ste si istý/istá, že chcete odstrániť ${object}?" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "Ste si istý/istá, že chcete odstrániť ${object}?" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "Ste si istý/istá, že chcete deaktivovať ${object}?" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "Ste si istý/istá, že chcete aktivovať ${object}?" + +msgid "Actions" +msgstr "Akcie" + +msgid "Add" +msgstr "Pridať" + +#, fuzzy, python-brace-format +msgid "${count} item(s) added" +msgstr "${count} položiek odstránených" + +msgid "Direct Membership" +msgstr "Priame členstvo" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "" + +msgid "Indirect Membership" +msgstr "Nepriame členstvo" + +msgid "No entries." +msgstr "Žiadne položky." + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "Zobrazených ${start} až ${end} z ${total} položiek." + +msgid "Remove" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "${count} položiek odstránneých" + +msgid "Show Results" +msgstr "Zobraz výsledky" + +#, fuzzy +msgid "Authentication indicators" +msgstr "Autentifikácia" + +#, fuzzy +msgid "Authentication indicator" +msgstr "Autentifikácia" + +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "Add Custom Authentication Indicator" +msgstr "" + +msgid "Two factor authentication (password + OTP)" +msgstr "Dvojfaktorová autentifikácia (heslo + OTP)" + +msgid "RADIUS" +msgstr "RADIUS" + +msgid "PKINIT" +msgstr "" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "" + +msgid "Disable per-user override" +msgstr "" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "About" +msgstr "" + +#, fuzzy +msgid "Activate" +msgstr "Aktívna zóna" + +msgid "Add and Add Another" +msgstr "Pridať a pridať ďalšie" + +msgid "Add and Close" +msgstr "Pridať a zavrieť" + +msgid "Add and Edit" +msgstr "Pridať a upraviť" + +#, fuzzy +msgid "Add Many" +msgstr "Pridať a upraviť" + +msgid "Back" +msgstr "" + +msgid "Cancel" +msgstr "Zrušiť" + +msgid "Clear" +msgstr "" + +#, fuzzy +msgid "Clear all fields on the page." +msgstr "Znovu načítať stránku." + +msgid "Close" +msgstr "" + +msgid "Disable" +msgstr "Deaktivovať" + +msgid "Download" +msgstr "" + +#, fuzzy +msgid "Download certificate as PEM formatted file." +msgstr "Odstrániť certifikačný profil" + +msgid "Edit" +msgstr "Upraviť" + +#, fuzzy +msgid "Enable" +msgstr "Deaktivovať" + +msgid "Find" +msgstr "Hľadať" + +#, fuzzy +msgid "Get" +msgstr "Nastaviť" + +msgid "Hide" +msgstr "Skryť" + +msgid "Issue" +msgstr "Vydať" + +msgid "Match" +msgstr "" + +#, fuzzy +msgid "Match users according to certificate." +msgstr "Vyhľadávanie existujúcich certifikátov." + +msgid "Migrate" +msgstr "" + +msgid "OK" +msgstr "OK" + +msgid "Refresh" +msgstr "Znovu načítať" + +msgid "Reload current settings from the server." +msgstr "Znovu načítať aktuálne nastavenia zo servera." + +msgid "Delete" +msgstr "Odstrániť" + +msgid "Remove hold" +msgstr "" + +msgid "Reset" +msgstr "" + +msgid "Reset Password" +msgstr "Obnoviť heslo" + +#, fuzzy +msgid "Reset Password and Log in" +msgstr "Obnoviť heslo" + +msgid "Restore" +msgstr "Obnoviť" + +msgid "Retry" +msgstr "" + +msgid "Revert" +msgstr "Vrátiť" + +msgid "Revoke" +msgstr "" + +msgid "Save" +msgstr "Uložiť" + +msgid "Set" +msgstr "Nastaviť" + +msgid "Show" +msgstr "Zobraziť" + +#, fuzzy +msgid "Stage" +msgstr "Predpripravení používatelia" + +msgid "Update" +msgstr "Aktualizovať" + +#, fuzzy +msgid "View" +msgstr "ID Views" + +#, fuzzy +msgid "Customization" +msgstr "Potvrdenie" + +msgid "Pagination Size" +msgstr "" + +msgid "Collapse All" +msgstr "Zbaliť všetko" + +msgid "Expand All" +msgstr "Rozbaliť všetko" + +msgid "General" +msgstr "" + +msgid "Identity Settings" +msgstr "Nastavenia identity" + +#, fuzzy +msgid "Record Settings" +msgstr "Nastavenia role" + +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "Nastavenia pre ${entity} ${primary_key}" + +msgid "Back to Top" +msgstr "" + +#, fuzzy, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "Nastavenia pre ${entity} ${primary_key}" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "" + +#, fuzzy +msgid "Add custom value" +msgstr "Vlastná hodnota" + +#, fuzzy +msgid "Available" +msgstr "Deaktivovať" + +#, fuzzy +msgid "Some operations failed." +msgstr "Vytvorenie záznamu zlyhalo." + +#, fuzzy +msgid "Operations Error" +msgstr "Chyba validácie" + +msgid "Confirmation" +msgstr "Potvrdenie" + +msgid "Custom value" +msgstr "Vlastná hodnota" + +msgid "This page has unsaved changes. Please save or revert." +msgstr "" +"Táto stránka obsahuje neuložené zmeny. Prosím uložte alebo vráťte zmeny späť." + +msgid "Unsaved Changes" +msgstr "Neuložené zmeny" + +#, fuzzy, python-brace-format +msgid "Edit ${entity}" +msgstr "Identita" + +msgid "Hide details" +msgstr "Skryť detaily" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "" + +msgid "Prospective" +msgstr "" + +#, fuzzy +msgid "Redirection" +msgstr "Domovský priečinok" + +msgid "Select entries to be removed." +msgstr "" + +#, fuzzy +msgid "Result" +msgstr "Zobraz výsledky" + +msgid "Show details" +msgstr "Zobraziť detaily" + +msgid "Success" +msgstr "Úspech" + +msgid "Validation error" +msgstr "Chyba validácie" + +msgid "Input form contains invalid or missing values." +msgstr "" + +msgid "Please try the following options:" +msgstr "" + +msgid "If the problem persists please contact the system administrator." +msgstr "" + +msgid "Refresh the page." +msgstr "Znovu načítať stránku." + +msgid "Reload the browser." +msgstr "" + +msgid "Return to the main page and retry the operation" +msgstr "" + +#, python-brace-format +msgid "An error has occurred (${error})" +msgstr "Nastala chyba (${error})" + +msgid "HTTP Error" +msgstr "Chyba HTTP" + +msgid "Internal Error" +msgstr "Vnútorná chyba" + +msgid "IPA Error" +msgstr "IPA chyba" + +msgid "No response" +msgstr "Bez odpovede" + +msgid "Unknown Error" +msgstr "Neznáma chyba" + +msgid "URL" +msgstr "URL" + +#, fuzzy, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "${primary_key} je členom:" + +#, fuzzy, python-brace-format +msgid "${primary_key} members:" +msgstr "${primary_key} je členom:" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "${primary_key} je členom:" + +#, fuzzy, python-brace-format +msgid "${primary_key} member managers:" +msgstr "${primary_key} je členom:" + +msgid "Settings" +msgstr "Nastavenia" + +msgid "Search" +msgstr "Vyhľadávanie" + +msgid "False" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Allowed to create keytab" +msgstr "" + +msgid "Allowed to retrieve keytab" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Add Kerberos Principal Alias" +msgstr "" + +msgid "New kerberos principal alias" +msgstr "" + +msgid "Remove Kerberos Alias" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "" + +msgid "Inherited from server configuration" +msgstr "Zdedené z konfigurácie servera" + +msgid "MS-PAC" +msgstr "MS-PAC" + +msgid "Override inherited settings" +msgstr "Potlačiť zdedené nastavenia" + +msgid "PAD" +msgstr "" + +#, fuzzy +msgid "Authenticating" +msgstr "Autentifikácia" + +msgid "Authentication with personal certificate failed" +msgstr "" + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" + +msgid "Continue to next page" +msgstr "" + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" + +msgid "Login failed due to an unknown reason" +msgstr "" + +msgid "Logged In As" +msgstr "" + +msgid "Authentication with Kerberos failed" +msgstr "" + +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" + +msgid "Loading" +msgstr "" + +msgid "Kerberos Principal you entered is expired" +msgstr "" + +msgid "Loading data" +msgstr "" + +msgid "Log in" +msgstr "" + +#, fuzzy +msgid "Log In Using Certificate" +msgstr "Žiadny platný certifikát" + +msgid "Log in using personal certificate" +msgstr "" + +msgid "Log out" +msgstr "" + +#, fuzzy +msgid "Log out error" +msgstr "Chyba formátu" + +msgid "Password or Password+One-Time Password" +msgstr "" + +#, python-brace-format +msgid "You will be redirected in ${count}s" +msgstr "" + +msgid "Sync OTP Token" +msgstr "Synchronizovať OTP Token" + +msgid "Synchronizing" +msgstr "" + +msgid "The user account you entered is locked" +msgstr "" + +#, fuzzy +msgid "number of passwords" +msgstr "Používateľské heslo" + +msgid "seconds" +msgstr "" + +#, fuzzy +msgid "Migrating" +msgstr "Konfigurácia" + +msgid "There was a problem with your request. Please, try again later." +msgstr "" + +#, fuzzy +msgid "Password migration was not successful" +msgstr "Nastavenie hesla nebolo úspešné" + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" + +#, fuzzy +msgid "The password or username you entered is incorrect" +msgstr "Prihlasovacie meno, heslo alebo token sú nesprávne" + +#, fuzzy +msgid "Password migration was successful" +msgstr "Nastavenie hesla nebolo úspešné" + +#, fuzzy +msgid "Attribute" +msgstr "Atribúty" + +msgid "Add delegation" +msgstr "" + +#, fuzzy +msgid "Remove delegations" +msgstr "Odstrániť povolenie" + +#, fuzzy +msgid "Add permission" +msgstr "povolenie" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Remove permissions" +msgstr "Odstrániť povolenie" + +#, python-brace-format +msgid "Remove privileges from permission '${primary_key}'" +msgstr "" + +msgid "Add privilege" +msgstr "" + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "" + +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "" + +msgid "Remove privileges" +msgstr "" + +#, python-brace-format +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "" + +#, python-brace-format +msgid "Remove roles from privilege '${primary_key}'" +msgstr "" + +msgid "Role Settings" +msgstr "Nastavenia role" + +msgid "Add role" +msgstr "" + +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Add services into role '${primary_key}'" +msgstr "Certifikát pre ${entity} ${primary_key}" + +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Remove roles" +msgstr "Serverové role" + +#, python-brace-format +msgid "Remove role '${primary_key}' from privileges" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Remove user groups from role '${primary_key}'" +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Remove services from role '${primary_key}'" +msgstr "Certifikát pre ${entity} ${primary_key}" + +#, python-brace-format +msgid "Remove users from role '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Add self service permission" +msgstr "HBAC popis služby" + +#, fuzzy +msgid "Remove self service permissions" +msgstr "Odstrániť povolenie" + +#, fuzzy +msgid "Add rule" +msgstr "HBAC pravidlá" + +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Are you sure you want to change default group?" +msgstr "Ste si istý/istá, že chcete odstrániť ${object}?" + +#, fuzzy +msgid "Default host group" +msgstr "Predvolená používateľská skupina" + +msgid "Default user group" +msgstr "Predvolená používateľská skupina" + +msgid "Exclusive" +msgstr "" + +msgid "Expression" +msgstr "Výraz" + +msgid "Host group rule" +msgstr "" + +#, fuzzy +msgid "Host group rules" +msgstr "sudo pravidlá" + +msgid "Inclusive" +msgstr "" + +#, fuzzy +msgid "Remove auto membership rules" +msgstr "Automember pravidlo" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "User group rule" +msgstr "Používateľská skupina" + +#, fuzzy +msgid "User group rules" +msgstr "Používateľská skupina" + +#, fuzzy +msgid "Add automount key" +msgstr "Automount" + +msgid "Remove automount keys" +msgstr "" + +#, fuzzy +msgid "Add automount location" +msgstr "Pridať novú IPA lokalitu." + +#, fuzzy +msgid "Automount Location Settings" +msgstr "Nastavenia účtu" + +#, fuzzy +msgid "Remove automount locations" +msgstr "Servery v lokalite." + +#, fuzzy +msgid "Add automount map" +msgstr "Automount" + +#, fuzzy +msgid "Map Type" +msgstr "Typ skupiny" + +msgid "Direct" +msgstr "Priame" + +msgid "Indirect" +msgstr "Nepriame" + +msgid "Remove automount maps" +msgstr "" + +#, fuzzy +msgid "Add certificate authority" +msgstr "Certifikačná autorita" + +#, fuzzy +msgid "Remove certificate authorities" +msgstr "Certifikačné autority" + +msgid "Add CA ACL" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "Certifikát pre ${entity} ${primary_key}" + +#, fuzzy, python-brace-format +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "Pridať používateľov a skupiny do HBAC pravidla." + +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "Certifikát pre ${entity} ${primary_key}" + +#, fuzzy, python-brace-format +msgid "Add services into CA ACL '${primary_key}'" +msgstr "Pridať služby do HBAC pravidla." + +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "" + +msgid "All" +msgstr "Všetko" + +msgid "Any CA" +msgstr "Akákoľvek CA" + +msgid "Any Host" +msgstr "" + +msgid "Any Service" +msgstr "Akákoľvek služba" + +msgid "Any Profile" +msgstr "Akýkoľvek profil" + +msgid "Anyone" +msgstr "Každý" + +msgid "Rule status" +msgstr "Stav pravidla" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "" + +#, fuzzy +msgid "Remove CA ACLs" +msgstr "Odstrániť CA ACL." + +#, fuzzy, python-brace-format +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "Certifikát pre ${entity} ${primary_key}" + +#, fuzzy, python-brace-format +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, fuzzy, python-brace-format +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, python-brace-format +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "Odstrániť certifikáty zo služby" + +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "" + +msgid "Specified CAs" +msgstr "Špecifikované CA" + +#, fuzzy +msgid "Specified Hosts and Groups" +msgstr "Špecifikované služby a skupiny" + +msgid "Specified Profiles" +msgstr "Špecifikované profily" + +msgid "Specified Services and Groups" +msgstr "Špecifikované služby a skupiny" + +#, fuzzy +msgid "Specified Users and Groups" +msgstr "Špecifikované služby a skupiny" + +msgid "Permitted to have certificates issued" +msgstr "" + +#, fuzzy +msgid "Remove certificate profiles" +msgstr "Certifikačné profily" + +msgid "AA Compromise" +msgstr "" + +msgid "Add principal" +msgstr "" + +msgid "Affiliation Changed" +msgstr "" + +msgid "CA Compromise" +msgstr "" + +msgid "Certificates" +msgstr "Certifikáty" + +msgid "Certificate Hold" +msgstr "Držanie certifikátu" + +#, fuzzy +msgid "Cessation of Operation" +msgstr "Konfigurácia repliky" + +#, fuzzy +msgid "Common Name" +msgstr "Názov príkazu" + +#, fuzzy +msgid "the certificate with serial number " msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" -msgid "Insufficient privilege to modify a certificate profile." +msgid "Expires On" +msgstr "" + +msgid "Issued on from" +msgstr "" + +msgid "Issued on to" +msgstr "" + +msgid "Maximum serial number" +msgstr "Maximálne sériové číslo" + +msgid "Minimum serial number" +msgstr "Minimálne sériové číslo" + +msgid "Revoked on from" +msgstr "" + +msgid "Revoked on to" +msgstr "" + +#, fuzzy +msgid "Valid not after from" +msgstr "Chyba validácie" + +#, fuzzy +msgid "Valid not after to" +msgstr "Začiatok platnosti" + +msgid "Valid not before from" +msgstr "" + +msgid "Valid not before to" +msgstr "" + +msgid "Fingerprints" +msgstr "" + +msgid "Get Certificate" +msgstr "Získať certifikát" + +msgid "Certificate Hold Removed" +msgstr "Držanie certifikátu odstránené" + +#, fuzzy, python-brace-format +msgid "Issue new certificate for host '${primary_key}'" +msgstr "Certifikát pre ${entity} ${primary_key}" + +#, fuzzy, python-brace-format +msgid "Issue new certificate for service '${primary_key}'" +msgstr "Certifikát pre ${entity} ${primary_key}" + +#, fuzzy, python-brace-format +msgid "Issue new certificate for user '${primary_key}'" +msgstr "Certifikát pre ${entity} ${primary_key}" + +#, fuzzy +msgid "Issue new certificate" +msgstr "Nový certifikát" + +#, fuzzy +msgid "Issued By" +msgstr "Vydať" + +#, fuzzy +msgid "Issued On" +msgstr "Vydať" + +#, fuzzy +msgid "Issued To" +msgstr "Vydať" + +msgid "Key Compromise" +msgstr "" + +msgid "No Valid Certificate" +msgstr "Žiadny platný certifikát" + +msgid "New Certificate" +msgstr "Nový certifikát" + +msgid "Certificate in base64 or PEM format" +msgstr "" + +msgid "Note" +msgstr "Poznámka" + +msgid "Organization" +msgstr "Organizácia" + +msgid "Organizational Unit" +msgstr "Organizačná jednotka" + +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "${count} certifikátov prítomných" + +#, fuzzy +msgid "Privilege Withdrawn" +msgstr "Nastavenia privilégia" + +msgid "Reason for Revocation" +msgstr "Dôvod pre revokáciu" + +#, fuzzy +msgid "Remove certificate hold" +msgstr "Revokácia certifikátu." + +msgid "Do you want to remove the certificate hold?" +msgstr "" + +msgid "Remove from CRL" +msgstr "" + +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" +"
  1. Vytvorte databázu certifikátov alebo použite už existujúcu. " +"Vytvorenie novej databázy:
    # certutil -N -d <database path>" +"
  2. Vytvorte CSR so subjektom CN=<${cn_name}>,O=<" +"realm>, napríklad:
    # certutil -R -d <database path> " +"-a -g <key size> -s 'CN=${cn},O=${realm}'${san}
  3. " +"Nakopírujte CSR (od -----BEGIN NEW CERTIFICATE REQUEST----- do " +"-----END NEW CERTIFICATE REQUEST-----) do textového poľa nižšie:
" + +#, python-brace-format +msgid " -8 '${cn}'" +msgstr "" + +msgid "Certificate requested" +msgstr "Certifikačná požiadavka" + +#, fuzzy +msgid "Revoke certificate" +msgstr "Revokácia certifikátu." + +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "" + +msgid "Certificate Revoked" +msgstr "Certifikát revokovaný" + +msgid "REVOKED" +msgstr "" + +#, fuzzy +msgid "SHA1 Fingerprint" +msgstr "Odtlačok verejného SSH kľúča (fingerprint)" + +msgid "SHA256 Fingerprint" +msgstr "" + +msgid "Superseded" +msgstr "" + +msgid "Unspecified" +msgstr "Nešpecifikované" + +msgid "Valid Certificate Present" +msgstr "Prítomný platný certifikát" + +#, fuzzy +msgid "Valid from" +msgstr "Chyba validácie" + +#, fuzzy +msgid "Valid to" +msgstr "Platnosť" + +msgid "Validity" +msgstr "Platnosť" + +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "Certifikát pre ${entity} ${primary_key}" + +msgid "View Certificate" +msgstr "Prezrieť certifikát" + +#, fuzzy +msgid "Certificate Data" +msgstr "Certifikát" + +#, fuzzy +msgid "Certificate For Match" +msgstr "Certifikačná autorita" + +#, fuzzy +msgid "Certificate Mapping Match" +msgstr "Typ certifikátu" + +msgid "Matched Users" +msgstr "" + +#, fuzzy +msgid "User Login" +msgstr "Prihlasovacie meno" + +#, fuzzy +msgid "Add certificate identity mapping rule" +msgstr "Pridať nové certifikáty k službe" + +#, fuzzy +msgid "Add certificate mapping data" +msgstr "CA certifikát" + +#, fuzzy +msgid "Configuration string" +msgstr "Konfigurácia" + +#, python-brace-format +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "" + +#, fuzzy +msgid "Remove certificate mapping data" +msgstr "Odstrániť certifikáty zo služby" + +msgid "Issuer and subject" +msgstr "" + +#, fuzzy +msgid "Remove certificate identity mapping rules" +msgstr "Odstrániť certifikáty zo služby" + +#, fuzzy +msgid "Version" +msgstr "Povolenie" + +msgid "Group Options" +msgstr "Voľby skupiny" + +msgid "Search Options" +msgstr "Voľby vyhľadávania" + +msgid "SELinux Options" +msgstr "SELinux voľby" + +#, fuzzy +msgid "Server Options" +msgstr "Voľby služieb" + +msgid "Service Options" +msgstr "Voľby služieb" + +msgid "User Options" +msgstr "Voľby používateľov" + +#, fuzzy +msgid "Forward first" +msgstr "Forwardery" + +#, fuzzy +msgid "Forwarding disabled" +msgstr "Účet deaktivovaný" + +#, fuzzy +msgid "Forward only" +msgstr "DNS forward zóna" + +msgid "Options" +msgstr "Voľby" + +#, fuzzy +msgid "Update System DNS Records" +msgstr "Aktualizovať DNS položky." + +msgid "Do you want to update system DNS records?" +msgstr "" + +msgid "System DNS records updated" +msgstr "" + +#, fuzzy +msgid "Add DNS forward zone" +msgstr "DNS forward zóna" + +#, fuzzy +msgid "Remove DNS forward zones" +msgstr "DNS forward zóny" + +#, fuzzy +msgid "Add DNS resource record" +msgstr "Pridať nový DNS záznam" + +msgid "DNS record was deleted because it contained no data." +msgstr "DNS záznam bol odstránený pretože neobsahoval žiadne údaje." + +msgid "Other Record Types" +msgstr "Ostatné typy záznamov" + +msgid "Address not valid, can't redirect" +msgstr "Neplatná adresa, nemôžem presmerovať" + +msgid "Create dns record" +msgstr "Vytvoriť DNS záznam" + +msgid "Creating record." +msgstr "Vytváranie záznamu." + +msgid "Record creation failed." +msgstr "Vytvorenie záznamu zlyhalo." + +#, fuzzy +msgid "Checking if record exists." +msgstr "Vytváranie záznamu." + +msgid "Record not found." +msgstr "Záznam nenájdený" + +msgid "Redirection to PTR record" +msgstr "Presmerovanie na PTR záznam" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "Zóna nájdená: ${zone}" + +msgid "Target reverse zone not found." +msgstr "Cieľová reverzná zóna nenájdená." + +#, fuzzy +msgid "Fetching DNS zones." +msgstr "DNS zóny" + +msgid "An error occurred while fetching dns zones." +msgstr "" + +msgid "You will be redirected to DNS Zone." +msgstr "" + +#, fuzzy +msgid "Remove DNS resource records" +msgstr "Odstrániť DNS záznam" + +msgid "Standard Record Types" +msgstr "Štandardné typy záznamov" + +msgid "Records for DNS Zone" +msgstr "Záznamy pre DNS zónu" + +msgid "Record Type" +msgstr "Typ záznamu" + +#, fuzzy +msgid "Add DNS zone" +msgstr "DNS zóna" + +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "Ste si istý/istá, že chcete pridať povolenie pre DNS zónu ${object}?" + +msgid "DNS Zone Settings" +msgstr "Nastavenia DNS zóny" + +#, fuzzy +msgid "Remove DNS zones" +msgstr "DNS zóny" + +msgid "Remove Permission" +msgstr "Odstrániť povolenie" + +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "" +"Ste si istý/istá, že chcete odstrániť povolenie pre DNS zónu ${object}?" + +msgid "Skip DNS check" +msgstr "Preskočiť DNS kontrolu" + +#, fuzzy +msgid "Skip overlap check" +msgstr "Preskočiť DNS kontrolu" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" + +#, fuzzy +msgid "Authoritative nameserver change" +msgstr "Autoritatívny nameserver" + +msgid "Level" +msgstr "" + +msgid "Set Domain Level" +msgstr "" + +#, fuzzy +msgid "Add user group" +msgstr "Používateľská skupina" + +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "Pridať používateľov a skupiny do HBAC pravidla." + +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user ID override into user group '${primary_key}'" +msgstr "" + +msgid "Group Settings" +msgstr "Nastavenia skupiny" + +msgid "External" +msgstr "" + +msgid "Groups" +msgstr "Skupiny" + +#, fuzzy +msgid "Group categories" +msgstr "Kategórie používateľov" + +msgid "Change to external group" +msgstr "" + +#, fuzzy +msgid "Change to POSIX group" +msgstr "Cieľová skupina" + +#, fuzzy +msgid "Non-POSIX" +msgstr "POSIX" + +msgid "POSIX" +msgstr "POSIX" + +#, fuzzy +msgid "Remove user groups" +msgstr "Členské skupiny" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, fuzzy, python-brace-format +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, fuzzy, python-brace-format +msgid "Remove user groups from user group '${primary_key}'" +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, fuzzy, python-brace-format +msgid "Remove services from user group '${primary_key}'" +msgstr "Odstrániť služby a skupiny služieb z HBAC pravidla." + +#, python-brace-format +msgid "Remove users from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "" + +msgid "Group Type" +msgstr "Typ skupiny" + +#, fuzzy +msgid "Add HBAC rule" +msgstr "HBAC pravidlá" + +#, fuzzy, python-brace-format +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "Pridať používateľov a skupiny do HBAC pravidla." + +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "Pridať služby do HBAC pravidla." + +#, fuzzy, python-brace-format +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "Pridať služby do HBAC pravidla." + +#, fuzzy +msgid "Accessing" +msgstr "Čas prístupu" + +#, fuzzy +msgid "Remove HBAC rules" +msgstr "HBAC pravidlá" + +#, fuzzy, python-brace-format +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, fuzzy, python-brace-format +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "Odstrániť služby a skupiny služieb z HBAC pravidla." + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, fuzzy +msgid "Via Service" +msgstr "Služba" + +msgid "Who" +msgstr "Kto" + +#, fuzzy +msgid "Add HBAC service" +msgstr "HBAC služba" + +#, python-brace-format +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "" + +#, fuzzy +msgid "Remove HBAC services" +msgstr "HBAC služby" + +#, python-brace-format +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "" + +#, fuzzy +msgid "Add HBAC service group" +msgstr "Pridať novú HBAC službu." + +#, python-brace-format +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Remove HBAC service groups" +msgstr "HBAC služby" + +#, fuzzy, python-brace-format +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "Odstrániť služby a skupiny služieb z HBAC pravidla." + +msgid "Access Denied" +msgstr "Prístup odmietnutý" + +msgid "Access Granted" +msgstr "Prístup povolený" + +#, fuzzy +msgid "Include Disabled" +msgstr "Deaktivované" + +#, fuzzy +msgid "Include Enabled" +msgstr "Zahrnuté atribúty" + +msgid "HBAC Test" +msgstr "HBAC test" + +msgid "Matched" +msgstr "" + +msgid "Missing values: " +msgstr "" + +#, fuzzy +msgid "New Test" +msgstr "Spustiť test" + +msgid "Rules" +msgstr "Pravidlá" + +msgid "Run Test" +msgstr "Spustiť test" + +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "" + +msgid "Unmatched" +msgstr "" + +msgid "Add host" +msgstr "" + +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "Pridať služby do HBAC pravidla." + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "" + +#, fuzzy +msgid "Host Certificate" +msgstr "Získať certifikát" + +#, fuzzy +msgid "Host Name" +msgstr "Názov" + +msgid "Delete Key, Unprovision" +msgstr "" + +#, fuzzy +msgid "Host Settings" +msgstr "Trust nastavenia" + +msgid "Enrolled" +msgstr "" + +msgid "Enrollment" +msgstr "" + +msgid "Fully Qualified Host Name" +msgstr "" + +#, fuzzy +msgid "Generate OTP" +msgstr "Nastaviť OTP" + +#, fuzzy +msgid "Generated OTP" +msgstr "Druhé OTP" + +msgid "Kerberos Key" +msgstr "Kerberos kľúč" + +msgid "Kerberos Key Not Present" +msgstr "Kerberos kľúč nie je prítomný" + +#, fuzzy +msgid "Kerberos Key Present, Host Provisioned" +msgstr "Kerberos kľúč nie je prítomný" + +#, fuzzy +msgid "One-Time Password" +msgstr "Jednorázové heslo (OTP)" + +#, fuzzy +msgid "One-Time Password Not Present" +msgstr "Jednorázové heslo (OTP)" + +#, fuzzy +msgid "One-Time Password Present" +msgstr "Jednorázové heslo (OTP)" + +#, fuzzy +msgid "Reset OTP" +msgstr "Nastaviť OTP" + +#, fuzzy +msgid "Reset One-Time Password" +msgstr "Jednorázové heslo (OTP)" + +msgid "Set OTP" +msgstr "Nastaviť OTP" + +#, fuzzy +msgid "OTP set" +msgstr "OTP token" + +#, fuzzy +msgid "Set One-Time Password" +msgstr "Jednorázové heslo (OTP)" + +#, fuzzy +msgid "Remove hosts" +msgstr "Odstrániť povolenie" + +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from roles" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, python-brace-format +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "" + +#, fuzzy +msgid "Unprovision" +msgstr "povolenie" + +#, fuzzy +msgid "Are you sure you want to unprovision this host?" +msgstr "Ste si istý/istá, že chcete odomknúť užívateľa ${object}?" + +msgid "Unprovisioning host" +msgstr "" + +msgid "Host unprovisioned" +msgstr "" + +#, fuzzy +msgid "Add host group" +msgstr "Pridať do predvolenej skupiny" + +#, python-brace-format +msgid "Add hosts into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Host Group Settings" +msgstr "Nastavenia skupiny" + +#, fuzzy +msgid "Remove host groups" +msgstr "Člen skupín" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "User to override" +msgstr "Kategórie používateľov" + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" + +msgid "Enter trusted user login." +msgstr "" + +#, fuzzy +msgid "Profile" +msgstr "Profily" + +msgid "Group to override" +msgstr "" + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" + +msgid "Enter trusted group name." +msgstr "" + +#, fuzzy +msgid "Add ID view" +msgstr "Pridať nové ID View" + +msgid "Add group ID override" +msgstr "" + +msgid "Add user ID override" +msgstr "" + +#, fuzzy, python-brace-format +msgid "${primary_key} applies to:" +msgstr "${primary_key} je členom:" + +msgid "Applied to hosts" +msgstr "" + +#, fuzzy +msgid "Apply to host groups" +msgstr "Pridať do predvolenej skupiny" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "" + +msgid "Apply to hosts" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "" + +#, fuzzy, python-brace-format +msgid "${primary_key} overrides:" +msgstr "${primary_key} je členom:" + +#, fuzzy +msgid "Remove ID views" +msgstr "ID Views" + +msgid "Remove user ID overrides" +msgstr "" + +msgid "Remove group ID overrides" +msgstr "" + +msgid "Un-apply from host groups" +msgstr "" + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" + +#, fuzzy +msgid "Un-apply" +msgstr "Použiť" + +msgid "Un-apply from hosts" +msgstr "" + +msgid "Un-apply ID Views from hosts" +msgstr "" + +#, fuzzy +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "Ste si istý/istá, že chcete aktivovať vybrané položky?" + +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "" + +#, fuzzy +msgid "Kerberos Ticket Policy" +msgstr "nastavenia kerberos ticket policy" + +#, fuzzy +msgid "Add netgroup" +msgstr "Pridať do predvolenej skupiny" + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "" + +msgid "Netgroup Settings" +msgstr "Netgroup nastavenia" + +#, fuzzy +msgid "Netgroups" +msgstr "skupiny" + +#, fuzzy +msgid "Remove netgroups" +msgstr "Členské skupiny" + +#, python-brace-format +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from netgroup '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Add OTP token" +msgstr "OTP token" + +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" + +#, fuzzy +msgid "Configure your token" +msgstr "Konfigurácia" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" + +msgid "OTP Token Settings" +msgstr "Nastavenia pre OTP token" + +msgid "Disable token" +msgstr "Deaktiovať token" + +#, fuzzy +msgid "Enable token" +msgstr "Deaktiovať token" + +#, fuzzy +msgid "Remove OTP tokens" +msgstr "OTP tokeny" + +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "" + +msgid "Show QR code" +msgstr "Zobraziť QR kód" + +#, fuzzy +msgid "Show configuration uri" +msgstr "DNS konfiguračné voľby" + +msgid "Counter-based (HOTP)" +msgstr "" + +msgid "Time-based (TOTP)" +msgstr "" + +#, fuzzy +msgid "Add Custom Attribute" +msgstr "Atribúty" + +msgid "Permission settings" +msgstr "Nastavenia oprávnenia" + +#, fuzzy +msgid "Attribute breakdown" +msgstr "Atribúty" + +msgid "Privilege Settings" +msgstr "Nastavenia privilégia" + +#, fuzzy +msgid "Public key:" +msgstr "Verejný SSH kľuč" + +#, fuzzy +msgid "Set public key" +msgstr "Verejný SSH kľúč" + +msgid "Show/Set key" +msgstr "Zobraziť/Nastaviť kľúč" + +msgid "Modified: key not set" +msgstr "" + +msgid "Modified" +msgstr "Modifikované" + +msgid "New: key not set" +msgstr "" + +msgid "New: key set" +msgstr "" + +#, fuzzy +msgid "Add password policy" +msgstr "Politky hesiel" + +msgid "Password Policy" +msgstr "Politika hesiel" + +#, fuzzy +msgid "Remove password policies" +msgstr "Politky hesiel" + +#, fuzzy +msgid "Add ID range" +msgstr "ID rozsah" + +msgid "Range Settings" +msgstr "Nastavenie rozsahu" + +msgid "Base ID" +msgstr "" + +msgid "Primary RID base" +msgstr "" + +#, fuzzy +msgid "Range size" +msgstr "ID rozsahy" + +#, fuzzy +msgid "Domain SID" +msgstr "Doména" + +msgid "Secondary RID base" +msgstr "" + +#, fuzzy +msgid "Remove ID ranges" +msgstr "ID rozsahy" + +msgid "Active Directory domain with POSIX attributes" +msgstr "Active Directory doména s POSIX attribútmy" + +msgid "Detect" +msgstr "Detekovať" + +msgid "Local domain" +msgstr "Lokálna doména" + +msgid "IPA trust" +msgstr "IPA trust" + +msgid "Active Directory winsync" +msgstr "Active Directory winsync" + +#, fuzzy +msgid "Add RADIUS server" +msgstr "DNS server" + +msgid "RADIUS Proxy Server Settings" +msgstr "RADIUS Proxy serverové nastavenia" + +msgid "Remove RADIUS servers" +msgstr "" + +msgid "Realm Domains" +msgstr "Realm domény" + +msgid "Check DNS" +msgstr "Skontrolovať DNS" + +msgid "Do you also want to perform DNS check?" +msgstr "" + +msgid "Force Update" +msgstr "Vynútiť aktualizáciu" + +#, fuzzy +msgid "Add SELinux user map" +msgstr "SELinux používateľ" + +#, python-brace-format +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "" + +msgid "Remove selinux user maps" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "" + +msgid "Server Roles" +msgstr "Serverové role" + +msgid "Server Role" +msgstr "Server rola" + +msgid "Warning: Consider service replication" +msgstr "" + +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" + +#, fuzzy +msgid "Delete Server" +msgstr "Odstrániť používateľa" + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" + +#, fuzzy +msgid "Add service" +msgstr "HBAC služba" + +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "" + +msgid "Service Certificate" +msgstr "Certifikát služby" + +msgid "Service Settings" +msgstr "Nastavenia služby" + +#, fuzzy +msgid "Provisioning" +msgstr "Nastavenia oprávnenia" + +#, fuzzy +msgid "Remove services" +msgstr "Odstrániť povolenie" + +#, python-brace-format +msgid "Remove service '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing service '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Are you sure you want to unprovision this service?" +msgstr "Ste si istý/istá, že chcete obnoviť vybraných používateľov?" + +msgid "Unprovisioning service" +msgstr "" + +#, fuzzy +msgid "Service unprovisioned" +msgstr "Voľby služieb" + +#, fuzzy +msgid "Kerberos Key Present, Service Provisioned" +msgstr "Kerberos kľúč nie je prítomný" + +msgid "SSH public keys" +msgstr "Verejné SSH kľúče" + +msgid "SSH public key:" +msgstr "Verejný SSH kľuč" + +msgid "Set SSH key" +msgstr "Nastaviť SSH kľúč" + +#, fuzzy +msgid "Are you sure you want to activate selected users?" +msgstr "Ste si istý/istá, že chcete obnoviť vybraných používateľov?" + +#, fuzzy, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "Ste si istý/istá, že chcete deaktivovať ${object}?" + +#, fuzzy, python-brace-format +msgid "${count} user(s) activated" +msgstr "${count} users(s) predpripravených" + +#, fuzzy +msgid "Add stage user" +msgstr "Predpripravení používatelia" + +msgid "Stage users" +msgstr "Predpripravení používatelia" + +msgid "Preserved users" +msgstr "Uschovaní používatelia" + +#, fuzzy +msgid "Remove preserved users" +msgstr "Uschovaní používatelia" + +#, fuzzy +msgid "Remove stage users" +msgstr "Predpripravení používatelia" + +#, fuzzy +msgid "Are you sure you want to stage selected users?" +msgstr "Ste si istý/istá, že chcete obnoviť vybraných používateľov?" + +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "${count} users(s) predpripravených" + +#, fuzzy, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "Ste si istý/istá, že chcete deaktivovať ${object}?" + +msgid "Are you sure you want to restore selected users?" +msgstr "Ste si istý/istá, že chcete obnoviť vybraných používateľov?" + +#, fuzzy, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "Ste si istý/istá, že chcete odstrániť ${object}?" + +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "${count} používateľov obnovených" + +msgid "User categories" +msgstr "Kategórie používateľov" + +#, fuzzy +msgid "Add subid" +msgstr "sudo pravidlá" + +#, fuzzy +msgid "Assigned subids" +msgstr "Pridať nové ID View" + +msgid "DNA remaining" +msgstr "" + +#, fuzzy +msgid "SubGID range size" +msgstr "ID rozsahy" + +msgid "SubGID range start" +msgstr "" + +#, fuzzy +msgid "SubUID range size" +msgstr "ID rozsahy" + +msgid "SubUID range start" +msgstr "" + +msgid "Remaining subids" +msgstr "" + +msgid "Subordinate ID Statistics" +msgstr "" + +#, fuzzy +msgid "Add sudo command" +msgstr "sudo príkazy" + +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "" + +#, fuzzy +msgid "Remove sudo commands" +msgstr "sudo príkazy" + +#, python-brace-format +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "" + +#, fuzzy +msgid "Add sudo command group" +msgstr "sudo príkazy" + +#, python-brace-format +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Remove sudo command groups" +msgstr "sudo príkazy" + +#, python-brace-format +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Add sudo rule" +msgstr "sudo pravidlá" + +msgid "Add sudo option" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "" + +msgid "Allow" +msgstr "Povoliť" + +msgid "Any Command" +msgstr "Akýkoľvek príkaz" + +msgid "Any Group" +msgstr "Akákoľvek skupina" + +#, fuzzy +msgid "Run Commands" +msgstr "Sudo príkazy" + +msgid "Deny" +msgstr "Zakázať" + +#, fuzzy +msgid "Access this host" +msgstr "Čas prístupu" + +msgid "Option added" +msgstr "Voľba pridaná" + +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "${count} option(s) odstránených" + +#, fuzzy +msgid "Remove sudo rules" +msgstr "sudo pravidlá" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "" + +msgid "As Whom" +msgstr "" + +#, fuzzy +msgid "Specified Commands and Groups" +msgstr "Špecifikované služby a skupiny" + +msgid "Specified Groups" +msgstr "Špecifikované skupiny" + +#, fuzzy +msgid "Remove sudo options" +msgstr "Odstrániť povolenie" + +#, fuzzy +msgid "Autogenerated" +msgstr "Automember" + +msgid "Segment details" +msgstr "Detaily segmentu" + +msgid "Replication configuration" +msgstr "Konfigurácia repliky" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" + +#, fuzzy +msgid "Add IPA location" +msgstr "Pridať novú IPA lokalitu." + +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Remove IPA locations" +msgstr "" +"\n" +"IPA lokality\n" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "" + +msgid "Add topology segment" +msgstr "" + +msgid "Remove topology segments" +msgstr "" + +msgid "Account" +msgstr "Účet" + +#, fuzzy +msgid "Add trust" +msgstr "IPA trust" + +msgid "Administrative account" +msgstr "" + +msgid "SID blocklists" +msgstr "" + +msgid "Trust Settings" +msgstr "Trust nastavenia" + +msgid "Establish using" +msgstr "" + +#, fuzzy +msgid "Fetch domains" +msgstr "Lokálna doména" + +#, fuzzy +msgid "Pre-shared password" +msgstr "Zmeniť heslo" + +#, fuzzy +msgid "Remove trusts" +msgstr "Odstrániť povolenie" + +#, fuzzy +msgid "Remove domains" +msgstr "Realm domény" + +#, fuzzy +msgid "Trust direction" +msgstr "Trust nastavenia" + +#, fuzzy +msgid "Trust status" +msgstr "Stav pravidla" + +msgid "Trust type" +msgstr "" + +msgid "Alternative UPN suffixes" +msgstr "" + +#, fuzzy +msgid "User attributes for SMB services" +msgstr "Vyhľadať HBAC služby." + +msgid "Path to a script executed on a Windows system at logon" +msgstr "" + +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "" + +msgid "Path to a user home directory, in UNC format" +msgstr "" + +msgid "Drive to mount a home directory" +msgstr "" + +msgid "Account Settings" +msgstr "Nastavenia účtu" + +msgid "Account Status" +msgstr "Stav účtu" + +msgid "Active users" +msgstr "Aktívni používatelia" + +#, fuzzy +msgid "Add user" +msgstr "Aktívni používatelia" + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "Pridať služby do HBAC pravidla." + +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "" + +msgid "Auto assign subordinate ids" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Are you sure you want to unlock user ${object}?" +msgid "" +"Are you sure you want to auto-assign a subordinate id to user ${object}?" +msgstr "Ste si istý/istá, že chcete odomknúť užívateľa ${object}?" + +msgid "Contact Settings" +msgstr "Nastavenia kontaktných údajov" + +msgid "Delete mode" +msgstr "Mód odstránenia" + +msgid "Employee Information" +msgstr "Informácie o zamestnancovi" + +msgid "Error changing account status" +msgstr "" + +msgid "Password expiration" +msgstr "Vypršanie hesla" + +msgid "Mailing Address" +msgstr "Poštová adresa" + +msgid "Misc. Information" +msgstr "Rôzne informácie" + +msgid "delete" +msgstr "odstrániť" + +msgid "preserve" +msgstr "uschovať" + +msgid "No private group" +msgstr "Bez privátnej skupiny" + +#, fuzzy +msgid "Remove users" +msgstr "Odstrániť povolenie" + +#, python-brace-format +msgid "Remove user '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from roles" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, python-brace-format +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" +"Ste si istý/istá, že chcete ${action} používateľa?
Zmena bude vykonaná " +"okamžite." + +#, python-brace-format +msgid "Click to ${action}" +msgstr "" + +msgid "Unlock" +msgstr "Odomknúť" + +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "Ste si istý/istá, že chcete odomknúť užívateľa ${object}?" + +msgid "Add vault" +msgstr "" + +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "" + +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" + +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" + +msgid "Asymmetric" +msgstr "" + +msgid "Vaults Config" +msgstr "" + +#, fuzzy +msgid "Members" +msgstr "Členom" + +msgid "My User Vaults" +msgstr "" + +#, fuzzy +msgid "Owners" +msgstr "Vlastník" + +msgid "Remove vaults" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Service Vaults" +msgstr "Služby" + +msgid "Shared" +msgstr "" + +msgid "Shared Vaults" +msgstr "" + +msgid "Standard" +msgstr "" + +msgid "Symmetric" +msgstr "" + +#, fuzzy +msgid "Vault Type" +msgstr "Typ skupiny" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" + +#, fuzzy +msgid "User Vaults" +msgstr "Používateľské skupiny" + +msgid "Current password is required" +msgstr "Súčasné heslo je povinné" + +#, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "" + +msgid "First OTP" +msgstr "Prvé OTP" + +msgid "New password is required" +msgstr "Nové heslo je povinné" + +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" + +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" + +msgid "Token synchronization failed" +msgstr "Synchronizácia tokenu zlyhala" + +msgid "The username, password or token codes are not correct" +msgstr "Prihlasovacie meno, heslo alebo token sú nesprávne" + +msgid "Token was synchronized" +msgstr "Token bol zosynchronizovaný" + +msgid "Password change complete" +msgstr "Zmena hesla dokončená" + +msgid "Your password has expired. Please enter a new password." +msgstr "" + +msgid "Passwords must match" +msgstr "Heslá sa musia zhodovať" + +msgid "Password reset was not successful." +msgstr "Nastavenie hesla nebolo úspešné" + +msgid "Reset your password." +msgstr "Obnoviť Vaše heslo." + +msgid "Second OTP" +msgstr "Druhé OTP" + +msgid "Verify Password" +msgstr "Overiť heslo" + +msgid "Are you sure you want to delete selected entries?" +msgstr "Ste si istý/istá, že chcete odstrániť vybrané položky?" + +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "${count} položiek odstránených" + +msgid "Are you sure you want to disable selected entries?" +msgstr "Ste si istý/istá, že chcete deaktivovať vybrané položky?" + +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "${count} item(s) deaktivovaných" + +msgid "Are you sure you want to enable selected entries?" +msgstr "Ste si istý/istá, že chcete aktivovať vybrané položky?" + +#, fuzzy, python-brace-format +msgid "${count} item(s) enabled" +msgstr "${count} item(s) deaktivovaných" + +msgid "Some entries were not deleted" +msgstr "Niektoré položky neboli odstránené" + +msgid "Quick Links" +msgstr "Rýchle odkazy" + +msgid "Select All" +msgstr "Označiť všetko" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" + +msgid "Unselect All" +msgstr "Odznačiť všetko" + +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" + +msgid "Working" +msgstr "" + +msgid "Audit" +msgstr "Audit" + +msgid "Authentication" +msgstr "Autentifikácia" + +msgid "Automount" +msgstr "Automount" + +msgid "DNS" +msgstr "DNS" + +msgid "Host-Based Access Control" +msgstr "" + +msgid "Identity" +msgstr "Identita" + +msgid "IPA Server" +msgstr "IPA Server" + +msgid "Network Services" +msgstr "Sieťové služby" + +msgid "Policy" +msgstr "Politika" + +msgid "Role-Based Access Control" +msgstr "" + +msgid "Subordinate IDs" +msgstr "" + +msgid "Sudo" +msgstr "" + +msgid "Topology" +msgstr "" + +#, fuzzy +msgid "Trusts" +msgstr "Trust nastavenia" + +msgid "True" +msgstr "" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" + +msgid "API Browser" +msgstr "" + +#, fuzzy +msgid "First" +msgstr "Prvé OTP" + +#, fuzzy +msgid "Last" +msgstr "Priezvisko" + +msgid "Next" +msgstr "Ďalšie" + +msgid "Page" +msgstr "Strana" + +msgid "Prev" +msgstr "Predcházajúce" + +msgid "Undo" +msgstr "Vrátiť späť" + +msgid "Undo this change." +msgstr "Vrátiť späť túto zmenu." + +msgid "Undo All" +msgstr "Vrátiť späť všetko" + +msgid "Undo all changes in this field." +msgstr "" + +msgid "Text does not match field pattern" +msgstr "" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" + +#, fuzzy +msgid "Must be a decimal number" +msgstr "musí byť desiatkové číslo" + +msgid "Format error" +msgstr "Chyba formátu" + +#, fuzzy +msgid "Must be an integer" +msgstr "musí byť integer" + +msgid "Not a valid IP address" +msgstr "Neplatná IP adresa" + +msgid "Not a valid IPv4 address" +msgstr "Neplatná IPv4 adresa" + +msgid "Not a valid IPv6 address" +msgstr "Neplatná IPv6 adresa" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "Maximálna hodnota je ${value}" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "Minimálna hodnota je ${value}" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "Neplatná sieťová adresa (príklady: 2001:db8::/64, 192.0.2.0/24)" + +#, fuzzy +msgid "Parse error" +msgstr "Chyba formátu" + +#, fuzzy +msgid "Must be a positive number" +msgstr "musí byť desiatkové číslo" + +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "'${port}' nie je valídny port" + +msgid "Required field" +msgstr "Povinné pole" + +msgid "Unsupported value" +msgstr "Nepodporovaná hodnota" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "nastavenia kerberos ticket policy" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +#, fuzzy +msgid "RADIUS max renew" +msgstr "RADIUS proxy používateľské meno" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" msgstr "" #, python-format -msgid "all masters must have %(role)s role enabled" +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +msgid "" +"\n" +"IPA locations\n" +msgstr "" +"\n" +"IPA lokality\n" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" +"\n" +"Narábanie s DNS lokalitami\n" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" +"\n" +" Nájdenie všetkých lokalít:\n" +" ipa location-find\n" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" +"\n" +" Zobrazenie špecifickej lokality:\n" +" ipa location-show lokalita\n" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" +"\n" +" Pridanie lokality:\n" +" ipa location-add lokalita --description 'Moja lokalita'\n" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" +"\n" +" Odstránenie lokality:\n" +" ipa location-del lokalita\n" + +msgid "location" +msgstr "lokalita" + +msgid "locations" +msgstr "lokality" + +msgid "IPA Locations" +msgstr "IPA lokality" + +msgid "IPA Location" +msgstr "IPA lokalita" + +msgid "Location name" +msgstr "Názov lokality" + +msgid "IPA location name" +msgstr "Názov IPA lokality" + +msgid "IPA Location description" +msgstr "Popis IPA lokality" + +msgid "Servers" +msgstr "Servery" + +msgid "Servers that belongs to the IPA location" +msgstr "Servery patriace do IPA lokality" + +msgid "Advertised by servers" +msgstr "Oznamované servermi" + +msgid "List of servers which advertise the given location" +msgstr "Zoznam serverov oznamujúcich danú lokalitu" + +msgid "Add a new IPA location." +msgstr "Pridať novú IPA lokalitu." + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "Pridaná IPA lokalita \"%(value)s\"" + +msgid "Delete an IPA location." +msgstr "Odstrániť IPA lokalitu." + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "Odstránená IPA lokalita \"%(value)s\"" + +msgid "Modify information about an IPA location." +msgstr "Upraviť informácie o IPA lokalite." + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "Upravená IPA lokalita \"%(value)s\"" + +msgid "Search for IPA locations." +msgstr "Vyhľadať IPA lokalitu." + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "%(count)d IPA lokalita nájdená" +msgstr[1] "%(count)d IPA lokalít nájdených" +msgstr[2] "%(count)d IPA lokalít nájdených" + +msgid "Display information about an IPA location." +msgstr "Zobraziť informácie o IPA lokalite." + +msgid "Servers in location" +msgstr "Servery v lokalite." + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" msgstr "" #, python-format -msgid "must have %(role)s role enabled" +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." msgstr "" -msgid "must be enabled only on a single master" +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "Poškodené DN" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "%(user)s nie je POSIX užívateľ" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "Neplatná LDAP URI." + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "Predvolená skupina pre nových používateľov nenájdená" + +#, fuzzy +msgid "netgroups" +msgstr "skupiny" + +#, fuzzy +msgid "Netgroup" +msgstr "skupina" + +#, fuzzy, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "Odstránená skupina \"%(value)s\"" + +#, fuzzy, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +#, fuzzy, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy +msgid "One time password commands" +msgstr "Jednorázové heslo (OTP)" + +msgid "OTP configuration options" +msgstr "OTP konfiguračné voľby" + +msgid "OTP Configuration" +msgstr "OTP konfigurácia" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" +"\n" +"OTP tokeny\n" + +#, fuzzy +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" +"\n" +"Spravovať YubiKey tokeny.\n" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "OTP token" + +msgid "OTP tokens" +msgstr "OTP tokeny" + +msgid "OTP Tokens" +msgstr "OTP tokeny" + +msgid "OTP Token" +msgstr "OTP token" + +msgid "URI" +msgstr "URI" + +#, fuzzy, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "Upravený OTP token \"%(value)s\"" + +#, fuzzy +msgid "cannot be empty" +msgstr "IPA CA nemôže byť odstránené" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "Odstránený OTP token \"%(value)s\"" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "Upravený OTP token \"%(value)s\"" + +#, fuzzy, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "%(count)d IPA lokalita nájdená" +msgstr[1] "%(count)d IPA lokalít nájdených" +msgstr[2] "%(count)d IPA lokalít nájdených" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"If the user authentication method is set to password+OTP, the user should\n" +"pass the --otp option when resetting the password.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To reset your own password when password+OTP is set as authentication " +"method:\n" +" ipa passwd --otp\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +msgid "The OTP if the user has a token configured" +msgstr "" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "Zmenené heslo pre \"%(value)s\"" + +#, fuzzy +msgid "" +"\n" +"Permissions\n" +msgstr "Povolenia" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +#, fuzzy +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "SYSTEM-ové povolenia nemožu byť upravené alebo odstránené" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +#, fuzzy +msgid "" +"\n" +"Managed permissions\n" +msgstr "povolenie" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +#, fuzzy +msgid "must be enclosed in parentheses" +msgstr "musí byť integer" + +#, fuzzy, python-format +msgid "\"%s\" is not an object type" +msgstr "\"%s\" nie je platný typ povolenia" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "\"%s\" nie je platný typ povolenia" + +#, fuzzy, python-format +msgid "Deprecated; use %s" +msgstr "Zastarané voľby" + +#, fuzzy, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "SYSTEM-ové povolenia nemožu byť upravené alebo odstránené" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "SYSTEM-ové povolenia nemožu byť upravené alebo odstránené" + +#, python-format +msgid "Entry %s not found" +msgstr "Položka %s nenájdená" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "ACI pre oprávnenie %(name)s sa nenašlo v %(dn)s " + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, python-format +msgid "option was renamed; use %s" +msgstr "" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, python-format +msgid "%s: group not found" +msgstr "%s: skupina nenájdená" + +msgid "target and targetgroup are mutually exclusive" +msgstr "" + +msgid "subtree and type are mutually exclusive" +msgstr "" + +#, fuzzy +msgid "Bad search filter" +msgstr "Zlý vyhľadávací filter %(info)s" + +#, python-format +msgid "Entry %s does not exist" +msgstr "Položka %s neexistuje" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, fuzzy, python-format +msgid "Added permission \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "Odstránený profil \"%(value)s\"" + +msgid "cannot delete managed permissions" +msgstr "" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "ACI pre oprávnenie %s sa nenašlo" + +#, fuzzy, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "%(count)d IPA lokalita nájdená" +msgstr[1] "%(count)d IPA lokalít nájdených" +msgstr[2] "%(count)d IPA lokalít nájdených" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "pkinit" + +msgid "PKINIT status" +msgstr "" + +#, fuzzy +msgid "Whether PKINIT is enabled or disabled" +msgstr "Táto položka nemôže byť aktivovaná alebo deaktivovaná" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +#, fuzzy +msgid "Privilege" +msgstr "Nastavenia privilégia" + +#, fuzzy, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "HBAC pravidlo \"%(value)s\" bolo pridané" + +#, fuzzy, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "Odstránený profil \"%(value)s\"" + +#, fuzzy, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "HBAC pravidlo \"%(value)s\" bolo upravené" + +#, fuzzy, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "RADIUS Proxy serverové nastavenia" + +#, fuzzy +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "RADIUS Proxy serverové nastavenia" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +#, fuzzy +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" +"\n" +" Odstránenie lokality:\n" +" ipa location-del lokalita\n" + +#, fuzzy +msgid "invalid attribute name" +msgstr "neplatné doménové meno" + +#, fuzzy +msgid "invalid port number" +msgstr "neplatné doménové meno" + +#, fuzzy +msgid "RADIUS proxy server" +msgstr "RADIUS proxy používateľské meno" + +#, fuzzy +msgid "RADIUS proxy servers" +msgstr "RADIUS proxy používateľské meno" + +#, fuzzy +msgid "RADIUS Servers" +msgstr "RADIUS Proxy serverové nastavenia" + +#, fuzzy +msgid "RADIUS Server" +msgstr "IPA Server" + +#, fuzzy, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola pridaná" + +#, fuzzy, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola odstránená" + +#, fuzzy, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola upravená." + +#, fuzzy, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +#, fuzzy +msgid "Realm domains" +msgstr "Realm domény" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +#, fuzzy +msgid "IPA server domain cannot be omitted" +msgstr "IPA CA nemôže byť odstránené" + +#, fuzzy +msgid "IPA server domain cannot be deleted" +msgstr "IPA CA nemôže byť odstránené" + +#, fuzzy +msgid "roles" +msgstr "Role" + +#, fuzzy +msgid "Role" +msgstr "Role" + +#, fuzzy, python-format +msgid "Added role \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +#, fuzzy, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "Odstránený profil \"%(value)s\"" + +#, fuzzy, python-format +msgid "Modified role \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +#, fuzzy, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy +msgid "" +"\n" +"API Schema\n" +msgstr "LDAP schéma" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +#, fuzzy +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" +"\n" +" Zobrazenie špecifickej lokality:\n" +" ipa location-show lokalita\n" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +#, fuzzy +msgid "Documentation" +msgstr "Autentifikácia" + +msgid "Exclude from" +msgstr "" + +#, fuzzy +msgid "Include in" +msgstr "Zahrnuté atribúty" + +msgid "Help topic" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +#, fuzzy +msgid "Method name" +msgstr "Názov záznamu" + +#, fuzzy +msgid "Display information about a command." +msgstr "Zobraziť informácie o IPA lokalite." + +#, fuzzy +msgid "Search for commands." +msgstr "Vyhľadať sudo príkazy." + +msgid "Return command defaults" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "{role}: role not found" +msgid "{oname}: {command_name} not found" +msgstr "{role}: rola nenájdená" + +#, fuzzy +msgid "Display information about a class." +msgstr "Zobraziť informácie o IPA lokalite." + +#, fuzzy +msgid "Search for classes." +msgstr "Vyhľadať HBAC pravidlá." + +#, fuzzy +msgid "Display information about a help topic." +msgstr "Zobraziť informácie o IPA lokalite." + +#, fuzzy +msgid "Search for help topics." +msgstr "Vyhľadávať skupiny." + +msgid "Required" +msgstr "Povinné" + +#, fuzzy +msgid "Multi-value" +msgstr "hodnota" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +msgid "CLI name" +msgstr "ACI názov" + +#, fuzzy +msgid "Confirm (password)" +msgstr "Zmeniť heslo" + +msgid "Default" +msgstr "" + +#, fuzzy +msgid "Default from" +msgstr "Predvolená používateľská skupina" + +msgid "Label" +msgstr "" + +#, fuzzy +msgid "Convert on server" +msgstr "Oznamované servermi" + +#, fuzzy +msgid "Option group" +msgstr "Voľby" + +msgid "Sensitive" +msgstr "" + +#, fuzzy +msgid "Positional argument" +msgstr "Pozičný argument" + +#, fuzzy, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "%(parent)s: %(oname)s nenájdený" + +#, fuzzy +msgid "Display information about a command parameter." +msgstr "Zobraziť informácie o DNS forward zóne" + +msgid "Search command parameters." +msgstr "" + +#, fuzzy, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "%(parent)s: %(oname)s nenájdený" + +#, fuzzy +msgid "Display information about a command output." +msgstr "Zobraziť informácie o DNS forward zóne" + +#, fuzzy +msgid "Search for command outputs." +msgstr "Vyhľadať sudo príkazy." + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +#, fuzzy +msgid "self service permission" +msgstr "Odstrániť povolenie" + +#, fuzzy +msgid "self service permissions" +msgstr "Vyhľadať povolenia." + +#, fuzzy +msgid "Self Service Permissions" +msgstr "Odstrániť povolenie" + +#, fuzzy +msgid "Self Service Permission" +msgstr "Odstrániť povolenie" + +#, fuzzy, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola pridaná" + +#, fuzzy, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola odstránená" + +#, fuzzy, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola upravená." + +#, fuzzy, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +#, fuzzy +msgid "SELinux User Map rule" +msgstr "SELinux používateľ" + +#, fuzzy +msgid "SELinux User Map rules" +msgstr "SELinux používateľ" + +#, fuzzy +msgid "SELinux User Maps" +msgstr "SELinux používateľ" + +#, fuzzy +msgid "SELinux User Map" +msgstr "SELinux používateľ" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "HBAC pravidlo %(rule)s nenájdené" + +#, fuzzy, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +#, fuzzy, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "Odstránená skupina \"%(value)s\"" + +#, fuzzy, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +#, fuzzy, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "Deaktivovaný používateľský účet \"%(value)s\"" + +#, fuzzy, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "Deaktivovaný používateľský účet \"%(value)s\"" + +#, fuzzy +msgid "" +"\n" +"IPA server roles\n" +msgstr "Názov role servera" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +#, fuzzy +msgid "server role" +msgstr "Server rola" + +#, fuzzy +msgid "server roles" +msgstr "Serverové role" + +#, fuzzy +msgid "IPA Server Roles" +msgstr "Serverové role" + +#, fuzzy +msgid "IPA Server Role" +msgstr "Server rola" + +msgid "IPA server role name" +msgstr "Názov role servera" + +#, fuzzy +msgid "Role status" +msgstr "Stav pravidla" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +#, fuzzy +msgid "Find a server role on a server(s)" +msgstr "Názov role servera" + +#, fuzzy, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy +msgid "Include IPA master entries" +msgstr "Zahrnuté atribúty" + +msgid "IPA role name" +msgstr "Názov IPA role" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "{role}: rola nenájdená" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +#, fuzzy, python-format +msgid "authentication indicators not allowed in service \"%s\"" +msgstr "Autentifikácia" + +#, fuzzy +msgid "Malformed principal" +msgstr "Poškodené DN" + +msgid "{} is required by the IPA master" +msgstr "" + +#, fuzzy +msgid "service" +msgstr "Služba" + +#, fuzzy +msgid "services" +msgstr "Služby" + +#, fuzzy +msgid "Service principal alias" +msgstr "Voľby služieb" + +msgid "Base-64 encoded service certificate" +msgstr "Base-64 zakódovaný certifikát služby" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +#, fuzzy +msgid "Add a new IPA service." +msgstr "Pridať novú HBAC službu." + +#, fuzzy, python-format +msgid "Added service \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola pridaná" + +msgid "force principal name even if host not in DNS" +msgstr "" + +#, fuzzy +msgid "Skip host check" +msgstr "Preskočiť DNS kontrolu" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +#, fuzzy +msgid "Add a new SMB service." +msgstr "Pridať novú HBAC službu." + +#, fuzzy +msgid "SMB service NetBIOS name" +msgstr "NetBIOS meno" + +#, fuzzy, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola odstránená" + +#, fuzzy, python-format +msgid "Modified service \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola upravená." + +#, fuzzy, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "Deaktivovaná služba \"%(value)s\"" + +#, fuzzy, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +#, fuzzy +msgid "Add new principal alias to a service" +msgstr "Pridať nové certifikáty k službe" + +#, fuzzy, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy +msgid "Remove principal alias from a service" +msgstr "Odstrániť certifikáty zo služby" + +#, fuzzy, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +#, fuzzy +msgid "Member principals" +msgstr "Členské skupiny" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, fuzzy +msgid "Remove member from a named service delegation." +msgstr "Odstrániť certifikáty zo služby" + +#, fuzzy +msgid "service delegation rule" +msgstr "Pridať služby do HBAC pravidla." + +#, fuzzy +msgid "service delegation rules" +msgstr "Voľby služieb" + +#, fuzzy +msgid "Service delegation rules" +msgstr "Voľby služieb" + +#, fuzzy +msgid "Service delegation rule" +msgstr "Voľby služieb" + +#, fuzzy, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola odstránená" + +msgid "privileged service delegation rule" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "%(count)d IPA lokalita nájdená" +msgstr[1] "%(count)d IPA lokalít nájdených" +msgstr[2] "%(count)d IPA lokalít nájdených" + +msgid "service delegation target" +msgstr "" + +#, fuzzy +msgid "service delegation targets" +msgstr "Nastavenia služby" + +#, fuzzy +msgid "Service delegation targets" +msgstr "Nastavenia služby" + +#, fuzzy +msgid "Service delegation target" +msgstr "Nastavenia služby" + +#, fuzzy, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola odstránená" + +msgid "privileged service delegation target" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "%(count)d IPA lokalita nájdená" +msgstr[1] "%(count)d IPA lokalít nájdených" +msgstr[2] "%(count)d IPA lokalít nájdených" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +#, fuzzy +msgid "Stage Users" +msgstr "Predpripravení používatelia" + +#, fuzzy +msgid "Stage User" +msgstr "Predpripravení používatelia" + +#, fuzzy +msgid "stage user" +msgstr "Predpripravení používatelia" + +#, fuzzy +msgid "stage users" +msgstr "Predpripravení používatelia" + +#, fuzzy, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy +msgid "givenname is required" +msgstr "'%(name)s' je požadované" + +#, fuzzy +msgid "sn is required" +msgstr "je povinné" + +#, fuzzy, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "Odstránená skupina \"%(value)s\"" + +#, fuzzy, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +#, fuzzy, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy +msgid "Entry RDN is not 'uid'" +msgstr "Položka %s nenájdená" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, fuzzy, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "kľúč %(key)s už existuje" + +#, fuzzy, python-format +msgid "Stage user %s activated" +msgstr "Predpripravení používatelia" + +#, fuzzy +msgid "Add one or more certificates to the stageuser entry" +msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" + +#, fuzzy, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy +msgid "Remove one or more certificates to the stageuser entry" +msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" + +#, fuzzy, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +#, fuzzy +msgid "Add new principal alias to the stageuser entry" +msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" + +#, fuzzy, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy +msgid "Remove principal alias from the stageuser entry" +msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" + +#, fuzzy, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +#, fuzzy +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" + +#, fuzzy +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" + +msgid "" +"\n" +"Subordinate ids\n" +"\n" +"Manage subordinate user and group ids for users\n" +"\n" +"EXAMPLES:\n" +"\n" +" Auto-assign a subordinate id range to current user\n" +" ipa subid-generate\n" +"\n" +" Auto-assign a subordinate id range to user alice:\n" +" ipa subid-generate --owner=alice\n" +"\n" +" Find subordinate ids for user alice:\n" +" ipa subid-find --owner=alice\n" +"\n" +" Match entry by any subordinate uid in range:\n" +" ipa subid-match --subuid=2147483649\n" +msgstr "" + +msgid "Subordinate id" +msgstr "" + +msgid "Subordinate ids" +msgstr "" + +#, fuzzy +msgid "Subordinate id description" +msgstr "Popis skupiny" + +msgid "Owning user of subordinate id entry" +msgstr "" + +msgid "Start value for subordinate user ID (subuid) range" +msgstr "" + +msgid "Subordinate user ID count" +msgstr "" + +msgid "Start value for subordinate group ID (subgid) range" +msgstr "" + +msgid "Subordinate group ID count" +msgstr "" + +#, fuzzy, python-format +msgid "" +"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." +msgstr "kľúč %(key)s už existuje" + +#, fuzzy, python-format +#| msgid "%(port)s is not a valid port" +msgid "'%(dn)s is not a valid user" +msgstr "%(port)s nie je platný port" + +msgid "subgidnumber must be equal to subuidnumber" +msgstr "" + +#, fuzzy +msgid "Add a new subordinate id." +msgstr "Pridať novú HBAC službu." + +#, fuzzy, python-format +msgid "Added subordinate id \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola pridaná" + +#, fuzzy +#| msgid "Delete a Certificate Profile." +msgid "Delete a subordinate id." +msgstr "Odstrániť certifikačný profil" + +#, fuzzy, python-format +msgid "Deleted subordinate id \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola odstránená" + +#, fuzzy +msgid "Modify a subordinate id." +msgstr "Upraviť skupinu." + +#, fuzzy, python-format +msgid "Modified subordinate id \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola upravená." + +#, fuzzy +msgid "Search for subordinate id." +msgstr "Vyhľadávať skupiny." + +#, fuzzy, python-format +msgid "%(count)d subordinate id matched" +msgid_plural "%(count)d subordinate ids matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy +msgid "Display information about a subordinate id." +msgstr "Zobraziť informácie o DNS forward zóne" + +msgid "Generate and auto-assign subuid and subgid range to user entry" +msgstr "" + +msgid "Match users by any subordinate uid in their range" +msgstr "" + +msgid "SubUID match" +msgstr "" + +msgid "Match value for subordinate user ID" +msgstr "" + +msgid "Subordinate id statistics" +msgstr "" + +#, python-format +msgid "%(remaining)i remaining subordinate id ranges" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +#, fuzzy +msgid "sudo command" +msgstr "sudo príkazy" + +msgid "sudo commands" +msgstr "sudo príkazy" + +msgid "Sudo Commands" +msgstr "Sudo príkazy" + +#, fuzzy, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "Pridaná IPA lokalita \"%(value)s\"" + +#, fuzzy, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "Odstránená DNS zóna \"%(value)s\"" + +#, fuzzy, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "Upravené ACI \"%(value)s\"" + +#, fuzzy, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "%(count)d IPA lokalita nájdená" +msgstr[1] "%(count)d IPA lokalít nájdených" +msgstr[2] "%(count)d IPA lokalít nájdených" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +#, fuzzy +msgid "sudo command group" +msgstr "sudo príkazy" + +#, fuzzy +msgid "sudo command groups" +msgstr "sudo príkazy" + +#, fuzzy, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +#, fuzzy, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "Odstránená skupina \"%(value)s\"" + +#, fuzzy, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +#, fuzzy, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +#, fuzzy +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" +"\n" +" Nájdenie všetkých lokalít:\n" +" ipa location-find\n" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +#, fuzzy +msgid "segments" +msgstr "Detaily segmentu" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy, python-format +msgid "Added segment \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +#, fuzzy, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "Odstránená skupina \"%(value)s\"" + +#, fuzzy, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +#, fuzzy, python-format +msgid "%(value)s" +msgstr "hodnota" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "Odstránený profil \"%(value)s\"" + +#, fuzzy, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +#, fuzzy, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +#, fuzzy +msgid "trust" +msgstr "IPA trust" + +#, fuzzy +msgid "trusts" +msgstr "IPA trust" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, fuzzy, python-brace-format +msgid "invalid SID: {SID}" +msgstr "nevalídne ID profilu" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, fuzzy, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "Deaktivovaný používateľský účet \"%(value)s\"" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +#, fuzzy +msgid "Realm-domain mismatch" +msgstr "Realm domény" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +#, fuzzy +msgid "id range" +msgstr "ID rozsah" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +#, fuzzy +msgid "range exists" +msgstr "Nastavenie rozsahu" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, fuzzy, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "Odstránená skupina \"%(value)s\"" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, fuzzy, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy +msgid "trust configuration" +msgstr "Configurácia profilu" + +#, fuzzy +msgid "Global Trust Configuration" +msgstr "DNS globálne nastavenia" + +#, fuzzy +msgid "IPA AD trust agents" +msgstr "IPA trust" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +#, fuzzy +msgid "unsupported trust type" +msgstr "Nepodporovaná hodnota" + +#, fuzzy, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "Upravené ACI \"%(value)s\"" + +msgid "SID" +msgstr "SID" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +#, fuzzy +msgid "trust domains" +msgstr "trust doménový užívateľ nenájdený" + +#, fuzzy +msgid "Trusted domains" +msgstr "trust doménový užívateľ nenájdený" + +#, fuzzy +msgid "Trusted domain" +msgstr "trust doménový užívateľ nenájdený" + +#, fuzzy +msgid "Domain enabled" +msgstr "Doménové meno" + +#, fuzzy, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, fuzzy, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "HBAC pravidlo \"%(value)s\" bolo aktivované" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, fuzzy, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "Deaktivovaný používateľský účet \"%(value)s\"" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +#, fuzzy +msgid "users" +msgstr "Používatelia" + +#, fuzzy, python-format +msgid "Added user \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +#, fuzzy +msgid "Default group for new users is not POSIX" +msgstr "Predvolená skupina pre nových používateľov nenájdená" + +#, fuzzy, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "Odstránený záznam \"%(value)s\"" + +#, python-format +msgid "%s: user is already preserved" +msgstr "%s: používateľ je už uschovaný" + +#, fuzzy, python-format +msgid "Modified user \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +#, fuzzy, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "Deaktivovaný používateľský účet \"%(value)s\"" + +#, fuzzy, python-format +msgid "user \"%s\" is already active" +msgstr "%s: používateľ je už uschovaný" + +#, fuzzy, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "Deaktivovaný používateľský účet \"%(value)s\"" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "Deaktivovaný používateľský účet \"%(value)s\"" + +#, fuzzy, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "Deaktivovaný používateľský účet \"%(value)s\"" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, fuzzy, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "Deaktivovaný používateľský účet \"%(value)s\"" + +#, fuzzy +msgid "Failed logins" +msgstr "Zlyhalo pridanie" + +#, fuzzy +msgid "Last successful authentication" +msgstr "Typy autentifikácie používateľa" + +#, fuzzy +msgid "Last failed authentication" +msgstr "Typy autentifikácie používateľa" + +msgid "Time now" +msgstr "" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, fuzzy, python-format +msgid "%(host)s failed: %(error)s" +msgstr "salt hodnota: %(err)s" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "Účet deaktivovaný: %(disabled)s" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +#, fuzzy +msgid "Add new principal alias to the user entry" +msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" + +#, fuzzy, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy +msgid "Remove principal alias from the user entry" +msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" + +#, fuzzy, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +#, fuzzy +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" +"\n" +"Spravovať YubiKey tokeny.\n" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +#, fuzzy +msgid "Vault Container" +msgstr "Pokračovať" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +#, fuzzy +msgid "Deleted vault container" +msgstr "Odstrániť používateľa" + +#, fuzzy, python-format +msgid "owner %s" +msgstr "Vlastník" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +#, fuzzy +msgid "Add a vault." +msgstr "Upraviť vault." + +#, fuzzy, python-format +msgid "Added vault \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +#, fuzzy, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "Odstránená skupina \"%(value)s\"" + +#, fuzzy, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, fuzzy, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +#, fuzzy +msgid "Vault configuration" +msgstr "Configurácia profilu" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, fuzzy, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "Pridané automember pravidlo \"%(value)s\"" + +msgid "Retrieve data from a vault." +msgstr "" + +#, fuzzy, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +#, fuzzy +msgid "Modify Class of Service entry" +msgstr "Upraviť HBAC službu." + +msgid "Display Class of Service entry" +msgstr "" + +#, fuzzy +msgid "Search for Class of Service entry" +msgstr "Vyhľadať HBAC služby." + +#, fuzzy +msgid "password policy" +msgstr "Politky hesiel" + +msgid "password policies" +msgstr "Politky hesiel" + +msgid "Password Policies" +msgstr "Politiky hesiel" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +#, fuzzy +msgid "User check" +msgstr "Používateľské meno" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be equal to or greater than the minimum." +msgstr "" + +msgid "cannot delete global password policy" +msgstr "" + +msgid "priority cannot be set on global policy" +msgstr "" + +#, fuzzy +msgid "" +"\n" +"IPA servers\n" +msgstr "IPA Server" + +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "" + +#, fuzzy +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" +"\n" +" Nájdenie všetkých lokalít:\n" +" ipa location-find\n" + +#, fuzzy +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" +"\n" +" Zobrazenie špecifickej lokality:\n" +" ipa location-show lokalita\n" + +#, fuzzy +msgid "server" +msgstr "Servery" + +#, fuzzy +msgid "servers" +msgstr "Servery" + +#, fuzzy +msgid "IPA Servers" +msgstr "IPA Server" + +#, fuzzy +msgid "Server location" +msgstr "Servery v lokalite." + +#, fuzzy +msgid "Service weight" +msgstr "Nastavenia služby" + +msgid "Weight for server services" +msgstr "Váha pre služby servera" + +#, fuzzy +msgid "Service relative weight" +msgstr "Certifikát služby" + +#, fuzzy +msgid "Relative weight for server services (counts per location)" +msgstr "Váha pre služby servera" + +#, fuzzy +msgid "Enabled server roles" +msgstr "Deaktivovaná služba \"%(value)s\"" + +msgid "List of enabled roles" +msgstr "" + +#, fuzzy +msgid "Modify information about an IPA server." +msgstr "Upraviť informácie o IPA lokalite." + +#, fuzzy, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola upravená." + +#, fuzzy, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola odstránená" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#, fuzzy, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "chyba na serveri '%(server)s': %(error)s" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +#, fuzzy, python-format +msgid "Failed to remove server from security domain: %s" +msgstr "chyba na serveri '%(server)s': %(error)s" + +#, fuzzy +msgid "Server has already been deleted" +msgstr "Niektoré položky neboli odstránené" + +msgid "Agreements deleted" +msgstr "" + +#, fuzzy +msgid "Following segments were not deleted:" +msgstr "Niektoré položky neboli odstránené" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +#, fuzzy +msgid "State" +msgstr "Stav" + +#, fuzzy +msgid "Server state" +msgstr "Servery" + +#, fuzzy, python-format +msgid "Changed server state of \"%(value)s\"." +msgstr "Zmenené heslo pre \"%(value)s\"" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." +msgstr "" + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" + +#, fuzzy +msgid "" +"\n" +"Sudo Rules\n" +msgstr "Sudo pravidlá" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"Each option needs to be added separately and no validation is done whether\n" +"the option is known by sudo or is in a valid format. Environment variables\n" +"also need to be set individually. For example env_keep=\"FOO BAR\" in " +"sudoers\n" +"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" +"+=BAR.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set multiple default Sudo options:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate' --" +"sudooption mail_badpass\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +#, fuzzy +msgid "this option has been deprecated." +msgstr "táto voľba je zastaraná" + +msgid "sudo rules" +msgstr "sudo pravidlá" + +msgid "Sudo Rules" +msgstr "Sudo pravidlá" + +#, fuzzy +msgid "Sudo Rule" +msgstr "Sudo pravidlá" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, fuzzy, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "HBAC pravidlo \"%(value)s\" bolo pridané" + +#, fuzzy, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "Odstránené HBAC pravidlo \"%(value)s\"" + +#, fuzzy, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "HBAC pravidlo \"%(value)s\" bolo upravené" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +#, fuzzy +msgid "command" +msgstr "Príkazy" + +#, fuzzy +msgid "commands" +msgstr "Príkazy" + +msgid "runAs user" +msgstr "" + +#, fuzzy +msgid "runAs users" +msgstr "Uschovaní používatelia" + +#, fuzzy +msgid "group runAs" +msgstr "skupiny" + +#, fuzzy +msgid "runAs groups" +msgstr "skupiny" + +#, fuzzy, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" msgstr "" #, fuzzy @@ -24420,6 +24724,17 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + #, python-format msgid "" "\n" @@ -24439,37 +24754,6 @@ msgstr "" msgid "Topology does not allow server %(server)s to replicate with servers:" msgstr "" -#, fuzzy -msgid "Trusting forest" -msgstr "Trust nastavenia" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -#, fuzzy -msgid "Unknown" -msgstr "Neznáma chyba" - -#, fuzzy -msgid "Non-Active Directory domain" -msgstr "Active Directory doména" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - msgid "" "\n" "Classes to manage trust joins using DCE-RPC calls\n" @@ -24553,6 +24837,9 @@ msgstr "trust doménový užívateľ nenájdený" msgid "no trusted domain matched the specified flat name" msgstr "" +msgid "trusted domain object not found" +msgstr "trust doménový objekt nenájdený" + msgid "Object does not belong to a trusted domain" msgstr "" @@ -24568,6 +24855,9 @@ msgstr "" msgid "Trusted domain did not return a valid SID for the object" msgstr "" +msgid "trusted domain user not found" +msgstr "trust doménový užívateľ nenájdený" + msgid "Cannot retrieve trusted domain GC list" msgstr "" @@ -24633,33 +24923,6 @@ msgstr "" msgid "must be at least 1" msgstr "musí byť najmenej %(minvalue)d" -#, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -msgid "Unable to initialize STARTTLS session\n" -msgstr "" - msgid "Out of memory\n" msgstr "" @@ -24688,3 +24951,30 @@ msgstr "Zlyhalo pridanie" msgid "Bad or unsupported salt type.\n" msgstr "" + +#, c-format +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "" + +msgid "" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" +msgstr "" + +msgid "Unable to initialize STARTTLS session\n" +msgstr "" diff --git a/po/tg.po b/po/tg.po index 15dbd8475..b8e673720 100644 --- a/po/tg.po +++ b/po/tg.po @@ -18,311 +18,426 @@ msgstr "" "Plural-Forms: nplurals=1; plural=0\n" "X-Generator: Zanata 4.6.2\n" -#, python-format -msgid "%(info)s" -msgstr "%(info)s" - -msgid "ACI name" -msgstr "Номи ACI" - -msgid "ACI prefix" -msgstr "Префикси ACI" - -msgid "ACIs" -msgstr "ACIs" - -msgid "Add" -msgstr "Илова кардан" - -msgid "Allow" -msgstr "Иҷозат додан" - -msgid "Already registered" -msgstr "Ааллакай қайд карда шуд" - -msgid "Attribute" -msgstr "Аттрибут" - -msgid "Attributes" -msgstr "Аттрибутҳо" - -msgid "Audit" -msgstr "Назорат" - -msgid "Available" -msgstr "Дастрас" - -msgid "Cancel" -msgstr "Бекор кардан" - -msgid "City" -msgstr "Шаҳр" - -msgid "Class" -msgstr "Синф" - -msgid "Close" -msgstr "Пӯшидан" - -msgid "Commands" -msgstr "Фармонҳо" - -msgid "Configuration" -msgstr "Ҷӯрсозӣ" - -msgid "Data" -msgstr "Маълумот" - -msgid "Delete" -msgstr "Нест кардан" - -msgid "Delete all?" -msgstr "Ҳамаро нест мекунед?" - -msgid "Description" -msgstr "Шарҳ" - -msgid "Display name" -msgstr "Номи намоишӣ" - -msgid "Enabled" -msgstr "Фаъолшуда" - -msgid "Entry" -msgstr "Вуруд" - -msgid "Error" -msgstr "Хатогӣ" - -msgid "Fax Number" -msgstr "Рақами факс" - -#, python-format -msgid "File %(file)s not found" -msgstr "Файли %(file)s пайдо нашуд." - -msgid "Filter" -msgstr "Полоишгар" - -msgid "Find" -msgstr "Ёфтан" - -msgid "First name" -msgstr "Ном" - -msgid "Force" -msgstr "Маҷбурӣ" - -msgid "General" -msgstr "Умумӣ" - -msgid "Get" -msgstr "Гирифтан" - -msgid "Group" -msgstr "Гурӯҳ" - -msgid "Groups" -msgstr "Гуруҳҳо" - -msgid "Host Name" -msgstr "Номи мизбон" - -msgid "Host name" -msgstr "Номи мизбон" - -msgid "Hostname" -msgstr "Номи мизбон" - -msgid "IPA Server" -msgstr "Сервери IPA" - -msgid "Initials" -msgstr "Ному насаб" - -msgid "Issue" -msgstr "Барориш" - -msgid "Issued By" -msgstr "Додааст:" - -msgid "Issued To" -msgstr "Додашудааст ба:" - -msgid "Issuer" -msgstr "Диҳанда" - -msgid "Job Title" -msgstr "Вазифа" - -msgid "Key" -msgstr "Тугма" - -msgid "LDAP DN" -msgstr "LDAP DN" - -msgid "LDAP password" -msgstr "Пароли LDAP" - -msgid "Last name" -msgstr "Насаб" - -msgid "Location" -msgstr "Макон" - -msgid "Manager" -msgstr "Диспетчер" - -msgid "New Password" -msgstr "Пароли нав" - -msgid "Note" -msgstr "Эзоҳ" - -msgid "OK" -msgstr "Хуб" - -msgid "Organization" -msgstr "Ташкилот" +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "" #, c-format -msgid "Out of Memory!\n" -msgstr "Берун аз хотира!\n" +msgid "cannot stat() configuration file %s\n" +msgstr "" -msgid "Out of memory\n" -msgstr "Берун аз хотира \n" +#, c-format +msgid "out of memory\n" +msgstr "берун аз хотира\n" + +#, c-format +msgid "read error\n" +msgstr "хатогии хониш\n" + +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "" + +#, fuzzy, c-format +msgid "principal not found\n" +msgstr "Файли %(file)s пайдо нашуд." + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, fuzzy, c-format +msgid "realm not found\n" +msgstr "Файли %(file)s пайдо нашуд." + +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" +msgstr "" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "Kerberos Service Principal Name" +msgstr "" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +#, fuzzy +msgid "Realm name" +msgstr "Азнавномгузорӣ" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "" #, c-format msgid "Out of memory \n" msgstr "Берун аз хотира \n" #, c-format -msgid "Out of memory!" -msgstr "Берун аз хотира!" +msgid "Unable to initialize ldap library!\n" +msgstr "" + +msgid "Simple bind failed\n" +msgstr "" + +msgid "SASL Bind failed\n" +msgstr "" #, c-format -msgid "Out of memory!\n" +msgid "Operation failed: %s\n" +msgstr "" + +#, c-format +msgid "Failed to get result: %s\n" +msgstr "" + +#, c-format +msgid "Timeout exceeded." +msgstr "" + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "" + +#, c-format +msgid "Missing reply control!\n" +msgstr "" + +#, c-format +msgid "Out of Memory!\n" msgstr "Берун аз хотира!\n" -msgid "Out of memory!?\n" -msgstr "Аз хотира берун шуд!?\n" +#, c-format +msgid "Failed to create control!\n" +msgstr "" -msgid "Password" -msgstr "Парол" +#, c-format +msgid "Failed to bind to server!\n" +msgstr "" -msgid "Passwords do not match" -msgstr "Паролҳо номувофиқанд" +#, c-format +msgid "Failed to get keytab!\n" +msgstr "" -msgid "Passwords do not match!" +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "" + +msgid "Failed to decode control reply!\n" +msgstr "" + +#, fuzzy, c-format +msgid "Passwords do not match!\n" msgstr "Паролҳо номувофиқанд!" -msgid "Permission" -msgstr "Иҷозат" +#, c-format +msgid "Failed to open config file %s\n" +msgstr "" -msgid "Permissions" -msgstr "Иҷозатҳо" +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "" -msgid "Policy" -msgstr "Сиёсат" +msgid "Failed to resolve symlink to keytab.\n" +msgstr "" -msgid "Principal" -msgstr "Асосӣ" +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" -msgid "Rename" -msgstr "Азнавномгузорӣ" +msgid "Print as little as possible" +msgstr "" -msgid "Reset" -msgstr "Бозсозӣ" +msgid "Output only on errors" +msgstr "" -msgid "Restore" -msgstr "Барқароркунӣ" +msgid "Output debug info" +msgstr "" -msgid "Retry" -msgstr "Кӯшиш" - -msgid "Search" -msgstr "Ҷустуҷӯ" - -msgid "Select All" -msgstr "Интихоби ҳама" - -msgid "Serial Number" -msgstr "Рақами силсилавӣ" - -msgid "Serial number" -msgstr "Рақами силсилавӣ" +msgid "Contact this specific KDC Server" +msgstr "" msgid "Server Name" msgstr "Номи сервер" -msgid "Service" -msgstr "Хидмат" +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" -msgid "Settings" -msgstr "Танзимотҳо" +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" -msgid "Status" -msgstr "Ҳолат" +msgid "Encryption types to request" +msgstr "" -msgid "Subject" -msgstr "Мавзӯъ" +msgid "Comma separated encryption types list" +msgstr "" -msgid "Sudo" -msgstr "Sudo" +msgid "Show the list of permitted encryption types and exit" +msgstr "" -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "Хатогии синтаксисӣ: %(error)s" +msgid "Permitted Encryption Types" +msgstr "" -msgid "Target" -msgstr "Мақсад" +msgid "Asks for a non-random password to use for the principal" +msgstr "" -msgid "Type" -msgstr "Намуд" +msgid "LDAP DN" +msgstr "LDAP DN" -msgid "Update" -msgstr "Ҷадидсозӣ" +msgid "DN to bind as if not using kerberos" +msgstr "" -msgid "User" -msgstr "Корбар" +msgid "LDAP password" +msgstr "Пароли LDAP" -msgid "User group" -msgstr "Гурӯҳи корбар" +msgid "password to use if not using kerberos" +msgstr "" -msgid "User name" -msgstr "Номи корбар" +#, fuzzy +msgid "Prompt for LDAP password" +msgstr "Пароли LDAP" -msgid "Username" -msgstr "Номи корбар" +msgid "Path to the IPA CA certificate" +msgstr "" -msgid "Validity" -msgstr "Саҳеҳият" +msgid "IPA CA certificate" +msgstr "" -msgid "View" -msgstr "Намоиш" +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" -msgid "ZIP" -msgstr "Рамзи ZIP" +msgid "url" +msgstr "" -msgid "description" -msgstr "шарҳ" +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" -msgid "filename" -msgstr "номи файл" +msgid "GSSAPI|EXTERNAL" +msgstr "" -msgid "hostname" -msgstr "номи мизбон" +msgid "Retrieve current keys without changing them" +msgstr "" #, c-format -msgid "out of memory\n" -msgstr "берун аз хотира\n" - -msgid "password" -msgstr "парол" +msgid "No system preferred enctypes ?!\n" +msgstr "" #, c-format -msgid "read error\n" -msgstr "хатогии хониш\n" +msgid "Supported encryption types:\n" +msgstr "" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +#, fuzzy +msgid "Enter LDAP password" +msgstr "Пароли LDAP" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "" + +#, c-format +msgid "DNS discovery for domain %s\n" +msgstr "" + +#, c-format +msgid "Discovered server %s\n" +msgstr "" + +#, c-format +msgid "Using discovered server %s\n" +msgstr "" + +#, c-format +msgid "DNS Discovery failed\n" +msgstr "" + +#, c-format +msgid "Using server from config %s\n" +msgstr "" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "" + +#, c-format +msgid "Using provided server %s\n" +msgstr "" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "" + +#, fuzzy +msgid "New Principal Password" +msgstr "Пароли нав" + +msgid "Verify Principal Password" +msgstr "" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" + +#, c-format +msgid "Failed to create key material\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "" + +#, c-format +msgid "Out of memory!\n" +msgstr "Берун аз хотира!\n" #, c-format msgid "No permission to join this host to the IPA domain.\n" @@ -337,10 +452,11 @@ msgid "access() on %1$s failed: errno = %2$d\n" msgstr "" #, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "" +msgid "Out of memory!" +msgstr "Берун аз хотира!" -msgid "SASL Bind failed\n" +#, c-format +msgid "Unable to enable SSL in LDAP\n" msgstr "" #, c-format @@ -529,6 +645,9 @@ msgstr "" msgid "Hostname of this server" msgstr "" +msgid "hostname" +msgstr "номи мизбон" + #, fuzzy msgid "IPA Server to use" msgstr "Сервери IPA" @@ -536,12 +655,18 @@ msgstr "Сервери IPA" msgid "Specifies where to store keytab information." msgstr "" +msgid "filename" +msgstr "номи файл" + msgid "Force the host join. Rejoin even if already joined." msgstr "" msgid "LDAP password (if not using Kerberos)" msgstr "" +msgid "password" +msgstr "парол" + #, fuzzy msgid "LDAP basedn" msgstr "Пароли LDAP" @@ -561,368 +686,6 @@ msgstr "" msgid "The hostname must not be: %s\n" msgstr "" -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "" - -msgid "Simple bind failed\n" -msgstr "" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -#, c-format -msgid "Failed to create control!\n" -msgstr "" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "" - -msgid "Failed to decode control reply!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Passwords do not match!\n" -msgstr "Паролҳо номувофиқанд!" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "" - -msgid "Failed to resolve symlink to keytab.\n" -msgstr "" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Output only on errors" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Encryption types to request" -msgstr "" - -msgid "Comma separated encryption types list" -msgstr "" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -msgid "Permitted Encryption Types" -msgstr "" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -msgid "DN to bind as if not using kerberos" -msgstr "" - -msgid "password to use if not using kerberos" -msgstr "" - -#, fuzzy -msgid "Prompt for LDAP password" -msgstr "Пароли LDAP" - -msgid "Path to the IPA CA certificate" -msgstr "" - -msgid "IPA CA certificate" -msgstr "" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -#, fuzzy -msgid "Enter LDAP password" -msgstr "Пароли LDAP" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -#, fuzzy -msgid "New Principal Password" -msgstr "Пароли нав" - -msgid "Verify Principal Password" -msgstr "" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, c-format -msgid "Failed to create key material\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, fuzzy, c-format -msgid "principal not found\n" -msgstr "Файли %(file)s пайдо нашуд." - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, fuzzy, c-format -msgid "realm not found\n" -msgstr "Файли %(file)s пайдо нашуд." - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -#, fuzzy -msgid "Realm name" -msgstr "Азнавномгузорӣ" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "" - msgid "Failed members" msgstr "" @@ -990,6 +753,10 @@ msgid "" "Continuous operation mode. Errors are reported but the process continues." msgstr "" +#, python-format +msgid "File %(file)s not found" +msgstr "Файли %(file)s пайдо нашуд." + #, python-format msgid "key %(key)s already exists" msgstr "" @@ -1033,133 +800,35 @@ msgstr "" msgid "Skipped %(key)s" msgstr "" +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +msgid "Unrevoked" +msgstr "" + +msgid "Error" +msgstr "Хатогӣ" + +#, fuzzy +msgid "Input filename" +msgstr "номи файл" + +msgid "File to load the certificate from." +msgstr "" + +msgid "cannot specify both raw certificate and file" +msgstr "" + msgid "Input file" msgstr "" msgid "File to load the certificate from" msgstr "" -msgid "cannot specify both raw certificate and file" -msgstr "" - #, python-format msgid "Profile configuration stored in file '%(file)s'" msgstr "" -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -msgid "Servers details:" -msgstr "" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "Add a new YubiKey OTP token." -msgstr "" - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -msgid "Maximum number of agreements per replica" -msgstr "" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -#, fuzzy -msgid "Delete a user" -msgstr "Ҳамаро нест мекунед?" - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - msgid "Split DNS record to parts" msgstr "" @@ -1204,6 +873,9 @@ msgstr "" msgid "No option to delete specific record provided." msgstr "" +msgid "Delete all?" +msgstr "Ҳамаро нест мекунед?" + #, python-format msgid "Delete %(name)s '%(value)s'?" msgstr "" @@ -1220,6 +892,134 @@ msgstr "" msgid "file to store DNS records in nsupdate format" msgstr "" +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "" + +msgid "Servers details:" +msgstr "" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "" + +#, fuzzy +msgid "User ID" +msgstr "Корбар" + +msgid "Password" +msgstr "Парол" + +#, fuzzy +msgid "First Code" +msgstr "Ном" + +msgid "Second Code" +msgstr "" + +msgid "Token ID" +msgstr "" + +msgid "python-yubico is not installed." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" + +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "Add a new YubiKey OTP token." +msgstr "" + +msgid "YubiKey slot" +msgstr "" + +msgid "No free YubiKey slot!" +msgstr "" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "" + +msgid "Topology is disconnected" +msgstr "" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "" + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "" + +msgid "Maximum number of agreements per replica" +msgstr "" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "" + +#, fuzzy +msgid "Delete a user" +msgstr "Ҳамаро нест мекунед?" + +msgid "preserve and no-preserve cannot be both set" +msgstr "" + #, python-format msgid "Cannot read file '%(filename)s': %(exc)s" msgstr "" @@ -1334,50 +1134,29 @@ msgstr "" msgid "File containing the vault private key" msgstr "" +msgid "Data" +msgstr "Маълумот" + msgid "Private key specified multiple times" msgstr "" msgid "Missing vault private key" msgstr "" -msgid "Write certificate (chain if --chain used) to file" +#, python-format +msgid "Enabled Sudo Rule \"%s\"" msgstr "" -msgid "Unrevoked" +#, python-format +msgid "Disabled Sudo Rule \"%s\"" msgstr "" -#, fuzzy -msgid "Input filename" -msgstr "номи файл" - -msgid "File to load the certificate from." +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" msgstr "" -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -#, fuzzy -msgid "User ID" -msgstr "Корбар" - -#, fuzzy -msgid "First Code" -msgstr "Ном" - -msgid "Second Code" -msgstr "" - -msgid "Token ID" +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" msgstr "" msgid "" @@ -1501,18 +1280,36 @@ msgid "" "targetattr REPLACES the current attributes, it does not add to them.\n" msgstr "" +msgid "ACI name" +msgstr "Номи ACI" + +msgid "Permission" +msgstr "Иҷозат" + msgid "Permission ACI grants access to" msgstr "" +msgid "User group" +msgstr "Гурӯҳи корбар" + msgid "User group ACI grants access to" msgstr "" +msgid "Permissions" +msgstr "Иҷозатҳо" + msgid "Permissions to grant(read, write, add, delete, all)" msgstr "" msgid "Attributes to which the permission applies" msgstr "" +msgid "Attributes" +msgstr "Аттрибутҳо" + +msgid "Type" +msgstr "Намуд" + msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" msgstr "" @@ -1522,6 +1319,9 @@ msgstr "" msgid "Member of a group" msgstr "" +msgid "Filter" +msgstr "Полоишгар" + msgid "Legal LDAP filter (e.g. ou=Engineering)" msgstr "" @@ -1547,6 +1347,9 @@ msgstr "" msgid "Create new ACI." msgstr "" +msgid "ACI prefix" +msgstr "Префикси ACI" + msgid "" "Prefix used to distinguish ACI types (permission, delegation, selfservice, " "none)" @@ -1629,6 +1432,246 @@ msgstr "" msgid "Location of the ACI" msgstr "" +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Description" +msgstr "Шарҳ" + +msgid "A description of this auto member rule" +msgstr "" + +msgid "Default (fallback) Group" +msgstr "" + +msgid "Default group for entries to land" +msgstr "" + +msgid "Add an automember rule." +msgstr "" + +msgid "Automember Rule" +msgstr "" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +msgid "Grouping Type" +msgstr "" + +msgid "Grouping to which the rule applies" +msgstr "" + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +msgid "Exclusive Regex" +msgstr "" + +#, fuzzy +msgid "Attribute Key" +msgstr "Аттрибут" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +msgid "Number of conditions added" +msgstr "" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +msgid "Display information about the default (fallback) automember groups." +msgstr "" + +msgid "Delete an automember rule." +msgstr "" + +msgid "List of deletions that failed" +msgstr "" + +msgid "Search for automember rules." +msgstr "" + +msgid "Modify an automember rule." +msgstr "" + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +msgid "Rights" +msgstr "" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +#, fuzzy +msgid "Users" +msgstr "Корбар" + +msgid "Rebuild membership for specified users" +msgstr "" + +#, fuzzy +msgid "Hosts" +msgstr "Номи мизбон" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +msgid "Conditions that could not be removed" +msgstr "" + +msgid "Number of conditions removed" +msgstr "" + +msgid "Display information about an automember rule." +msgstr "" + msgid "" "\n" "Automount\n" @@ -1736,6 +1779,9 @@ msgid "" " ipa automountkey-del baltimore auto.share --key=man\n" msgstr "" +msgid "Key" +msgstr "Тугма" + msgid "Automount key name." msgstr "" @@ -1743,6 +1789,12 @@ msgstr "" msgid "Mount information" msgstr "Ҷӯрсозӣ" +msgid "description" +msgstr "шарҳ" + +msgid "Location" +msgstr "Макон" + msgid "Automount location name." msgstr "" @@ -1755,25 +1807,12 @@ msgstr "" msgid "Create a new automount key." msgstr "" -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - msgid "Delete an automount key." msgstr "" msgid "Continuous mode: Don't stop on errors." msgstr "" -msgid "List of deletions that failed" -msgstr "" - msgid "Search for an automount key." msgstr "" @@ -1792,22 +1831,12 @@ msgstr "" msgid "Modify an automount key." msgstr "" -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "Rights" -msgstr "" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - msgid "New mount information" msgstr "" +msgid "Rename" +msgstr "Азнавномгузорӣ" + msgid "Rename the automount key object" msgstr "" @@ -1897,6 +1926,187 @@ msgstr "" msgid "Nested Methods to execute" msgstr "" +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +msgid "Search for existing certificates." +msgstr "" + +msgid "Match cn attribute in subject" +msgstr "" + +msgid "Reason" +msgstr "" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "" + +#, fuzzy +msgid "minimum serial number" +msgstr "Рақами силсилавӣ" + +#, fuzzy +msgid "maximum serial number" +msgstr "Рақами силсилавӣ" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Maximum number of certs returned" +msgstr "" + +msgid "Take a revoked certificate off hold." +msgstr "" + +msgid "Serial number" +msgstr "Рақами силсилавӣ" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +msgid "Submit a certificate signing request." +msgstr "" + +msgid "CSR" +msgstr "" + +msgid "Principal" +msgstr "Асосӣ" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +msgid "Dictionary mapping variable name to value" +msgstr "" + +msgid "Revoke a certificate." +msgstr "" + +msgid "Retrieve an existing certificate." +msgstr "" + +#, fuzzy +msgid "Output filename" +msgstr "номи файл" + +msgid "File to store the certificate in." +msgstr "" + +msgid "Check the status of a certificate signing request." +msgstr "" + +msgid "Request id" +msgstr "" + msgid "" "\n" "Server configuration\n" @@ -2500,6 +2710,9 @@ msgstr "" msgid "AFSDB Hostname" msgstr "Номи мизбон" +msgid "Hostname" +msgstr "Номи мизбон" + msgid "APL record" msgstr "" @@ -2589,6 +2802,9 @@ msgstr "" msgid "DNAME Target" msgstr "Мақсад" +msgid "Target" +msgstr "Мақсад" + msgid "DNSKEY record" msgstr "" @@ -2770,6 +2986,9 @@ msgstr "" msgid "NAPTR Service" msgstr "Хидмат" +msgid "Service" +msgstr "Хидмат" + msgid "NAPTR Regular Expression" msgstr "" @@ -3090,6 +3309,9 @@ msgstr "" msgid "Add new DNS resource record." msgstr "" +msgid "Force" +msgstr "Маҷбурӣ" + msgid "force NS record creation even if its hostname is not in DNS" msgstr "" @@ -3159,6 +3381,315 @@ msgstr "" msgid "Display information about a DNS zone (SOA record)." msgstr "" +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +#, fuzzy +msgid "Group name" +msgstr "Гурӯҳ" + +#, fuzzy +msgid "Group description" +msgstr "шарҳ" + +msgid "GID" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "" + +msgid "Member users" +msgstr "" + +#, fuzzy +msgid "Member groups" +msgstr "Гурӯҳи корбар" + +#, fuzzy +msgid "Member of groups" +msgstr "Гурӯҳи корбар" + +msgid "Roles" +msgstr "" + +msgid "Member of netgroups" +msgstr "" + +msgid "Member of Sudo rule" +msgstr "" + +msgid "Member of HBAC rule" +msgstr "" + +msgid "Indirect Member users" +msgstr "" + +msgid "Indirect Member groups" +msgstr "" + +msgid "Indirect Member of group" +msgstr "" + +msgid "Indirect Member of netgroup" +msgstr "" + +msgid "Indirect Member of role" +msgstr "" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +msgid "Create a new group." +msgstr "" + +msgid "Create as a non-POSIX group" +msgstr "" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +msgid "Add members to a group." +msgstr "" + +#, fuzzy +msgid "External member" +msgstr "Рақами силсилавӣ" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +msgid "member user" +msgstr "" + +msgid "users to add" +msgstr "" + +#, fuzzy +msgid "member group" +msgstr "Гурӯҳи корбар" + +msgid "groups to add" +msgstr "" + +msgid "Members that could not be added" +msgstr "" + +msgid "Number of members added" +msgstr "" + +#, fuzzy +msgid "Delete group." +msgstr "Нест кардан" + +msgid "Detach a managed group from a user." +msgstr "" + +msgid "Search for groups." +msgstr "" + +msgid "search for private groups" +msgstr "" + +msgid "search for POSIX groups" +msgstr "" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +msgid "search for non-POSIX groups" +msgstr "" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "user" +msgstr "" + +msgid "Search for groups with these member users." +msgstr "" + +msgid "Search for groups without these member users." +msgstr "" + +#, fuzzy +msgid "group" +msgstr "Гурӯҳ" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +#, fuzzy +msgid "netgroup" +msgstr "Гурӯҳи корбар" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +msgid "HBAC rule" +msgstr "" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +msgid "Modify a group." +msgstr "" + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +msgid "Remove members from a group." +msgstr "" + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "" + +msgid "Number of members removed" +msgstr "" + +msgid "Display information about a named group." +msgstr "" + msgid "" "\n" "Host-based access control\n" @@ -3240,18 +3771,13 @@ msgstr "Хидмат" msgid "Service category the rule applies to" msgstr "" -#, fuzzy -msgid "Users" -msgstr "Корбар" +msgid "Enabled" +msgstr "Фаъолшуда" #, fuzzy msgid "User Groups" msgstr "Гурӯҳи корбар" -#, fuzzy -msgid "Hosts" -msgstr "Номи мизбон" - #, fuzzy msgid "Host Groups" msgstr "Гуруҳҳо" @@ -3270,9 +3796,6 @@ msgstr "" msgid "Create a new HBAC rule." msgstr "" -msgid "Suppress processing of membership attributes." -msgstr "" - msgid "Add target hosts and hostgroups to an HBAC rule." msgstr "" @@ -3288,12 +3811,6 @@ msgstr "" msgid "host groups to add" msgstr "" -msgid "Members that could not be added" -msgstr "" - -msgid "Number of members added" -msgstr "" - msgid "Add services to an HBAC rule." msgstr "" @@ -3312,19 +3829,6 @@ msgstr "" msgid "Add users and groups to an HBAC rule." msgstr "" -msgid "member user" -msgstr "" - -msgid "users to add" -msgstr "" - -#, fuzzy -msgid "member group" -msgstr "Гурӯҳи корбар" - -msgid "groups to add" -msgstr "" - msgid "Delete an HBAC rule." msgstr "" @@ -3349,12 +3853,6 @@ msgstr "" msgid "host groups to remove" msgstr "" -msgid "Members that could not be removed" -msgstr "" - -msgid "Number of members removed" -msgstr "" - msgid "Remove service and service groups from an HBAC rule." msgstr "" @@ -3367,12 +3865,6 @@ msgstr "" msgid "Remove users and groups from an HBAC rule." msgstr "" -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - msgid "Display the properties of an HBAC rule." msgstr "" @@ -3485,6 +3977,243 @@ msgstr "" msgid "Display information about an HBAC service group." msgstr "" +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +msgid "User name" +msgstr "Номи корбар" + +#, fuzzy +msgid "Target host" +msgstr "Мақсад" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +msgid "Warning" +msgstr "" + +msgid "Matched rules" +msgstr "" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + msgid "" "\n" "Hosts/Machines\n" @@ -3549,6 +4278,9 @@ msgid "" " ipa host-allow-create-keytab test2 --users=tuser1\n" msgstr "" +msgid "Host name" +msgstr "Номи мизбон" + msgid "A description of this host" msgstr "" @@ -3607,6 +4339,9 @@ msgstr "" msgid "SSH public key" msgstr "" +msgid "Class" +msgstr "Синф" + msgid "" "Host category (semantics placed on this attribute are for local " "interpretation)" @@ -3630,33 +4365,9 @@ msgstr "" msgid "Member of host-groups" msgstr "" -msgid "Roles" -msgstr "" - -msgid "Member of netgroups" -msgstr "" - -msgid "Member of Sudo rule" -msgstr "" - -msgid "Member of HBAC rule" -msgstr "" - -msgid "Indirect Member of netgroup" -msgstr "" - msgid "Indirect Member of host-group" msgstr "" -msgid "Indirect Member of role" -msgstr "" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - msgid "Keytab" msgstr "" @@ -3750,46 +4461,30 @@ msgstr "" msgid "Search for hosts without these member of host groups." msgstr "" -#, fuzzy -msgid "netgroup" -msgstr "Гурӯҳи корбар" - msgid "Search for hosts with these member of netgroups." msgstr "" msgid "Search for hosts without these member of netgroups." msgstr "" -msgid "role" -msgstr "" - msgid "Search for hosts with these member of roles." msgstr "" msgid "Search for hosts without these member of roles." msgstr "" -msgid "HBAC rule" -msgstr "" - msgid "Search for hosts with these member of HBAC rules." msgstr "" msgid "Search for hosts without these member of HBAC rules." msgstr "" -msgid "sudo rule" -msgstr "" - msgid "Search for hosts with these member of sudo rules." msgstr "" msgid "Search for hosts without these member of sudo rules." msgstr "" -msgid "user" -msgstr "" - msgid "Search for hosts with these enrolled by users." msgstr "" @@ -3943,6 +4638,232 @@ msgstr "" msgid "Display information about a hostgroup." msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +#, fuzzy +msgid "Range name" +msgstr "Азнавномгузорӣ" + +msgid "First Posix ID of the range" +msgstr "" + +msgid "Number of IDs in the range" +msgstr "" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +msgid "Range type" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "Delete an ID range." +msgstr "" + +msgid "Search for ranges." +msgstr "" + +msgid "Modify ID range." +msgstr "" + +msgid "Display information about a range." +msgstr "" + msgid "" "\n" "ID Views\n" @@ -3959,13 +4880,6 @@ msgstr "" msgid "Anchor to override" msgstr "" -#, fuzzy -msgid "Group name" -msgstr "Гурӯҳ" - -msgid "GID" -msgstr "" - msgid "Group ID Number" msgstr "" @@ -4452,9 +5366,6 @@ msgid "" "retrieve and print all attributes from the server. Affects command output." msgstr "" -msgid "Dictionary mapping variable name to value" -msgstr "" - msgid "Total number of variables env (>= count)" msgstr "" @@ -4564,10 +5475,6 @@ msgstr "" msgid "Search for netgroups without these member users." msgstr "" -#, fuzzy -msgid "group" -msgstr "Гурӯҳ" - msgid "Search for netgroups with these member groups." msgstr "" @@ -4661,6 +5568,152 @@ msgstr "" msgid "Show the current OTP configuration." msgstr "" +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Manager" +msgstr "Диспетчер" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +#, fuzzy +msgid "Disabled" +msgstr "Фаъолшуда" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +#, fuzzy +msgid "Validity start" +msgstr "Саҳеҳият" + +msgid "First date/time the token can be used" +msgstr "" + +#, fuzzy +msgid "Validity end" +msgstr "Саҳеҳият" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "" + +msgid "Token model (informational only)" +msgstr "" + +#, fuzzy +msgid "Serial" +msgstr "Рақами силсилавӣ" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +msgid "Add a new OTP token." +msgstr "" + +msgid "(deprecated)" +msgstr "" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +msgid "Delete an OTP token." +msgstr "" + +msgid "Search for OTP token." +msgstr "" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +msgid "Modify a OTP token." +msgstr "" + +msgid "Rename the OTP token object" +msgstr "" + +msgid "Display information about an OTP token." +msgstr "" + msgid "" "\n" "YubiKey Tokens\n" @@ -4699,6 +5752,9 @@ msgstr "" msgid "Set a user's password." msgstr "" +msgid "New Password" +msgstr "Пароли нав" + #, fuzzy msgid "Current Password" msgstr "Пароли нав" @@ -5105,6 +6161,9 @@ msgid "" " ipa pwpolicy-mod --minclasses=2 localadmins\n" msgstr "" +msgid "Group" +msgstr "Гурӯҳ" + msgid "Manage password policy for specific group" msgstr "" @@ -5181,6 +6240,9 @@ msgstr "" msgid "Display information about password policy." msgstr "" +msgid "User" +msgstr "Корбар" + msgid "Display effective policy for a specific user" msgstr "" @@ -5355,13 +6417,6 @@ msgstr "Азнавномгузорӣ" msgid "A description of this role-group" msgstr "" -msgid "Member users" -msgstr "" - -#, fuzzy -msgid "Member groups" -msgstr "Гурӯҳи корбар" - msgid "Privileges" msgstr "" @@ -6366,9 +7421,8 @@ msgstr "" msgid "Sudo Command Group" msgstr "" -#, fuzzy -msgid "Group description" -msgstr "шарҳ" +msgid "Commands" +msgstr "Фармонҳо" msgid "Member Sudo commands" msgstr "" @@ -6407,1674 +7461,6 @@ msgstr "" msgid "Display Sudo Command Group." msgstr "" -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -#, fuzzy -msgid "Full name" -msgstr "Ном" - -msgid "Kerberos principal" -msgstr "" - -msgid "Kerberos principal expiration" -msgstr "" - -msgid "Email address" -msgstr "" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -msgid "Street address" -msgstr "" - -msgid "State/Province" -msgstr "" - -#, fuzzy -msgid "Telephone Number" -msgstr "Рақами силсилавӣ" - -msgid "Mobile Telephone Number" -msgstr "" - -#, fuzzy -msgid "Pager Number" -msgstr "Рақами факс" - -msgid "Org. Unit" -msgstr "" - -msgid "Car License" -msgstr "" - -msgid "Account disabled" -msgstr "" - -msgid "User authentication types" -msgstr "" - -msgid "Types of supported user authentication" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -#, fuzzy -msgid "RADIUS proxy configuration" -msgstr "Ҷӯрсозӣ" - -msgid "RADIUS proxy username" -msgstr "" - -#, fuzzy -msgid "Department Number" -msgstr "Рақами силсилавӣ" - -msgid "Employee Number" -msgstr "" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -#, fuzzy -msgid "Member of groups" -msgstr "Гурӯҳи корбар" - -msgid "Indirect Member of group" -msgstr "" - -msgid "Kerberos keys available" -msgstr "" - -msgid "Add a new user." -msgstr "" - -msgid "Don't create user private group" -msgstr "" - -#, fuzzy -msgid "Delete a user." -msgstr "Ҳамаро нест мекунед?" - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -msgid "Search for users." -msgstr "" - -msgid "Self" -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -msgid "Modify a user." -msgstr "" - -msgid "Rename the user object" -msgstr "" - -msgid "Display information about a user." -msgstr "" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "A description of this auto member rule" -msgstr "" - -msgid "Default (fallback) Group" -msgstr "" - -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -msgid "Automember Rule" -msgstr "" - -msgid "Grouping Type" -msgstr "" - -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -#, fuzzy -msgid "Attribute Key" -msgstr "Аттрибут" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -msgid "Delete an automember rule." -msgstr "" - -msgid "Search for automember rules." -msgstr "" - -msgid "Modify an automember rule." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -msgid "Number of conditions removed" -msgstr "" - -msgid "Display information about an automember rule." -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -msgid "Search for existing certificates." -msgstr "" - -msgid "Match cn attribute in subject" -msgstr "" - -msgid "Reason" -msgstr "" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -#, fuzzy -msgid "minimum serial number" -msgstr "Рақами силсилавӣ" - -#, fuzzy -msgid "maximum serial number" -msgstr "Рақами силсилавӣ" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -msgid "Submit a certificate signing request." -msgstr "" - -msgid "CSR" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -msgid "Revoke a certificate." -msgstr "" - -msgid "Retrieve an existing certificate." -msgstr "" - -#, fuzzy -msgid "Output filename" -msgstr "номи файл" - -msgid "File to store the certificate in." -msgstr "" - -msgid "Check the status of a certificate signing request." -msgstr "" - -msgid "Request id" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "GID (use this option to set it manually)" -msgstr "" - -msgid "Indirect Member users" -msgstr "" - -msgid "Indirect Member groups" -msgstr "" - -msgid "Create a new group." -msgstr "" - -msgid "Create as a non-POSIX group" -msgstr "" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Add members to a group." -msgstr "" - -#, fuzzy -msgid "External member" -msgstr "Рақами силсилавӣ" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -#, fuzzy -msgid "Delete group." -msgstr "Нест кардан" - -msgid "Detach a managed group from a user." -msgstr "" - -msgid "Search for groups." -msgstr "" - -msgid "search for private groups" -msgstr "" - -msgid "search for POSIX groups" -msgstr "" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -msgid "search for non-POSIX groups" -msgstr "" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "Modify a group." -msgstr "" - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -msgid "Remove members from a group." -msgstr "" - -msgid "Display information about a named group." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -#, fuzzy -msgid "Target host" -msgstr "Мақсад" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Warning" -msgstr "" - -msgid "Matched rules" -msgstr "" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -#, fuzzy -msgid "NetBIOS name" -msgstr "Номи ACI" - -msgid "Domain GUID" -msgstr "" - -msgid "Fallback primary group" -msgstr "" - -#, fuzzy -msgid "Domain name" -msgstr "Номи намоишӣ" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -msgid "Active Directory domain administrator" -msgstr "" - -msgid "Active Directory domain administrator's password" -msgstr "" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "Range type" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -#, fuzzy -msgid "Delete a trust." -msgstr "Ҳамаро нест мекунед?" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -msgid "Search for trusts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -msgid "Display information about a trust." -msgstr "" - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -#, fuzzy -msgid "Range name" -msgstr "Азнавномгузорӣ" - -msgid "First Posix ID of the range" -msgstr "" - -msgid "Number of IDs in the range" -msgstr "" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "Delete an ID range." -msgstr "" - -msgid "Search for ranges." -msgstr "" - -msgid "Modify ID range." -msgstr "" - -msgid "Display information about a range." -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -#, fuzzy -msgid "Disabled" -msgstr "Фаъолшуда" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -#, fuzzy -msgid "Validity start" -msgstr "Саҳеҳият" - -msgid "First date/time the token can be used" -msgstr "" - -#, fuzzy -msgid "Validity end" -msgstr "Саҳеҳият" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -#, fuzzy -msgid "Serial" -msgstr "Рақами силсилавӣ" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -msgid "Add a new OTP token." -msgstr "" - -msgid "(deprecated)" -msgstr "" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -msgid "Delete an OTP token." -msgstr "" - -msgid "Search for OTP token." -msgstr "" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -msgid "Modify a OTP token." -msgstr "" - -msgid "Rename the OTP token object" -msgstr "" - -msgid "Display information about an OTP token." -msgstr "" - msgid "" "\n" "Sudo Rules\n" @@ -8289,6 +7675,507 @@ msgstr "" msgid "Display Sudo Rule." msgstr "Номи намоишӣ" +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +#, fuzzy +msgid "NetBIOS name" +msgstr "Номи ACI" + +msgid "Domain GUID" +msgstr "" + +msgid "Fallback primary group" +msgstr "" + +#, fuzzy +msgid "Domain name" +msgstr "Номи намоишӣ" + +msgid "Trusted domain partner" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +msgid "Active Directory domain administrator" +msgstr "" + +msgid "Active Directory domain administrator's password" +msgstr "" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +#, fuzzy +msgid "Delete a trust." +msgstr "Ҳамаро нест мекунед?" + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +msgid "Search for trusts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +msgid "Display information about a trust." +msgstr "" + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "Ном" + +msgid "Last name" +msgstr "Насаб" + +#, fuzzy +msgid "Full name" +msgstr "Ном" + +msgid "Display name" +msgstr "Номи намоишӣ" + +msgid "Initials" +msgstr "Ному насаб" + +msgid "Kerberos principal" +msgstr "" + +msgid "Kerberos principal expiration" +msgstr "" + +msgid "Email address" +msgstr "" + +msgid "Prompt to set the user password" +msgstr "" + +msgid "Generate a random user password" +msgstr "" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" + +msgid "Street address" +msgstr "" + +msgid "City" +msgstr "Шаҳр" + +msgid "State/Province" +msgstr "" + +msgid "ZIP" +msgstr "Рамзи ZIP" + +#, fuzzy +msgid "Telephone Number" +msgstr "Рақами силсилавӣ" + +msgid "Mobile Telephone Number" +msgstr "" + +#, fuzzy +msgid "Pager Number" +msgstr "Рақами факс" + +msgid "Fax Number" +msgstr "Рақами факс" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "Вазифа" + +msgid "Car License" +msgstr "" + +msgid "Account disabled" +msgstr "" + +msgid "User authentication types" +msgstr "" + +msgid "Types of supported user authentication" +msgstr "" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +#, fuzzy +msgid "RADIUS proxy configuration" +msgstr "Ҷӯрсозӣ" + +msgid "RADIUS proxy username" +msgstr "" + +#, fuzzy +msgid "Department Number" +msgstr "Рақами силсилавӣ" + +msgid "Employee Number" +msgstr "" + +msgid "Employee Type" +msgstr "" + +msgid "Preferred Language" +msgstr "" + +msgid "Kerberos keys available" +msgstr "" + +msgid "Add a new user." +msgstr "" + +msgid "Don't create user private group" +msgstr "" + +#, fuzzy +msgid "Delete a user." +msgstr "Ҳамаро нест мекунед?" + +msgid "Disable a user account." +msgstr "" + +msgid "Enable a user account." +msgstr "" + +msgid "Search for users." +msgstr "" + +msgid "Self" +msgstr "" + +msgid "Display user record for current Kerberos principal" +msgstr "" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +msgid "Search for users with these member of HBAC rules." +msgstr "" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +msgid "Modify a user." +msgstr "" + +msgid "Rename the user object" +msgstr "" + +msgid "Display information about a user." +msgstr "" + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + msgid "Time limit of search in seconds (0 is unlimited)" msgstr "" @@ -8406,6 +8293,111 @@ msgstr "" msgid "Display the properties of a CA ACL." msgstr "" +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "Profile ID" +msgstr "" + +msgid "Certificate Profile to use" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +#, fuzzy +msgid "Profile description" +msgstr "шарҳ" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +msgid "Search for Certificate Profiles." +msgstr "" + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" msgstr "" @@ -8435,6 +8427,218 @@ msgstr "" msgid "Remove certificates from host entry" msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + msgid "Fallback to AD DC LDAP" msgstr "" @@ -8463,6 +8667,9 @@ msgid "" "to onelevel" msgstr "" +msgid "Remove users that can manage this token." +msgstr "" + msgid "Target DN subtree" msgstr "" @@ -8904,6 +9111,13 @@ msgid "" " " msgstr "" +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + msgid "Preserved user" msgstr "" @@ -9202,333 +9416,6 @@ msgstr "" msgid "Display information about a vault container." msgstr "" -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "Profile ID" -msgstr "" - -msgid "Certificate Profile to use" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -#, fuzzy -msgid "Profile description" -msgstr "шарҳ" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -msgid "Search for Certificate Profiles." -msgstr "" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - msgid "Resolve a host name in DNS. (Deprecated)" msgstr "" @@ -10761,6 +10648,9 @@ msgstr "" msgid "Register to the entitlement system." msgstr "" +msgid "Username" +msgstr "Номи корбар" + msgid "Enrollment UUID (not implemented)" msgstr "" @@ -11208,6 +11098,192 @@ msgid "" " ipa hostgroup-del baltimore\n" msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + msgid "" "Comma-separated list of objectclasses used to search for user entries in DS" msgstr "" @@ -11515,198 +11591,6 @@ msgstr "" msgid "comma-separated list of sudo commands to remove" msgstr "" -msgid "Active directory domain administrator's password" -msgstr "" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - msgid "" "\n" "Sudo Rules\n" @@ -11748,19 +11632,19 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" -msgid "A dictionary representing an LDAP entry" +msgid "Active directory domain administrator's password" msgstr "" -msgid "A list of LDAP entries" -msgstr "" - -msgid "All commands should at least have a result" +msgid "GECOS field" msgstr "" #, python-format msgid "Enter %(label)s again to verify: " msgstr "" +msgid "Passwords do not match!" +msgstr "Паролҳо номувофиқанд!" + msgid "No matching entries found" msgstr "" @@ -11797,111 +11681,370 @@ msgstr "" msgid "No file to read" msgstr "" +#, python-format +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +msgstr "" + +#, python-format +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "" + +msgid "an internal error has occurred" +msgstr "" + +#, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "" + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "" + +#, python-format +msgid "" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +msgstr "" + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "" + +msgid "did not receive Kerberos credentials" +msgstr "" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "" + +msgid "No credentials cache found" +msgstr "" + +msgid "Ticket expired" +msgstr "" + +msgid "Credentials cache permissions incorrect" +msgstr "" + +msgid "Bad format in credentials cache" +msgstr "" + +msgid "Cannot resolve KDC for requested realm" +msgstr "" + +msgid "Session error" +msgstr "" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "" + +#, python-format +msgid "'%(name)s' is required" +msgstr "" + +#, python-format +msgid "invalid '%(name)s': %(error)s" +msgstr "" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "" + +msgid "Passwords do not match" +msgstr "Паролҳо номувофиқанд" + +msgid "Command not implemented" +msgstr "" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "" + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "" + +#, python-format +msgid "%(reason)s" +msgstr "" + +msgid "This entry already exists" +msgstr "" + +msgid "You must enroll a host in order to create a host service" +msgstr "" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" + +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "" + +msgid "This command requires root access" +msgstr "" + +msgid "This is already a posix group" +msgstr "" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "" + +msgid "This entry is already enabled" +msgstr "" + +msgid "This entry is already disabled" +msgstr "" + +msgid "This entry cannot be enabled or disabled" +msgstr "" + +msgid "This entry is not a member" +msgstr "" + +msgid "A group may not be a member of itself" +msgstr "" + +msgid "This entry is already a member" +msgstr "" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "" + +msgid "A group may not be added as a member of itself" +msgstr "" + +msgid "The default users group cannot be removed" +msgstr "" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" + +msgid "A managed group cannot have a password policy." +msgstr "" + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "" + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "" + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" + +msgid "This group already allows external members" +msgstr "" + +msgid "This group cannot be posix because it is external" +msgstr "" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "" + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" + +#, python-format +msgid "'%(attr)s' already contains one or more values" +msgstr "" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "" + +msgid "change collided with another change" +msgstr "" + +msgid "no modifications to be performed" +msgstr "" + #, fuzzy, python-format -msgid "%(filename)s: file not found" -msgstr "Файли %(file)s пайдо нашуд." +msgid "%(desc)s: %(info)s" +msgstr "%(info)s" -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -msgid "Filename is empty" +msgid "limits exceeded for this query" msgstr "" #, python-format -msgid "Permission denied: %(file)s" +msgid "%(info)s" +msgstr "%(info)s" + +msgid "modifying primary key is not allowed" msgstr "" -msgid "empty DNS label" +#, python-format +msgid "%(attr)s: Only one value allowed." msgstr "" -msgid "DNS label cannot be longer that 63 characters" +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "" + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "" + +msgid "Not allowed on non-leaf entry" +msgstr "" + +msgid "LDAP timeout" +msgstr "" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "" + +msgid "Configured time limit exceeded" +msgstr "" + +msgid "Configured size limit exceeded" +msgstr "" + +msgid "Configured administrative server limit exceeded" +msgstr "" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "" + +#, fuzzy, python-format +msgid "Certificate format error: %(error)s" +msgstr "Хатогии синтаксисӣ: %(error)s" + +msgid "Already registered" +msgstr "Ааллакай қайд карда шуд" + +#, fuzzy +msgid "Not registered yet" +msgstr "Ааллакай қайд карда шуд" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" msgstr "" #, python-format msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "" - -msgid "cannot be longer that {} characters" -msgstr "" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "" - -msgid "invalid SSH public key" -msgstr "" - -msgid "options are not allowed" -msgstr "" - -msgid "invalid hostmask" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" msgstr "" #, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" msgstr "" #, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgid "%(name)s certificate is not valid" +msgstr "" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "" + +#, python-format +msgid "%(exception)s" msgstr "" #, python-format msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" + +msgid "Results are truncated, try a more specific search" msgstr "" #, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgid "Unknown option: %(option)s" msgstr "" -msgid "invalid escape code in domain name" -msgstr "" - -msgid "domain name cannot be longer than 255 characters" -msgstr "" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "" - -msgid "invalid domain name" -msgstr "" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -msgid "invalid IP address format" -msgstr "" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgid "Client version. Used to determine if server will accept request." msgstr "" msgid "Additional instructions:" @@ -12061,356 +12204,22 @@ msgstr "" msgid "The certificate for %(ca)s is not available on this server." msgstr "" -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." +#, python-format +msgid "%(count)d variables" msgstr "" #, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "" - -msgid "an internal error has occurred" -msgstr "" - -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "" - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "" - -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "" - -msgid "did not receive Kerberos credentials" -msgstr "" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "" - -msgid "No credentials cache found" -msgstr "" - -msgid "Ticket expired" -msgstr "" - -msgid "Credentials cache permissions incorrect" -msgstr "" - -msgid "Bad format in credentials cache" -msgstr "" - -msgid "Cannot resolve KDC for requested realm" -msgstr "" - -msgid "Session error" -msgstr "" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" msgstr[0] "" -#, python-format -msgid "overlapping arguments and options: %(names)s" +msgid "A dictionary representing an LDAP entry" msgstr "" -#, python-format -msgid "'%(name)s' is required" +msgid "A list of LDAP entries" msgstr "" -#, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "" - -msgid "Command not implemented" -msgstr "" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "" - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" - -#, python-format -msgid "%(reason)s" -msgstr "" - -msgid "This entry already exists" -msgstr "" - -msgid "You must enroll a host in order to create a host service" -msgstr "" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "" - -msgid "This command requires root access" -msgstr "" - -msgid "This is already a posix group" -msgstr "" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "" - -msgid "This entry is already enabled" -msgstr "" - -msgid "This entry is already disabled" -msgstr "" - -msgid "This entry cannot be enabled or disabled" -msgstr "" - -msgid "This entry is not a member" -msgstr "" - -msgid "A group may not be a member of itself" -msgstr "" - -msgid "This entry is already a member" -msgstr "" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "" - -msgid "A group may not be added as a member of itself" -msgstr "" - -msgid "The default users group cannot be removed" -msgstr "" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" - -msgid "A managed group cannot have a password policy." -msgstr "" - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" - -msgid "This group already allows external members" -msgstr "" - -msgid "This group cannot be posix because it is external" -msgstr "" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" - -#, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "" - -msgid "change collided with another change" -msgstr "" - -msgid "no modifications to be performed" -msgstr "" - -#, fuzzy, python-format -msgid "%(desc)s: %(info)s" -msgstr "%(info)s" - -msgid "limits exceeded for this query" -msgstr "" - -msgid "modifying primary key is not allowed" -msgstr "" - -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "" - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "" - -msgid "Not allowed on non-leaf entry" -msgstr "" - -msgid "LDAP timeout" -msgstr "" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" - -msgid "Configured time limit exceeded" -msgstr "" - -msgid "Configured size limit exceeded" -msgstr "" - -msgid "Configured administrative server limit exceeded" -msgstr "" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "" - -#, fuzzy, python-format -msgid "Certificate format error: %(error)s" -msgstr "Хатогии синтаксисӣ: %(error)s" - -#, fuzzy -msgid "Not registered yet" -msgstr "Ааллакай қайд карда шуд" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" - -#, python-format -msgid "%(exception)s" -msgstr "" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" +msgid "All commands should at least have a result" msgstr "" msgid "incorrect type" @@ -12543,27 +12352,117 @@ msgstr "" msgid "Service principal is required" msgstr "" -#, python-format -msgid "%(count)d variables" +#, fuzzy, python-format +msgid "%(filename)s: file not found" +msgstr "Файли %(file)s пайдо нашуд." + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +msgid "any of the configured servers" +msgstr "" + +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" msgstr "" #, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "" +msgid "Permission denied: %(file)s" +msgstr "" -msgid "Results are truncated, try a more specific search" +msgid "empty DNS label" +msgstr "" + +msgid "DNS label cannot be longer that 63 characters" msgstr "" #, python-format -msgid "Unknown option: %(option)s" +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" msgstr "" -msgid "Client version. Used to determine if server will accept request." +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "" + +msgid "cannot be longer that {} characters" +msgstr "" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "" + +msgid "invalid SSH public key" +msgstr "" + +msgid "options are not allowed" +msgstr "" + +msgid "invalid hostmask" msgstr "" #, python-format -msgid "objectclass %s not found" +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +msgid "invalid escape code in domain name" +msgstr "" + +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +msgid "invalid domain name" +msgstr "" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +msgid "invalid IP address format" +msgstr "" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" #, python-format @@ -12583,6022 +12482,51 @@ msgid "Retrieving CA status failed with status %d" msgstr "" #, python-format -msgid "Unable to communicate with CMS (status %d)" +msgid "objectclass %s not found" msgstr "" -#, python-format -msgid "Replication agreement for %(hostname)s not found" +msgid "Trusting forest" msgstr "" -msgid "Failed to authenticate to CA REST API" +msgid "Trusted forest" msgstr "" -msgid "One time password commands" +msgid "Established and verified" msgstr "" -#, fuzzy -msgid "OTP configuration options" -msgstr "Ҷӯрсозӣ" - -#, fuzzy -msgid "OTP Configuration" -msgstr "Ҷӯрсозӣ" - -#, fuzzy -msgid "" -"\n" -"IPA server roles\n" -msgstr "Сервери IPA" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -#, fuzzy -msgid "server role" -msgstr "Номи сервер" - -#, fuzzy -msgid "server roles" -msgstr "Номи сервер" - -#, fuzzy -msgid "IPA Server Roles" -msgstr "Сервери IPA" - -#, fuzzy -msgid "IPA Server Role" -msgstr "Сервери IPA" - -#, fuzzy -msgid "IPA server role name" -msgstr "Сервери IPA" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" - -msgid "Include IPA master entries" -msgstr "" - -msgid "roles" -msgstr "" - -msgid "IPA role name" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -#, fuzzy -msgid "password policy" -msgstr "парол" - -#, fuzzy -msgid "password policies" -msgstr "парол" - -#, fuzzy -msgid "Password Policies" -msgstr "Парол" - -#, fuzzy -msgid "Password Policy" -msgstr "Парол" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -#, fuzzy -msgid "User check" -msgstr "Номи корбар" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be greater than minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -#, fuzzy -msgid "Name" -msgstr "Номи мизбон" - -#, fuzzy -msgid "Documentation" -msgstr "Макон" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -msgid "Help topic" -msgstr "" - -#, fuzzy -msgid "Version" -msgstr "Иҷозат" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -msgid "Method name" -msgstr "номи мизбон" - -#, fuzzy, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "Файли %(file)s пайдо нашуд." - -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -msgid "Search for classes." -msgstr "" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -msgid "CLI name" -msgstr "Номи ACI" - -#, fuzzy -msgid "Confirm (password)" -msgstr "парол" - -msgid "Default" -msgstr "" - -msgid "Default from" -msgstr "" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command output." -msgstr "" - -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -#, fuzzy -msgid "Member principals" -msgstr "Асосӣ" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" - -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -msgid "Malformed principal" -msgstr "" - -msgid "{} is required by the IPA master" -msgstr "" - -#, fuzzy -msgid "service" -msgstr "Хидмат" - -#, fuzzy -msgid "services" -msgstr "Хидмат" - -#, fuzzy -msgid "Principal alias" -msgstr "Асосӣ" - -msgid "Service principal alias" -msgstr "" - -msgid "Base-64 encoded service certificate" -msgstr "" - -#, fuzzy -msgid "Serial Number (hex)" -msgstr "Рақами силсилавӣ" - -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -msgid "Fingerprint (SHA1)" -msgstr "" - -msgid "Fingerprint (SHA256)" -msgstr "" - -msgid "Revocation reason" -msgstr "" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "" - -msgid "Add a new IPA service." -msgstr "" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "" - -msgid "force principal name even if host not in DNS" -msgstr "" - -msgid "Skip host check" -msgstr "" - -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "" - -msgid "Add a new SMB service." -msgstr "" - -msgid "SMB service NetBIOS name" -msgstr "" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "" - -#, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to a service" -msgstr "" - -#, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a service" -msgstr "" - -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -#, fuzzy -msgid "Sudo Rule" -msgstr "Sudo" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" -msgstr "" - -#, fuzzy -msgid "command" -msgstr "Фармонҳо" - -#, fuzzy -msgid "commands" -msgstr "Фармонҳо" - -msgid "runAs user" -msgstr "" - -msgid "runAs users" -msgstr "" - -msgid "group runAs" -msgstr "" - -#, fuzzy -msgid "runAs groups" -msgstr "Гурӯҳи корбар" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when user category='all'" -msgstr "" - -msgid "hosts cannot be added when host category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -msgid "pyhbac is not installed." -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Base-64 encoded certificate." -msgstr "" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - -msgid "Subject email address" -msgstr "" - -#, fuzzy -msgid "Subject DNS name" -msgstr "Мавзӯъ" - -msgid "Subject X.400 address" -msgstr "" - -msgid "Subject directory name" -msgstr "" - -msgid "Subject EDI Party name" -msgstr "" - -#, fuzzy -msgid "Subject URI" -msgstr "Мавзӯъ" - -msgid "Subject IP Address" -msgstr "" - -#, fuzzy -msgid "Subject OID" -msgstr "Мавзӯъ" - -#, fuzzy -msgid "Subject UPN" -msgstr "Мавзӯъ" - -msgid "Subject Kerberos principal name" -msgstr "" - -#, fuzzy -msgid "Subject Other Name" -msgstr "Номи сервер" - -#, fuzzy -msgid "Issuer DN" -msgstr "Диҳанда" - -#, fuzzy -msgid "Serial number (hex)" -msgstr "Рақами силсилавӣ" - -msgid "Request status" -msgstr "" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -msgid "'add' option" -msgstr "" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Revoked" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -msgid "domain" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -#, fuzzy -msgid "User logins" -msgstr "Номи корбар" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" - -msgid "Base-64 encoded user certificate" -msgstr "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "must be at least 10" -msgstr "" - -#, fuzzy -msgid "configuration options" -msgstr "Ҷӯрсозӣ" - -msgid "Maximum hostname length" -msgstr "" - -msgid "IPA masters" -msgstr "" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -#, fuzzy -msgid "IPA CA servers" -msgstr "Сервери IPA" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -#, fuzzy -msgid "IPA KRA servers" -msgstr "Сервери IPA" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" - -msgid "Domain resolution order" -msgstr "" - -msgid "colon-separated list of domains used for short name qualification" -msgstr "" - -#, fuzzy -msgid "IPA DNS servers" -msgstr "Сервери IPA" - -msgid "IPA servers configured as domain name server" -msgstr "" - -#, fuzzy -msgid "Hidden IPA DNS servers" -msgstr "Сервери IPA" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "IPA DNSSec key master" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -msgid "Empty domain is not allowed" -msgstr "" - -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -msgid "The group doesn't exist" -msgstr "" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" - -msgid "SELinux user map default user not in order list" -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "" - -msgid "sudo command groups" -msgstr "" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -#, fuzzy -msgid "host groups" -msgstr "Гурӯҳи корбар" - -#, fuzzy -msgid "Host Group" -msgstr "Гурӯҳ" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "hostgroup" -msgstr "Гурӯҳи корбар" - -msgid "privileged hostgroup" -msgstr "" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "The OTP if the user has a token configured" -msgstr "" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Permissions\n" -msgstr "Иҷозатҳо" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Managed permissions\n" -msgstr "Иҷозатҳо" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "must be enclosed in parentheses" -msgstr "" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -#, python-format -msgid "Deprecated; use %s" -msgstr "" - -#, fuzzy -msgid "ACI" -msgstr "ACIs" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, fuzzy, python-format -msgid "Entry %s not found" -msgstr "Файли %(file)s пайдо нашуд." - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, python-format -msgid "%s: group not found" -msgstr "" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" -msgstr "" - -msgid "Bad search filter" -msgstr "" - -#, python-format -msgid "Entry %s does not exist" -msgstr "" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, python-format -msgid "Added permission \"%(value)s\"" -msgstr "" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "" - -msgid "cannot delete managed permissions" -msgstr "" - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "" - -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "" - -#, fuzzy, python-brace-format -msgid "{role}: role not found" -msgstr "Файли %(file)s пайдо нашуд." - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -msgid "Internationalization messages" -msgstr "" - -msgid "Your session has expired. Please log in again." -msgstr "" - -msgid "Apply" -msgstr "" - -msgid "Rebuild auto membership" -msgstr "" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -msgid "Are you sure you want to proceed with the action?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "" - -#, fuzzy -msgid "Actions" -msgstr "Макон" - -#, python-brace-format -msgid "${count} item(s) added" -msgstr "" - -msgid "Direct Membership" -msgstr "" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "" - -msgid "Indirect Membership" -msgstr "" - -msgid "No entries." -msgstr "" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "" - -msgid "Remove" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "" - -msgid "Show Results" -msgstr "" - -msgid "Authentication indicators" -msgstr "" - -msgid "Authentication indicator" -msgstr "" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "Add Custom Authentication Indicator" -msgstr "" - -msgid "Two factor authentication (password + OTP)" -msgstr "" - -msgid "RADIUS" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -msgid "Disable per-user override" -msgstr "" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "About" -msgstr "" - -msgid "Activate" -msgstr "" - -msgid "Add and Add Another" -msgstr "" - -msgid "Add and Close" -msgstr "" - -msgid "Add and Edit" -msgstr "" - -msgid "Add Many" -msgstr "" - -msgid "Back" -msgstr "" - -msgid "Clear" -msgstr "" - -msgid "Clear all fields on the page." -msgstr "" - -#, fuzzy -msgid "Disable" -msgstr "Дастрас" - -msgid "Download" -msgstr "" - -msgid "Download certificate as PEM formatted file." -msgstr "" - -msgid "Edit" -msgstr "" - -#, fuzzy -msgid "Enable" -msgstr "Фаъолшуда" - -msgid "Hide" -msgstr "" - -msgid "Match" -msgstr "" - -msgid "Match users according to certificate." -msgstr "" - -msgid "Migrate" -msgstr "" - -msgid "Refresh" -msgstr "" - -msgid "Reload current settings from the server." -msgstr "" - -msgid "Remove hold" -msgstr "" - -#, fuzzy -msgid "Reset Password" -msgstr "Пароли нав" - -msgid "Reset Password and Log in" -msgstr "" - -msgid "Revert" -msgstr "" - -msgid "Revoke" -msgstr "" - -msgid "Save" -msgstr "" - -#, fuzzy -msgid "Set" -msgstr "Гирифтан" - -msgid "Show" -msgstr "" - -msgid "Stage" -msgstr "" - -#, fuzzy -msgid "Customization" -msgstr "Ҷӯрсозӣ" - -msgid "Pagination Size" -msgstr "" - -msgid "Collapse All" -msgstr "" - -msgid "Expand All" -msgstr "" - -#, fuzzy -msgid "Identity Settings" -msgstr "Танзимотҳо" - -#, fuzzy -msgid "Record Settings" -msgstr "Танзимотҳо" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "" - -msgid "Back to Top" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "" - -msgid "Add custom value" -msgstr "" - -msgid "Some operations failed." -msgstr "" - -msgid "Operations Error" -msgstr "" - -#, fuzzy -msgid "Confirmation" -msgstr "Ҷӯрсозӣ" - -msgid "Custom value" -msgstr "" - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" - -msgid "Unsaved Changes" -msgstr "" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "" - -msgid "Hide details" -msgstr "" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "" - -msgid "Prospective" -msgstr "" - -#, fuzzy -msgid "Redirection" -msgstr "шарҳ" - -msgid "Select entries to be removed." -msgstr "" - -msgid "Result" -msgstr "" - -msgid "Show details" -msgstr "" - -msgid "Success" -msgstr "" - -msgid "Validation error" -msgstr "" - -msgid "Input form contains invalid or missing values." -msgstr "" - -msgid "Please try the following options:" -msgstr "" - -msgid "If the problem persists please contact the system administrator." -msgstr "" - -msgid "Refresh the page." -msgstr "" - -msgid "Reload the browser." -msgstr "" - -msgid "Return to the main page and retry the operation" -msgstr "" - -#, python-brace-format -msgid "An error has occurred (${error})" -msgstr "" - -#, fuzzy -msgid "HTTP Error" -msgstr "Хатогӣ" - -msgid "Internal Error" -msgstr "" - -#, fuzzy -msgid "IPA Error" -msgstr "Хатогӣ" - -msgid "No response" -msgstr "" - -msgid "Unknown Error" -msgstr "" - -msgid "URL" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} member managers:" -msgstr "" - -msgid "False" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Allowed to create keytab" -msgstr "" - -msgid "Allowed to retrieve keytab" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Add Kerberos Principal Alias" -msgstr "" - -msgid "New kerberos principal alias" -msgstr "" - -msgid "Remove Kerberos Alias" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "" - -msgid "Inherited from server configuration" -msgstr "" - -msgid "MS-PAC" -msgstr "" - -msgid "Override inherited settings" -msgstr "" - -msgid "PAD" -msgstr "" - -msgid "Authenticating" -msgstr "" - -msgid "Authentication with personal certificate failed" -msgstr "" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" - -msgid "Continue to next page" -msgstr "" - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" - -msgid "Login failed due to an unknown reason" -msgstr "" - -msgid "Logged In As" -msgstr "" - -msgid "Authentication with Kerberos failed" -msgstr "" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -msgid "Loading" -msgstr "" - -msgid "Kerberos Principal you entered is expired" -msgstr "" - -msgid "Loading data" -msgstr "" - -msgid "Log in" -msgstr "" - -msgid "Log In Using Certificate" -msgstr "" - -msgid "Log in using personal certificate" -msgstr "" - -msgid "Log out" -msgstr "" - -msgid "Log out error" -msgstr "" - -msgid "Password or Password+One-Time Password" -msgstr "" - -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "" - -msgid "Sync OTP Token" -msgstr "" - -msgid "Synchronizing" -msgstr "" - -msgid "The user account you entered is locked" -msgstr "" - -msgid "number of passwords" -msgstr "" - -msgid "seconds" -msgstr "" - -#, fuzzy -msgid "Migrating" -msgstr "Ҷӯрсозӣ" - -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -msgid "Password migration was not successful" -msgstr "" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -msgid "The password or username you entered is incorrect" -msgstr "" - -msgid "Password migration was successful" -msgstr "" - -msgid "Add delegation" -msgstr "" - -msgid "Remove delegations" -msgstr "" - -#, fuzzy -msgid "Add permission" -msgstr "Иҷозат" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove permissions" -msgstr "Иҷозатҳо" - -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "" - -msgid "Add privilege" -msgstr "" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -msgid "Remove privileges" -msgstr "" - -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "" - -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Role Settings" -msgstr "Танзимотҳо" - -msgid "Add role" -msgstr "" - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "" - -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -msgid "Remove roles" -msgstr "" - -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "" - -msgid "Add self service permission" -msgstr "" - -msgid "Remove self service permissions" -msgstr "" - -msgid "Add rule" -msgstr "" - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to change default group?" -msgstr "" - -msgid "Default host group" -msgstr "" - -#, fuzzy -msgid "Default user group" -msgstr "Гурӯҳи корбар" - -msgid "Exclusive" -msgstr "" - -#, fuzzy -msgid "Expression" -msgstr "Иҷозат" - -msgid "Host group rule" -msgstr "" - -msgid "Host group rules" -msgstr "" - -msgid "Inclusive" -msgstr "" - -msgid "Remove auto membership rules" -msgstr "" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "User group rule" -msgstr "Гурӯҳи корбар" - -#, fuzzy -msgid "User group rules" -msgstr "Гурӯҳи корбар" - -msgid "Add automount key" -msgstr "" - -msgid "Remove automount keys" -msgstr "" - -msgid "Add automount location" -msgstr "" - -msgid "Automount Location Settings" -msgstr "" - -msgid "Remove automount locations" -msgstr "" - -msgid "Add automount map" -msgstr "" - -#, fuzzy -msgid "Map Type" -msgstr "Намуд" - -msgid "Direct" -msgstr "" - -msgid "Indirect" -msgstr "" - -msgid "Remove automount maps" -msgstr "" - -msgid "Add certificate authority" -msgstr "" - -msgid "Remove certificate authorities" -msgstr "" - -msgid "Add CA ACL" -msgstr "" - -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "All" -msgstr "Иҷозат додан" - -msgid "Any CA" -msgstr "" - -msgid "Any Host" -msgstr "" - -#, fuzzy -msgid "Any Service" -msgstr "Хидмат" - -msgid "Any Profile" -msgstr "" - -msgid "Anyone" -msgstr "" - -msgid "Rule status" -msgstr "" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" - -msgid "Remove CA ACLs" -msgstr "" - -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "" - -msgid "Specified CAs" -msgstr "" - -msgid "Specified Hosts and Groups" -msgstr "" - -msgid "Specified Profiles" -msgstr "" - -msgid "Specified Services and Groups" -msgstr "" - -msgid "Specified Users and Groups" -msgstr "" - -msgid "Permitted to have certificates issued" -msgstr "" - -msgid "Remove certificate profiles" -msgstr "" - -msgid "AA Compromise" -msgstr "" - -#, fuzzy -msgid "Add principal" -msgstr "Асосӣ" - -msgid "Affiliation Changed" -msgstr "" - -msgid "CA" -msgstr "" - -msgid "CA Compromise" -msgstr "" - -msgid "Certificates" -msgstr "" - -msgid "Certificate Hold" -msgstr "" - -msgid "Cessation of Operation" -msgstr "" - -#, fuzzy -msgid "Common Name" -msgstr "Номи мизбон" - -msgid "the certificate with serial number " -msgstr "" - -msgid "Expires On" -msgstr "" - -#, fuzzy -msgid "Issued on from" -msgstr "Додашудааст ба:" - -#, fuzzy -msgid "Issued on to" -msgstr "Додашудааст ба:" - -#, fuzzy -msgid "Maximum serial number" -msgstr "Рақами силсилавӣ" - -#, fuzzy -msgid "Minimum serial number" -msgstr "Рақами силсилавӣ" - -msgid "Revoked on from" -msgstr "" - -msgid "Revoked on to" -msgstr "" - -msgid "Valid not after from" -msgstr "" - -msgid "Valid not after to" -msgstr "" - -msgid "Valid not before from" -msgstr "" - -msgid "Valid not before to" -msgstr "" - -msgid "Fingerprints" -msgstr "" - -msgid "Get Certificate" -msgstr "" - -msgid "Certificate Hold Removed" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "" - -msgid "Issue new certificate" -msgstr "" - -#, fuzzy -msgid "Issued On" -msgstr "Додааст:" - -msgid "Key Compromise" -msgstr "" - -msgid "No Valid Certificate" -msgstr "" - -msgid "New Certificate" -msgstr "" - -msgid "Certificate in base64 or PEM format" -msgstr "" - -#, fuzzy -msgid "Organizational Unit" -msgstr "Ташкилот" - -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "" - -msgid "Privilege Withdrawn" -msgstr "" - -msgid "Reason for Revocation" -msgstr "" - -msgid "Remove certificate hold" -msgstr "" - -msgid "Do you want to remove the certificate hold?" -msgstr "" - -msgid "Remove from CRL" -msgstr "" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" - -msgid "Certificate requested" -msgstr "" - -msgid "Revoke certificate" -msgstr "" - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" - -msgid "Certificate Revoked" -msgstr "" - -msgid "REVOKED" -msgstr "" - -msgid "SHA1 Fingerprint" -msgstr "" - -msgid "SHA256 Fingerprint" -msgstr "" - -msgid "Superseded" -msgstr "" - -msgid "Unspecified" -msgstr "" - -msgid "Valid Certificate Present" -msgstr "" - -msgid "Valid from" -msgstr "" - -#, fuzzy -msgid "Valid to" -msgstr "Саҳеҳият" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "" - -msgid "View Certificate" -msgstr "" - -msgid "Certificate Data" -msgstr "" - -msgid "Certificate For Match" -msgstr "" - -msgid "Certificate Mapping Match" -msgstr "" - -msgid "Matched Users" -msgstr "" - -#, fuzzy -msgid "User Login" -msgstr "Номи корбар" - -msgid "Add certificate identity mapping rule" -msgstr "" - -msgid "Add certificate mapping data" -msgstr "" - -msgid "Certificate mapping data" -msgstr "" - -#, fuzzy -msgid "Configuration string" -msgstr "Ҷӯрсозӣ" - -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "" - -msgid "Remove certificate mapping data" -msgstr "" - -msgid "Issuer and subject" -msgstr "" - -msgid "Remove certificate identity mapping rules" -msgstr "" - -#, fuzzy -msgid "Group Options" -msgstr "Гуруҳҳо" - -#, fuzzy -msgid "Search Options" -msgstr "Ҷустуҷӯ" - -msgid "SELinux Options" -msgstr "" - -msgid "Server Options" -msgstr "" - -#, fuzzy -msgid "Service Options" -msgstr "Хидмат" - -#, fuzzy -msgid "User Options" -msgstr "Шарҳ" - -msgid "Forward first" -msgstr "" - -msgid "Forwarding disabled" -msgstr "" - -msgid "Forward only" -msgstr "" - -msgid "Options" -msgstr "" - -msgid "Update System DNS Records" -msgstr "" - -msgid "Do you want to update system DNS records?" -msgstr "" - -msgid "System DNS records updated" -msgstr "" - -msgid "Add DNS forward zone" -msgstr "" - -msgid "Remove DNS forward zones" -msgstr "" - -msgid "Add DNS resource record" -msgstr "" - -msgid "DNS record was deleted because it contained no data." -msgstr "" - -msgid "Other Record Types" -msgstr "" - -msgid "Address not valid, can't redirect" -msgstr "" - -msgid "Create dns record" -msgstr "" - -msgid "Creating record." -msgstr "" - -msgid "Record creation failed." -msgstr "" - -msgid "Checking if record exists." -msgstr "" - -msgid "Record not found." -msgstr "" - -msgid "Redirection to PTR record" -msgstr "" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "" - -msgid "Target reverse zone not found." -msgstr "" - -msgid "Fetching DNS zones." -msgstr "" - -msgid "An error occurred while fetching dns zones." -msgstr "" - -msgid "You will be redirected to DNS Zone." -msgstr "" - -msgid "Remove DNS resource records" -msgstr "" - -msgid "Standard Record Types" -msgstr "" - -msgid "Records for DNS Zone" -msgstr "" - -msgid "Record Type" -msgstr "" - -msgid "Add DNS zone" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "" - -#, fuzzy -msgid "DNS Zone Settings" -msgstr "Танзимотҳо" - -msgid "Remove DNS zones" -msgstr "" - -#, fuzzy -msgid "Remove Permission" -msgstr "Иҷозат" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "" - -msgid "Skip DNS check" -msgstr "" - -msgid "Skip overlap check" -msgstr "" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" - -msgid "Authoritative nameserver change" -msgstr "" - -msgid "Level" -msgstr "" - -msgid "Set Domain Level" -msgstr "" - -#, fuzzy -msgid "Add user group" -msgstr "Гурӯҳи корбар" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Group Settings" -msgstr "Танзимотҳо" - -msgid "External" -msgstr "" - -msgid "Group categories" -msgstr "" - -msgid "Change to external group" -msgstr "" - -msgid "Change to POSIX group" -msgstr "" - -msgid "Non-POSIX" -msgstr "" - -msgid "POSIX" -msgstr "" - -#, fuzzy -msgid "Remove user groups" -msgstr "Гурӯҳи корбар" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Group Type" -msgstr "Гурӯҳ" - -msgid "Add HBAC rule" -msgstr "" - -#, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "" - -msgid "Accessing" -msgstr "" - -msgid "Remove HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Via Service" -msgstr "Хидмат" - -msgid "Who" -msgstr "" - -msgid "Add HBAC service" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "" - -msgid "Remove HBAC services" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "" - -msgid "Add HBAC service group" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "" - -msgid "Remove HBAC service groups" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "" - -msgid "Access Denied" -msgstr "" - -msgid "Access Granted" -msgstr "" - -msgid "Include Disabled" -msgstr "" - -#, fuzzy -msgid "Include Enabled" -msgstr "Фаъолшуда" - -msgid "HBAC Test" -msgstr "" - -msgid "Matched" -msgstr "" - -msgid "Missing values: " -msgstr "" - -msgid "New Test" -msgstr "" - -msgid "Rules" -msgstr "" - -msgid "Run Test" -msgstr "" - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "" - -msgid "Unmatched" -msgstr "" - -msgid "Add host" -msgstr "" - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -msgid "Host Certificate" -msgstr "" - -msgid "Delete Key, Unprovision" -msgstr "" - -#, fuzzy -msgid "Host Settings" -msgstr "Танзимотҳо" - -msgid "Enrolled" -msgstr "" - -msgid "Enrollment" -msgstr "" - -msgid "Fully Qualified Host Name" -msgstr "" - -#, fuzzy -msgid "Generate OTP" -msgstr "Умумӣ" - -#, fuzzy -msgid "Generated OTP" -msgstr "Умумӣ" - -msgid "Kerberos Key" -msgstr "" - -msgid "Kerberos Key Not Present" -msgstr "" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "" - -#, fuzzy -msgid "One-Time Password" -msgstr "Пароли нав" - -msgid "One-Time Password Not Present" -msgstr "" - -msgid "One-Time Password Present" -msgstr "" - -#, fuzzy -msgid "Reset OTP" -msgstr "Бозсозӣ" - -msgid "Reset One-Time Password" -msgstr "" - -msgid "Set OTP" -msgstr "" - -msgid "OTP set" -msgstr "" - -#, fuzzy -msgid "Set One-Time Password" -msgstr "Пароли нав" - -msgid "Remove hosts" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "" - -msgid "Unprovision" -msgstr "" - -msgid "Are you sure you want to unprovision this host?" -msgstr "" - -msgid "Unprovisioning host" -msgstr "" - -msgid "Host unprovisioned" -msgstr "" - -msgid "Add host group" -msgstr "" - -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" - -msgid "Host Group Settings" -msgstr "" - -msgid "Remove host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -msgid "User to override" -msgstr "" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" - -msgid "Enter trusted user login." -msgstr "" - -msgid "Profile" -msgstr "" - -msgid "Group to override" -msgstr "" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" - -msgid "Enter trusted group name." -msgstr "" - -msgid "Add ID view" -msgstr "" - -msgid "Add group ID override" -msgstr "" - -msgid "Add user ID override" -msgstr "" - -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "" - -msgid "Applied to hosts" -msgstr "" - -msgid "Apply to host groups" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" - -msgid "Apply to hosts" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "" - -msgid "Remove ID views" -msgstr "" - -msgid "Remove user ID overrides" -msgstr "" - -msgid "Remove group ID overrides" -msgstr "" - -msgid "Un-apply from host groups" -msgstr "" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" - -msgid "Un-apply" -msgstr "" - -msgid "Un-apply from hosts" -msgstr "" - -msgid "Un-apply ID Views from hosts" -msgstr "" - -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "" - -msgid "Add netgroup" -msgstr "" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Host" -msgstr "Номи мизбон" - -#, fuzzy -msgid "Netgroup Settings" -msgstr "Танзимотҳо" - -#, fuzzy -msgid "Netgroups" -msgstr "Гуруҳҳо" - -msgid "Remove netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "" - -msgid "Add OTP token" -msgstr "" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" - -#, fuzzy -msgid "Configure your token" -msgstr "Ҷӯрсозӣ" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" - -#, fuzzy -msgid "OTP Token Settings" -msgstr "Танзимотҳо" - -msgid "Disable token" -msgstr "" - -#, fuzzy -msgid "Enable token" -msgstr "Фаъолшуда" - -msgid "Remove OTP tokens" -msgstr "" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" - -msgid "Show QR code" -msgstr "" - -#, fuzzy -msgid "Show configuration uri" -msgstr "Ҷӯрсозӣ" - -msgid "Counter-based (HOTP)" -msgstr "" - -msgid "Time-based (TOTP)" -msgstr "" - -#, fuzzy -msgid "Add Custom Attribute" -msgstr "Аттрибут" - -#, fuzzy -msgid "Permission settings" -msgstr "Иҷозатҳо" - -#, fuzzy -msgid "Attribute breakdown" -msgstr "Аттрибут" - -#, fuzzy -msgid "Privilege Settings" -msgstr "Танзимотҳо" - -msgid "Public key:" -msgstr "" - -msgid "Set public key" -msgstr "" - -msgid "Show/Set key" -msgstr "" - -msgid "Modified: key not set" -msgstr "" - -msgid "Modified" -msgstr "" - -msgid "New: key not set" -msgstr "" - -msgid "New: key set" -msgstr "" - -#, fuzzy -msgid "Add password policy" -msgstr "Пароли LDAP" - -msgid "Remove password policies" -msgstr "" - -msgid "Add ID range" -msgstr "" - -#, fuzzy -msgid "Range Settings" -msgstr "Танзимотҳо" - -msgid "Base ID" -msgstr "" - -msgid "Primary RID base" -msgstr "" - -msgid "Range size" -msgstr "" - -msgid "Domain SID" +msgid "Waiting for confirmation by remote side" msgstr "" -msgid "Secondary RID base" +msgid "Unknown" msgstr "" -msgid "Remove ID ranges" +msgid "Non-Active Directory domain" msgstr "" msgid "Active Directory domain" msgstr "" -msgid "Active Directory domain with POSIX attributes" -msgstr "" - -msgid "Detect" -msgstr "" - -#, fuzzy -msgid "Local domain" -msgstr "Макон" - -msgid "IPA trust" -msgstr "" - -msgid "Active Directory winsync" -msgstr "" - -msgid "Add RADIUS server" -msgstr "" - -msgid "RADIUS Proxy Server Settings" -msgstr "" - -msgid "Remove RADIUS servers" -msgstr "" - -msgid "Check DNS" -msgstr "" - -msgid "Do you also want to perform DNS check?" -msgstr "" - -#, fuzzy -msgid "Force Update" -msgstr "Ҷадидсозӣ" - -msgid "Add SELinux user map" -msgstr "" - -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "" - -msgid "Remove selinux user maps" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Server Roles" -msgstr "Номи сервер" - -#, fuzzy -msgid "Server Role" -msgstr "Номи сервер" - -msgid "Warning: Consider service replication" +msgid "RFC4120-compliant Kerberos realm" msgstr "" msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" +"Non-transitive external trust to a domain in another Active Directory forest" msgstr "" -#, fuzzy -msgid "Delete Server" -msgstr "Нест кардан" - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" - -#, fuzzy -msgid "Add service" -msgstr "Хидмат" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -msgid "Service Certificate" -msgstr "" - -#, fuzzy -msgid "Service Settings" -msgstr "Танзимотҳо" - -#, fuzzy -msgid "Provisioning" -msgstr "Иҷозат" - -msgid "Remove services" -msgstr "" - -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to unprovision this service?" -msgstr "" - -msgid "Unprovisioning service" -msgstr "" - -msgid "Service unprovisioned" -msgstr "" - -msgid "Kerberos Key Present, Service Provisioned" -msgstr "" - -msgid "SSH public keys" -msgstr "" - -msgid "SSH public key:" -msgstr "" - -msgid "Set SSH key" -msgstr "" - -msgid "Are you sure you want to activate selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "" - -msgid "Add stage user" -msgstr "" - -msgid "Stage users" -msgstr "" - -msgid "Preserved users" -msgstr "" - -msgid "Remove preserved users" -msgstr "" - -msgid "Remove stage users" -msgstr "" - -msgid "Are you sure you want to stage selected users?" -msgstr "" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "" - -msgid "Are you sure you want to restore selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "" - -msgid "User categories" -msgstr "" - -msgid "Add sudo command" -msgstr "" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "" - -msgid "Remove sudo commands" -msgstr "" - -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "" - -msgid "Add sudo command group" -msgstr "" - -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "" - -msgid "Remove sudo command groups" -msgstr "" - -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "" - -msgid "Add sudo rule" -msgstr "" - -msgid "Add sudo option" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Any Command" -msgstr "Фармонҳо" - -#, fuzzy -msgid "Any Group" -msgstr "Гурӯҳ" - -#, fuzzy -msgid "Run Commands" -msgstr "Фармонҳо" - -msgid "Deny" -msgstr "" - -msgid "Access this host" -msgstr "" - -msgid "Option added" -msgstr "" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "" - -msgid "Remove sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -msgid "As Whom" -msgstr "" - -msgid "Specified Commands and Groups" -msgstr "" - -msgid "Specified Groups" -msgstr "" - -msgid "Remove sudo options" -msgstr "" - -msgid "Autogenerated" -msgstr "" - -msgid "Segment details" -msgstr "" - -#, fuzzy -msgid "Replication configuration" -msgstr "Ҷӯрсозӣ" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" - -msgid "Add IPA location" -msgstr "" - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -msgid "Remove IPA locations" -msgstr "" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -msgid "Add topology segment" -msgstr "" - -msgid "Remove topology segments" -msgstr "" - -msgid "Account" -msgstr "" - -msgid "Add trust" -msgstr "" - -msgid "Administrative account" -msgstr "" - -msgid "SID blocklists" -msgstr "" - -#, fuzzy -msgid "Trust Settings" -msgstr "Танзимотҳо" - -msgid "Establish using" -msgstr "" - -msgid "Fetch domains" -msgstr "" - -#, fuzzy -msgid "Pre-shared password" -msgstr "Пароли LDAP" - -msgid "Remove trusts" -msgstr "" - -msgid "Remove domains" -msgstr "" - -msgid "Trust direction" -msgstr "" - -msgid "Trust status" -msgstr "" - -msgid "Trust type" -msgstr "" - -msgid "Alternative UPN suffixes" -msgstr "" - -msgid "User attributes for SMB services" -msgstr "" - -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -msgid "Path to a user home directory, in UNC format" -msgstr "" - -msgid "Drive to mount a home directory" -msgstr "" - -#, fuzzy -msgid "Account Settings" -msgstr "Танзимотҳо" - -#, fuzzy -msgid "Account Status" -msgstr "Ҳолат" - -msgid "Active users" -msgstr "" - -msgid "Add user" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -#, fuzzy -msgid "Contact Settings" -msgstr "Танзимотҳо" - -#, fuzzy -msgid "Delete mode" -msgstr "Нест кардан" - -msgid "Employee Information" -msgstr "" - -msgid "Error changing account status" -msgstr "" - -msgid "Password expiration" -msgstr "" - -msgid "Mailing Address" -msgstr "" - -msgid "Misc. Information" -msgstr "" - -#, fuzzy -msgid "delete" -msgstr "Нест кардан" - -msgid "preserve" -msgstr "" - -msgid "No private group" -msgstr "" - -msgid "Remove users" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" - -#, python-brace-format -msgid "Click to ${action}" -msgstr "" - -msgid "Unlock" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "" - -msgid "Add vault" -msgstr "" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -msgid "Asymmetric" -msgstr "" - -msgid "Vaults Config" -msgstr "" - -msgid "Members" -msgstr "" - -msgid "My User Vaults" -msgstr "" - -msgid "Owners" -msgstr "" - -msgid "Remove vaults" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Service Vaults" -msgstr "Хидмат" - -msgid "Shared" -msgstr "" - -msgid "Shared Vaults" -msgstr "" - -msgid "Standard" -msgstr "" - -msgid "Symmetric" -msgstr "" - -msgid "Vault Type" -msgstr "" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -#, fuzzy -msgid "User Vaults" -msgstr "Номи корбар" - -msgid "Current password is required" -msgstr "" - -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "" - -#, fuzzy -msgid "First OTP" -msgstr "Ном" - -#, fuzzy -msgid "New password is required" -msgstr "Пароли нав" - -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" - -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" - -msgid "Token synchronization failed" -msgstr "" - -msgid "The username, password or token codes are not correct" -msgstr "" - -msgid "Token was synchronized" -msgstr "" - -msgid "Password change complete" -msgstr "" - -msgid "Your password has expired. Please enter a new password." -msgstr "" - -#, fuzzy -msgid "Passwords must match" -msgstr "Паролҳо номувофиқанд" - -msgid "Password reset was not successful." -msgstr "" - -msgid "Reset your password." -msgstr "" - -msgid "Second OTP" -msgstr "" - -#, fuzzy -msgid "Verify Password" -msgstr "Пароли нав" - -msgid "Are you sure you want to delete selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "" - -msgid "Are you sure you want to disable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "" - -msgid "Are you sure you want to enable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "" - -msgid "Some entries were not deleted" -msgstr "" - -msgid "Quick Links" -msgstr "" - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" - -#, fuzzy -msgid "Unselect All" -msgstr "Интихоби ҳама" - -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" - -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" - -msgid "Working" -msgstr "" - -msgid "Authentication" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "Automount" -msgstr "" - -msgid "DNS" -msgstr "" - -msgid "Host-Based Access Control" -msgstr "" - -msgid "Identity" -msgstr "" - -#, fuzzy -msgid "Network Services" -msgstr "Хидмат" - -msgid "Role-Based Access Control" -msgstr "" - -msgid "Topology" -msgstr "" - -msgid "Trusts" -msgstr "" - -msgid "True" -msgstr "" - -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" - -msgid "API Browser" -msgstr "" - -#, fuzzy -msgid "First" -msgstr "Ном" - -#, fuzzy -msgid "Last" -msgstr "Насаб" - -msgid "Next" -msgstr "" - -msgid "Page" -msgstr "" - -msgid "Prev" -msgstr "" - -msgid "Undo" -msgstr "" - -msgid "Undo this change." -msgstr "" - -msgid "Undo All" -msgstr "" - -msgid "Undo all changes in this field." -msgstr "" - -msgid "Text does not match field pattern" -msgstr "" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" - -msgid "Must be a decimal number" -msgstr "" - -#, fuzzy -msgid "Format error" -msgstr "хатогии хониш\n" - -msgid "Must be an integer" -msgstr "" - -msgid "Not a valid IP address" -msgstr "" - -msgid "Not a valid IPv4 address" -msgstr "" - -msgid "Not a valid IPv6 address" -msgstr "" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "" - -#, fuzzy -msgid "Parse error" -msgstr "хатогии хониш\n" - -msgid "Must be a positive number" -msgstr "" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "" - -msgid "Required field" -msgstr "" - -msgid "Unsupported value" -msgstr "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -#, fuzzy -msgid "invalid port number" -msgstr "Рақами силсилавӣ" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -#, fuzzy -msgid "RADIUS Servers" -msgstr "Сервери IPA" - -#, fuzzy -msgid "RADIUS Server" -msgstr "Сервери IPA" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" msgstr "" #, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgid "Unable to communicate with CMS (status %d)" +msgstr "" + +msgid "Failed to authenticate to CA REST API" msgstr "" #, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" +msgid "Replication agreement for %(hostname)s not found" msgstr "" -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" - -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -#, fuzzy -msgid "" -"\n" -"IPA locations\n" -msgstr "Макон" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -#, fuzzy -msgid "location" -msgstr "Макон" - -#, fuzzy -msgid "locations" -msgstr "Макон" - -#, fuzzy -msgid "IPA Locations" -msgstr "Макон" - -#, fuzzy -msgid "IPA Location" -msgstr "Макон" - -#, fuzzy -msgid "Location name" -msgstr "Макон" - -msgid "IPA location name" -msgstr "" - -#, fuzzy -msgid "IPA Location description" -msgstr "шарҳ" - -#, fuzzy -msgid "Servers" -msgstr "Хидмат" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "" - -msgid "Delete an IPA location." -msgstr "" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "" - -msgid "Modify information about an IPA location." -msgstr "" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "" - -msgid "Search for IPA locations." -msgstr "" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" - -msgid "Display information about an IPA location." -msgstr "" - -msgid "Servers in location" -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(value)s" -msgstr "" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -#, fuzzy -msgid "sudo command" -msgstr "Фармонҳо" - -#, fuzzy -msgid "sudo commands" -msgstr "Фармонҳо" - -#, fuzzy -msgid "Sudo Commands" -msgstr "Фармонҳо" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -#, fuzzy -msgid "Self Service Permissions" -msgstr "Иҷозатҳо" - -#, fuzzy -msgid "Self Service Permission" -msgstr "Иҷозат" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" - msgid "A list of ACI values" msgstr "" @@ -18630,6 +12558,10 @@ msgstr "" msgid "empty filter" msgstr "" +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "Хатогии синтаксисӣ: %(error)s" + #, python-format msgid "invalid DN (%s)" msgstr "" @@ -18641,6 +12573,13 @@ msgstr "" msgid "ACI object." msgstr "" +msgid "ACIs" +msgstr "ACIs" + +#, fuzzy +msgid "ACI" +msgstr "ACIs" + #, python-format msgid "Created ACI \"%(value)s\"" msgstr "" @@ -18662,2246 +12601,6 @@ msgstr[0] "" msgid "Renamed ACI to \"%(value)s\"" msgstr "" -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -#, fuzzy -msgid "groups" -msgstr "Гуруҳҳо" - -#, fuzzy -msgid "User Group" -msgstr "Гурӯҳи корбар" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "" - -msgid "privileged group" -msgstr "" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -msgid "Not a managed group" -msgstr "" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -msgid "automount location" -msgstr "" - -msgid "automount locations" -msgstr "" - -msgid "Automount Locations" -msgstr "" - -#, fuzzy -msgid "Automount Location" -msgstr "Макон" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "" - -msgid "automount map" -msgstr "" - -msgid "automount maps" -msgstr "" - -msgid "Automount Maps" -msgstr "" - -msgid "Automount Map" -msgstr "" - -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" - -msgid "Automount key object." -msgstr "" - -msgid "automount key" -msgstr "" - -msgid "automount keys" -msgstr "" - -msgid "Automount Keys" -msgstr "" - -msgid "Automount Key" -msgstr "" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, python-format -msgid "key named %(key)s already exists" -msgstr "" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" - -#, fuzzy -msgid "ID View" -msgstr "Намоиш" - -msgid "system ID View" -msgstr "" - -#, fuzzy -msgid "ID Views" -msgstr "Намоиш" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -msgid "Delete an ID override." -msgstr "" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -msgid "Modify an ID override." -msgstr "" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -msgid "CA category" -msgstr "" - -msgid "CA category the ACL applies to" -msgstr "" - -msgid "CAs" -msgstr "" - -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "" - -#, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, python-format -msgid "%i users or groups added." -msgstr "" - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, python-format -msgid "%i service added." -msgstr "" - -#, python-format -msgid "%i services added." -msgstr "" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "" - -#, fuzzy -msgid "trust configuration" -msgstr "Ҷӯрсозӣ" - -#, fuzzy -msgid "Global Trust Configuration" -msgstr "Ҷӯрсозӣ" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -msgid "SID" -msgstr "" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -msgid "Domain enabled" -msgstr "" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"DNS server configuration\n" -msgstr "Ҷӯрсозӣ" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -#, fuzzy -msgid "DNS server" -msgstr "Сервери IPA" - -msgid "DNS servers" -msgstr "" - -#, fuzzy -msgid "DNS Servers" -msgstr "Сервери IPA" - -#, fuzzy -msgid "DNS Server" -msgstr "Сервери IPA" - -#, fuzzy -msgid "DNS Server name" -msgstr "Номи сервер" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "" - -msgid "Search for DNS servers." -msgstr "" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "" - -msgid "Delete a DNS server" -msgstr "" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -#, fuzzy -msgid "HBAC services" -msgstr "Хидмат" - -#, fuzzy -msgid "HBAC Services" -msgstr "Хидмат" - -#, fuzzy -msgid "HBAC Service" -msgstr "Хидмат" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" - -#, fuzzy -msgid "HBAC service group" -msgstr "Гурӯҳи корбар" - -#, fuzzy -msgid "HBAC service groups" -msgstr "Гурӯҳи корбар" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" -msgstr "" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -msgid "Delegations" -msgstr "" - -#, fuzzy -msgid "Delegation" -msgstr "Нест кардан" - -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" - -msgid "Role" -msgstr "" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, fuzzy -msgid "netgroups" -msgstr "Гуруҳҳо" - -#, fuzzy -msgid "Netgroup" -msgstr "Гурӯҳи корбар" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "" - -msgid "Failed logins" -msgstr "" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -msgid "Time now" -msgstr "" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" - msgid "" "\n" "Auto Membership Rule.\n" @@ -21235,10 +12934,16 @@ msgstr "" msgid "Automember rebuild membership task started" msgstr "" +msgid "Automember rebuild membership task completed" +msgstr "" + #, python-format msgid "Task DN = '%s'" msgstr "" +msgid "Automember" +msgstr "" + msgid "" "\n" " Search for orphan automember rules. The command might need to be run as\n" @@ -21249,410 +12954,120 @@ msgstr "" msgid "Remove orphan automember rules" msgstr "" -msgid "HBAC rule and local members cannot both be set" +msgid "automount location" msgstr "" -msgid "Invalid SELinux user name, must match {}" +msgid "automount locations" msgstr "" -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -msgid "SELinux User Maps" -msgstr "" - -msgid "SELinux User Map" -msgstr "" - -#, fuzzy, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "Файли %(file)s пайдо нашуд." - -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "" - -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -msgid "Vault Container" -msgstr "" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, python-format -msgid "Modified vault \"%(value)s\"" +msgid "Automount Locations" msgstr "" #, fuzzy -msgid "Vault configuration" -msgstr "Ҷӯрсозӣ" +msgid "Automount Location" +msgstr "Макон" -msgid "IPA servers configured as key recovery agents" +#, python-format +msgid "Added automount location \"%(value)s\"" msgstr "" #, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "" - -msgid "Retrieve data from a vault." +msgid "Deleted automount location \"%(value)s\"" msgstr "" #, python-format -msgid "Retrieved data from vault \"%(value)s\"" +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "" + +msgid "automount map" msgstr "" -msgid "No archived data." +msgid "automount maps" msgstr "" -msgid "Checks if any of the servers has the KRA service enabled" +msgid "Automount Maps" msgstr "" +msgid "Automount Map" +msgstr "" + +#, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" + +msgid "Automount key object." +msgstr "" + +msgid "automount key" +msgstr "" + +msgid "automount keys" +msgstr "" + +msgid "Automount Keys" +msgstr "" + +msgid "Automount Key" +msgstr "" + +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" + +#, python-format +msgid "key named %(key)s already exists" +msgstr "" + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "" + +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" + +#, python-format +msgid "Added automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added automount indirect map \"%(value)s\"" +msgstr "" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "" + msgid "Member service groups" msgstr "" @@ -21687,6 +13102,9 @@ msgstr "Вуруд" msgid "entries" msgstr "" +msgid "Entry" +msgstr "Вуруд" + #, python-format msgid "container entry (%(container)s) not found" msgstr "" @@ -21695,6 +13113,10 @@ msgstr "" msgid "%(parent)s: %(oname)s not found" msgstr "Файли %(file)s пайдо нашуд." +#, fuzzy, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "Файли %(file)s пайдо нашуд." + #, python-format msgid "%(oname)s with name \"%(pkey)s\" already exists" msgstr "" @@ -21724,6 +13146,10 @@ msgstr "" msgid "%s" msgstr "" +#, python-format +msgid "member %s" +msgstr "" + #, python-format msgid "%s to add" msgstr "" @@ -21732,6 +13158,10 @@ msgstr "" msgid "%s to remove" msgstr "" +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + #, python-format msgid "" "Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." @@ -21754,189 +13184,132 @@ msgstr "" msgid "one or more values to remove" msgstr "" -#, fuzzy msgid "" "\n" -"IPA servers\n" -msgstr "Сервери IPA" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" +msgstr "" msgid "" -"\n" -"Get information about installed IPA servers.\n" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +#, fuzzy +msgid "Principal alias" +msgstr "Асосӣ" + +msgid "User password expiration" +msgstr "" + +msgid "SSH public key fingerprint" +msgstr "" + +msgid "Base-64 encoded user certificate" +msgstr "" + +msgid "Certificate mapping data" +msgstr "" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, fuzzy, python-format +msgid "manager %(manager)s not found" +msgstr "Файли %(file)s пайдо нашуд." + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "" + +msgid "Issuer" +msgstr "Диҳанда" + +msgid "Issuer of the certificate" +msgstr "" + +msgid "Subject" +msgstr "Мавзӯъ" + +msgid "Subject of the certificate" +msgstr "" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" msgstr "" msgid "" "\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" "\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" msgstr "" -#, fuzzy -msgid "server" -msgstr "Сервери IPA" - -msgid "servers" +msgid "Make multiple ipa calls via one remote procedure call" msgstr "" -#, fuzzy -msgid "IPA Servers" -msgstr "Сервери IPA" - -#, fuzzy -msgid "Server location" -msgstr "Номи сервер" - -#, fuzzy -msgid "Service weight" -msgstr "Хидмат" - -msgid "Weight for server services" -msgstr "" - -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "" - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -#, fuzzy -msgid "State" -msgstr "Ҳолат" - -#, fuzzy -msgid "Server state" -msgstr "Номи сервер" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." +msgid "must contain a tuple (list, dict)" msgstr "" msgid "" @@ -22009,6 +13382,10 @@ msgstr "" msgid "Certificate Authorities" msgstr "" +#, fuzzy +msgid "Name" +msgstr "Номи мизбон" + msgid "Name for referencing the CA" msgstr "" @@ -22028,9 +13405,22 @@ msgstr "Мавзӯъ" msgid "Subject Distinguished Name" msgstr "" +#, fuzzy +msgid "Issuer DN" +msgstr "Диҳанда" + msgid "Issuer Distinguished Name" msgstr "" +msgid "Base-64 encoded certificate." +msgstr "" + +msgid "Certificate chain" +msgstr "" + +msgid "X.509 certificate chain" +msgstr "" + msgid "Search for CAs." msgstr "" @@ -22039,6 +13429,9 @@ msgid "%(count)d CA matched" msgid_plural "%(count)d CAs matched" msgstr[0] "" +msgid "Include certificate chain in output" +msgstr "" + msgid "Display the properties of a CA." msgstr "" @@ -22071,6 +13464,9 @@ msgstr "" msgid "Insufficient privilege to delete a CA." msgstr "" +msgid "CA" +msgstr "" + msgid "IPA CA cannot be deleted" msgstr "" @@ -22108,311 +13504,1197 @@ msgstr "" msgid "" "\n" -"Stageusers\n" +"Manage CA ACL rules.\n" "\n" -"Manage stage user entries.\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" "\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" +"SUBJECT PRINCIPAL SCOPE:\n" "\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" "\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" "\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" +"CERTIFICATE AUTHORITY SCOPE:\n" "\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" "\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"PROFILE SCOPE:\n" "\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" "\n" "EXAMPLES:\n" "\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" "\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" "\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" msgstr "" -msgid "Stage Users" +msgid "CA ACL" msgstr "" -msgid "Stage User" +msgid "CA ACLs" msgstr "" -msgid "stage user" +msgid "CA category" msgstr "" -msgid "stage users" +msgid "CA category the ACL applies to" +msgstr "" + +msgid "CAs" msgstr "" #, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" +msgid "Added CA ACL \"%(value)s\"" msgstr "" #, python-format -msgid "Deleted stage user \"%(value)s\"" +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "" + +msgid "default CA ACL can be only disabled" msgstr "" #, python-format -msgid "Modified stage user \"%(value)s\"" +msgid "Modified CA ACL \"%(value)s\"" +msgstr "" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" msgstr "" #, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "" -msgid "Entry RDN is not 'uid'" +#, python-format +msgid "Enabled CA ACL \"%(value)s\"" msgstr "" #, python-format -msgid "Entry has no '%(attribute)s'" +msgid "Disabled CA ACL \"%(value)s\"" msgstr "" #, python-format -msgid "active user with name \"%(user)s\" already exists" +msgid "%i user or group added." msgstr "" #, python-format -msgid "Stage user %s activated" +msgid "%i users or groups added." msgstr "" -msgid "Add one or more certificates to the stageuser entry" +msgid "users cannot be added when user category='all'" msgstr "" #, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the stageuser entry" +msgid "%i user or group removed." msgstr "" #, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" +msgid "%i users or groups removed." msgstr "" #, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" +msgid "%i host or hostgroup added." msgstr "" #, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" +msgid "%i hosts or hostgroups added." msgstr "" -msgid "Add one or more certificate mappings to the stage user entry." +msgid "hosts cannot be added when host category='all'" msgstr "" -msgid "Remove one or more certificate mappings from the stage user entry." +#, python-format +msgid "%i host or hostgroup removed." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups removed." +msgstr "" + +#, python-format +msgid "%i service added." +msgstr "" + +#, python-format +msgid "%i services added." +msgstr "" + +msgid "services cannot be added when service category='all'" +msgstr "" + +#, python-format +msgid "%i service removed." +msgstr "" + +#, python-format +msgid "%i services removed." +msgstr "" + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, python-format +msgid "%i profiles removed." +msgstr "" + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." +msgstr "" + +msgid "pyhbac is not installed." msgstr "" msgid "" "\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" +"IPA certificate operations\n" msgstr "" msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." +"\n" +"Implements a set of commands for managing server SSL certificates.\n" msgstr "" -msgid "User password expiration" +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" msgstr "" -msgid "SMB logon script path" +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" msgstr "" -msgid "SMB profile path" +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" msgstr "" -msgid "SMB Home Directory" +msgid "" +"\n" +"In order to request a certificate:\n" msgstr "" -msgid "SMB Home Directory Drive" +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +msgid " * 0 - unspecified\n" +msgstr "" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +msgid "CA is not configured" msgstr "" #, python-format -msgid "invalid e-mail format: %(email)s" +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." msgstr "" -#, fuzzy, python-format -msgid "manager %(manager)s not found" -msgstr "Файли %(file)s пайдо нашуд." - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" +msgid "enabledService/configuredService not in ipaConfigString kdc entry" msgstr "" #, python-format -msgid "Added certificate mappings to user \"%(value)s\"" +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +msgid "Subject email address" +msgstr "" + +#, fuzzy +msgid "Subject DNS name" +msgstr "Мавзӯъ" + +msgid "Subject X.400 address" +msgstr "" + +msgid "Subject directory name" +msgstr "" + +msgid "Subject EDI Party name" +msgstr "" + +#, fuzzy +msgid "Subject URI" +msgstr "Мавзӯъ" + +msgid "Subject IP Address" +msgstr "" + +#, fuzzy +msgid "Subject OID" +msgstr "Мавзӯъ" + +#, fuzzy +msgid "Subject UPN" +msgstr "Мавзӯъ" + +msgid "Subject Kerberos principal name" +msgstr "" + +#, fuzzy +msgid "Subject Other Name" +msgstr "Номи сервер" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" +msgstr "" + +#, fuzzy +msgid "Serial number (hex)" +msgstr "Рақами силсилавӣ" + +msgid "Request status" +msgstr "" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" msgstr "" #, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" +msgid "krbtgt certs can use only the %s profile" msgstr "" -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -msgid "URI" +msgid "No Common Name was found in subject of request." msgstr "" #, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "" - -msgid "cannot be empty" +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" msgstr "" #, python-format -msgid "Deleted OTP token \"%(value)s\"" +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" msgstr "" #, python-format -msgid "Modified OTP token \"%(value)s\"" +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." msgstr "" #, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +msgid "'add' option" +msgstr "" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "Ҳолат" + +msgid "Revoked" +msgstr "" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "" + +msgid "Status of the certificate" +msgstr "" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +msgid "domain" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +#, fuzzy +msgid "User logins" +msgstr "Номи корбар" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" msgstr[0] "" msgid "" "\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" +"Manage Certificate Profiles\n" "\n" -"To run this code in the lite-server\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" "\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" "\n" -"where the contents of the file batch_request.json follow the below example\n" +"PROFILE ID SYNTAX:\n" "\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" "\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" +"EXAMPLES:\n" "\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" "\n" -"And then a nested response for each IPA command method sent in the request\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" "\n" msgstr "" -msgid "Make multiple ipa calls via one remote procedure call" +msgid "invalid Profile ID" msgstr "" -msgid "must contain a tuple (list, dict)" +msgid "Certificate Profile" msgstr "" +msgid "Certificate Profiles" +msgstr "" + +#, fuzzy +msgid "Profile configuration" +msgstr "Ҷӯрсозӣ" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "must be at least 10" +msgstr "" + +#, fuzzy +msgid "configuration options" +msgstr "Ҷӯрсозӣ" + +msgid "Configuration" +msgstr "Ҷӯрсозӣ" + +msgid "Maximum hostname length" +msgstr "" + +msgid "Enable adding subids to new users" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +#, fuzzy +msgid "IPA CA servers" +msgstr "Сервери IPA" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +#, fuzzy +msgid "IPA KRA servers" +msgstr "Сервери IPA" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "Domain resolution order" +msgstr "" + +msgid "colon-separated list of domains used for short name qualification" +msgstr "" + +#, fuzzy +msgid "IPA DNS servers" +msgstr "Сервери IPA" + +msgid "IPA servers configured as domain name server" +msgstr "" + +#, fuzzy +msgid "Hidden IPA DNS servers" +msgstr "Сервери IPA" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "IPA DNSSec key master" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +#, fuzzy +msgid "Setup SID configuration" +msgstr "Ҷӯрсозӣ" + +msgid "New users and groups automatically get a SID assigned" +msgstr "" + +msgid "Add SIDs" +msgstr "" + +msgid "Add SIDs for existing users and groups" +msgstr "" + +msgid "NetBIOS name of the IPA domain" +msgstr "" + +msgid "Empty domain is not allowed" +msgstr "" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "not allowed to enable SID generation" +msgstr "" + +msgid "" +"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " +"allowed. Empty string is not allowed." +msgstr "" + +msgid "Failed to call DBus" +msgstr "" + +msgid "Configuration of SID failed. See details in the error log" +msgstr "" + +msgid "The group doesn't exist" +msgstr "" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" + +msgid "SELinux user map default user not in order list" +msgstr "" + +#, python-format +msgid "You cannot specify %s without the --enable-sid option" +msgstr "" + +msgid "delegation" +msgstr "" + +msgid "delegations" +msgstr "" + +msgid "Delegations" +msgstr "" + +#, fuzzy +msgid "Delegation" +msgstr "Нест кардан" + +#, python-format +msgid "Added delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "" + msgid "" "\n" "Domain Name System (DNS)\n" @@ -22844,6 +15126,12 @@ msgid "" "All nameservers failed to answer the query for DNS reverse zone %(revdns)s" msgstr "" +#, python-format +msgid "" +"No answers could be found in the specified lifetime for DNS reverse zone " +"%(revdns)s" +msgstr "" + #, python-format msgid "" "DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " @@ -22958,6 +15246,9 @@ msgstr "" msgid "Managedby permission" msgstr "Иҷозат" +msgid "DNS is not configured" +msgstr "" + msgid "cannot be used when a zone is specified" msgstr "" @@ -23175,6 +15466,310 @@ msgstr "" msgid "Do not update records only return expected records" msgstr "" +#, fuzzy +msgid "" +"\n" +"DNS server configuration\n" +msgstr "Ҷӯрсозӣ" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +#, fuzzy +msgid "DNS server" +msgstr "Сервери IPA" + +msgid "DNS servers" +msgstr "" + +#, fuzzy +msgid "DNS Servers" +msgstr "Сервери IPA" + +#, fuzzy +msgid "DNS Server" +msgstr "Сервери IPA" + +#, fuzzy +msgid "DNS Server name" +msgstr "Номи сервер" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +msgid "Search for DNS servers." +msgstr "" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "" + +msgid "Delete a DNS server" +msgstr "" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +#, fuzzy +msgid "groups" +msgstr "Гуруҳҳо" + +#, fuzzy +msgid "User Group" +msgstr "Гурӯҳи корбар" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "" + +msgid "gid cannot be set for external group" +msgstr "" + +msgid "attribute \"gidNumber\" not allowed with --nonposix" +msgstr "" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "" + +msgid "privileged group" +msgstr "" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + msgid "The deny type has been deprecated." msgstr "" @@ -23184,6 +15779,13 @@ msgstr "" msgid "HBAC Rules" msgstr "" +#, fuzzy +msgid "HBAC Services" +msgstr "Хидмат" + +msgid "HBAC Service Groups" +msgstr "" + #, python-format msgid "Added HBAC rule \"%(value)s\"" msgstr "" @@ -23217,119 +15819,7799 @@ msgstr "" msgid "" "\n" -"Manage Certificate Profiles\n" +"HBAC Services\n" "\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" "\n" "EXAMPLES:\n" "\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" "\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" "\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" "\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" "\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -msgid "Certificate Profile" -msgstr "" - -msgid "Certificate Profiles" msgstr "" #, fuzzy -msgid "Profile configuration" -msgstr "Ҷӯрсозӣ" +msgid "HBAC services" +msgstr "Хидмат" + +#, fuzzy +msgid "HBAC Service" +msgstr "Хидмат" #, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" +msgid "Added HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" + +#, fuzzy +msgid "HBAC service group" +msgstr "Гурӯҳи корбар" + +#, fuzzy +msgid "HBAC service groups" +msgstr "Гурӯҳи корбар" + +msgid "HBAC Service Group" +msgstr "" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Access granted: %s" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +#, fuzzy +msgid "Host" +msgstr "Номи мизбон" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Serial Number" +msgstr "Рақами силсилавӣ" + +#, fuzzy +msgid "Serial Number (hex)" +msgstr "Рақами силсилавӣ" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" msgstr[0] "" #, python-format -msgid "Imported profile \"%(value)s\"" +msgid "Disabled host \"%(value)s\"" msgstr "" #, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" +msgid "Added certificates to host \"%(value)s\"" msgstr "" #, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" msgstr "" #, python-format -msgid "Deleted profile \"%(value)s\"" +msgid "Added new aliases to host \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a host entry" msgstr "" #, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#, fuzzy +msgid "host groups" +msgstr "Гурӯҳи корбар" + +#, fuzzy +msgid "Host Group" +msgstr "Гурӯҳ" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" msgstr "" #, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" msgstr "" #, python-format -msgid "all masters must have %(role)s role enabled" +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "hostgroup" +msgstr "Гурӯҳи корбар" + +msgid "privileged hostgroup" msgstr "" #, python-format -msgid "must have %(role)s role enabled" +msgid "Modified hostgroup \"%(value)s\"" msgstr "" -msgid "must be enabled only on a single master" +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"and an ID range of a trusted domain may set\n" +" - auto-private-groups: [true|false|hybrid] automatic creation of private " +"groups\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +#, fuzzy +msgid "Auto private groups" +msgstr "Гурӯҳи корбар" + +msgid "Auto creation of private groups, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --auto-private-groups\n" +"\n" +" may be given for a new ID range for a trusted AD domain and\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" +"private-groups is specified" +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +#, fuzzy +msgid "ID View" +msgstr "Намоиш" + +msgid "system ID View" +msgstr "" + +#, fuzzy +msgid "ID Views" +msgstr "Намоиш" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +msgid "Hosts the view applies to" +msgstr "" + +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "" + +msgid "Delete an ID override." +msgstr "" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "" + +msgid "Modify an ID override." +msgstr "" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" + +msgid "Internationalization messages" +msgstr "" + +msgid "Your session has expired. Please log in again." +msgstr "" + +msgid "Apply" +msgstr "" + +msgid "Rebuild auto membership" +msgstr "" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "" + +msgid "Are you sure you want to proceed with the action?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "" + +#, fuzzy +msgid "Actions" +msgstr "Макон" + +msgid "Add" +msgstr "Илова кардан" + +#, python-brace-format +msgid "${count} item(s) added" +msgstr "" + +msgid "Direct Membership" +msgstr "" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "" + +msgid "Indirect Membership" +msgstr "" + +msgid "No entries." +msgstr "" + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "" + +msgid "Remove" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "" + +msgid "Show Results" +msgstr "" + +msgid "Authentication indicators" +msgstr "" + +msgid "Authentication indicator" +msgstr "" + +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "Add Custom Authentication Indicator" +msgstr "" + +msgid "Two factor authentication (password + OTP)" +msgstr "" + +msgid "RADIUS" +msgstr "" + +msgid "PKINIT" +msgstr "" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "" + +msgid "Disable per-user override" +msgstr "" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "About" +msgstr "" + +msgid "Activate" +msgstr "" + +msgid "Add and Add Another" +msgstr "" + +msgid "Add and Close" +msgstr "" + +msgid "Add and Edit" +msgstr "" + +msgid "Add Many" +msgstr "" + +msgid "Back" +msgstr "" + +msgid "Cancel" +msgstr "Бекор кардан" + +msgid "Clear" +msgstr "" + +msgid "Clear all fields on the page." +msgstr "" + +msgid "Close" +msgstr "Пӯшидан" + +#, fuzzy +msgid "Disable" +msgstr "Дастрас" + +msgid "Download" +msgstr "" + +msgid "Download certificate as PEM formatted file." +msgstr "" + +msgid "Edit" +msgstr "" + +#, fuzzy +msgid "Enable" +msgstr "Фаъолшуда" + +msgid "Find" +msgstr "Ёфтан" + +msgid "Get" +msgstr "Гирифтан" + +msgid "Hide" +msgstr "" + +msgid "Issue" +msgstr "Барориш" + +msgid "Match" +msgstr "" + +msgid "Match users according to certificate." +msgstr "" + +msgid "Migrate" +msgstr "" + +msgid "OK" +msgstr "Хуб" + +msgid "Refresh" +msgstr "" + +msgid "Reload current settings from the server." +msgstr "" + +msgid "Delete" +msgstr "Нест кардан" + +msgid "Remove hold" +msgstr "" + +msgid "Reset" +msgstr "Бозсозӣ" + +#, fuzzy +msgid "Reset Password" +msgstr "Пароли нав" + +msgid "Reset Password and Log in" +msgstr "" + +msgid "Restore" +msgstr "Барқароркунӣ" + +msgid "Retry" +msgstr "Кӯшиш" + +msgid "Revert" +msgstr "" + +msgid "Revoke" +msgstr "" + +msgid "Save" +msgstr "" + +#, fuzzy +msgid "Set" +msgstr "Гирифтан" + +msgid "Show" +msgstr "" + +msgid "Stage" +msgstr "" + +msgid "Update" +msgstr "Ҷадидсозӣ" + +msgid "View" +msgstr "Намоиш" + +#, fuzzy +msgid "Customization" +msgstr "Ҷӯрсозӣ" + +msgid "Pagination Size" +msgstr "" + +msgid "Collapse All" +msgstr "" + +msgid "Expand All" +msgstr "" + +msgid "General" +msgstr "Умумӣ" + +#, fuzzy +msgid "Identity Settings" +msgstr "Танзимотҳо" + +#, fuzzy +msgid "Record Settings" +msgstr "Танзимотҳо" + +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "" + +msgid "Back to Top" +msgstr "" + +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "" + +msgid "Add custom value" +msgstr "" + +msgid "Available" +msgstr "Дастрас" + +msgid "Some operations failed." +msgstr "" + +msgid "Operations Error" +msgstr "" + +#, fuzzy +msgid "Confirmation" +msgstr "Ҷӯрсозӣ" + +msgid "Custom value" +msgstr "" + +msgid "This page has unsaved changes. Please save or revert." +msgstr "" + +msgid "Unsaved Changes" +msgstr "" + +#, python-brace-format +msgid "Edit ${entity}" +msgstr "" + +msgid "Hide details" +msgstr "" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "" + +msgid "Prospective" +msgstr "" + +#, fuzzy +msgid "Redirection" +msgstr "шарҳ" + +msgid "Select entries to be removed." +msgstr "" + +msgid "Result" +msgstr "" + +msgid "Show details" +msgstr "" + +msgid "Success" +msgstr "" + +msgid "Validation error" +msgstr "" + +msgid "Input form contains invalid or missing values." +msgstr "" + +msgid "Please try the following options:" +msgstr "" + +msgid "If the problem persists please contact the system administrator." +msgstr "" + +msgid "Refresh the page." +msgstr "" + +msgid "Reload the browser." +msgstr "" + +msgid "Return to the main page and retry the operation" +msgstr "" + +#, python-brace-format +msgid "An error has occurred (${error})" +msgstr "" + +#, fuzzy +msgid "HTTP Error" +msgstr "Хатогӣ" + +msgid "Internal Error" +msgstr "" + +#, fuzzy +msgid "IPA Error" +msgstr "Хатогӣ" + +msgid "No response" +msgstr "" + +msgid "Unknown Error" +msgstr "" + +msgid "URL" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} members:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} member managers:" +msgstr "" + +msgid "Settings" +msgstr "Танзимотҳо" + +msgid "Search" +msgstr "Ҷустуҷӯ" + +msgid "False" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Allowed to create keytab" +msgstr "" + +msgid "Allowed to retrieve keytab" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Add Kerberos Principal Alias" +msgstr "" + +msgid "New kerberos principal alias" +msgstr "" + +msgid "Remove Kerberos Alias" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "" + +msgid "Inherited from server configuration" +msgstr "" + +msgid "MS-PAC" +msgstr "" + +msgid "Override inherited settings" +msgstr "" + +msgid "PAD" +msgstr "" + +msgid "Authenticating" +msgstr "" + +msgid "Authentication with personal certificate failed" +msgstr "" + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" + +msgid "Continue to next page" +msgstr "" + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" + +msgid "Login failed due to an unknown reason" +msgstr "" + +msgid "Logged In As" +msgstr "" + +msgid "Authentication with Kerberos failed" +msgstr "" + +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" + +msgid "Loading" +msgstr "" + +msgid "Kerberos Principal you entered is expired" +msgstr "" + +msgid "Loading data" +msgstr "" + +msgid "Log in" +msgstr "" + +msgid "Log In Using Certificate" +msgstr "" + +msgid "Log in using personal certificate" +msgstr "" + +msgid "Log out" +msgstr "" + +msgid "Log out error" +msgstr "" + +msgid "Password or Password+One-Time Password" +msgstr "" + +#, python-brace-format +msgid "You will be redirected in ${count}s" +msgstr "" + +msgid "Sync OTP Token" +msgstr "" + +msgid "Synchronizing" +msgstr "" + +msgid "The user account you entered is locked" +msgstr "" + +msgid "number of passwords" +msgstr "" + +msgid "seconds" +msgstr "" + +#, fuzzy +msgid "Migrating" +msgstr "Ҷӯрсозӣ" + +msgid "There was a problem with your request. Please, try again later." +msgstr "" + +msgid "Password migration was not successful" +msgstr "" + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" + +msgid "The password or username you entered is incorrect" +msgstr "" + +msgid "Password migration was successful" +msgstr "" + +msgid "Attribute" +msgstr "Аттрибут" + +msgid "Add delegation" +msgstr "" + +msgid "Remove delegations" +msgstr "" + +#, fuzzy +msgid "Add permission" +msgstr "Иҷозат" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Remove permissions" +msgstr "Иҷозатҳо" + +#, python-brace-format +msgid "Remove privileges from permission '${primary_key}'" +msgstr "" + +msgid "Add privilege" +msgstr "" + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "" + +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "" + +msgid "Remove privileges" +msgstr "" + +#, python-brace-format +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "" + +#, python-brace-format +msgid "Remove roles from privilege '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Role Settings" +msgstr "Танзимотҳо" + +msgid "Add role" +msgstr "" + +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "" + +#, python-brace-format +msgid "Add services into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "" + +msgid "Remove roles" +msgstr "" + +#, python-brace-format +msgid "Remove role '${primary_key}' from privileges" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from role '${primary_key}'" +msgstr "" + +msgid "Add self service permission" +msgstr "" + +msgid "Remove self service permissions" +msgstr "" + +msgid "Add rule" +msgstr "" + +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to change default group?" +msgstr "" + +msgid "Default host group" +msgstr "" + +#, fuzzy +msgid "Default user group" +msgstr "Гурӯҳи корбар" + +msgid "Exclusive" +msgstr "" + +#, fuzzy +msgid "Expression" +msgstr "Иҷозат" + +msgid "Host group rule" +msgstr "" + +msgid "Host group rules" +msgstr "" + +msgid "Inclusive" +msgstr "" + +msgid "Remove auto membership rules" +msgstr "" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "User group rule" +msgstr "Гурӯҳи корбар" + +#, fuzzy +msgid "User group rules" +msgstr "Гурӯҳи корбар" + +msgid "Add automount key" +msgstr "" + +msgid "Remove automount keys" +msgstr "" + +msgid "Add automount location" +msgstr "" + +msgid "Automount Location Settings" +msgstr "" + +msgid "Remove automount locations" +msgstr "" + +msgid "Add automount map" +msgstr "" + +#, fuzzy +msgid "Map Type" +msgstr "Намуд" + +msgid "Direct" +msgstr "" + +msgid "Indirect" +msgstr "" + +msgid "Remove automount maps" +msgstr "" + +msgid "Add certificate authority" +msgstr "" + +msgid "Remove certificate authorities" +msgstr "" + +msgid "Add CA ACL" +msgstr "" + +#, python-brace-format +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "All" +msgstr "Иҷозат додан" + +msgid "Any CA" +msgstr "" + +msgid "Any Host" +msgstr "" + +#, fuzzy +msgid "Any Service" +msgstr "Хидмат" + +msgid "Any Profile" +msgstr "" + +msgid "Anyone" +msgstr "" + +msgid "Rule status" +msgstr "" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "" + +msgid "Remove CA ACLs" +msgstr "" + +#, python-brace-format +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "" + +msgid "Specified CAs" +msgstr "" + +msgid "Specified Hosts and Groups" +msgstr "" + +msgid "Specified Profiles" +msgstr "" + +msgid "Specified Services and Groups" +msgstr "" + +msgid "Specified Users and Groups" +msgstr "" + +msgid "Permitted to have certificates issued" +msgstr "" + +msgid "Remove certificate profiles" +msgstr "" + +msgid "AA Compromise" +msgstr "" + +#, fuzzy +msgid "Add principal" +msgstr "Асосӣ" + +msgid "Affiliation Changed" +msgstr "" + +msgid "CA Compromise" +msgstr "" + +msgid "Certificates" +msgstr "" + +msgid "Certificate Hold" +msgstr "" + +msgid "Cessation of Operation" +msgstr "" + +#, fuzzy +msgid "Common Name" +msgstr "Номи мизбон" + +msgid "the certificate with serial number " +msgstr "" + +msgid "Expires On" +msgstr "" + +#, fuzzy +msgid "Issued on from" +msgstr "Додашудааст ба:" + +#, fuzzy +msgid "Issued on to" +msgstr "Додашудааст ба:" + +#, fuzzy +msgid "Maximum serial number" +msgstr "Рақами силсилавӣ" + +#, fuzzy +msgid "Minimum serial number" +msgstr "Рақами силсилавӣ" + +msgid "Revoked on from" +msgstr "" + +msgid "Revoked on to" +msgstr "" + +msgid "Valid not after from" +msgstr "" + +msgid "Valid not after to" +msgstr "" + +msgid "Valid not before from" +msgstr "" + +msgid "Valid not before to" +msgstr "" + +msgid "Fingerprints" +msgstr "" + +msgid "Get Certificate" +msgstr "" + +msgid "Certificate Hold Removed" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for user '${primary_key}'" +msgstr "" + +msgid "Issue new certificate" +msgstr "" + +msgid "Issued By" +msgstr "Додааст:" + +#, fuzzy +msgid "Issued On" +msgstr "Додааст:" + +msgid "Issued To" +msgstr "Додашудааст ба:" + +msgid "Key Compromise" +msgstr "" + +msgid "No Valid Certificate" +msgstr "" + +msgid "New Certificate" +msgstr "" + +msgid "Certificate in base64 or PEM format" +msgstr "" + +msgid "Note" +msgstr "Эзоҳ" + +msgid "Organization" +msgstr "Ташкилот" + +#, fuzzy +msgid "Organizational Unit" +msgstr "Ташкилот" + +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "" + +msgid "Privilege Withdrawn" +msgstr "" + +msgid "Reason for Revocation" +msgstr "" + +msgid "Remove certificate hold" +msgstr "" + +msgid "Do you want to remove the certificate hold?" +msgstr "" + +msgid "Remove from CRL" +msgstr "" + +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" + +#, python-brace-format +msgid " -8 '${cn}'" +msgstr "" + +msgid "Certificate requested" +msgstr "" + +msgid "Revoke certificate" +msgstr "" + +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "" + +msgid "Certificate Revoked" +msgstr "" + +msgid "REVOKED" +msgstr "" + +msgid "SHA1 Fingerprint" +msgstr "" + +msgid "SHA256 Fingerprint" +msgstr "" + +msgid "Superseded" +msgstr "" + +msgid "Unspecified" +msgstr "" + +msgid "Valid Certificate Present" +msgstr "" + +msgid "Valid from" +msgstr "" + +#, fuzzy +msgid "Valid to" +msgstr "Саҳеҳият" + +msgid "Validity" +msgstr "Саҳеҳият" + +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "" + +msgid "View Certificate" +msgstr "" + +msgid "Certificate Data" +msgstr "" + +msgid "Certificate For Match" +msgstr "" + +msgid "Certificate Mapping Match" +msgstr "" + +msgid "Matched Users" +msgstr "" + +#, fuzzy +msgid "User Login" +msgstr "Номи корбар" + +msgid "Add certificate identity mapping rule" +msgstr "" + +msgid "Add certificate mapping data" +msgstr "" + +#, fuzzy +msgid "Configuration string" +msgstr "Ҷӯрсозӣ" + +#, python-brace-format +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "" + +msgid "Remove certificate mapping data" +msgstr "" + +msgid "Issuer and subject" +msgstr "" + +msgid "Remove certificate identity mapping rules" +msgstr "" + +#, fuzzy +msgid "Version" +msgstr "Иҷозат" + +#, fuzzy +msgid "Group Options" +msgstr "Гуруҳҳо" + +#, fuzzy +msgid "Search Options" +msgstr "Ҷустуҷӯ" + +msgid "SELinux Options" +msgstr "" + +msgid "Server Options" +msgstr "" + +#, fuzzy +msgid "Service Options" +msgstr "Хидмат" + +#, fuzzy +msgid "User Options" +msgstr "Шарҳ" + +msgid "Forward first" +msgstr "" + +msgid "Forwarding disabled" +msgstr "" + +msgid "Forward only" +msgstr "" + +msgid "Options" +msgstr "" + +msgid "Update System DNS Records" +msgstr "" + +msgid "Do you want to update system DNS records?" +msgstr "" + +msgid "System DNS records updated" +msgstr "" + +msgid "Add DNS forward zone" +msgstr "" + +msgid "Remove DNS forward zones" +msgstr "" + +msgid "Add DNS resource record" +msgstr "" + +msgid "DNS record was deleted because it contained no data." +msgstr "" + +msgid "Other Record Types" +msgstr "" + +msgid "Address not valid, can't redirect" +msgstr "" + +msgid "Create dns record" +msgstr "" + +msgid "Creating record." +msgstr "" + +msgid "Record creation failed." +msgstr "" + +msgid "Checking if record exists." +msgstr "" + +msgid "Record not found." +msgstr "" + +msgid "Redirection to PTR record" +msgstr "" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "" + +msgid "Target reverse zone not found." +msgstr "" + +msgid "Fetching DNS zones." +msgstr "" + +msgid "An error occurred while fetching dns zones." +msgstr "" + +msgid "You will be redirected to DNS Zone." +msgstr "" + +msgid "Remove DNS resource records" +msgstr "" + +msgid "Standard Record Types" +msgstr "" + +msgid "Records for DNS Zone" +msgstr "" + +msgid "Record Type" +msgstr "" + +msgid "Add DNS zone" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "" + +#, fuzzy +msgid "DNS Zone Settings" +msgstr "Танзимотҳо" + +msgid "Remove DNS zones" +msgstr "" + +#, fuzzy +msgid "Remove Permission" +msgstr "Иҷозат" + +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "" + +msgid "Skip DNS check" +msgstr "" + +msgid "Skip overlap check" +msgstr "" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" + +msgid "Authoritative nameserver change" +msgstr "" + +msgid "Level" +msgstr "" + +msgid "Set Domain Level" +msgstr "" + +#, fuzzy +msgid "Add user group" +msgstr "Гурӯҳи корбар" + +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user ID override into user group '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Group Settings" +msgstr "Танзимотҳо" + +msgid "External" +msgstr "" + +msgid "Groups" +msgstr "Гуруҳҳо" + +msgid "Group categories" +msgstr "" + +msgid "Change to external group" +msgstr "" + +msgid "Change to POSIX group" +msgstr "" + +msgid "Non-POSIX" +msgstr "" + +msgid "POSIX" +msgstr "" + +#, fuzzy +msgid "Remove user groups" +msgstr "Гурӯҳи корбар" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Group Type" +msgstr "Гурӯҳ" + +msgid "Add HBAC rule" +msgstr "" + +#, python-brace-format +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "" + +msgid "Accessing" +msgstr "" + +msgid "Remove HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Via Service" +msgstr "Хидмат" + +msgid "Who" +msgstr "" + +msgid "Add HBAC service" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "" + +msgid "Remove HBAC services" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "" + +msgid "Add HBAC service group" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "" + +msgid "Remove HBAC service groups" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "" + +msgid "Access Denied" +msgstr "" + +msgid "Access Granted" +msgstr "" + +msgid "Include Disabled" +msgstr "" + +#, fuzzy +msgid "Include Enabled" +msgstr "Фаъолшуда" + +msgid "HBAC Test" +msgstr "" + +msgid "Matched" +msgstr "" + +msgid "Missing values: " +msgstr "" + +msgid "New Test" +msgstr "" + +msgid "Rules" +msgstr "" + +msgid "Run Test" +msgstr "" + +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "" + +msgid "Unmatched" +msgstr "" + +msgid "Add host" +msgstr "" + +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "" + +msgid "Host Certificate" +msgstr "" + +msgid "Host Name" +msgstr "Номи мизбон" + +msgid "Delete Key, Unprovision" +msgstr "" + +#, fuzzy +msgid "Host Settings" +msgstr "Танзимотҳо" + +msgid "Enrolled" +msgstr "" + +msgid "Enrollment" +msgstr "" + +msgid "Fully Qualified Host Name" +msgstr "" + +#, fuzzy +msgid "Generate OTP" +msgstr "Умумӣ" + +#, fuzzy +msgid "Generated OTP" +msgstr "Умумӣ" + +msgid "Kerberos Key" +msgstr "" + +msgid "Kerberos Key Not Present" +msgstr "" + +msgid "Kerberos Key Present, Host Provisioned" +msgstr "" + +#, fuzzy +msgid "One-Time Password" +msgstr "Пароли нав" + +msgid "One-Time Password Not Present" +msgstr "" + +msgid "One-Time Password Present" +msgstr "" + +#, fuzzy +msgid "Reset OTP" +msgstr "Бозсозӣ" + +msgid "Reset One-Time Password" +msgstr "" + +msgid "Set OTP" +msgstr "" + +msgid "OTP set" +msgstr "" + +#, fuzzy +msgid "Set One-Time Password" +msgstr "Пароли нав" + +msgid "Remove hosts" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "" + +msgid "Unprovision" +msgstr "" + +msgid "Are you sure you want to unprovision this host?" +msgstr "" + +msgid "Unprovisioning host" +msgstr "" + +msgid "Host unprovisioned" +msgstr "" + +msgid "Add host group" +msgstr "" + +#, python-brace-format +msgid "Add hosts into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "" + +msgid "Host Group Settings" +msgstr "" + +msgid "Remove host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "" + +msgid "User to override" +msgstr "" + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" + +msgid "Enter trusted user login." +msgstr "" + +msgid "Profile" +msgstr "" + +msgid "Group to override" +msgstr "" + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" + +msgid "Enter trusted group name." +msgstr "" + +msgid "Add ID view" +msgstr "" + +msgid "Add group ID override" +msgstr "" + +msgid "Add user ID override" +msgstr "" + +#, python-brace-format +msgid "${primary_key} applies to:" +msgstr "" + +msgid "Applied to hosts" +msgstr "" + +msgid "Apply to host groups" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "" + +msgid "Apply to hosts" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "" + +#, python-brace-format +msgid "${primary_key} overrides:" +msgstr "" + +msgid "Remove ID views" +msgstr "" + +msgid "Remove user ID overrides" +msgstr "" + +msgid "Remove group ID overrides" +msgstr "" + +msgid "Un-apply from host groups" +msgstr "" + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" + +msgid "Un-apply" +msgstr "" + +msgid "Un-apply from hosts" +msgstr "" + +msgid "Un-apply ID Views from hosts" +msgstr "" + +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "" + +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "" + +msgid "Add netgroup" +msgstr "" + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Netgroup Settings" +msgstr "Танзимотҳо" + +#, fuzzy +msgid "Netgroups" +msgstr "Гуруҳҳо" + +msgid "Remove netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from netgroup '${primary_key}'" +msgstr "" + +msgid "Add OTP token" +msgstr "" + +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" + +#, fuzzy +msgid "Configure your token" +msgstr "Ҷӯрсозӣ" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" + +#, fuzzy +msgid "OTP Token Settings" +msgstr "Танзимотҳо" + +msgid "Disable token" +msgstr "" + +#, fuzzy +msgid "Enable token" +msgstr "Фаъолшуда" + +msgid "Remove OTP tokens" +msgstr "" + +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "" + +msgid "Show QR code" +msgstr "" + +#, fuzzy +msgid "Show configuration uri" +msgstr "Ҷӯрсозӣ" + +msgid "Counter-based (HOTP)" +msgstr "" + +msgid "Time-based (TOTP)" +msgstr "" + +#, fuzzy +msgid "Add Custom Attribute" +msgstr "Аттрибут" + +#, fuzzy +msgid "Permission settings" +msgstr "Иҷозатҳо" + +#, fuzzy +msgid "Attribute breakdown" +msgstr "Аттрибут" + +#, fuzzy +msgid "Privilege Settings" +msgstr "Танзимотҳо" + +msgid "Public key:" +msgstr "" + +msgid "Set public key" +msgstr "" + +msgid "Show/Set key" +msgstr "" + +msgid "Modified: key not set" +msgstr "" + +msgid "Modified" +msgstr "" + +msgid "New: key not set" +msgstr "" + +msgid "New: key set" +msgstr "" + +#, fuzzy +msgid "Add password policy" +msgstr "Пароли LDAP" + +#, fuzzy +msgid "Password Policy" +msgstr "Парол" + +msgid "Remove password policies" +msgstr "" + +msgid "Add ID range" +msgstr "" + +#, fuzzy +msgid "Range Settings" +msgstr "Танзимотҳо" + +msgid "Base ID" +msgstr "" + +msgid "Primary RID base" +msgstr "" + +msgid "Range size" +msgstr "" + +msgid "Domain SID" +msgstr "" + +msgid "Secondary RID base" +msgstr "" + +msgid "Remove ID ranges" +msgstr "" + +msgid "Active Directory domain with POSIX attributes" +msgstr "" + +msgid "Detect" +msgstr "" + +#, fuzzy +msgid "Local domain" +msgstr "Макон" + +msgid "IPA trust" +msgstr "" + +msgid "Active Directory winsync" +msgstr "" + +msgid "Add RADIUS server" +msgstr "" + +msgid "RADIUS Proxy Server Settings" +msgstr "" + +msgid "Remove RADIUS servers" +msgstr "" + +msgid "Realm Domains" +msgstr "" + +msgid "Check DNS" +msgstr "" + +msgid "Do you also want to perform DNS check?" +msgstr "" + +#, fuzzy +msgid "Force Update" +msgstr "Ҷадидсозӣ" + +msgid "Add SELinux user map" +msgstr "" + +#, python-brace-format +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "" + +msgid "Remove selinux user maps" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Server Roles" +msgstr "Номи сервер" + +#, fuzzy +msgid "Server Role" +msgstr "Номи сервер" + +msgid "Warning: Consider service replication" +msgstr "" + +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" + +#, fuzzy +msgid "Delete Server" +msgstr "Нест кардан" + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" + +#, fuzzy +msgid "Add service" +msgstr "Хидмат" + +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "" + +msgid "Service Certificate" +msgstr "" + +#, fuzzy +msgid "Service Settings" +msgstr "Танзимотҳо" + +#, fuzzy +msgid "Provisioning" +msgstr "Иҷозат" + +msgid "Remove services" +msgstr "" + +#, python-brace-format +msgid "Remove service '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing service '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to unprovision this service?" +msgstr "" + +msgid "Unprovisioning service" +msgstr "" + +msgid "Service unprovisioned" +msgstr "" + +msgid "Kerberos Key Present, Service Provisioned" +msgstr "" + +msgid "SSH public keys" +msgstr "" + +msgid "SSH public key:" +msgstr "" + +msgid "Set SSH key" +msgstr "" + +msgid "Are you sure you want to activate selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "" + +msgid "Add stage user" +msgstr "" + +msgid "Stage users" +msgstr "" + +msgid "Preserved users" +msgstr "" + +msgid "Remove preserved users" +msgstr "" + +msgid "Remove stage users" +msgstr "" + +msgid "Are you sure you want to stage selected users?" +msgstr "" + +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "" + +msgid "Are you sure you want to restore selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "" + +msgid "User categories" +msgstr "" + +#, fuzzy +msgid "Add subid" +msgstr "Хидмат" + +msgid "Assigned subids" +msgstr "" + +msgid "DNA remaining" +msgstr "" + +msgid "SubGID range size" +msgstr "" + +msgid "SubGID range start" +msgstr "" + +msgid "SubUID range size" +msgstr "" + +msgid "SubUID range start" +msgstr "" + +msgid "Remaining subids" +msgstr "" + +msgid "Subordinate ID Statistics" +msgstr "" + +msgid "Add sudo command" +msgstr "" + +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "" + +msgid "Remove sudo commands" +msgstr "" + +#, python-brace-format +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "" + +msgid "Add sudo command group" +msgstr "" + +#, python-brace-format +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "" + +msgid "Remove sudo command groups" +msgstr "" + +#, python-brace-format +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "" + +msgid "Add sudo rule" +msgstr "" + +msgid "Add sudo option" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "" + +msgid "Allow" +msgstr "Иҷозат додан" + +#, fuzzy +msgid "Any Command" +msgstr "Фармонҳо" + +#, fuzzy +msgid "Any Group" +msgstr "Гурӯҳ" + +#, fuzzy +msgid "Run Commands" +msgstr "Фармонҳо" + +msgid "Deny" +msgstr "" + +msgid "Access this host" +msgstr "" + +msgid "Option added" +msgstr "" + +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "" + +msgid "Remove sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "" + +msgid "As Whom" +msgstr "" + +msgid "Specified Commands and Groups" +msgstr "" + +msgid "Specified Groups" +msgstr "" + +msgid "Remove sudo options" +msgstr "" + +msgid "Autogenerated" +msgstr "" + +msgid "Segment details" +msgstr "" + +#, fuzzy +msgid "Replication configuration" +msgstr "Ҷӯрсозӣ" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" + +msgid "Add IPA location" +msgstr "" + +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "" + +msgid "Remove IPA locations" +msgstr "" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "" + +msgid "Add topology segment" +msgstr "" + +msgid "Remove topology segments" +msgstr "" + +msgid "Account" +msgstr "" + +msgid "Add trust" +msgstr "" + +msgid "Administrative account" +msgstr "" + +msgid "SID blocklists" +msgstr "" + +#, fuzzy +msgid "Trust Settings" +msgstr "Танзимотҳо" + +msgid "Establish using" +msgstr "" + +msgid "Fetch domains" +msgstr "" + +#, fuzzy +msgid "Pre-shared password" +msgstr "Пароли LDAP" + +msgid "Remove trusts" +msgstr "" + +msgid "Remove domains" +msgstr "" + +msgid "Trust direction" +msgstr "" + +msgid "Trust status" +msgstr "" + +msgid "Trust type" +msgstr "" + +msgid "Alternative UPN suffixes" +msgstr "" + +msgid "User attributes for SMB services" +msgstr "" + +msgid "Path to a script executed on a Windows system at logon" +msgstr "" + +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "" + +msgid "Path to a user home directory, in UNC format" +msgstr "" + +msgid "Drive to mount a home directory" +msgstr "" + +#, fuzzy +msgid "Account Settings" +msgstr "Танзимотҳо" + +#, fuzzy +msgid "Account Status" +msgstr "Ҳолат" + +msgid "Active users" +msgstr "" + +msgid "Add user" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "" + +msgid "Auto assign subordinate ids" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to auto-assign a subordinate id to user ${object}?" +msgstr "" + +#, fuzzy +msgid "Contact Settings" +msgstr "Танзимотҳо" + +#, fuzzy +msgid "Delete mode" +msgstr "Нест кардан" + +msgid "Employee Information" +msgstr "" + +msgid "Error changing account status" +msgstr "" + +msgid "Password expiration" +msgstr "" + +msgid "Mailing Address" +msgstr "" + +msgid "Misc. Information" +msgstr "" + +#, fuzzy +msgid "delete" +msgstr "Нест кардан" + +msgid "preserve" +msgstr "" + +msgid "No private group" +msgstr "" + +msgid "Remove users" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" + +#, python-brace-format +msgid "Click to ${action}" +msgstr "" + +msgid "Unlock" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "" + +msgid "Add vault" +msgstr "" + +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "" + +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" + +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" + +msgid "Asymmetric" +msgstr "" + +msgid "Vaults Config" +msgstr "" + +msgid "Members" +msgstr "" + +msgid "My User Vaults" +msgstr "" + +msgid "Owners" +msgstr "" + +msgid "Remove vaults" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "" + +#, fuzzy +msgid "Service Vaults" +msgstr "Хидмат" + +msgid "Shared" +msgstr "" + +msgid "Shared Vaults" +msgstr "" + +msgid "Standard" +msgstr "" + +msgid "Symmetric" +msgstr "" + +msgid "Vault Type" +msgstr "" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" + +#, fuzzy +msgid "User Vaults" +msgstr "Номи корбар" + +msgid "Current password is required" +msgstr "" + +#, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "" + +#, fuzzy +msgid "First OTP" +msgstr "Ном" + +#, fuzzy +msgid "New password is required" +msgstr "Пароли нав" + +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" + +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" + +msgid "Token synchronization failed" +msgstr "" + +msgid "The username, password or token codes are not correct" +msgstr "" + +msgid "Token was synchronized" +msgstr "" + +msgid "Password change complete" +msgstr "" + +msgid "Your password has expired. Please enter a new password." +msgstr "" + +#, fuzzy +msgid "Passwords must match" +msgstr "Паролҳо номувофиқанд" + +msgid "Password reset was not successful." +msgstr "" + +msgid "Reset your password." +msgstr "" + +msgid "Second OTP" +msgstr "" + +#, fuzzy +msgid "Verify Password" +msgstr "Пароли нав" + +msgid "Are you sure you want to delete selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "" + +msgid "Are you sure you want to disable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "" + +msgid "Are you sure you want to enable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "" + +msgid "Some entries were not deleted" +msgstr "" + +msgid "Quick Links" +msgstr "" + +msgid "Select All" +msgstr "Интихоби ҳама" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" + +#, fuzzy +msgid "Unselect All" +msgstr "Интихоби ҳама" + +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" + +msgid "Working" +msgstr "" + +msgid "Audit" +msgstr "Назорат" + +msgid "Authentication" +msgstr "" + +msgid "Automount" +msgstr "" + +msgid "DNS" +msgstr "" + +msgid "Host-Based Access Control" +msgstr "" + +msgid "Identity" +msgstr "" + +msgid "IPA Server" +msgstr "Сервери IPA" + +#, fuzzy +msgid "Network Services" +msgstr "Хидмат" + +msgid "Policy" +msgstr "Сиёсат" + +msgid "Role-Based Access Control" +msgstr "" + +msgid "Subordinate IDs" +msgstr "" + +msgid "Sudo" +msgstr "Sudo" + +msgid "Topology" +msgstr "" + +msgid "Trusts" +msgstr "" + +msgid "True" +msgstr "" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" + +msgid "API Browser" +msgstr "" + +#, fuzzy +msgid "First" +msgstr "Ном" + +#, fuzzy +msgid "Last" +msgstr "Насаб" + +msgid "Next" +msgstr "" + +msgid "Page" +msgstr "" + +msgid "Prev" +msgstr "" + +msgid "Undo" +msgstr "" + +msgid "Undo this change." +msgstr "" + +msgid "Undo All" +msgstr "" + +msgid "Undo all changes in this field." +msgstr "" + +msgid "Text does not match field pattern" +msgstr "" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" + +msgid "Must be a decimal number" +msgstr "" + +#, fuzzy +msgid "Format error" +msgstr "хатогии хониш\n" + +msgid "Must be an integer" +msgstr "" + +msgid "Not a valid IP address" +msgstr "" + +msgid "Not a valid IPv4 address" +msgstr "" + +msgid "Not a valid IPv6 address" +msgstr "" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "" + +#, fuzzy +msgid "Parse error" +msgstr "хатогии хониш\n" + +msgid "Must be a positive number" +msgstr "" + +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "" + +msgid "Required field" +msgstr "" + +msgid "Unsupported value" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +#, fuzzy +msgid "" +"\n" +"IPA locations\n" +msgstr "Макон" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +#, fuzzy +msgid "location" +msgstr "Макон" + +#, fuzzy +msgid "locations" +msgstr "Макон" + +#, fuzzy +msgid "IPA Locations" +msgstr "Макон" + +#, fuzzy +msgid "IPA Location" +msgstr "Макон" + +#, fuzzy +msgid "Location name" +msgstr "Макон" + +msgid "IPA location name" +msgstr "" + +#, fuzzy +msgid "IPA Location description" +msgstr "шарҳ" + +#, fuzzy +msgid "Servers" +msgstr "Хидмат" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "" + +msgid "Delete an IPA location." +msgstr "" + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "" + +msgid "Modify information about an IPA location." +msgstr "" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "" + +msgid "Search for IPA locations." +msgstr "" + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" + +msgid "Display information about an IPA location." +msgstr "" + +msgid "Servers in location" +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +#, fuzzy +msgid "netgroups" +msgstr "Гуруҳҳо" + +#, fuzzy +msgid "Netgroup" +msgstr "Гурӯҳи корбар" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" + +msgid "One time password commands" +msgstr "" + +#, fuzzy +msgid "OTP configuration options" +msgstr "Ҷӯрсозӣ" + +#, fuzzy +msgid "OTP Configuration" +msgstr "Ҷӯрсозӣ" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +msgid "URI" +msgstr "" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "" + +msgid "cannot be empty" +msgstr "" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"If the user authentication method is set to password+OTP, the user should\n" +"pass the --otp option when resetting the password.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To reset your own password when password+OTP is set as authentication " +"method:\n" +" ipa passwd --otp\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +msgid "The OTP if the user has a token configured" +msgstr "" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "" +"\n" +"Permissions\n" +msgstr "Иҷозатҳо" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +#, fuzzy +msgid "" +"\n" +"Managed permissions\n" +msgstr "Иҷозатҳо" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "must be enclosed in parentheses" +msgstr "" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "" + +#, python-format +msgid "Deprecated; use %s" +msgstr "" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, fuzzy, python-format +msgid "Entry %s not found" +msgstr "Файли %(file)s пайдо нашуд." + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, python-format +msgid "option was renamed; use %s" +msgstr "" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, python-format +msgid "%s: group not found" +msgstr "" + +msgid "target and targetgroup are mutually exclusive" +msgstr "" + +msgid "subtree and type are mutually exclusive" +msgstr "" + +msgid "Bad search filter" +msgstr "" + +#, python-format +msgid "Entry %s does not exist" +msgstr "" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, python-format +msgid "Added permission \"%(value)s\"" +msgstr "" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "" + +msgid "cannot delete managed permissions" +msgstr "" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "" + +#, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +#, fuzzy +msgid "invalid port number" +msgstr "Рақами силсилавӣ" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +#, fuzzy +msgid "RADIUS Servers" +msgstr "Сервери IPA" + +#, fuzzy +msgid "RADIUS Server" +msgstr "Сервери IPA" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "Role" +msgstr "" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" + +msgid "" +"\n" +"API Schema\n" +msgstr "" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +#, fuzzy +msgid "Documentation" +msgstr "Макон" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +msgid "Help topic" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +#, fuzzy +msgid "Method name" +msgstr "номи мизбон" + +msgid "Display information about a command." +msgstr "" + +msgid "Search for commands." +msgstr "" + +msgid "Return command defaults" +msgstr "" + +#, fuzzy, python-brace-format +msgid "{oname}: {command_name} not found" +msgstr "Файли %(file)s пайдо нашуд." + +msgid "Display information about a class." +msgstr "" + +msgid "Search for classes." +msgstr "" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +msgid "CLI name" +msgstr "Номи ACI" + +#, fuzzy +msgid "Confirm (password)" +msgstr "парол" + +msgid "Default" +msgstr "" + +msgid "Default from" +msgstr "" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" +msgstr "" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command output." +msgstr "" + +msgid "Search for command outputs." +msgstr "" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "self service permission" +msgstr "" + +msgid "self service permissions" +msgstr "" + +#, fuzzy +msgid "Self Service Permissions" +msgstr "Иҷозатҳо" + +#, fuzzy +msgid "Self Service Permission" +msgstr "Иҷозат" + +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +msgid "SELinux User Map rule" +msgstr "" + +msgid "SELinux User Map rules" +msgstr "" + +msgid "SELinux User Maps" +msgstr "" + +msgid "SELinux User Map" +msgstr "" + +#, fuzzy, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "Файли %(file)s пайдо нашуд." + +#, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "" + +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "" +"\n" +"IPA server roles\n" +msgstr "Сервери IPA" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +#, fuzzy +msgid "server role" +msgstr "Номи сервер" + +#, fuzzy +msgid "server roles" +msgstr "Номи сервер" + +#, fuzzy +msgid "IPA Server Roles" +msgstr "Сервери IPA" + +#, fuzzy +msgid "IPA Server Role" +msgstr "Сервери IPA" + +#, fuzzy +msgid "IPA server role name" +msgstr "Сервери IPA" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "IPA role name" +msgstr "" + +#, fuzzy, python-brace-format +msgid "{role}: role not found" +msgstr "Файли %(file)s пайдо нашуд." + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +#, python-format +msgid "authentication indicators not allowed in service \"%s\"" +msgstr "" + +msgid "Malformed principal" +msgstr "" + +msgid "{} is required by the IPA master" +msgstr "" + +#, fuzzy +msgid "service" +msgstr "Хидмат" + +#, fuzzy +msgid "services" +msgstr "Хидмат" + +msgid "Service principal alias" +msgstr "" + +msgid "Base-64 encoded service certificate" +msgstr "" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +msgid "Add a new IPA service." +msgstr "" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "" + +msgid "force principal name even if host not in DNS" +msgstr "" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +msgid "Add a new SMB service." +msgstr "" + +msgid "SMB service NetBIOS name" +msgstr "" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to a service" +msgstr "" + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a service" +msgstr "" + +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +#, fuzzy +msgid "Member principals" +msgstr "Асосӣ" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Subordinate ids\n" +"\n" +"Manage subordinate user and group ids for users\n" +"\n" +"EXAMPLES:\n" +"\n" +" Auto-assign a subordinate id range to current user\n" +" ipa subid-generate\n" +"\n" +" Auto-assign a subordinate id range to user alice:\n" +" ipa subid-generate --owner=alice\n" +"\n" +" Find subordinate ids for user alice:\n" +" ipa subid-find --owner=alice\n" +"\n" +" Match entry by any subordinate uid in range:\n" +" ipa subid-match --subuid=2147483649\n" +msgstr "" + +msgid "Subordinate id" +msgstr "" + +msgid "Subordinate ids" +msgstr "" + +#, fuzzy +msgid "Subordinate id description" +msgstr "шарҳ" + +msgid "Owning user of subordinate id entry" +msgstr "" + +msgid "Start value for subordinate user ID (subuid) range" +msgstr "" + +msgid "Subordinate user ID count" +msgstr "" + +msgid "Start value for subordinate group ID (subgid) range" +msgstr "" + +msgid "Subordinate group ID count" +msgstr "" + +#, python-format +msgid "" +"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." +msgstr "" + +#, python-format +msgid "'%(dn)s is not a valid user" +msgstr "" + +msgid "subgidnumber must be equal to subuidnumber" +msgstr "" + +msgid "Add a new subordinate id." +msgstr "" + +#, python-format +msgid "Added subordinate id \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "Delete a subordinate id." +msgstr "Ҳамаро нест мекунед?" + +#, python-format +msgid "Deleted subordinate id \"%(value)s\"" +msgstr "" + +msgid "Modify a subordinate id." +msgstr "" + +#, python-format +msgid "Modified subordinate id \"%(value)s\"" +msgstr "" + +msgid "Search for subordinate id." +msgstr "" + +#, python-format +msgid "%(count)d subordinate id matched" +msgid_plural "%(count)d subordinate ids matched" +msgstr[0] "" + +msgid "Display information about a subordinate id." +msgstr "" + +msgid "Generate and auto-assign subuid and subgid range to user entry" +msgstr "" + +msgid "Match users by any subordinate uid in their range" +msgstr "" + +msgid "SubUID match" +msgstr "" + +msgid "Match value for subordinate user ID" +msgstr "" + +msgid "Subordinate id statistics" +msgstr "" + +#, python-format +msgid "%(remaining)i remaining subordinate id ranges" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +#, fuzzy +msgid "sudo command" +msgstr "Фармонҳо" + +#, fuzzy +msgid "sudo commands" +msgstr "Фармонҳо" + +#, fuzzy +msgid "Sudo Commands" +msgstr "Фармонҳо" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(value)s" +msgstr "" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "" + +#, fuzzy +msgid "trust configuration" +msgstr "Ҷӯрсозӣ" + +#, fuzzy +msgid "Global Trust Configuration" +msgstr "Ҷӯрсозӣ" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "" + +msgid "SID" +msgstr "" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +msgid "Domain enabled" +msgstr "" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "users" +msgstr "" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "" + +msgid "Failed logins" +msgstr "" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +msgid "Time now" +msgstr "" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the user entry" +msgstr "" + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +msgid "Vault Container" +msgstr "" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "" + +#, fuzzy +msgid "Vault configuration" +msgstr "Ҷӯрсозӣ" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "" + +msgid "Retrieve data from a vault." +msgstr "" + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +#, fuzzy +msgid "password policy" +msgstr "парол" + +#, fuzzy +msgid "password policies" +msgstr "парол" + +#, fuzzy +msgid "Password Policies" +msgstr "Парол" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +#, fuzzy +msgid "User check" +msgstr "Номи корбар" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be equal to or greater than the minimum." +msgstr "" + +msgid "cannot delete global password policy" +msgstr "" + +msgid "priority cannot be set on global policy" +msgstr "" + +#, fuzzy +msgid "" +"\n" +"IPA servers\n" +msgstr "Сервери IPA" + +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "" + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +#, fuzzy +msgid "server" +msgstr "Сервери IPA" + +msgid "servers" +msgstr "" + +#, fuzzy +msgid "IPA Servers" +msgstr "Сервери IPA" + +#, fuzzy +msgid "Server location" +msgstr "Номи сервер" + +#, fuzzy +msgid "Service weight" +msgstr "Хидмат" + +msgid "Weight for server services" +msgstr "" + +msgid "Service relative weight" +msgstr "" + +msgid "Relative weight for server services (counts per location)" +msgstr "" + +msgid "Enabled server roles" +msgstr "" + +msgid "List of enabled roles" +msgstr "" + +msgid "Modify information about an IPA server." +msgstr "" + +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "" + +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +#, python-format +msgid "Failed to remove server from security domain: %s" +msgstr "" + +msgid "Server has already been deleted" +msgstr "" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +#, fuzzy +msgid "State" +msgstr "Ҳолат" + +#, fuzzy +msgid "Server state" +msgstr "Номи сервер" + +#, python-format +msgid "Changed server state of \"%(value)s\"." +msgstr "" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." +msgstr "" + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"Each option needs to be added separately and no validation is done whether\n" +"the option is known by sudo or is in a valid format. Environment variables\n" +"also need to be set individually. For example env_keep=\"FOO BAR\" in " +"sudoers\n" +"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" +"+=BAR.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set multiple default Sudo options:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate' --" +"sudooption mail_badpass\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "" + +msgid "Sudo Rules" +msgstr "" + +#, fuzzy +msgid "Sudo Rule" +msgstr "Sudo" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +#, fuzzy +msgid "command" +msgstr "Фармонҳо" + +#, fuzzy +msgid "commands" +msgstr "Фармонҳо" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +msgid "group runAs" +msgstr "" + +#, fuzzy +msgid "runAs groups" +msgstr "Гурӯҳи корбар" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" msgstr "" msgid "Request must be a dict" @@ -23353,6 +23635,17 @@ msgstr "" msgid "params[1] (aka options) must be a dict" msgstr "" +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + #, python-format msgid "" "\n" @@ -23372,34 +23665,6 @@ msgstr "" msgid "Topology does not allow server %(server)s to replicate with servers:" msgstr "" -msgid "Trusting forest" -msgstr "" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Unknown" -msgstr "" - -msgid "Non-Active Directory domain" -msgstr "" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - msgid "" "\n" "Classes to manage trust joins using DCE-RPC calls\n" @@ -23559,6 +23824,34 @@ msgstr "" msgid "must be at least 1" msgstr "" +msgid "Out of memory\n" +msgstr "Берун аз хотира \n" + +msgid "Warning unrecognized encryption type.\n" +msgstr "" + +msgid "Warning unrecognized salt type.\n" +msgstr "" + +msgid "Out of memory!?\n" +msgstr "Аз хотира берун шуд!?\n" + +msgid "Enctype comparison failed!\n" +msgstr "" + +#, fuzzy +msgid "Password is too long!\n" +msgstr "Паролҳо номувофиқанд!" + +msgid "Failed to create random key!\n" +msgstr "" + +msgid "Failed to create key!\n" +msgstr "" + +msgid "Bad or unsupported salt type.\n" +msgstr "" + #, c-format msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" msgstr "" @@ -23585,25 +23878,3 @@ msgstr "" msgid "Unable to initialize STARTTLS session\n" msgstr "" - -msgid "Warning unrecognized encryption type.\n" -msgstr "" - -msgid "Warning unrecognized salt type.\n" -msgstr "" - -msgid "Enctype comparison failed!\n" -msgstr "" - -#, fuzzy -msgid "Password is too long!\n" -msgstr "Паролҳо номувофиқанд!" - -msgid "Failed to create random key!\n" -msgstr "" - -msgid "Failed to create key!\n" -msgstr "" - -msgid "Bad or unsupported salt type.\n" -msgstr "" diff --git a/po/tr.po b/po/tr.po index d15d9d8e2..7762cd5e5 100644 --- a/po/tr.po +++ b/po/tr.po @@ -1200,8 +1200,8 @@ msgstr "Boyut Sınırı" #, python-format msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set " -"LC_ALL=\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." msgstr "" "Sistem kodlaması UTF-8 olmalı, '%(encoding)s' desteklenmiyor. LC_ALL=\"C." "UTF-8\", veya LC_ALL=\"\" ve LC_CTYPE=\"C.UTF-8\" olarak ayarlayın." @@ -1479,8 +1479,8 @@ msgid "" "\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." msgstr "" "\"%(fwzone)s\" ileri bölgesi, \"%(authzone)s\" yetkili bölgesinde uygun NS " -"temsilcisinin eksik olması nedeniyle etkili değildir. Lütfen " -"\"%(authzone)s\" üst bölgesine \"%(ns_rec)s\" NS kaydını ekleyin." +"temsilcisinin eksik olması nedeniyle etkili değildir. Lütfen \"%(authzone)s" +"\" üst bölgesine \"%(ns_rec)s\" NS kaydını ekleyin." msgid "host category cannot be set to 'all' while there are allowed hosts" msgstr "" @@ -24370,3 +24370,440 @@ msgstr "" msgid "Bad or unsupported salt type.\n" msgstr "" + +msgid "Output debug info" +msgstr "" + +#, c-format +msgid "DNS discovery for domain %s\n" +msgstr "" + +#, c-format +msgid "Discovered server %s\n" +msgstr "" + +#, c-format +msgid "Using discovered server %s\n" +msgstr "" + +#, c-format +msgid "DNS Discovery failed\n" +msgstr "" + +#, c-format +msgid "Using server from config %s\n" +msgstr "" + +#, c-format +msgid "Using provided server %s\n" +msgstr "" + +#, fuzzy +msgid "Status of the certificate" +msgstr "bir sertifika olmalı" + +msgid "Enable adding subids to new users" +msgstr "" + +#, fuzzy +msgid "Setup SID configuration" +msgstr "RADIUS vekil sunucusu" + +msgid "New users and groups automatically get a SID assigned" +msgstr "" + +msgid "Add SIDs" +msgstr "" + +msgid "Add SIDs for existing users and groups" +msgstr "" + +msgid "NetBIOS name of the IPA domain" +msgstr "" + +#, fuzzy +msgid "not allowed to enable SID generation" +msgstr "Yaprak (leaf) olmayan girdilerde izin verilmiyor" + +msgid "" +"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " +"allowed. Empty string is not allowed." +msgstr "" + +#, fuzzy +msgid "Failed to call DBus" +msgstr "Okunacak dosya yok" + +msgid "Configuration of SID failed. See details in the error log" +msgstr "" + +#, python-format +msgid "You cannot specify %s without the --enable-sid option" +msgstr "" + +#, python-format +msgid "" +"No answers could be found in the specified lifetime for DNS reverse zone " +"%(revdns)s" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"and an ID range of a trusted domain may set\n" +" - auto-private-groups: [true|false|hybrid] automatic creation of private " +"groups\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +#, fuzzy +msgid "Auto private groups" +msgstr "yönetilen grupları ara" + +msgid "Auto creation of private groups, one of allowed values" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --auto-private-groups\n" +"\n" +" may be given for a new ID range for a trusted AD domain and\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" +"private-groups is specified" +msgstr "" + +msgid "Add subid" +msgstr "" + +msgid "Assigned subids" +msgstr "" + +msgid "DNA remaining" +msgstr "" + +msgid "SubGID range size" +msgstr "" + +msgid "SubGID range start" +msgstr "" + +msgid "SubUID range size" +msgstr "" + +msgid "SubUID range start" +msgstr "" + +msgid "Remaining subids" +msgstr "" + +msgid "Subordinate ID Statistics" +msgstr "" + +msgid "Auto assign subordinate ids" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to auto-assign a subordinate id to user ${object}?" +msgstr "" + +msgid "Subordinate IDs" +msgstr "" + +#, fuzzy, python-brace-format +msgid "{oname}: {command_name} not found" +msgstr "%(filename)s: dosya bulunamadı" + +#, python-format +msgid "authentication indicators not allowed in service \"%s\"" +msgstr "" + +msgid "" +"\n" +"Subordinate ids\n" +"\n" +"Manage subordinate user and group ids for users\n" +"\n" +"EXAMPLES:\n" +"\n" +" Auto-assign a subordinate id range to current user\n" +" ipa subid-generate\n" +"\n" +" Auto-assign a subordinate id range to user alice:\n" +" ipa subid-generate --owner=alice\n" +"\n" +" Find subordinate ids for user alice:\n" +" ipa subid-find --owner=alice\n" +"\n" +" Match entry by any subordinate uid in range:\n" +" ipa subid-match --subuid=2147483649\n" +msgstr "" + +msgid "Subordinate id" +msgstr "" + +msgid "Subordinate ids" +msgstr "" + +#, fuzzy +msgid "Subordinate id description" +msgstr "Ağ grubu açıklaması" + +msgid "Owning user of subordinate id entry" +msgstr "" + +msgid "Start value for subordinate user ID (subuid) range" +msgstr "" + +msgid "Subordinate user ID count" +msgstr "" + +msgid "Start value for subordinate group ID (subgid) range" +msgstr "" + +msgid "Subordinate group ID count" +msgstr "" + +#, python-format +msgid "" +"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." +msgstr "" + +#, fuzzy, python-format +msgid "'%(dn)s is not a valid user" +msgstr "%(port)s geçerli bir bağlantı noktası değil" + +msgid "subgidnumber must be equal to subuidnumber" +msgstr "" + +#, fuzzy +msgid "Add a new subordinate id." +msgstr "Yeni bir ağ grubu ekle." + +#, fuzzy, python-format +msgid "Added subordinate id \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" eklendi" + +#, fuzzy +msgid "Delete a subordinate id." +msgstr "bir sertifika olmalı" + +#, fuzzy, python-format +msgid "Deleted subordinate id \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" silindi" + +#, fuzzy +msgid "Modify a subordinate id." +msgstr "Bir ağ grubunu değiştir." + +#, fuzzy, python-format +msgid "Modified subordinate id \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" değiştirildi" + +#, fuzzy +msgid "Search for subordinate id." +msgstr "Bir ağ grubu ara." + +#, fuzzy, python-format +msgid "%(count)d subordinate id matched" +msgid_plural "%(count)d subordinate ids matched" +msgstr[0] "%(count)d self-servis eşleşti" +msgstr[1] "%(count)d self-servis eşleşti" + +#, fuzzy +msgid "Display information about a subordinate id." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +msgid "Generate and auto-assign subuid and subgid range to user entry" +msgstr "" + +msgid "Match users by any subordinate uid in their range" +msgstr "" + +msgid "SubUID match" +msgstr "" + +msgid "Match value for subordinate user ID" +msgstr "" + +msgid "Subordinate id statistics" +msgstr "" + +#, python-format +msgid "%(remaining)i remaining subordinate id ranges" +msgstr "" + +msgid "Maximum password life must be equal to or greater than the minimum." +msgstr "" + +#, fuzzy, python-format +msgid "Failed to remove server from security domain: %s" +msgstr "'%(server)s' sunucusunda hata: %(error)s" + +msgid "" +"\n" +"Each option needs to be added separately and no validation is done whether\n" +"the option is known by sudo or is in a valid format. Environment variables\n" +"also need to be set individually. For example env_keep=\"FOO BAR\" in " +"sudoers\n" +"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" +"+=BAR.\n" +msgstr "" + +msgid "" +"\n" +" Set multiple default Sudo options:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate' --" +"sudooption mail_badpass\n" +msgstr "" diff --git a/po/uk.po b/po/uk.po index 40e462121..a0d33a8fb 100644 --- a/po/uk.po +++ b/po/uk.po @@ -17,8 +17,8 @@ msgstr "" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" -"Plural-Forms: nplurals=3; plural=n%10==1 && n%100!=11 ? 0 : n%10>=2 && " -"n%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2;\n" +"Plural-Forms: nplurals=3; plural=n%10==1 && n%100!=11 ? 0 : n%10>=2 && n" +"%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2;\n" "X-Generator: Weblate 4.6\n" msgid "" @@ -1121,13 +1121,13 @@ msgstr "" msgid "" "\n" " Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red " -"Hat\"\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" msgstr "" "\n" " Змінити постачальника:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red " -"Hat\"\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" msgid "" "\n" @@ -3425,8 +3425,8 @@ msgid "" "with\n" " posixGroup object class is allowed):\n" "\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB " -"Group\"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" msgstr "" "\n" "Довіра між областями\n" @@ -3528,8 +3528,8 @@ msgstr "" "3. Повернути для резервної основної групи значення типової прихованої групи\n" " (будь-якої групи, у якій дозволено клас об’єктів posixGroup):\n" "\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB " -"Group\"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" msgid "" "\n" @@ -3619,15 +3619,15 @@ msgid "" " primary user GID if user authenticating to IPA domain does not have any\n" " other primary GID already set):\n" "\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD " -"group\"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" "\n" "3. Change primary fallback group back to default hidden group (any group " "with\n" " posixGroup object class is allowed):\n" "\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB " -"Group\"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" msgstr "" "\n" "Довіра між областями\n" @@ -3723,14 +3723,14 @@ msgstr "" " розпізнано у домені IPA, але він не має жодного вже встановленого\n" " основного GID):\n" "\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD " -"group\"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" "\n" "3. Повернути для резервної основної групи значення типової прихованої групи\n" " (будь-якої групи, у якій дозволено клас об’єктів posixGroup):\n" "\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB " -"Group\"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" msgid "" "\n" @@ -4037,8 +4037,8 @@ msgstr "" "та індексу всіх, хто працює начальником:\n" " ipa aci-add --permissions=write --group=admins --attrs=street --" "attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," -"dc=example,dc=com)\" --prefix=none \"Зміна адрес тих, хто працює " -"начальником\"\n" +"dc=example,dc=com)\" --prefix=none \"Зміна адрес тих, хто працює начальником" +"\"\n" "\n" " Додавання повністю нового типу записів до IPA, який не визначається жодним " "з параметрів --type, створення прав доступу:\n" @@ -4151,8 +4151,8 @@ msgid "" " Add an ACI that allows members of the admins group to manage the street and " "zip code of those in the editors group:\n" " ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"admins edit the address of " -"editors\"\n" +"attrs=street,postalcode --prefix=none \"admins edit the address of editors" +"\"\n" "\n" " Add an ACI that allows the admins group manage the street and zipcode of " "those who work for the boss:\n" @@ -4371,9 +4371,9 @@ msgid "" " ipa dnszone-mod example.com --dynamic-update=TRUE\n" "\n" " This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-" -"policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * " -"AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" "\n" " Modify the zone to allow zone transfers for local network only:\n" " ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" @@ -4580,9 +4580,9 @@ msgstr "" " ipa dnszone-mod example.com --dynamic-update=TRUE\n" "\n" " Ця команда еквівалентна до такої команди:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-" -"policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * " -"AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" "\n" " Зміна зони таким чином, щоб дозволити перенесення зони лише для локальної " "мережі:\n" @@ -4798,9 +4798,9 @@ msgid "" " ipa dnszone-mod example.com --dynamic-update=TRUE\n" "\n" " This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-" -"policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * " -"AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" "\n" " Modify the zone to allow zone transfers for local network only:\n" " ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" @@ -5888,8 +5888,8 @@ msgid "" " Allow user \"test2\" to add or remove members from group \"localadmins\":\n" " ipa group-add-member-manager --users=test2 localadmins\n" "\n" -" Revoke membership management rights for user \"test2\" from " -"\"localadmins\":\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" " ipa group-remove-member-manager --users=test2 localadmins\n" "\n" "External group membership is designed to allow users from trusted domains\n" @@ -6769,8 +6769,8 @@ msgid "" "\n" "EXAMPLES:\n" "\n" -" Create a rule, \"test1\", that grants all users access to the host " -"\"server\" from\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" " anywhere:\n" " ipa hbacrule-add --usercat=all --srchostcat=all test1\n" " ipa hbacrule-add-host --hosts=server.example.com test1\n" @@ -6868,8 +6868,8 @@ msgid "" "\n" "EXAMPLES:\n" "\n" -" Create a rule, \"test1\", that grants all users access to the host " -"\"server\" from\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" " anywhere:\n" " ipa hbacrule-add --usercat=all test1\n" " ipa hbacrule-add-host --hosts=server.example.com test1\n" @@ -8879,8 +8879,8 @@ msgid "" " Display the properties of a named CA ACL:\n" " ipa caacl-show test\n" "\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-" -"CA\":\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" " ipa caacl-add alice_dnp3\n" " ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" " ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" @@ -9913,8 +9913,8 @@ msgid "" " ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" "\n" " Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red " -"Hat\"\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" "\n" " Delete a token:\n" " ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" @@ -9935,8 +9935,8 @@ msgstr "" " ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" "\n" " Змінити постачальника:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red " -"Hat\"\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" "\n" " Вилучити жетон:\n" " ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" @@ -10492,8 +10492,8 @@ msgid "" "\n" "{\"method\":\"batch\",\"params\":[[\n" " {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\"," -"\"all\":\"true\"}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" " {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" " ],{}],\"id\":1}\n" "\n" @@ -10522,8 +10522,8 @@ msgstr "" "\n" "{\"method\":\"batch\",\"params\":[[\n" " {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\"," -"\"all\":\"true\"}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" " {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" " ],{}],\"id\":1}\n" "\n" @@ -10554,8 +10554,8 @@ msgid "" "\n" "{\"method\":\"batch\",\"params\":[[\n" " {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\"," -"\"all\":\"true\"}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" " {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" " ],{}],\"id\":1}\n" "\n" @@ -10585,8 +10585,8 @@ msgstr "" "\n" "{\"method\":\"batch\",\"params\":[[\n" " {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\"," -"\"all\":\"true\"}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" " {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" " ],{}],\"id\":1}\n" "\n" @@ -16897,8 +16897,8 @@ msgid "" "\n" "
\n" "

\n" -" If this is your first time, please configure your browser.\n" +" If this is your first time, please configure your browser.\n" "

\n" "
\n" msgstr "" @@ -16913,8 +16913,8 @@ msgstr "" "\n" "
\n" "

\n" -" Якщо це вперше, будь ласка, налаштуйте ваш браузер.\n" +" Якщо це вперше, будь ласка, налаштуйте ваш браузер.\n" "

\n" "
\n" @@ -17190,8 +17190,8 @@ msgid "" "authenticate, for example, .example.com.\n" "\n" -"
  • Return to Web UI
    • \n" +"
  • Return to Web UI
    • \n" "\n" "\n" msgstr "" @@ -17224,8 +17224,8 @@ msgstr "" "розпізнавання, наприклад, .example.com.\n" "\n" -"
  • Повернутися до інтернет-інтерфейсу
    • \n" +"
  • Повернутися до інтернет-інтерфейсу
    • \n" "\n" "\n" @@ -17244,8 +17244,8 @@ msgstr "" "Щоб створити нову базу даних, віддайте команду:
    # certutil -N -d " "<шлях до бази даних>
  • Створити CSR з призначенням " "CN=<${cn_name}>,O=<область>, наприклад:
    # " -"certutil -R -d <шлях до бази даних> -a -g <розмір ключа> -s " -"'CN=${cn},O=${realm}'${san}
  • Скопіюйте і вставте CSR (від " +"certutil -R -d <шлях до бази даних> -a -g <розмір ключа> -s 'CN=" +"${cn},O=${realm}'${san}
  • Скопіюйте і вставте CSR (від " "-----BEGIN NEW CERTIFICATE REQUEST----- до -----END NEW " "CERTIFICATE REQUEST-----) до області для введення тексту, розташованої " "нижче:
    • " @@ -19396,8 +19396,8 @@ msgstr "Ваші реєстраційні дані відхилено серве #, python-format msgid "" -"CIFS server communication error: code \"%(num)s\", message " -"\"%(message)s\" (both may be \"None\")" +"CIFS server communication error: code \"%(num)s\", message \"%(message)s" +"\" (both may be \"None\")" msgstr "" "Помилка обміну даними з сервером CIFS: код «%(num)s», повідомлення " "«%(message)s» (обидва значення можуть бути «None»)" @@ -28728,12 +28728,12 @@ msgstr "Оновлено записи DNS системи" #, python-format msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set " -"LC_ALL=\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." msgstr "" "Кодуванням системи має бути UTF-8, підтримки «%(encoding)s» не передбачено. " -"Встановіть такі значення змінних середовища: LC_ALL=\"C.UTF-8\" або " -"LC_ALL=\"\" і LC_CTYPE=\"C.UTF-8\"." +"Встановіть такі значення змінних середовища: LC_ALL=\"C.UTF-8\" або LC_ALL=" +"\"\" і LC_CTYPE=\"C.UTF-8\"." msgid "TA record" msgstr "Запис TA" @@ -32029,6 +32029,815 @@ msgid "Maximum password life must be greater than minimum." msgstr "" "Максимальний строк дії пароля має перевищувати мінімальний строк його дії." +msgid "Output debug info" +msgstr "" + +#, c-format +msgid "DNS discovery for domain %s\n" +msgstr "" + +#, fuzzy, c-format +msgid "Discovered server %s\n" +msgstr "Повідомлено серверами" + +#, c-format +msgid "Using discovered server %s\n" +msgstr "" + +#, c-format +msgid "DNS Discovery failed\n" +msgstr "" + +#, c-format +msgid "Using server from config %s\n" +msgstr "" + +#, fuzzy, c-format +msgid "Using provided server %s\n" +msgstr "Перевірити луна-імпульсом (пінгом) віддалений сервер." + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" +"\n" +"Правила sudo\n" +"\n" +"Sudo (su \"do\") надає системному адміністратору змогу делегувати\n" +"повноваження певним користувачам (або групам користувачів) на виконання\n" +"деяких (або усіх) команд від імені адміністратора (root) або іншого\n" +"користувача, зберігаючи водночас журнал виконання команд та\n" +"аргументів.\n" +"\n" +"У IPA передбачено декілька параметрів налаштовування роботи sudo:\n" +" Users: користувачі або групи, які можуть викликати sudo.\n" +" Hosts: вузли або групи вузлів, користувачі якого можуть викликати sudo.\n" +" Allow Command: специфічні команди, які можна виконувати за допомогою " +"sudo.\n" +" Deny Command: специфічні команди, які не можна виконувати за допомогою " +"sudo.\n" +" RunAsUser: користувачі або групи, від імені яких sudo виконуватиме " +"команди.\n" +" RunAsGroup: групи, ідентифікатори яких буде використано sudo для " +"виконання команд.\n" +" Options: різноманітні параметри sudoers, які можуть змінити поведінку " +"sudo.\n" +"\n" +"До правила sudo можна додати порядок, який керуватиме порядком\n" +"обробки записів (якщо такий порядок передбачено на клієнтському боці).\n" +"Порядок визначається числовим індексом, який не повинен повторюватися.\n" +"\n" +"У IPA передбачено визначений binddn для використання з sudo, який " +"розташовано у\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"Щоб увімкнути binddn, віддайте таку команду для встановлення пароля:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Створити правило:\n" +" ipa sudorule-add readfiles\n" +"\n" +" Додати об’єкт команди sudo і записати його як дозволену команду до " +"правила:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"\n" +" Додати запис вузла до правила:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"\n" +" Додати запис користувача до правила:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +"\n" +" Додати особливе правило sudo для типового налаштовування сервера sudo:\n" +" ipa sudorule-add defaults\n" +"\n" +" Встановити типовий варіант дій для sudo:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"For more information, see the IPA Documentation to Sudo.\n" +msgstr "" +"\n" +"Правила sudo\n" +"\n" +"Sudo (su \"do\") надає системному адміністратору змогу делегувати\n" +"повноваження певним користувачам (або групам користувачів) на виконання\n" +"деяких (або усіх) команд від імені адміністратора (root) або іншого\n" +"користувача, зберігаючи водночас журнал виконання команд та\n" +"аргументів.\n" +"\n" +"У IPA передбачено декілька параметрів налаштовування роботи sudo:\n" +" Users: користувачі або групи, які можуть викликати sudo.\n" +" Hosts: вузли або групи вузлів, користувачі якого можуть викликати sudo.\n" +" Allow Command: специфічні команди, які можна виконувати за допомогою " +"sudo.\n" +" Deny Command: специфічні команди, які не можна виконувати за допомогою " +"sudo.\n" +" RunAsUser: користувачі або групи, від імені яких sudo виконуватиме " +"команди.\n" +" RunAsGroup: групи, ідентифікатори яких буде використано sudo для " +"виконання команд.\n" +" Options: різноманітні параметри sudoers, які можуть змінити поведінку " +"sudo.\n" +"\n" +"До правила sudo можна додати порядок, який керуватиме порядком\n" +"обробки записів (якщо такий порядок передбачено на клієнтському боці).\n" +"Порядок визначається числовим індексом, який не повинен повторюватися.\n" +"\n" +"У IPA передбачено визначений binddn для використання з sudo, який " +"розташовано у\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"Щоб увімкнути binddn, віддайте таку команду для встановлення пароля:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"Докладніші відомості наведено у документації з IPA щодо sudo.\n" + +#, fuzzy +msgid "Status of the certificate" +msgstr "Призначення сертифіката" + +msgid "Enable adding subids to new users" +msgstr "" + +#, fuzzy +msgid "Setup SID configuration" +msgstr "довірені налаштування" + +msgid "New users and groups automatically get a SID assigned" +msgstr "" + +#, fuzzy +msgid "Add SIDs" +msgstr "Додати перегляд ідентифікатора" + +msgid "Add SIDs for existing users and groups" +msgstr "" + +#, fuzzy +msgid "NetBIOS name of the IPA domain" +msgstr "Назва довіреного домену" + +#, fuzzy +msgid "not allowed to enable SID generation" +msgstr "виконувати цю дію заборонено: %s" + +msgid "" +"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " +"allowed. Empty string is not allowed." +msgstr "" + +#, fuzzy +msgid "Failed to call DBus" +msgstr "Не вдалося додати" + +#, fuzzy +msgid "Configuration of SID failed. See details in the error log" +msgstr "" +"Спроба отримати список доменів із довіреного лісу зазнала невдачі. Подробиці " +"можна знайти у error_log" + +#, python-format +msgid "You cannot specify %s without the --enable-sid option" +msgstr "" + +#, fuzzy, python-format +msgid "" +"No answers could be found in the specified lifetime for DNS reverse zone " +"%(revdns)s" +msgstr "" +"Не вдалося отримати відповідь на запит щодо зворотної зони DNS %(revdns)s " +"від жодного із серверів назв" + +#, fuzzy +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"and an ID range of a trusted domain may set\n" +" - auto-private-groups: [true|false|hybrid] automatic creation of private " +"groups\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" +"\n" +"Діапазони ідентифікаторів\n" +"\n" +"Керування діапазонами ідентифікаторів, використаних для відображення\n" +"ідентифікаторів POSIX на SID, і навпаки.\n" +"\n" +"За допомогою цієї програми можна керувати обома типами діапазонів " +"ідентифікаторів:\n" +"\n" +" - діапазони ідентифікаторів локального домену\n" +" - діапазони ідентифікаторів довірених віддалених доменів\n" +"\n" +"Обидва типи мають такі спільні атрибути:\n" +"\n" +" - base-id: перший ідентифікатор діапазону ідентифікаторів POSIX\n" +" - range-size: розмір діапазону\n" +"\n" +"На основі цих двох атрибутів об’єкт діапазону може зарезервувати " +"ідентифікатори\n" +"POSIX, починаючи з base-id аж до, але не включно, base-id+range-size.\n" +"\n" +"Крім того, можна встановити діапазон ідентифікаторів локального домену\n" +" - rid-base: перший RID(*) відповідного діапазону RID\n" +" - secondary-rid-base: перший RID вторинного діапазону RID\n" +"\n" +"а діапазон ідентифікаторів довіреного домену слід задавати за допомогою\n" +" - rid-base: перший RID відповідного діапазону RID\n" +" - dom_sid: SID довіреного домену\n" +"\n" +"\n" +"\n" +"ПРИКЛАД: додавання нового діапазону ідентифікаторів для довіреного домену\n" +"\n" +"Оскільки може бути декілька довірених доменів, під час створення діапазону\n" +"ідентифікаторів слід вказати SID домену.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"Цей діапазон ідентифікаторів потім використовуватиметься сервером IPA\n" +"та надавачем даних IPA SSSD для призначення UID Posix користувачам з\n" +"довіреного домену.\n" +"\n" +"Якщо, наприклад, налаштовано діапазон для довіреного домену з такими\n" +"значеннями:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"RID від 0 до 199999 прив’язуються до ідентифікаторів Posix від 1200000 до\n" +"13999999. Отже RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"ПРИКЛАД: додавання нового діапазону ідентифікаторів до локального домену\n" +"\n" +"Щоб створити діапазон ідентифікаторів для локального домену не потрібно\n" +"вказувати SID домену. Але оскільки можливий конфлікт між ідентифікаторами\n" +"користувача і групи та ідентифікаторами POSIX, потрібен вторинний інтервал\n" +"RID.\n" +"\n" +" ipa range-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"Дані з діапазонів ідентифікаторів локального домену використовуються\n" +"сервером IPA на внутрішньому рівні для призначення SID користувачам і " +"групам\n" +"IPA. SID буде збережено у об’єктах користувача або групи.\n" +"\n" +"Якщо, наприклад, для діапазону ідентифікаторів локального домену визначено\n" +"значення з наведеного вище прикладу, новий користувач з UID 1200007 отримає\n" +"RID 1007. Якщо цей RID вже буде використано групою, його буде змінено на " +"1000007.\n" +"Таке може трапитися лише, якщо об’єкт користувача або групи було створено з\n" +"фіксованим ідентифікатором, оскільки у разі автоматичного призначення один\n" +"ідентифікатор не може бути призначено двічі. Оскільки спільний простір назв\n" +"є лише у користувачів і груп, достатньо одного резервного діапазону для\n" +"того, щоб повністю позбутися конфліктів.\n" +"\n" +"Для визначення ідентифікатора POSIX за вказаним RID з локального домену " +"слід\n" +"спочатку перевірити, чи потрапляє RID у основний або вторинний діапазон " +"RID,\n" +"також, щоб отримати ідентифікатор POSIX, слід відняти від ідентифікатор rid-" +"base\n" +"або secondary-rid-base, відповідно, і додати base-id.\n" +"\n" +"Типово, створення діапазонів ідентифікаторів є зовні непомітним і потреби у\n" +"цьому інтерфейсі командного рядка не виникає. Діапазон ідентифікаторів\n" +"для локального домену буде створено під час встановлення або оновлення\n" +"попередньої версії. Діапазон ідентифікаторів для довіреного домену буде\n" +"створено разом з записом довіри командою «ipa trust-add ...».\n" +"Нижче наведено можливі випадки використання цього командного інтерфейсу.\n" +"\n" +"ВИПАДКИ ВИКОРИСТАННЯ:\n" +"\n" +" Додавання діапазону ідентифікаторів з перехідного довіреного домену\n" +"\n" +" Якщо довірений домен (A) довіряється іншому домену (B) і цей запис\n" +" довіри є перехідним, «ipa trust-add домен-A» створить лише діапазон\n" +" для домену A. Діапазон ідентифікаторів домену B має бути додано вручну.\n" +"\n" +" Додавання додаткового діапазону ідентифікаторів для локального домену\n" +"\n" +" Якщо діапазон ідентифікаторів локального домену вичерпано, тобто " +"додатком\n" +" DNA не може бути призначено нові ідентифікатори користувачам або групам\n" +" POSIX, має бути створено новий діапазон для додавання нових " +"користувачів\n" +" та груп. (У поточній версії між цим командним інтерфейсом і додатком " +"DNA\n" +" немає безпосереднього зв’язку, але у майбутній версії може бути " +"передбачено\n" +" можливість внесення змін і до налаштувань додатка DNS.)\n" +"\n" +"Загалом, потреби у зміні або вилученні діапазонів ідентифікаторів немає.\n" +"Якщо немає іншого виходу, окрім внесення змін або вилучення діапазону\n" +"ідентифікаторів, робити це слід дуже обережно. Оскільки UID зберігаються у\n" +"файловій системі і використовуються для керування доступом, можлива " +"ситуація,\n" +"коли одні користувачі отримуватимуть доступ до файлів інших користувачів\n" +"у разі вилучення діапазону ідентифікаторів і повторного його використання\n" +"у іншому домені.\n" +"\n" +"(*) RID типово є останнім цілим числом SID користувача або групи, перед " +"якими\n" +"має бути вказано SID домену. Наприклад, якщо SID домену " +"S-1-5-21-123-456-789, а\n" +"користувач з цього домену має SID S-1-5-21-123-456-789-1010, RID " +"користувача\n" +"буде 1010. RID є унікальними в межах домену, є 32-бітовими значенням і\n" +"використовуються для користувачів і груп.\n" + +#, fuzzy +msgid "Auto private groups" +msgstr "Немає приватної групи" + +#, fuzzy +msgid "Auto creation of private groups, one of allowed values" +msgstr "Тип діапазону ідентифікаторів, одне з дозволених значень" + +#, fuzzy +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --auto-private-groups\n" +"\n" +" may be given for a new ID range for a trusted AD domain and\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" +"\n" +" Додати новий діапазон ідентифікаторів.\n" +"\n" +" Щоб додати новий діапазон ідентифікаторів, вам слід завжди вказати\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Крім того, можна вказати\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" для нового діапазону ідентифікаторів для локального домену, а\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" слід вказати для додавання нового діапазону для довіреного домену AD.\n" +"\n" + +#, fuzzy +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" +"private-groups is specified" +msgstr "" +"Якщо вказано SID довіреного домену, типом діапазону IPA має бути ipa-ad-" +"trust або ipa-ad-trust-posix" + +#, fuzzy +msgid "Add subid" +msgstr "Додати правило sudo" + +#, fuzzy +msgid "Assigned subids" +msgstr "Перегляд призначених ідентифікаторів" + +msgid "DNA remaining" +msgstr "" + +#, fuzzy +msgid "SubGID range size" +msgstr "Розмір діапазону" + +msgid "SubGID range start" +msgstr "" + +#, fuzzy +msgid "SubUID range size" +msgstr "Розмір діапазону" + +msgid "SubUID range start" +msgstr "" + +msgid "Remaining subids" +msgstr "" + +msgid "Subordinate ID Statistics" +msgstr "" + +msgid "Auto assign subordinate ids" +msgstr "" + +#, fuzzy, python-brace-format +msgid "" +"Are you sure you want to auto-assign a subordinate id to user ${object}?" +msgstr "Ви справді хочете розблокувати користувача ${object}?" + +msgid "Subordinate IDs" +msgstr "" + +#, fuzzy, python-brace-format +msgid "{oname}: {command_name} not found" +msgstr "{role}: такої ролі не знайдено" + +#, fuzzy, python-format +msgid "authentication indicators not allowed in service \"%s\"" +msgstr "Індикатори розпізнавання" + +msgid "" +"\n" +"Subordinate ids\n" +"\n" +"Manage subordinate user and group ids for users\n" +"\n" +"EXAMPLES:\n" +"\n" +" Auto-assign a subordinate id range to current user\n" +" ipa subid-generate\n" +"\n" +" Auto-assign a subordinate id range to user alice:\n" +" ipa subid-generate --owner=alice\n" +"\n" +" Find subordinate ids for user alice:\n" +" ipa subid-find --owner=alice\n" +"\n" +" Match entry by any subordinate uid in range:\n" +" ipa subid-match --subuid=2147483649\n" +msgstr "" + +msgid "Subordinate id" +msgstr "" + +msgid "Subordinate ids" +msgstr "" + +#, fuzzy +msgid "Subordinate id description" +msgstr "Опис профілю" + +msgid "Owning user of subordinate id entry" +msgstr "" + +msgid "Start value for subordinate user ID (subuid) range" +msgstr "" + +msgid "Subordinate user ID count" +msgstr "" + +msgid "Start value for subordinate group ID (subgid) range" +msgstr "" + +msgid "Subordinate group ID count" +msgstr "" + +#, fuzzy, python-format +msgid "" +"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." +msgstr "%(oname)s з назвою «%(pkey)s» вже існує" + +#, fuzzy, python-format +msgid "'%(dn)s is not a valid user" +msgstr "%(port)s не є чинним портом" + +msgid "subgidnumber must be equal to subuidnumber" +msgstr "" + +#, fuzzy +msgid "Add a new subordinate id." +msgstr "Додати нового користувача етапу." + +#, fuzzy, python-format +msgid "Added subordinate id \"%(value)s\"" +msgstr "Додано службу «%(value)s»" + +#, fuzzy +msgid "Delete a subordinate id." +msgstr "Вилучити профіль сертифікатів." + +#, fuzzy, python-format +msgid "Deleted subordinate id \"%(value)s\"" +msgstr "Вилучено службу «%(value)s»" + +#, fuzzy +msgid "Modify a subordinate id." +msgstr "Змінити запис користувача етапу." + +#, fuzzy, python-format +msgid "Modified subordinate id \"%(value)s\"" +msgstr "Змінено службу «%(value)s»" + +#, fuzzy +msgid "Search for subordinate id." +msgstr "Шукати діапазони." + +#, fuzzy, python-format +msgid "%(count)d subordinate id matched" +msgid_plural "%(count)d subordinate ids matched" +msgstr[0] "встановлено відповідність %(count)d служби" +msgstr[1] "встановлено відповідність %(count)d служб" +msgstr[2] "встановлено відповідність %(count)d служб" + +#, fuzzy +msgid "Display information about a subordinate id." +msgstr "Показати дані щодо діапазону." + +msgid "Generate and auto-assign subuid and subgid range to user entry" +msgstr "" + +msgid "Match users by any subordinate uid in their range" +msgstr "" + +msgid "SubUID match" +msgstr "" + +msgid "Match value for subordinate user ID" +msgstr "" + +msgid "Subordinate id statistics" +msgstr "" + +#, python-format +msgid "%(remaining)i remaining subordinate id ranges" +msgstr "" + +#, fuzzy +msgid "Maximum password life must be equal to or greater than the minimum." +msgstr "" +"Максимальний строк дії пароля має перевищувати мінімальний строк його дії." + +#, fuzzy, python-format +msgid "Failed to remove server from security domain: %s" +msgstr "" +"Не вдалося вилучити запис сервера %(master)s зі списку серверів: %(err)s" + +msgid "" +"\n" +"Each option needs to be added separately and no validation is done whether\n" +"the option is known by sudo or is in a valid format. Environment variables\n" +"also need to be set individually. For example env_keep=\"FOO BAR\" in " +"sudoers\n" +"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" +"+=BAR.\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" +"\n" +"Щоб увімкнути binddn, віддайте таку команду для встановлення пароля:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" + +#, fuzzy +msgid "" +"\n" +" Set multiple default Sudo options:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate' --" +"sudooption mail_badpass\n" +msgstr "" +"\n" +" Встановити типовий варіант дій для sudo:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" + #~ msgid "" #~ "\n" #~ " Delete a CA.\n" diff --git a/po/zh_CN.po b/po/zh_CN.po index 9156086ca..7c3ea921c 100644 --- a/po/zh_CN.po +++ b/po/zh_CN.po @@ -2610,8 +2610,8 @@ msgstr "CIFS服务器%(host)s阻止你的凭证" #, python-format msgid "" -"CIFS server communication error: code \"%(num)s\", message " -"\"%(message)s\" (both may be \"None\")" +"CIFS server communication error: code \"%(num)s\", message \"%(message)s" +"\" (both may be \"None\")" msgstr "" "CIFS服务器通信错误：代码\"%(num)s\"，消息\"%(message)s\"（两者都有可能没有任" "何信息）" @@ -23992,6 +23992,454 @@ msgstr "不能初始化ldap库！\n" msgid "Password is too long!\n" msgstr "密码历史大小" +msgid "Output debug info" +msgstr "" + +#, c-format +msgid "DNS discovery for domain %s\n" +msgstr "" + +#, fuzzy, c-format +msgid "Discovered server %s\n" +msgstr "由服务器公布" + +#, c-format +msgid "Using discovered server %s\n" +msgstr "" + +#, c-format +msgid "DNS Discovery failed\n" +msgstr "" + +#, c-format +msgid "Using server from config %s\n" +msgstr "" + +#, fuzzy, c-format +msgid "Using provided server %s\n" +msgstr "Ping一台远程服务器。" + +#, fuzzy +msgid "Status of the certificate" +msgstr "存储证书文件。" + +msgid "Enable adding subids to new users" +msgstr "" + +#, fuzzy +msgid "Setup SID configuration" +msgstr "信任配置" + +msgid "New users and groups automatically get a SID assigned" +msgstr "" + +#, fuzzy +msgid "Add SIDs" +msgstr "添加一个新的ID视图。" + +msgid "Add SIDs for existing users and groups" +msgstr "" + +#, fuzzy +msgid "NetBIOS name of the IPA domain" +msgstr "信任域的名称" + +#, fuzzy +msgid "not allowed to enable SID generation" +msgstr "不允许执行操作：%s" + +msgid "" +"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " +"allowed. Empty string is not allowed." +msgstr "" + +#, fuzzy +msgid "Failed to call DBus" +msgstr "添加失败" + +#, fuzzy +msgid "Configuration of SID failed. See details in the error log" +msgstr "从信任森林中获取域失败。在error_log中查看详细信息" + +#, python-format +msgid "You cannot specify %s without the --enable-sid option" +msgstr "" + +#, python-format +msgid "" +"No answers could be found in the specified lifetime for DNS reverse zone " +"%(revdns)s" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"and an ID range of a trusted domain may set\n" +" - auto-private-groups: [true|false|hybrid] automatic creation of private " +"groups\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +#, fuzzy +msgid "Auto private groups" +msgstr "没有私有组" + +#, fuzzy +msgid "Auto creation of private groups, one of allowed values" +msgstr "信任域ID范围的类型，是ipa-ad-trust-posix和ipa-ad-trust中的一个" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --auto-private-groups\n" +"\n" +" may be given for a new ID range for a trusted AD domain and\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, fuzzy +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" +"private-groups is specified" +msgstr "" +"当信任域的SID被指定时，IPA范围类型必须是ipa-ad-trust或ipa-ad-trust-posix中的" +"一个" + +#, fuzzy +msgid "Add subid" +msgstr "sudo规则" + +#, fuzzy +msgid "Assigned subids" +msgstr "已分配的ID视图" + +msgid "DNA remaining" +msgstr "" + +#, fuzzy +msgid "SubGID range size" +msgstr "范围大小" + +msgid "SubGID range start" +msgstr "" + +#, fuzzy +msgid "SubUID range size" +msgstr "范围大小" + +msgid "SubUID range start" +msgstr "" + +msgid "Remaining subids" +msgstr "" + +msgid "Subordinate ID Statistics" +msgstr "" + +msgid "Auto assign subordinate ids" +msgstr "" + +#, fuzzy, python-brace-format +msgid "" +"Are you sure you want to auto-assign a subordinate id to user ${object}?" +msgstr "你确定要解锁用户${object}？" + +msgid "Subordinate IDs" +msgstr "" + +#, fuzzy, python-brace-format +msgid "{oname}: {command_name} not found" +msgstr "{role}：角色没有找到" + +#, fuzzy, python-format +msgid "authentication indicators not allowed in service \"%s\"" +msgstr "认证指标" + +msgid "" +"\n" +"Subordinate ids\n" +"\n" +"Manage subordinate user and group ids for users\n" +"\n" +"EXAMPLES:\n" +"\n" +" Auto-assign a subordinate id range to current user\n" +" ipa subid-generate\n" +"\n" +" Auto-assign a subordinate id range to user alice:\n" +" ipa subid-generate --owner=alice\n" +"\n" +" Find subordinate ids for user alice:\n" +" ipa subid-find --owner=alice\n" +"\n" +" Match entry by any subordinate uid in range:\n" +" ipa subid-match --subuid=2147483649\n" +msgstr "" + +msgid "Subordinate id" +msgstr "" + +msgid "Subordinate ids" +msgstr "" + +#, fuzzy +msgid "Subordinate id description" +msgstr "配置文件描述" + +msgid "Owning user of subordinate id entry" +msgstr "" + +msgid "Start value for subordinate user ID (subuid) range" +msgstr "" + +msgid "Subordinate user ID count" +msgstr "" + +msgid "Start value for subordinate group ID (subgid) range" +msgstr "" + +msgid "Subordinate group ID count" +msgstr "" + +#, fuzzy, python-format +msgid "" +"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." +msgstr "名为\"%(pkey)s\"的%(oname)s已存在" + +#, fuzzy, python-format +msgid "'%(dn)s is not a valid user" +msgstr "%(port)s不是一个有效的端口" + +msgid "subgidnumber must be equal to subuidnumber" +msgstr "" + +#, fuzzy +msgid "Add a new subordinate id." +msgstr "添加一个新用户。" + +#, fuzzy, python-format +msgid "Added subordinate id \"%(value)s\"" +msgstr "已添加服务\"%(value)s\"" + +#, fuzzy +msgid "Delete a subordinate id." +msgstr "删除一个证书配置文件。" + +#, fuzzy, python-format +msgid "Deleted subordinate id \"%(value)s\"" +msgstr "已删除服务\"%(value)s\"" + +#, fuzzy +msgid "Modify a subordinate id." +msgstr "修改一个计划用户。" + +#, fuzzy, python-format +msgid "Modified subordinate id \"%(value)s\"" +msgstr "已修改服务\"%(value)s\"" + +#, fuzzy +msgid "Search for subordinate id." +msgstr "查找范围。" + +#, fuzzy, python-format +msgid "%(count)d subordinate id matched" +msgid_plural "%(count)d subordinate ids matched" +msgstr[0] "已匹配%(count)d个服务" + +#, fuzzy +msgid "Display information about a subordinate id." +msgstr "显示范围信息。" + +msgid "Generate and auto-assign subuid and subgid range to user entry" +msgstr "" + +msgid "Match users by any subordinate uid in their range" +msgstr "" + +msgid "SubUID match" +msgstr "" + +msgid "Match value for subordinate user ID" +msgstr "" + +msgid "Subordinate id statistics" +msgstr "" + +#, python-format +msgid "%(remaining)i remaining subordinate id ranges" +msgstr "" + +#, fuzzy +msgid "Maximum password life must be equal to or greater than the minimum." +msgstr "最小密码生存周期必须比最小值大。" + +#, fuzzy, python-format +msgid "Failed to remove server from security domain: %s" +msgstr "从服务器列表中删除服务器%(master)s失败：%(err)s" + +msgid "" +"\n" +"Each option needs to be added separately and no validation is done whether\n" +"the option is known by sudo or is in a valid format. Environment variables\n" +"also need to be set individually. For example env_keep=\"FOO BAR\" in " +"sudoers\n" +"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" +"+=BAR.\n" +msgstr "" + +msgid "" +"\n" +" Set multiple default Sudo options:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate' --" +"sudooption mail_badpass\n" +msgstr "" + #~ msgid "Delete a CA." #~ msgstr "删除一个CA。"